last executing test programs: 19.124210814s ago: executing program 3 (id=1164): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0x10, &(0x7f0000000040)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x86}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 18.889401495s ago: executing program 3 (id=1165): r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0x66) ioctl$SG_IO(r0, 0x2285, 0x0) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000faa6c9c44e"], 0x36) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000040)) 18.715719092s ago: executing program 3 (id=1166): syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000100)) socket$key(0xf, 0x3, 0x2) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x5, &(0x7f0000000240)=[{0x15, 0x0, 0x0, 0x1}, {0x54}, {0x6}, {0xc, 0x5, 0x7f, 0x1}, {0x6, 0x0, 0xa, 0x5}]}) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={0x0, 0x8}, 0x8) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f00000003c0)=@assoc_value, &(0x7f0000000280)=0x8) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) r1 = socket(0x15, 0x5, 0x0) getpeername$packet(r1, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x29, 0xff, 0x4, 0x8, 0x29, @private0, @dev={0xfe, 0x80, '\x00', 0x18}, 0x8, 0x8007, 0x9, 0xb9}}) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000540), &(0x7f0000000580)=0x4) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x80002, 0xf4240, 0xfff8}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$DRM_IOCTL_AGP_ACQUIRE(r2, 0x6430) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040)) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000002c0)={[0x1, 0x100, 0x200, 0x0, 0x0, 0x0, 0x2004ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffd], 0xf000, 0x200}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r5, 0xae80, 0x0) 17.37269094s ago: executing program 3 (id=1167): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r2, 0x0) r3 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000580)={'veth1_virt_wifi\x00', 0x0}) setsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000000)=0x3, 0x4) bind$packet(r3, &(0x7f0000000080)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(r3, &(0x7f00000002c0)="fb57975e267951722b395d37bac8", 0x5ee, 0x0, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000540)=@filter={'filter\x00', 0xe, 0x1, 0x1a8, [], 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"]}, 0x18a) r5 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r5, &(0x7f0000000900)={&(0x7f00000000c0)={0x2, 0x0, @private=0xa010102}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@fadd={0x58, 0x114, 0x6, {{0x0, 0x20001000}, 0x0, 0x0}}], 0x58}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r3) ioctl$KVM_RUN(r2, 0xae80, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) r7 = openat$cgroup_procs(r6, &(0x7f0000000440)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_subtree(r8, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000040)=ANY=[@ANYBLOB='+pids'], 0x6) 16.737852339s ago: executing program 3 (id=1168): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000200)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3c020000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r2], 0x23c}}, 0x0) 16.483168302s ago: executing program 3 (id=1169): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() r2 = add_key$keyring(0x0, &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000d80), 0x0, r2) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r4}}) splice(r3, 0x0, r5, 0x0, 0x200000000001, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000640)=@raw={'raw\x00', 0x3c1, 0x3, 0x29c, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x1d4, 0x20a, 0x278, 0x1d4, 0x278, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @empty, [], [], 'macvtap0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0xa4, 0xc8}, @common=@inet=@TCPMSS={0x24, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@private2, @local, [], [], 'vlan0\x00', 'ip6erspan0\x00'}, 0x0, 0xa4, 0x10c}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x2f8) socket$kcm(0x10, 0x2, 0x0) fanotify_init(0x0, 0x0) write$UHID_CREATE2(r0, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6c, 0x0, &(0x7f0000000d00)) 13.882148402s ago: executing program 1 (id=1176): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) 13.784047836s ago: executing program 1 (id=1178): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000f, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) io_cancel(0x0, 0x0, 0x0) 13.090971866s ago: executing program 1 (id=1180): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x97}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 13.022161017s ago: executing program 1 (id=1181): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @rand_addr=0x7}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000000), 0x8) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) sendmsg$nl_route(r2, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(0xffffffffffffffff, 0xc0104320, &(0x7f0000001040)={0xa, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socket$inet6(0xa, 0x3, 0xff) socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0x1c, 0x0, &(0x7f0000000480)="b9ff03076844268cb89e14f088a847", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 9.141483058s ago: executing program 0 (id=1187): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000040)=0x3, 0x4) r1 = eventfd(0x4) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f00000000c0)={0x2, r1}) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000001880)={'wg1\x00', 0x0}) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000bc0)={0x20, r7, 0x0, 0x0, 0x0, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0xffffff2f}, @WGDEVICE_A_PEERS={0x4}]}, 0x20}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x40, r7, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r6}]}, 0x40}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)=ANY=[@ANYRES32=r3, @ANYBLOB="260e060000000000"], 0x20}}, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f0000000140)={0x0, 0x711e}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r8, 0x6, 0xe, &(0x7f0000000f80)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x0, 0x0, 0x0, 0x0, "8aac4f23c59b321a1738763829f40de6514263b9b0b7023fb22bdc015174daab26ae82d6f820dd0320e82bc93d0f02bbce4b9f19d856884d638b771a2941e8ac694cb91fd1796fd3f40eb831690c6382"}, 0xd8) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r10, &(0x7f0000000180)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @multicast}, 0x14) bind$unix(r10, 0x0, 0x0) getsockname$packet(r10, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000700)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000055000100000000000000000007008209", @ANYRES32=r12, @ANYBLOB="20000100", @ANYRES32=r14, @ANYBLOB="00001000e000030000010001000000000000000008"], 0x38}}, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000140)={0x5, 0xdfffffffffffffff}, 0x0) socket(0x10, 0x803, 0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'erspan0\x00', 0x0}) 8.853338603s ago: executing program 0 (id=1188): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000000)={r4, 0x9, 0xffffffffffff1634, 0x8}) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000001880)=@mangle={'mangle\x00', 0x44, 0x6, 0x3e0, 0x98, 0x130, 0x0, 0x98, 0x280, 0x348, 0x348, 0x348, 0x348, 0x348, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'netpci0\x00', 'netpci0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@ip={@local, @local, 0x0, 0x0, 'vcan0\x00', 'netpci0\x00', {}, {}, 0x11, 0x0, 0x4c}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'ip6erspan0\x00', 'team_slave_1\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@inet=@dccp={{0x30}}]}, @TTL={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x440) socket(0x11, 0x800000003, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18}]}}]}, 0x48}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r1) sendmsg$NL80211_CMD_STOP_AP(r3, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r6, 0x800, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x30048000) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f2, &(0x7f0000000300)={'ip_vti0\x00', &(0x7f0000000800)}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'ip6_vti0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x2f, 0x2b, 0xa1, 0x80000000, 0x7a, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7, 0x80, 0x7, 0x7}}) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000640)={0xa4, 0x0, 0x4f3ec79b6c2060a7, 0x70bd29, 0x25dfdbff, {}, [@HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xa4}}, 0x4000011) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=@ipv6_getaddrlabel={0x58, 0x4a, 0x2, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x40, 0x0, 0x0, 0x5}, [@IFAL_ADDRESS={0x14, 0x1, @mcast1}, @IFAL_ADDRESS={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFAL_ADDRESS={0x14, 0x1, @remote}]}, 0x58}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newqdisc={0x70, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x0, 0x0, 0xfffff062}}]}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}]}}}]}, 0x70}}, 0x0) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x8100, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) 8.477115241s ago: executing program 0 (id=1190): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a1202, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="80fd"], 0x9) 8.135774237s ago: executing program 0 (id=1191): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) socket$inet6(0xa, 0x4, 0x41008) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x2}, 0x48) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x44e300, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) r3 = dup(r2) r4 = creat(&(0x7f0000000300)='./file1\x00', 0x120) close(r4) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) r6 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000200)={0x1, 0x7b}) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000240)=r6) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x1, r6}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f00000001c0)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/71, &(0x7f0000000500)=""/73}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000015640)=""/102400, 0x19000) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, r3, 0x0) 6.514280677s ago: executing program 1 (id=1195): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_NAME={0x9, 0x4, 'syz2\x00'}, @NFTA_OBJREF_SET_SREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) 6.434407585s ago: executing program 1 (id=1197): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f0000000280)=0x100000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) read$alg(r3, &(0x7f0000000080)=""/16, 0x10) recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) r4 = memfd_create(&(0x7f0000000480)='\xff\x00l\x1e\xa00xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x89f1, &(0x7f00000000c0)={'team0\x00', @remote}) socket(0x22, 0x800, 0x0) r7 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmat(r7, &(0x7f0000ffd000/0x3000)=nil, 0x5000) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x4e21, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3ff}, 0x1c) shmctl$IPC_RMID(r7, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000840)={{{@in=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@remote}}, &(0x7f0000000380)=0xe4) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) setresuid(0x0, 0x0, 0x0) shmctl$IPC_SET(r7, 0x1, &(0x7f0000000600)={{0x1, r8, r9, 0x0, 0xee00, 0x7e, 0x3000}, 0x7, 0x7fb8, 0x5, 0x8, 0x0, 0x0, 0x6}) fgetxattr(r0, &(0x7f0000000340)=@random={'security.', 'aegis128-generic\x00'}, &(0x7f0000000680)=""/134, 0x86) 4.507796974s ago: executing program 0 (id=1202): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100, &(0x7f0000000080)={0xf, 0x1, 0x80000}, 0x20) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000140)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "28d7b07d54891881fe02c1203fe49696b9f26f2da4149683f065714f8a61d1f32c99064bbd27b2aa77459cff33a3a98350f1af9d51ed5bef3d63520d260804d0"}, 0x48, 0xfffffffffffffffd) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000080), 0x18) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000180)=@v1={0x0, @adiantum, 0x0, @desc1}) mkdirat(r1, &(0x7f0000000280)='./file0\x00', 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000000c0)) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000180)=@v1={0x0, @adiantum, 0x0, @desc1}) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x1) chdir(&(0x7f0000000100)='./file0\x00') open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001540)=ANY=[@ANYBLOB="90010000160001000000000000000000ac1414000000000000000000000000000000deff00"/55, @ANYRES32=0x0, @ANYRES32=0x0], 0x190}}, 0x40010) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=@allocspi={0x190, 0x16, 0x1, 0x0, 0x0, {{{@in=@dev, @in=@empty}, {@in6=@mcast1, 0x0, 0x6c}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x7}, [@user_kmaddress={0x2c, 0x13, {@in=@loopback, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x2}}, @sec_ctx={0x1e, 0x8, {0x1a, 0x8, 0x1, 0x0, 0x12, "f2e55b1b3236bbe561121d4efa7eca96478e"}}, @algo_aead={0x4c, 0x12, {{'seqiv(morus1280)\x00'}}}]}, 0x190}}, 0x40010) 3.531494539s ago: executing program 0 (id=1203): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0x1, 0x2, 0x2, 0x1901, 0x1, 0x1adf, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x2, 0x3}, 0x48) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x324) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000400)={&(0x7f0000b36000/0x12000)=nil, &(0x7f0000841000/0x4000)=nil, 0x12000}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$UFFDIO_CONTINUE(r4, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1}) syz_io_uring_setup(0x6866, &(0x7f00000003c0)={0x0, 0x0, 0x2000}, &(0x7f0000000080), &(0x7f0000000140)) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_open_procfs$userns(0x0, &(0x7f00000002c0)) userfaultfd(0x80001) 2.858826433s ago: executing program 2 (id=1204): open(0x0, 0x0, 0x0) creat(0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0xf, 0x0, &(0x7f0000000100)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = socket$inet6(0xa, 0x80803, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x0, 0x9, 0xfffffffc}}, 0xe8) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002380)={r4, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x304c, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x82) r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x900, 0x0) ioctl$DVD_READ_STRUCT(r5, 0x5392, &(0x7f0000000a40)=@copyright) bind$netlink(r2, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x4000}, 0xfffffefe) connect$inet6(r1, &(0x7f00000000c0), 0x1c) 2.359943059s ago: executing program 2 (id=1205): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f00000011c0)={&(0x7f0000000940)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@fadd={0x58, 0x114, 0x6, {{0x4, 0x80000000}, 0x0, 0x0, 0x0, 0x2, 0xffff, 0x2, 0x80, 0x7ff}}], 0x58}, 0x0) 1.98092304s ago: executing program 2 (id=1206): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$MRT_DEL_MFC(0xffffffffffffffff, 0x0, 0xcd, 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'veth0_vlan\x00', @random="2b2100004e05"}) 1.37207392s ago: executing program 2 (id=1207): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x5, 0x1008}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000077b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x0) 870.206913ms ago: executing program 2 (id=1208): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000480), 0x82, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SNDCTL_DSP_GETCAPS(r1, 0x8004500f, &(0x7f0000000440)) 0s ago: executing program 2 (id=1209): r0 = fsopen(&(0x7f00000002c0)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x6, 0x0, 0x0, 0x0) timerfd_create(0x8, 0x0) sync() r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x6, 0xffffffff, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000300007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x3, 0x13, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0}, 0x8f) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000000012000000", &(0x7f0000000300)=""/8, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x7c}, {0x6}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xb, 0xfffffff8, 0xdf1, 0x7, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, r4, 0x2, 0x2}, 0x48) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000000)=""/41, 0x29) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2400000021000100000000000000000002000000000000001c00010008000d00000000007bd462f6d39846c8e57042d0414b3385941757b3a57e87f3fee8ccb87411a1b53724c610e2aa1be48ed46efbffee9f429d627bb2d9c4b5e3c6af1584fcbdb19fcc02a58263f357fe21f7834108b7c5029129e06d532e53d8d98e157d6af19aba9f1bd1fd3d58642bd1f18ff50df5fd4c36726dfc8b9fd92848"], 0x24}}, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r3, 0x80045500, &(0x7f00000003c0)) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000038c0), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000001440)={'\x00', 0x2}) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r8, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) setsockopt$inet6_int(r8, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r8, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) kernel console output (not intermixed with test programs): ng attributes in process `syz.0.681'. [ 230.889788][ T7667] netlink: 4 bytes leftover after parsing attributes in process `syz.0.681'. [ 230.969232][ T5362] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 230.975460][ T5362] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 230.981813][ T5362] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 230.986096][ T5362] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 230.991478][ T5362] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 231.008619][ T5362] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 231.101381][ T7673] ip6gretap0 speed is unknown, defaulting to 1000 [ 231.911447][ T7673] chnl_net:caif_netlink_parms(): no params data found [ 232.396683][ T5362] Bluetooth: hci2: command 0x0406 tx timeout [ 232.768694][ T7673] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.771195][ T7673] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.774330][ T7673] bridge_slave_0: entered allmulticast mode [ 232.782933][ T7673] bridge_slave_0: entered promiscuous mode [ 232.800251][ T7673] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.809235][ T7673] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.817135][ T7673] bridge_slave_1: entered allmulticast mode [ 232.836710][ T7673] bridge_slave_1: entered promiscuous mode [ 232.984731][ T39] audit: type=1400 audit(1723569404.373:48): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=7697 comm="syz.3.690" [ 233.116818][ T5353] Bluetooth: hci9: command tx timeout [ 233.186610][ T7673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.221167][ T7673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.487785][ T7673] team0: Port device team_slave_0 added [ 233.496011][ T7673] team0: Port device team_slave_1 added [ 233.707728][ T7673] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.713117][ T7673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.733164][ T7673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.748773][ T7673] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.751807][ T7673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.816576][ T7673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.986859][ T5353] Bluetooth: hci8: Controller not accepting commands anymore: ncmd = 0 [ 233.990991][ T5353] Bluetooth: hci8: Injecting HCI hardware error event [ 233.997270][ T5362] Bluetooth: hci8: hardware error 0x00 [ 234.084934][ T1100] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.179634][ T7673] hsr_slave_0: entered promiscuous mode [ 234.200695][ T7710] fuse: Bad value for 'group_id' [ 234.202851][ T7710] fuse: Bad value for 'group_id' [ 234.284531][ T7673] hsr_slave_1: entered promiscuous mode [ 234.303351][ T7673] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 234.308046][ T7673] Cannot create hsr debugfs directory [ 234.352500][ T1100] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.499862][ T1100] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.654006][ T1100] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.961247][ T1100] bridge_slave_1: left allmulticast mode [ 234.963745][ T1100] bridge_slave_1: left promiscuous mode [ 234.966275][ T1100] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.995754][ T1100] bridge_slave_0: left allmulticast mode [ 235.000011][ T1100] bridge_slave_0: left promiscuous mode [ 235.003018][ T1100] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.186815][ T5353] Bluetooth: hci9: command tx timeout [ 235.617747][ T1100] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.630298][ T1100] bond0 (unregistering): Released all slaves [ 235.643248][ T1100] bond1 (unregistering): Released all slaves [ 235.741114][ T1288] ip6gretap0 speed is unknown, defaulting to 1000 [ 236.081822][ T5362] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 236.389155][ T7673] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 236.440890][ T7673] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 236.469895][ T7673] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 236.591932][ T7673] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 236.671012][ T1100] hsr_slave_0: left promiscuous mode [ 236.674202][ T1100] hsr_slave_1: left promiscuous mode [ 236.706239][ T1100] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.711785][ T1100] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.718474][ T1100] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 236.724481][ T1100] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.774077][ T1100] veth1_macvtap: left promiscuous mode [ 236.778271][ T1100] veth0_macvtap: left promiscuous mode [ 236.781919][ T1100] veth1_vlan: left promiscuous mode [ 236.784924][ T1100] veth0_vlan: left promiscuous mode [ 237.266484][ T5362] Bluetooth: hci9: command tx timeout [ 238.123705][ T1100] team0 (unregistering): Port device team_slave_1 removed [ 238.234821][ T1100] team0 (unregistering): Port device team_slave_0 removed [ 239.346460][ T5362] Bluetooth: hci9: command tx timeout [ 239.549607][ T7673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.588401][ T7673] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.598830][ T89] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.602254][ T89] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.614085][ T89] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.617285][ T89] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.743112][ T7673] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 239.937872][ T7673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.981675][ T7673] veth0_vlan: entered promiscuous mode [ 239.993789][ T7673] veth1_vlan: entered promiscuous mode [ 240.067918][ T7673] veth0_macvtap: entered promiscuous mode [ 240.074405][ T7673] veth1_macvtap: entered promiscuous mode [ 240.103658][ T7673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.108171][ T7673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.112443][ T7673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.118808][ T7673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.123012][ T7673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.127779][ T7673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.131980][ T7673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.136144][ T7673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.140244][ T7673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.144520][ T7673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.155333][ T7673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.160427][ T7673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.165086][ T7673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.170973][ T7673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.175606][ T7673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 240.180222][ T7673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.185926][ T7673] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 240.198592][ T7673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.203313][ T7673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.208229][ T7673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.212421][ T7673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.217085][ T7673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.221603][ T7673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.225897][ T7673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.232573][ T7673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.237064][ T7673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.240979][ T7673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.244753][ T7673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.249778][ T7673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.254022][ T7673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.259175][ T7673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.263347][ T7673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 240.268308][ T7673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 240.274922][ T7673] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 240.282758][ T7673] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.287095][ T7673] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.290960][ T7673] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.296309][ T7673] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 240.470199][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.473777][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.643264][ T1100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.647782][ T1100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.549503][ T7748] overlayfs: missing 'lowerdir' [ 241.707679][ T5353] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 241.722806][ T5353] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 241.756189][ T5353] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 241.765896][ T5353] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 241.790739][ T5353] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 241.794285][ T5353] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 241.965627][ T7759] netlink: 8 bytes leftover after parsing attributes in process `syz.1.701'. [ 241.999122][ T7759] netlink: 4 bytes leftover after parsing attributes in process `syz.1.701'. [ 242.428852][ T7753] chnl_net:caif_netlink_parms(): no params data found [ 242.965364][ T7753] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.970472][ T7753] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.973930][ T7753] bridge_slave_0: entered allmulticast mode [ 242.987866][ T7753] bridge_slave_0: entered promiscuous mode [ 242.995154][ T7753] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.999600][ T7753] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.003331][ T7753] bridge_slave_1: entered allmulticast mode [ 243.019410][ T7753] bridge_slave_1: entered promiscuous mode [ 243.188571][ T7753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.195192][ T7753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.348180][ T7753] team0: Port device team_slave_0 added [ 243.377012][ T7780] netlink: 'syz.3.707': attribute type 1 has an invalid length. [ 243.381066][ T7780] netlink: 'syz.3.707': attribute type 4 has an invalid length. [ 243.385739][ T7780] netlink: 15334 bytes leftover after parsing attributes in process `syz.3.707'. [ 243.421573][ T7753] team0: Port device team_slave_1 added [ 243.478032][ T7780] netlink: 'syz.3.707': attribute type 1 has an invalid length. [ 243.481554][ T7780] netlink: 'syz.3.707': attribute type 4 has an invalid length. [ 243.484930][ T7780] netlink: 15334 bytes leftover after parsing attributes in process `syz.3.707'. [ 243.527031][ T6123] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 243.606090][ T7753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.616519][ T7753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.637370][ T7753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.645747][ T7753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.649831][ T7753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.663245][ T7753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.714147][ T6123] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 243.718569][ T6123] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.724513][ T6123] usb 5-1: Product: syz [ 243.728518][ T6123] usb 5-1: Manufacturer: syz [ 243.732379][ T6123] usb 5-1: SerialNumber: syz [ 243.740276][ T6123] usb 5-1: config 0 descriptor?? [ 243.827655][ T7753] hsr_slave_0: entered promiscuous mode [ 243.857598][ T7753] hsr_slave_1: entered promiscuous mode [ 243.868039][ T7753] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 243.871358][ T7753] Cannot create hsr debugfs directory [ 243.908491][ T5362] Bluetooth: hci4: command tx timeout [ 244.358916][ T7753] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.519259][ T7753] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.547155][ T5362] Bluetooth: hci0: command 0x0406 tx timeout [ 244.555351][ T7788] syzkaller0: entered allmulticast mode [ 244.566491][ T8] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 244.707007][ T7753] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.797404][ T8] usb 8-1: config 1 has an invalid interface number: 3 but max is 2 [ 244.840266][ T8] usb 8-1: config 1 has no interface number 1 [ 244.843012][ T8] usb 8-1: too many endpoints for config 1 interface 3 altsetting 1: 170, using maximum allowed: 30 [ 244.847986][ T8] usb 8-1: config 1 interface 3 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 170 [ 244.874253][ T8] usb 8-1: config 1 interface 2 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 14 [ 244.896477][ T8] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 244.902335][ T7753] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.914566][ T64] usb 5-1: USB disconnect, device number 4 [ 244.926454][ T8] usb 8-1: config 1 interface 3 has no altsetting 0 [ 244.929835][ T8] usb 8-1: config 1 interface 2 has no altsetting 2 [ 244.952705][ T8] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 244.957450][ T8] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.963871][ T8] usb 8-1: Product: 《 [ 244.966185][ T8] usb 8-1: Manufacturer: я [ 244.990000][ T8] usb 8-1: SerialNumber: ᰁ [ 245.153157][ T7753] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 245.162718][ T7753] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 245.224143][ T7753] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 245.263221][ T7753] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 245.548062][ T7753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.626239][ T8] usb 8-1: USB disconnect, device number 9 [ 245.641093][ T7753] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.708966][ T89] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.712056][ T89] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.713588][ T7778] udevd[7778]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 245.754753][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.758029][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.986587][ T5362] Bluetooth: hci4: command tx timeout [ 246.219939][ T7753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.340620][ T7753] veth0_vlan: entered promiscuous mode [ 246.404631][ T7753] veth1_vlan: entered promiscuous mode [ 246.486668][ T7816] raw_sendmsg: syz.3.720 forgot to set AF_INET. Fix it! [ 246.535765][ T7753] veth0_macvtap: entered promiscuous mode [ 246.553175][ T7753] veth1_macvtap: entered promiscuous mode [ 246.580279][ T7753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.587183][ T7753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.593073][ T7753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.598235][ T7753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.602438][ T7753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.616439][ T7753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.622602][ T7753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.636426][ T7753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.645131][ T7753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.659046][ T7753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.664884][ T7753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.671057][ T7753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.676845][ T7753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.683047][ T7753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.688923][ T7753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.695084][ T7753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.700977][ T7753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.707519][ T7753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.715758][ T7753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.725190][ T7753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.748588][ T7753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.753983][ T7753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.759738][ T7753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.764192][ T7753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.768896][ T7753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.768902][ T5743] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 246.772977][ T7753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.781701][ T7753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.787914][ T7753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.794261][ T7753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.799948][ T7753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.804392][ T7753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.808620][ T7753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.814905][ T7753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.821159][ T7753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.827534][ T7753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.833465][ T7753] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.838275][ T7753] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.844091][ T7753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.909660][ T7753] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.925474][ T7753] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.935863][ T7753] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.947847][ T7753] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.022899][ T5743] usb 8-1: Using ep0 maxpacket: 8 [ 247.062104][ T5743] usb 8-1: New USB device found, idVendor=0471, idProduct=0311, bcdDevice=81.d5 [ 247.067221][ T5743] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.076804][ T5743] usb 8-1: Product: syz [ 247.078658][ T5743] usb 8-1: Manufacturer: syz [ 247.080689][ T5743] usb 8-1: SerialNumber: syz [ 247.100672][ T5743] usb 8-1: config 0 descriptor?? [ 247.111984][ T5743] pwc: Philips PCVC740K (ToUCam Pro)/PCVC840 (ToUCam II) USB webcam detected. [ 247.146948][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.150373][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.266155][ T89] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.272540][ T89] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.572404][ T8] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 247.609616][ T7833] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.720'. [ 247.617372][ T7816] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.720'. [ 247.794166][ T5743] pwc: Failed to set LED on/off time (-71) [ 247.798594][ T8] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 247.802592][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.806769][ T5743] pwc: send_video_command error -71 [ 247.827993][ T8] usb 6-1: Product: syz [ 247.828294][ T5743] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 247.829902][ T8] usb 6-1: Manufacturer: syz [ 247.834272][ T5743] Philips webcam 8-1:0.0: probe with driver Philips webcam failed with error -71 [ 247.835482][ T8] usb 6-1: SerialNumber: syz [ 247.841248][ T5743] usb 8-1: USB disconnect, device number 10 [ 247.853658][ T8] usb 6-1: config 0 descriptor?? [ 248.068332][ T5362] Bluetooth: hci4: command tx timeout [ 248.360468][ T7842] overlayfs: missing 'lowerdir' [ 249.466484][ T64] usb 6-1: USB disconnect, device number 8 [ 249.786427][ T35] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 249.966442][ T35] usb 7-1: Using ep0 maxpacket: 32 [ 249.970841][ T35] usb 7-1: config 0 has no interfaces? [ 249.988494][ T35] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 249.993412][ T35] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 250.037978][ T35] usb 7-1: Product: syz [ 250.039885][ T35] usb 7-1: Manufacturer: syz [ 250.041822][ T35] usb 7-1: SerialNumber: syz [ 250.046742][ T35] usb 7-1: config 0 descriptor?? [ 250.118914][ T39] audit: type=1326 audit(1723569421.503:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7858 comm="syz.3.734" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fbf579 code=0x7fc00000 [ 250.148089][ T5362] Bluetooth: hci4: command tx timeout [ 250.358691][ T5391] usb 7-1: USB disconnect, device number 6 [ 250.775720][ T13] bridge_slave_1: left allmulticast mode [ 250.778483][ T13] bridge_slave_1: left promiscuous mode [ 250.781250][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.859595][ T13] bridge_slave_0: left allmulticast mode [ 250.861685][ T13] bridge_slave_0: left promiscuous mode [ 250.864136][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.239499][ T39] audit: type=1326 audit(1723569422.613:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7877 comm="syz.0.738" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f08579 code=0x0 [ 251.321634][ T7878] netlink: 20 bytes leftover after parsing attributes in process `syz.2.740'. [ 251.668846][ T7883] 9pnet_fd: Insufficient options for proto=fd [ 251.826486][ T39] audit: type=1326 audit(1723569423.193:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7877 comm="syz.0.738" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f08579 code=0x0 [ 252.172405][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 252.358030][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 252.422349][ T13] bond0 (unregistering): Released all slaves [ 253.440178][ T13] hsr_slave_0: left promiscuous mode [ 253.480416][ T13] hsr_slave_1: left promiscuous mode [ 253.495767][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 253.499903][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.520575][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 253.527966][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 253.602598][ T7902] overlayfs: missing 'lowerdir' [ 253.684135][ T39] audit: type=1326 audit(1723569425.073:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7900 comm="syz.1.746" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x0 [ 253.803542][ T13] veth1_macvtap: left promiscuous mode [ 253.806021][ T13] veth0_macvtap: left promiscuous mode [ 253.873552][ T13] veth1_vlan: left promiscuous mode [ 253.876704][ T13] veth0_vlan: left promiscuous mode [ 254.264954][ T5359] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 256.691914][ T13] team0 (unregistering): Port device team_slave_1 removed [ 257.167160][ T13] team0 (unregistering): Port device team_slave_0 removed [ 257.312031][ T5413] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 257.575315][ T5413] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 257.580097][ T5413] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.603663][ T5413] usb 7-1: Product: syz [ 257.605934][ T5413] usb 7-1: Manufacturer: syz [ 257.608843][ T5413] usb 7-1: SerialNumber: syz [ 257.622296][ T5413] usb 7-1: config 0 descriptor?? [ 258.727230][ T8] usb 7-1: USB disconnect, device number 7 [ 259.209397][ T7913] netlink: 'syz.1.749': attribute type 13 has an invalid length. [ 259.220117][ T7916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.751'. [ 259.404600][ T39] audit: type=1326 audit(1723569430.793:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7924 comm="syz.3.761" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fbf579 code=0x0 [ 259.897583][ T7933] 9pnet_fd: Insufficient options for proto=fd [ 259.923493][ T39] audit: type=1326 audit(1723569431.303:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7924 comm="syz.3.761" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fbf579 code=0x0 [ 260.185554][ T7943] netlink: 12 bytes leftover after parsing attributes in process `syz.2.756'. [ 260.216931][ T7943] netlink: 12 bytes leftover after parsing attributes in process `syz.2.756'. [ 261.068906][ T1377] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.072242][ T1377] ieee802154 phy1 wpan1: encryption failed: -22 [ 265.724821][ T7950] netlink: 20 bytes leftover after parsing attributes in process `syz.3.757'. [ 265.870571][ T39] audit: type=1326 audit(1723569437.233:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7946 comm="syz.2.758" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x0 [ 265.979170][ T7955] evm: overlay not supported [ 266.031117][ T39] audit: type=1804 audit(1723569437.413:56): pid=7955 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.760" name="/newroot/20/bus/file0" dev="overlay" ino=131 res=1 errno=0 [ 266.258110][ T5820] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 270.335853][ T7988] input: syz1 as /devices/virtual/input/input8 [ 270.412020][ C0] vkms_vblank_simulate: vblank timer overrun [ 270.772754][ T7998] xt_NFQUEUE: number of total queues is 0 [ 272.163299][ T7993] ALSA: mixer_oss: invalid OSS volume 'u' [ 272.362025][ T8010] netlink: 44 bytes leftover after parsing attributes in process `syz.3.783'. [ 272.399803][ T8010] netlink: 43 bytes leftover after parsing attributes in process `syz.3.783'. [ 272.403817][ T8010] netlink: 'syz.3.783': attribute type 5 has an invalid length. [ 272.407941][ T8010] netlink: 43 bytes leftover after parsing attributes in process `syz.3.783'. [ 273.027660][ C0] vkms_vblank_simulate: vblank timer overrun [ 273.614159][ C0] vkms_vblank_simulate: vblank timer overrun [ 273.667704][ C0] vkms_vblank_simulate: vblank timer overrun [ 273.692366][ C0] vkms_vblank_simulate: vblank timer overrun [ 274.775568][ C0] vkms_vblank_simulate: vblank timer overrun [ 275.041114][ T39] audit: type=1800 audit(1723569446.423:57): pid=8045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.793" name="/" dev="fuse" ino=1 res=0 errno=0 [ 275.090639][ T8049] ip6gretap0 speed is unknown, defaulting to 1000 [ 275.093724][ T8049] ip6gretap0 speed is unknown, defaulting to 1000 [ 275.129484][ T8049] ip6gretap0 speed is unknown, defaulting to 1000 [ 275.204188][ T8049] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 275.299215][ T8049] ip6gretap0 speed is unknown, defaulting to 1000 [ 275.363346][ T8049] ip6gretap0 speed is unknown, defaulting to 1000 [ 275.368421][ T8049] ip6gretap0 speed is unknown, defaulting to 1000 [ 275.389481][ T39] audit: type=1326 audit(1723569446.773:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8052 comm="syz.0.794" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f08579 code=0x0 [ 275.429990][ T8049] ip6gretap0 speed is unknown, defaulting to 1000 [ 275.434369][ T8049] ip6gretap0 speed is unknown, defaulting to 1000 [ 275.487863][ T8049] ip6gretap0 speed is unknown, defaulting to 1000 [ 275.505172][ T8049] ip6gretap0 speed is unknown, defaulting to 1000 [ 275.592107][ T8049] ip6gretap0 speed is unknown, defaulting to 1000 [ 275.630707][ T8049] ip6gretap0 speed is unknown, defaulting to 1000 [ 275.841574][ T8055] 9pnet_fd: Insufficient options for proto=fd [ 275.928671][ T39] audit: type=1326 audit(1723569447.303:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8052 comm="syz.0.794" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f08579 code=0x0 [ 276.253681][ T8058] netlink: 'syz.1.796': attribute type 2 has an invalid length. [ 282.546452][ T5391] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 282.726435][ T5391] usb 7-1: Using ep0 maxpacket: 8 [ 282.733757][ T5391] usb 7-1: New USB device found, idVendor=0471, idProduct=0311, bcdDevice=81.d5 [ 282.739785][ T5391] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.743753][ T5391] usb 7-1: Product: syz [ 282.746037][ T5391] usb 7-1: Manufacturer: syz [ 282.748570][ T5391] usb 7-1: SerialNumber: syz [ 282.777046][ T5391] usb 7-1: config 0 descriptor?? [ 282.786881][ T5391] pwc: Philips PCVC740K (ToUCam Pro)/PCVC840 (ToUCam II) USB webcam detected. [ 283.414611][ T8097] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.802'. [ 283.424848][ T8087] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.802'. [ 283.486507][ T39] audit: type=1326 audit(1723569454.863:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8096 comm="syz.0.814" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f08579 code=0x0 [ 283.643564][ T5391] pwc: Failed to set LED on/off time (-71) [ 283.647042][ T5391] pwc: send_video_command error -71 [ 283.649502][ T5391] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 283.656573][ T5391] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71 [ 283.678235][ T5391] usb 7-1: USB disconnect, device number 9 [ 283.884153][ T8101] 9pnet_fd: Insufficient options for proto=fd [ 283.902594][ T39] audit: type=1326 audit(1723569455.283:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8096 comm="syz.0.814" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f08579 code=0x0 [ 285.628328][ T8123] input: syz0 as /devices/virtual/input/input9 [ 285.856309][ T8129] netlink: 8 bytes leftover after parsing attributes in process `syz.1.824'. [ 286.043459][ C3] vkms_vblank_simulate: vblank timer overrun [ 286.159590][ C3] vkms_vblank_simulate: vblank timer overrun [ 286.955779][ T5391] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 287.146900][ T5391] usb 6-1: Using ep0 maxpacket: 8 [ 287.155455][ T5391] usb 6-1: New USB device found, idVendor=0471, idProduct=0311, bcdDevice=81.d5 [ 287.163246][ T5391] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.171594][ T5391] usb 6-1: Product: syz [ 287.173425][ T5391] usb 6-1: Manufacturer: syz [ 287.178249][ T5391] usb 6-1: SerialNumber: syz [ 287.183867][ T5391] usb 6-1: config 0 descriptor?? [ 287.190200][ T5391] pwc: Philips PCVC740K (ToUCam Pro)/PCVC840 (ToUCam II) USB webcam detected. [ 287.678544][ T8140] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.817'. [ 287.683950][ T8135] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.817'. [ 287.826540][ T5362] Bluetooth: hci9: command tx timeout [ 287.851768][ T5391] pwc: Failed to set LED on/off time (-71) [ 287.854687][ T5391] pwc: send_video_command error -71 [ 287.857137][ T5391] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 287.860432][ T5391] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 287.883774][ T5391] usb 6-1: USB disconnect, device number 10 [ 288.037597][ T8142] ip6t_rpfilter: unknown options [ 288.590701][ T8154] block nbd1: shutting down sockets [ 289.957740][ T8162] overlayfs: missing 'lowerdir' [ 290.155699][ T8170] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 292.435386][ C0] vkms_vblank_simulate: vblank timer overrun [ 292.816233][ T5362] Bluetooth: hci4: link tx timeout [ 292.820801][ T5362] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 292.829604][ T5353] Bluetooth: hci4: link tx timeout [ 292.832316][ T5353] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 293.038207][ T8201] cgroup: noprefix used incorrectly [ 293.577404][ T8203] trusted_key: encrypted_key: keyword 'wpdate' not recognized [ 293.651453][ C0] vkms_vblank_simulate: vblank timer overrun [ 294.819500][ T35] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 294.866750][ T5353] Bluetooth: hci4: command 0x0406 tx timeout [ 295.016409][ T35] usb 5-1: Using ep0 maxpacket: 8 [ 295.023153][ T35] usb 5-1: New USB device found, idVendor=0471, idProduct=0311, bcdDevice=81.d5 [ 295.028004][ T35] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.031205][ T35] usb 5-1: Product: syz [ 295.033157][ T35] usb 5-1: Manufacturer: syz [ 295.035118][ T35] usb 5-1: SerialNumber: syz [ 295.041916][ T35] usb 5-1: config 0 descriptor?? [ 295.051860][ T35] pwc: Philips PCVC740K (ToUCam Pro)/PCVC840 (ToUCam II) USB webcam detected. [ 295.519434][ T8209] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.839'. [ 295.528825][ T8206] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.839'. [ 295.986579][ T57] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 296.031364][ C0] vkms_vblank_simulate: vblank timer overrun [ 296.066450][ T39] audit: type=1326 audit(1723569467.443:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8221 comm="syz.3.843" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fbf579 code=0x0 [ 296.066906][ T35] pwc: Failed to set LED on/off time (-71) [ 296.094274][ T35] pwc: send_video_command error -71 [ 296.096786][ T35] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 296.102352][ T35] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 296.109236][ T35] usb 5-1: USB disconnect, device number 5 [ 296.190836][ T57] usb 6-1: Using ep0 maxpacket: 16 [ 296.254304][ T57] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.258702][ T57] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 296.284389][ T57] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 296.288896][ T57] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.316852][ T57] usb 6-1: config 0 descriptor?? [ 296.504757][ T8225] 9pnet_fd: Insufficient options for proto=fd [ 296.535626][ T39] audit: type=1326 audit(1723569467.903:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8221 comm="syz.3.843" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fbf579 code=0x0 [ 296.949637][ T57] microsoft 0003:045E:07DA.0005: unknown main item tag 0x4 [ 296.952880][ T57] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 296.955972][ T57] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 296.971557][ T57] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 296.975085][ T57] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 296.985956][ T57] microsoft 0003:045E:07DA.0005: item fetching failed at offset 31/34 [ 296.990898][ T57] microsoft 0003:045E:07DA.0005: parse failed [ 296.993678][ T57] microsoft 0003:045E:07DA.0005: probe with driver microsoft failed with error -22 [ 297.168458][ T5413] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 297.380368][ T5413] usb 7-1: Using ep0 maxpacket: 32 [ 297.387436][ T5413] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 297.391140][ T5413] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 297.396924][ T5413] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 297.402703][ T5413] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 297.409747][ T5413] usb 7-1: config 0 interface 0 has no altsetting 0 [ 297.429821][ T5413] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 297.442300][ T5413] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 297.450717][ T5413] usb 7-1: Product: syz [ 297.461041][ T5413] usb 7-1: Manufacturer: syz [ 297.462903][ T5413] usb 7-1: SerialNumber: syz [ 297.470258][ T5413] usb 7-1: config 0 descriptor?? [ 297.479450][ T5413] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 297.517196][ T5413] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 297.716728][ T5413] usb 7-1: USB disconnect, device number 10 [ 297.742679][ T5413] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 297.827197][ T8234] netlink: 4 bytes leftover after parsing attributes in process `syz.0.846'. [ 298.532319][ T35] usb 6-1: USB disconnect, device number 11 [ 299.875112][ T8248] overlay: Unknown parameter 'subj_role' [ 300.050115][ T8251] random: crng reseeded on system resumption [ 300.207831][ T8254] input: syz0 as /devices/virtual/input/input11 [ 301.379950][ C0] vkms_vblank_simulate: vblank timer overrun [ 301.797514][ C0] vkms_vblank_simulate: vblank timer overrun [ 301.814626][ T8264] syzkaller0: entered promiscuous mode [ 301.838024][ T8264] syzkaller0: entered allmulticast mode [ 302.299283][ C0] vkms_vblank_simulate: vblank timer overrun [ 302.398968][ T8273] netlink: 4 bytes leftover after parsing attributes in process `syz.3.857'. [ 303.849907][ C0] vkms_vblank_simulate: vblank timer overrun [ 304.912548][ C0] vkms_vblank_simulate: vblank timer overrun [ 305.379289][ C0] vkms_vblank_simulate: vblank timer overrun [ 305.415302][ C0] vkms_vblank_simulate: vblank timer overrun [ 305.454479][ C0] vkms_vblank_simulate: vblank timer overrun [ 305.855310][ C0] vkms_vblank_simulate: vblank timer overrun [ 306.950550][ T8290] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 312.078901][ T8325] netlink: 4 bytes leftover after parsing attributes in process `syz.2.868'. [ 314.046455][ T8353] siw: device registration error -23 [ 315.393700][ T8361] netlink: 4 bytes leftover after parsing attributes in process `syz.1.884'. [ 315.759890][ T8369] netlink: 24 bytes leftover after parsing attributes in process `syz.1.885'. [ 315.856195][ T8370] netlink: 16 bytes leftover after parsing attributes in process `syz.1.885'. [ 316.246990][ T39] audit: type=1326 audit(1723569487.633:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8376 comm="syz.0.888" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f08579 code=0x0 [ 318.940908][ T8401] netlink: 4 bytes leftover after parsing attributes in process `syz.3.894'. [ 322.504522][ T1377] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.513354][ T1377] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.649144][ T8446] siw: device registration error -23 [ 323.346221][ T8453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.907'. [ 323.785695][ T8455] netlink: 16 bytes leftover after parsing attributes in process `syz.2.908'. [ 324.556782][ T5353] Bluetooth: hci7: command 0x0406 tx timeout [ 325.347048][ T5362] Bluetooth: hci4: command 0x0406 tx timeout [ 327.213622][ T8483] 9pnet_fd: Insufficient options for proto=fd [ 327.648241][ T8486] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 327.651258][ T8486] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 327.712654][ T8486] vhci_hcd vhci_hcd.0: Device attached [ 327.856564][ T35] vhci_hcd: vhci_device speed not set [ 327.868424][ T8490] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 327.926466][ T35] usb 19-1: new full-speed USB device number 2 using vhci_hcd [ 328.383320][ T8488] vhci_hcd: connection reset by peer [ 328.393758][ T1108] vhci_hcd: stop threads [ 328.395934][ T1108] vhci_hcd: release socket [ 328.398543][ T1108] vhci_hcd: disconnect device [ 333.061234][ T35] vhci_hcd: vhci_device speed not set [ 339.036429][ T39] audit: type=1326 audit(1723569766.397:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8516 comm="syz.1.928" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x0 [ 340.607749][ T8550] ip6gretap0 speed is unknown, defaulting to 1000 [ 341.205595][ T39] audit: type=1326 audit(1723569768.587:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8562 comm="syz.3.943" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fbf579 code=0x0 [ 341.411454][ T8575] syz_tun: entered promiscuous mode [ 341.650053][ T8579] bridge0: port 3(erspan0) entered blocking state [ 341.654301][ T8579] bridge0: port 3(erspan0) entered disabled state [ 341.657758][ T8579] erspan0: entered allmulticast mode [ 341.661552][ T8579] erspan0: entered promiscuous mode [ 341.664679][ T8579] bridge0: port 3(erspan0) entered blocking state [ 341.668680][ T8579] bridge0: port 3(erspan0) entered forwarding state [ 341.858481][ T8589] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0002 with DS=0x7 [ 341.858960][ C2] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0002 with DS=0x7 [ 341.880068][ T8589] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.951'. [ 341.884516][ T8589] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 341.990935][ T8591] 9pnet_fd: Insufficient options for proto=fd [ 342.337254][ T1079] sr 2:0:0:0: [sr0] tag#6 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 342.342515][ T1079] sr 2:0:0:0: [sr0] tag#6 Sense Key : Illegal Request [current] [ 342.345980][ T1079] sr 2:0:0:0: [sr0] tag#6 Add. Sense: Invalid command operation code [ 342.361069][ T1079] sr 2:0:0:0: [sr0] tag#6 CDB: Write(10) 2a 00 00 00 00 00 00 00 04 00 [ 342.365078][ T1079] critical target error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 2 prio class 0 [ 342.376793][ T1079] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 342.390653][ T1079] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 344.457559][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 345.123368][ T8633] usb usb8: usbfs: process 8633 (syz.0.965) did not claim interface 0 before use [ 345.220956][ T8636] netlink: 4 bytes leftover after parsing attributes in process `syz.1.967'. [ 347.318750][ T8662] netlink: 32 bytes leftover after parsing attributes in process `syz.0.975'. [ 347.331197][ T8662] netlink: 'syz.0.975': attribute type 1 has an invalid length. [ 347.336562][ T8662] netlink: 224 bytes leftover after parsing attributes in process `syz.0.975'. [ 347.720875][ T8663] netlink: 8 bytes leftover after parsing attributes in process `syz.0.975'. [ 349.339674][ T8705] bond0: entered promiscuous mode [ 349.347396][ T8705] bond_slave_0: entered promiscuous mode [ 349.391115][ T8705] bond_slave_1: entered promiscuous mode [ 350.115747][ T8703] bond0: left promiscuous mode [ 350.173007][ T8703] bond_slave_0: left promiscuous mode [ 350.176056][ T8703] bond_slave_1: left promiscuous mode [ 354.817754][ T8734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.995'. [ 354.822544][ T8734] netlink: 32 bytes leftover after parsing attributes in process `syz.2.995'. [ 355.007644][ T39] audit: type=1326 audit(1723569782.397:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8735 comm="syz.2.996" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 355.016136][ T39] audit: type=1326 audit(1723569782.397:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8735 comm="syz.2.996" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 355.041494][ T39] audit: type=1326 audit(1723569782.417:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8735 comm="syz.2.996" exe="/syz-executor" sig=0 arch=40000003 syscall=71 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 355.051527][ T39] audit: type=1326 audit(1723569782.417:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8735 comm="syz.2.996" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 355.060187][ T39] audit: type=1326 audit(1723569782.417:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8735 comm="syz.2.996" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 355.085965][ T39] audit: type=1326 audit(1723569782.437:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8735 comm="syz.2.996" exe="/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 355.109898][ T39] audit: type=1326 audit(1723569782.437:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8735 comm="syz.2.996" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 355.135689][ T39] audit: type=1326 audit(1723569782.437:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8735 comm="syz.2.996" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 355.145794][ T39] audit: type=1326 audit(1723569782.457:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8735 comm="syz.2.996" exe="/syz-executor" sig=0 arch=40000003 syscall=172 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 355.166122][ T39] audit: type=1326 audit(1723569782.457:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8735 comm="syz.2.996" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f54579 code=0x7ffc0000 [ 355.270328][ T5353] Bluetooth: hci9: command 0x0406 tx timeout [ 355.686479][ T5362] Bluetooth: hci4: ACL packet for unknown connection handle 0 [ 357.698653][ T1288] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 357.752614][ C0] vkms_vblank_simulate: vblank timer overrun [ 357.895610][ T1288] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 357.902635][ T1288] usb 8-1: New USB device found, idVendor=046d, idProduct=1017, bcdDevice= 0.00 [ 357.915101][ T1288] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.946659][ T1288] usb 8-1: config 0 descriptor?? [ 357.952549][ T1288] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 358.400226][ C0] vkms_vblank_simulate: vblank timer overrun [ 358.627474][ T8] usb 8-1: USB disconnect, device number 11 [ 359.096448][ T1288] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 359.379839][ T1288] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.388185][ T1288] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 359.393171][ T1288] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 359.405470][ T1288] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 359.413885][ T1288] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.432150][ T1288] usb 5-1: config 0 descriptor?? [ 359.650345][ C0] vkms_vblank_simulate: vblank timer overrun [ 359.959890][ T1288] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 359.964085][ T1288] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 359.991133][ T1288] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 360.014757][ C0] vkms_vblank_simulate: vblank timer overrun [ 362.001965][ T8] usb 5-1: USB disconnect, device number 6 [ 364.988626][ T8816] 9pnet_fd: Insufficient options for proto=fd [ 365.226432][ T57] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 365.420022][ T57] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 365.430188][ T57] usb 7-1: New USB device found, idVendor=046d, idProduct=1017, bcdDevice= 0.00 [ 365.434748][ T57] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.454798][ T57] usb 7-1: config 0 descriptor?? [ 365.460110][ T57] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 366.271293][ T5390] usb 7-1: USB disconnect, device number 11 [ 367.126470][ T5413] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 367.316418][ T5413] usb 6-1: Using ep0 maxpacket: 8 [ 367.321935][ T5413] usb 6-1: config 0 has no interfaces? [ 367.337724][ T5413] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 367.362500][ T5413] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.376430][ T5413] usb 6-1: Product: syz [ 367.378778][ T5413] usb 6-1: Manufacturer: syz [ 367.390547][ T5413] usb 6-1: SerialNumber: syz [ 367.415644][ T5413] usb 6-1: config 0 descriptor?? [ 367.665016][ T8836] input: syz1 as /devices/virtual/input/input12 [ 367.684645][ T8836] befs: (nullb0): No write support. Marking filesystem read-only [ 367.692177][ T8836] befs: (nullb0): invalid magic header [ 367.710858][ T5359] usb 6-1: USB disconnect, device number 12 [ 372.475854][ T8840] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 373.049927][ T5353] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 373.055615][ T5353] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 373.060473][ T5353] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 373.067743][ T5353] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 373.072037][ T5353] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 373.077219][ T5353] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 373.125630][ T8852] ip6gretap0 speed is unknown, defaulting to 1000 [ 373.636144][ T8852] chnl_net:caif_netlink_parms(): no params data found [ 374.064410][ T8852] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.074037][ T8852] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.077332][ T8852] bridge_slave_0: entered allmulticast mode [ 374.081106][ T8852] bridge_slave_0: entered promiscuous mode [ 374.093961][ T8874] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.1045'. [ 374.126559][ T8852] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.130234][ T8852] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.134280][ T8852] bridge_slave_1: entered allmulticast mode [ 374.139399][ T8852] bridge_slave_1: entered promiscuous mode [ 374.238788][ T8852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.246013][ T8852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.377545][ T8852] team0: Port device team_slave_0 added [ 374.389921][ T8852] team0: Port device team_slave_1 added [ 374.581918][ T8852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.585752][ T8852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.611839][ T8852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.684919][ T8852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.698566][ T8852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.718476][ T8852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 374.844704][ T8852] hsr_slave_0: entered promiscuous mode [ 374.875168][ T8852] hsr_slave_1: entered promiscuous mode [ 374.880466][ T8852] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 374.883871][ T8852] Cannot create hsr debugfs directory [ 375.122491][ T5353] Bluetooth: hci0: command tx timeout [ 375.181541][ T8852] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.315232][ T8852] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.488052][ T8852] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.694651][ T8852] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.929016][ T8852] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 375.950189][ T8852] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 375.959578][ T8852] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 375.987823][ T8852] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 376.152257][ T8852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.182046][ T8852] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.193164][ T1108] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.196196][ T1108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.211428][ T1108] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.215552][ T1108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.480746][ T8852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 376.547949][ T8852] veth0_vlan: entered promiscuous mode [ 376.557474][ T8852] veth1_vlan: entered promiscuous mode [ 376.595656][ T8852] veth0_macvtap: entered promiscuous mode [ 376.610772][ T8852] veth1_macvtap: entered promiscuous mode [ 376.649594][ T8852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.654212][ T8852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.668526][ T8852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.695508][ T8852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.701412][ T8852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.738718][ T8852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.742454][ T8852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.747350][ T8852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.754122][ T8852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.760283][ T8852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.765367][ T8852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.771626][ T8852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.779118][ T8852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.785089][ T8852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.791162][ T8852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.799600][ T8852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.804436][ T8852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.810081][ T8852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.818241][ T8852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 376.834210][ T8852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.844127][ T8852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.849698][ T8852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.854910][ T8852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.860819][ T8852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.866891][ T8852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.871840][ T8852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.878223][ T8852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.882789][ T8852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.888623][ T8852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.893772][ T8852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.902860][ T8852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.908227][ T8852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.913463][ T8852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.918864][ T8852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.923719][ T8852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.928220][ T8852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.932817][ T8852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.942115][ T8852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 376.950833][ T8852] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.955050][ T8852] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.960114][ T8852] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.964040][ T8852] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.119699][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.122737][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.175152][ T1108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.178489][ T1108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.186843][ T5353] Bluetooth: hci0: command tx timeout [ 377.756441][ T2788] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 377.947230][ T2788] usb 7-1: Using ep0 maxpacket: 8 [ 377.954855][ T2788] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 377.960282][ T2788] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFE, changing to 0x8E [ 377.964797][ T2788] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 18032, setting to 1024 [ 377.972593][ T2788] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 1024 [ 377.993106][ T2788] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 377.999761][ T2788] usb 7-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 378.041347][ T2788] usb 7-1: New USB device found, idVendor=0403, idProduct=6015, bcdDevice= 0.6d [ 378.053234][ T2788] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.068540][ T2788] usb 7-1: Product: syz [ 378.094859][ T2788] usb 7-1: Manufacturer: syz [ 378.097358][ T2788] usb 7-1: SerialNumber: syz [ 378.132990][ T2788] usb 7-1: config 0 descriptor?? [ 378.136291][ T8883] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 378.142331][ T2788] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 378.157875][ T2788] usb 7-1: Detected SIO [ 378.180056][ T2788] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 379.266885][ T5353] Bluetooth: hci0: command tx timeout [ 379.408087][ T39] kauditd_printk_skb: 1 callbacks suppressed [ 379.408103][ T39] audit: type=1326 audit(1723569806.787:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8889 comm="syz.3.1040" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fbf579 code=0x0 [ 380.845968][ T1288] usb 7-1: USB disconnect, device number 12 [ 380.855651][ T1288] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 380.868433][ T1288] ftdi_sio 7-1:0.0: device disconnected [ 381.346547][ T5353] Bluetooth: hci0: command tx timeout [ 382.502625][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 383.122837][ T39] audit: type=1326 audit(1723569810.507:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8920 comm="syz.3.1053" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fbf579 code=0x0 [ 383.918360][ T1377] ieee802154 phy0 wpan0: encryption failed: -22 [ 385.009829][ T8926] < [ 385.905101][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 386.391965][ T1288] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 386.599167][ T1288] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 386.603309][ T1288] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 386.650292][ T8951] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1063'. [ 386.665318][ T1288] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 386.670291][ T1288] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 386.674130][ T1288] usb 5-1: Manufacturer: syz [ 386.682978][ T1288] usb 5-1: config 0 descriptor?? [ 386.896483][ T1288] rc_core: IR keymap rc-hauppauge not found [ 386.899150][ T1288] Registered IR keymap rc-empty [ 386.906915][ T1288] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 386.920023][ T1288] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input13 [ 386.985221][ T57] usb 5-1: USB disconnect, device number 7 [ 388.558499][ T8969] Cannot find add_set index 0 as target [ 388.880563][ T8976] overlay: Unknown parameter 'subj_role' [ 389.122021][ T8978] random: crng reseeded on system resumption [ 390.071551][ T5362] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 390.076982][ T5362] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 390.081384][ T5362] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 390.089260][ T5362] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 390.106700][ T5362] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 390.117626][ T5362] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 390.148158][ T8983] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.152545][ T8983] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.207632][ T8983] bridge0: entered allmulticast mode [ 390.247495][ T8988] bridge_slave_1: left allmulticast mode [ 390.250387][ T8988] bridge_slave_1: left promiscuous mode [ 390.299162][ T8988] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.362662][ T8983] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1074'. [ 390.370339][ T8988] bridge_slave_0: left allmulticast mode [ 390.372588][ T8988] bridge_slave_0: left promiscuous mode [ 390.375104][ T8988] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.678115][ T8984] ip6gretap0 speed is unknown, defaulting to 1000 [ 391.112303][ T8984] chnl_net:caif_netlink_parms(): no params data found [ 391.509099][ T8984] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.513284][ T8984] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.525400][ T8984] bridge_slave_0: entered allmulticast mode [ 391.533276][ T8984] bridge_slave_0: entered promiscuous mode [ 391.548852][ T8984] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.552411][ T8984] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.555930][ T8984] bridge_slave_1: entered allmulticast mode [ 391.567898][ T8984] bridge_slave_1: entered promiscuous mode [ 391.712296][ T8984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 391.731197][ T8984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 391.833674][ T8984] team0: Port device team_slave_0 added [ 391.840697][ T8984] team0: Port device team_slave_1 added [ 391.992535][ T8984] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 391.995606][ T8984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 392.007003][ T8984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 392.014603][ T8984] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 392.018074][ T8984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 392.030313][ T8984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 392.233568][ T5362] Bluetooth: hci10: command tx timeout [ 392.304875][ T8984] hsr_slave_0: entered promiscuous mode [ 392.331469][ T8984] hsr_slave_1: entered promiscuous mode [ 392.335133][ T8984] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 392.354271][ T8984] Cannot create hsr debugfs directory [ 392.789639][ T8984] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.862680][ T8984] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.986112][ T8984] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.128210][ T8984] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.329416][ T8984] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 393.422597][ T8984] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 393.489924][ T8984] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 393.504352][ T8984] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 393.681560][ T8984] 8021q: adding VLAN 0 to HW filter on device bond0 [ 393.704057][ T8984] 8021q: adding VLAN 0 to HW filter on device team0 [ 393.735741][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.739187][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 393.761727][ T1108] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.765404][ T1108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.220770][ T8984] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 394.311889][ T5362] Bluetooth: hci10: command tx timeout [ 394.353188][ T8984] veth0_vlan: entered promiscuous mode [ 394.386263][ T8984] veth1_vlan: entered promiscuous mode [ 394.467181][ T39] audit: type=1800 audit(1723569821.847:80): pid=9022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1083" name="file1" dev="overlay" ino=534 res=0 errno=0 [ 394.484557][ T8984] veth0_macvtap: entered promiscuous mode [ 394.552967][ T8984] veth1_macvtap: entered promiscuous mode [ 394.627286][ T8984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.632574][ T8984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.638113][ T8984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.644682][ T8984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.681755][ T8984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.691836][ T8984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.695889][ T8984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.713635][ T8984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.719882][ T8984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.724767][ T8984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.729228][ T8984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.734617][ T8984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.747516][ T8984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.766414][ T8984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.808186][ T8984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.812375][ T8984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.841725][ T9026] overlay: Unknown parameter 'subj_role' [ 394.846422][ T8984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.852453][ T8984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.857484][ T8984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.862974][ T8984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.873103][ T8984] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 394.899214][ T8984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.914375][ T8984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.919194][ T8984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.923598][ T8984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.946443][ T8984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.968298][ T8984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.002902][ T8984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.009090][ T8984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.013877][ T8984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.027762][ T8984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.032915][ T8984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.046400][ T8984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.052104][ T8984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.096865][ T8984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.101985][ T8984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.136411][ T8984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.146127][ T8984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.151253][ T8984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.187934][ T8984] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.194282][ T8984] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.209017][ T8984] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 395.260527][ T8984] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.266132][ T8984] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.272698][ T8984] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.316618][ T8984] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.403203][ T9029] random: crng reseeded on system resumption [ 395.757584][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.761635][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.856460][ T805] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.860488][ T805] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.391491][ T5362] Bluetooth: hci10: command tx timeout [ 398.470306][ T5362] Bluetooth: hci10: command tx timeout [ 399.667864][ T9045] loop0: detected capacity change from 0 to 7 [ 399.690708][ T9045] Dev loop0: unable to read RDB block 7 [ 399.696208][ T9045] loop0: unable to read partition table [ 399.716606][ T9045] loop0: partition table beyond EOD, truncated [ 399.737404][ T9045] loop_reread_partitions: partition scan of loop0 (被xڬdƤݡ [ 399.737404][ T9045] ) failed (rc=-5) [ 400.164917][ T9051] Bluetooth: MGMT ver 1.23 [ 400.255180][ T9055] overlay: Unknown parameter 'subj_role' [ 400.599715][ T9060] random: crng reseeded on system resumption [ 401.274324][ C0] vkms_vblank_simulate: vblank timer overrun [ 401.817776][ T9076] input: syz0 as /devices/virtual/input/input14 [ 401.821579][ T9076] input: failed to attach handler leds to device input14, error: -6 [ 402.097093][ T9078] bridge0: port 3(erspan0) entered disabled state [ 402.101168][ T9078] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.106033][ T9078] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.124051][ T9078] bridge0: entered allmulticast mode [ 402.180234][ T9078] erspan0: left allmulticast mode [ 402.183360][ T9078] erspan0: left promiscuous mode [ 402.186286][ T9078] bridge0: port 3(erspan0) entered disabled state [ 402.267308][ T9078] bridge_slave_1: left allmulticast mode [ 402.269648][ T9078] bridge_slave_1: left promiscuous mode [ 402.275698][ T9078] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.351319][ T9082] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1103'. [ 402.352023][ T9078] bridge_slave_0: left allmulticast mode [ 402.359900][ T9078] bridge_slave_0: left promiscuous mode [ 402.362706][ T9078] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.434225][ C0] vkms_vblank_simulate: vblank timer overrun [ 403.485657][ T57] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 403.507709][ T9107] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1107'. [ 403.696406][ T57] usb 7-1: Using ep0 maxpacket: 8 [ 403.701929][ T57] usb 7-1: config 0 has no interfaces? [ 403.709508][ T57] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 403.715639][ T57] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.724353][ T57] usb 7-1: Product: syz [ 403.727408][ T57] usb 7-1: Manufacturer: syz [ 403.731557][ T57] usb 7-1: SerialNumber: syz [ 403.738851][ T57] usb 7-1: config 0 descriptor?? [ 403.970686][ T9100] input: syz1 as /devices/virtual/input/input15 [ 404.020528][ T9100] befs: (nullb0): No write support. Marking filesystem read-only [ 404.024756][ T9100] befs: (nullb0): invalid magic header [ 404.058208][ T57] usb 7-1: USB disconnect, device number 13 [ 404.617233][ T9120] syzkaller0: entered promiscuous mode [ 404.620007][ T9120] syzkaller0: entered allmulticast mode [ 404.906643][ T8] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 405.098571][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 405.103918][ T8] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 405.111219][ T8] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 405.116189][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.126829][ T8] usb 5-1: config 0 descriptor?? [ 405.555416][ T8] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 405.575147][ T8] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 405.592062][ T8] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 405.609709][ T8] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 405.857342][ T8] usb 5-1: USB disconnect, device number 8 [ 408.234190][ C0] vkms_vblank_simulate: vblank timer overrun [ 409.007524][ T9122] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.028393][ T9122] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.050731][ T9122] bridge0: entered allmulticast mode [ 409.136520][ T9122] bridge_slave_1: left allmulticast mode [ 409.139123][ T9122] bridge_slave_1: left promiscuous mode [ 409.141706][ T9122] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.149172][ T9122] bridge_slave_0: left allmulticast mode [ 409.154537][ T9122] bridge_slave_0: left promiscuous mode [ 409.159545][ T9122] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.223435][ T9127] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1115'. [ 413.747568][ T5353] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 413.757813][ T5353] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 413.764012][ T5353] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 413.797567][ T5353] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 413.803348][ T5353] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 413.808529][ T5353] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 413.910669][ T9143] ip6gretap0 speed is unknown, defaulting to 1000 [ 414.138040][ T9153] Cannot find add_set index 0 as target [ 414.221199][ T9143] chnl_net:caif_netlink_parms(): no params data found [ 414.595093][ T9143] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.598448][ T9143] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.602316][ T9143] bridge_slave_0: entered allmulticast mode [ 414.607436][ T9143] bridge_slave_0: entered promiscuous mode [ 414.613423][ T9143] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.621089][ T9143] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.624361][ T9143] bridge_slave_1: entered allmulticast mode [ 414.637616][ T9143] bridge_slave_1: entered promiscuous mode [ 414.774725][ T9143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 414.806975][ T9143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 414.820693][ T9167] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1122'. [ 415.007784][ T9143] team0: Port device team_slave_0 added [ 415.014170][ T9143] team0: Port device team_slave_1 added [ 415.116995][ T9143] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 415.120713][ T9143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.136289][ T9143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 415.146087][ T9143] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 415.150220][ T9143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.173163][ T9143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 415.370251][ T9143] hsr_slave_0: entered promiscuous mode [ 415.386820][ T9143] hsr_slave_1: entered promiscuous mode [ 415.430394][ T9143] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 415.434233][ T9143] Cannot create hsr debugfs directory [ 415.925347][ T5362] Bluetooth: hci11: command tx timeout [ 416.050029][ T9143] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.289106][ T9143] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.520354][ T9143] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.689158][ T9143] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.031676][ T9143] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 417.040690][ T9143] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 417.064677][ T9143] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 417.129453][ T9143] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 417.544370][ T9143] 8021q: adding VLAN 0 to HW filter on device bond0 [ 417.587797][ T9143] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.597822][ T805] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.615711][ T805] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.695535][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.698847][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.765036][ T9143] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 417.783494][ T9143] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 417.986542][ T5362] Bluetooth: hci11: command tx timeout [ 418.220330][ T9143] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 418.315280][ T9143] veth0_vlan: entered promiscuous mode [ 418.379051][ T9143] veth1_vlan: entered promiscuous mode [ 418.498471][ T9143] veth0_macvtap: entered promiscuous mode [ 418.527612][ T9143] veth1_macvtap: entered promiscuous mode [ 418.560341][ T9143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.565315][ T9143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.573603][ T9143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.578703][ T9143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.583568][ T9143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.589537][ T9143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.594467][ T9143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.599106][ T9143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.602853][ T9143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.606784][ T9143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.610923][ T9143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.615922][ T9143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.622726][ T9143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.627705][ T9143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.639243][ T9143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.644129][ T9143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.648957][ T9143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.653871][ T9143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.660981][ T9143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.665994][ T9143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.671256][ T9143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 418.682364][ T9143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.689281][ T9143] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 418.704252][ T9143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.708962][ T9143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.714328][ T9143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.719935][ T9143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.736386][ T9143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.741623][ T9143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.746121][ T9143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.754036][ T9143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.764698][ T9143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.770510][ T9143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.788505][ T9143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.793133][ T9143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.820697][ T9143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.825086][ T9143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.830246][ T9143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.835561][ T9143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.840562][ T9143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.845098][ T9143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.850869][ T9143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.856027][ T9143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.860928][ T9143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 418.864931][ T9143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 418.873911][ T9143] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 418.894308][ T9143] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.900224][ T9143] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.904468][ T9143] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.909807][ T9143] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.110956][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.114691][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.311917][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.315796][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.066573][ T5362] Bluetooth: hci11: command tx timeout [ 422.146565][ T5362] Bluetooth: hci11: command tx timeout [ 422.214364][ T9229] binder: 9228:9229 ioctl c0306201 0 returned -14 [ 423.260919][ T9237] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1145'. [ 423.407680][ T9237] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1145'. [ 424.640649][ T5353] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 424.646115][ T5353] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 424.663520][ T5353] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 424.668171][ T5353] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 424.672410][ T5353] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 424.675800][ T5353] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 424.738054][ T9251] ip6gretap0 speed is unknown, defaulting to 1000 [ 424.963174][ T9251] chnl_net:caif_netlink_parms(): no params data found [ 425.229178][ T9251] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.233847][ T9251] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.237775][ T9251] bridge_slave_0: entered allmulticast mode [ 425.241936][ T9251] bridge_slave_0: entered promiscuous mode [ 425.247722][ T9251] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.251070][ T9251] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.254227][ T9251] bridge_slave_1: entered allmulticast mode [ 425.259590][ T9251] bridge_slave_1: entered promiscuous mode [ 425.338711][ T9251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 425.359354][ T9251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 425.472955][ T9251] team0: Port device team_slave_0 added [ 425.480694][ T9251] team0: Port device team_slave_1 added [ 425.500499][ T9271] netlink: 208 bytes leftover after parsing attributes in process `syz.3.1155'. [ 425.630563][ T9251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 425.643039][ T9251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.660398][ T9251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 425.668600][ T9251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.677294][ T9251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.690286][ T9251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.826195][ T9251] hsr_slave_0: entered promiscuous mode [ 425.830659][ T9251] hsr_slave_1: entered promiscuous mode [ 425.839994][ T9251] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 425.853340][ T9251] Cannot create hsr debugfs directory [ 426.271370][ T9251] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.388634][ T9251] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.529622][ T9251] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.717059][ T5362] Bluetooth: hci12: command tx timeout [ 426.748292][ T9251] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.047429][ T9251] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 427.054493][ T9251] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 427.063267][ T9251] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 427.072483][ T9251] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 427.181649][ T9251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.205250][ T9251] 8021q: adding VLAN 0 to HW filter on device team0 [ 427.234334][ T1100] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.238596][ T1100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.244333][ T1100] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.250183][ T1100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.357925][ T9251] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 427.365054][ T9251] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 427.586247][ T9251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 427.642843][ T9251] veth0_vlan: entered promiscuous mode [ 427.665913][ T9251] veth1_vlan: entered promiscuous mode [ 427.720930][ T9251] veth0_macvtap: entered promiscuous mode [ 427.728753][ T9251] veth1_macvtap: entered promiscuous mode [ 427.758525][ T9251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 427.763788][ T9251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.778441][ T9251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 427.784117][ T9251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.796547][ T9251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 427.801012][ T9251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.817036][ T9251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 427.822220][ T9251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.828878][ T9251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 427.833387][ T9251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.838006][ T9251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 427.842429][ T9251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.847537][ T9251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 427.851965][ T9251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.857151][ T9251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 427.862038][ T9251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.866004][ T9251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 427.871078][ T9251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.875443][ T9251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 427.880666][ T9251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.885167][ T9251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 427.892494][ T9251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.898702][ T9251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 427.903856][ T9251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.910585][ T9251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 427.922382][ T9251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 427.927756][ T9251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.931979][ T9251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 427.937199][ T9251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.941817][ T9251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 427.949792][ T9251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.954073][ T9251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 427.959125][ T9251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.963338][ T9251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 427.968490][ T9251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.973601][ T9251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 427.978379][ T9251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.982625][ T9251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 427.990325][ T9251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 427.998140][ T9251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 428.003934][ T9251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.009338][ T9251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 428.015049][ T9251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.021360][ T9251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 428.027700][ T9251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.032139][ T9251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 428.037814][ T9251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.042391][ T9251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 428.056689][ T9251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.064223][ T9251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 428.103274][ T9251] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.108361][ T9251] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.112412][ T9251] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.115927][ T9251] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.275531][ T1108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.315968][ T1108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 428.411100][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.414897][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 428.684477][ T39] audit: type=1326 audit(1723569856.067:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9278 comm="syz.1.1156" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f32579 code=0x0 [ 428.786624][ T5362] Bluetooth: hci12: command tx timeout [ 429.126090][ T9294] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 429.485522][ C0] vkms_vblank_simulate: vblank timer overrun [ 429.517261][ T9297] nbd0: detected capacity change from 0 to 12 [ 429.539032][ T9302] block nbd0: Send control failed (result -89) [ 429.542273][ T9302] block nbd0: Request send failed, requeueing [ 429.546484][ T9299] block nbd0: NBD_DISCONNECT [ 429.551783][ T9302] block nbd0: Disconnected due to user request. [ 429.593112][ T9299] block nbd0: Send disconnect failed -89 [ 429.597467][ T2888] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 429.601925][ T2888] Buffer I/O error on dev nbd0, logical block 0, async page read [ 429.607529][ T9302] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 429.612412][ T9302] Buffer I/O error on dev nbd0, logical block 0, async page read [ 429.646614][ T9302] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 429.658380][ T9302] Buffer I/O error on dev nbd0, logical block 0, async page read [ 429.663693][ T9302] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 429.700341][ T9302] Buffer I/O error on dev nbd0, logical block 0, async page read [ 429.704914][ T9302] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 429.761342][ T9302] Buffer I/O error on dev nbd0, logical block 0, async page read [ 429.765019][ T9302] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 429.782586][ T9302] Buffer I/O error on dev nbd0, logical block 0, async page read [ 429.786203][ T9302] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 429.816424][ T9302] Buffer I/O error on dev nbd0, logical block 0, async page read [ 429.820021][ T9302] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 429.830047][ T9302] Buffer I/O error on dev nbd0, logical block 0, async page read [ 429.846453][ T9302] ldm_validate_partition_table(): Disk read failed. [ 429.856479][ T9302] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 429.886399][ T9302] Buffer I/O error on dev nbd0, logical block 0, async page read [ 429.890538][ T9302] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 429.912965][ T9302] Buffer I/O error on dev nbd0, logical block 0, async page read [ 429.918198][ T5353] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 429.925113][ T5353] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 429.933400][ T5353] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 429.946870][ T9302] Dev nbd0: unable to read RDB block 0 [ 429.966710][ T9302] nbd0: unable to read partition table [ 429.969354][ T9302] nbd0: partition table beyond EOD, truncated [ 429.975482][ T9150] ldm_validate_partition_table(): Disk read failed. [ 429.984969][ T9150] Dev nbd0: unable to read RDB block 0 [ 429.987368][ T9150] nbd0: unable to read partition table [ 429.989816][ T9150] nbd0: partition table beyond EOD, truncated [ 429.992048][ T39] audit: type=1326 audit(1723569857.367:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9309 comm="syz.3.1166" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fbf579 code=0x0 [ 430.003200][ T5353] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 430.015715][ T9150] ldm_validate_partition_table(): Disk read failed. [ 430.020268][ T9150] Dev nbd0: unable to read RDB block 0 [ 430.022800][ T9150] nbd0: unable to read partition table [ 430.024167][ T5353] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 430.025767][ T9150] nbd0: partition table beyond EOD, truncated [ 430.030074][ T5353] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 430.309573][ T9307] ip6gretap0 speed is unknown, defaulting to 1000 [ 430.623287][ T9312] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 430.703079][ T9307] chnl_net:caif_netlink_parms(): no params data found [ 430.867225][ T5362] Bluetooth: hci12: command tx timeout [ 431.063445][ T9307] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.070207][ T9307] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.075084][ T9307] bridge_slave_0: entered allmulticast mode [ 431.079622][ T9307] bridge_slave_0: entered promiscuous mode [ 431.086752][ T9307] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.090705][ T9307] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.094486][ T9307] bridge_slave_1: entered allmulticast mode [ 431.099867][ T9307] bridge_slave_1: entered promiscuous mode [ 431.196564][ T9307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 431.204095][ T9307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 431.328158][ T9307] team0: Port device team_slave_0 added [ 431.362991][ T9307] team0: Port device team_slave_1 added [ 431.467861][ T9307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 431.471663][ T9307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.492330][ T9307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 431.501436][ T9307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 431.505261][ T9307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.520086][ T9307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 431.684106][ T9307] hsr_slave_0: entered promiscuous mode [ 431.709137][ T9307] hsr_slave_1: entered promiscuous mode [ 431.718909][ T9307] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 431.723319][ T9307] Cannot create hsr debugfs directory [ 431.950422][ C0] vkms_vblank_simulate: vblank timer overrun [ 432.050315][ T9307] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.147122][ T5362] Bluetooth: hci13: command tx timeout [ 432.285943][ T9307] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.569493][ T9307] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.716525][ T9307] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.955172][ T5362] Bluetooth: hci12: command tx timeout [ 432.965762][ T9307] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 433.057681][ T9307] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 433.075951][ T9307] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 433.150087][ T9307] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 433.305003][ T9307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 433.318138][ C0] vkms_vblank_simulate: vblank timer overrun [ 433.339191][ T9307] 8021q: adding VLAN 0 to HW filter on device team0 [ 433.385421][ T1099] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.388415][ T1099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 433.434534][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.437956][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 434.125159][ T9307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 434.188084][ T9307] veth0_vlan: entered promiscuous mode [ 434.198756][ T9307] veth1_vlan: entered promiscuous mode [ 434.246660][ T5362] Bluetooth: hci13: command tx timeout [ 434.254094][ T9307] veth0_macvtap: entered promiscuous mode [ 434.262685][ T9307] veth1_macvtap: entered promiscuous mode [ 434.281841][ T9307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.291575][ T9307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.307638][ T9307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.326793][ T9307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.330535][ T9307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.335058][ T9307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.342684][ T9307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.349179][ T9307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.358237][ T9307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.367527][ T9307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.374105][ T9307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.393090][ T9307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.397115][ T9307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.401280][ T9307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.405549][ T9307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.415990][ T9307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.420545][ T9307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.424993][ T9307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.429691][ T9307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.434381][ T9307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.438955][ T9307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.447632][ T9307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.451545][ T9307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.470461][ T9307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.497565][ T9307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.503592][ T9307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.514079][ T9307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 434.540388][ T9307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.550167][ T9307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.554991][ T9307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.557153][ T9349] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1174'. [ 434.564113][ T9307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.565157][ T9349] netlink: 31 bytes leftover after parsing attributes in process `syz.0.1174'. [ 434.565175][ T9349] netlink: 'syz.0.1174': attribute type 3 has an invalid length. [ 434.569942][ T9307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.569957][ T9307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.569968][ T9307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.569977][ T9307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.569987][ T9307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.576211][ T9349] netlink: 'syz.0.1174': attribute type 2 has an invalid length. [ 434.583162][ T9307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.586859][ T9349] netlink: 31 bytes leftover after parsing attributes in process `syz.0.1174'. [ 434.590002][ T9307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.625066][ T9307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.630749][ T9307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.645741][ T9307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.655529][ T9307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.660982][ T9307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.665721][ T9307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.670226][ T9307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.674403][ T9307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.678867][ T9307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.683456][ T9307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.687910][ T9307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.692060][ T9307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.697718][ T9307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.702220][ T9307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.708201][ T9307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.715066][ T9307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 434.747833][ T9307] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.755247][ T9307] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.764972][ T9307] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.784986][ C0] vkms_vblank_simulate: vblank timer overrun [ 434.788098][ T9307] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.991177][ T1108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.994603][ T1108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.056610][ T805] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.061795][ T805] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.506498][ T5413] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 435.710932][ T5413] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 435.725652][ T5413] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 435.746065][ T5413] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 435.754147][ T5413] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 435.759015][ T5413] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.770277][ T5413] usb 5-1: config 0 descriptor?? [ 436.316804][ T5362] Bluetooth: hci13: command tx timeout [ 436.351160][ T1108] Bluetooth: hci14: Frame reassembly failed (-84) [ 436.355186][ T1108] Bluetooth: hci14: Frame reassembly failed (-84) [ 436.380465][ T5413] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 436.407790][ T5413] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 436.430969][ T5413] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 438.386957][ T5353] Bluetooth: hci14: command 0x1003 tx timeout [ 438.391874][ T5353] Bluetooth: hci13: command tx timeout [ 438.394544][ T5362] Bluetooth: hci14: Opcode 0x1003 failed: -110 [ 438.485470][ T2788] usb 5-1: USB disconnect, device number 9 [ 438.681845][ C0] vkms_vblank_simulate: vblank timer overrun [ 439.957074][ T9395] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1188'. [ 441.182270][ T805] Bluetooth: (null): Invalid header checksum [ 441.186308][ T805] Bluetooth: (null): Invalid header checksum [ 441.311011][ T1108] Bluetooth: (null): Invalid header checksum [ 442.993427][ T5365] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 443.010373][ T5365] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 443.014484][ T5365] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 443.019239][ T5365] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 443.048159][ T5365] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 443.071966][ T5365] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 443.135721][ T9426] ip6gretap0 speed is unknown, defaulting to 1000 [ 443.441507][ T9425] syz.2.1200 (9425) used greatest stack depth: 20592 bytes left [ 443.472378][ T9426] chnl_net:caif_netlink_parms(): no params data found [ 443.945446][ T9426] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.950620][ T9426] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.991759][ T9426] bridge_slave_0: entered allmulticast mode [ 444.025721][ T9426] bridge_slave_0: entered promiscuous mode [ 444.072579][ T9426] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.155856][ T9426] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.175495][ T1288] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 444.223474][ T9426] bridge_slave_1: entered allmulticast mode [ 444.234223][ T9426] bridge_slave_1: entered promiscuous mode [ 444.398348][ T1288] usb 7-1: config 0 has an invalid interface number: 156 but max is 0 [ 444.403696][ T1288] usb 7-1: config 0 has no interface number 0 [ 444.407683][ T1288] usb 7-1: config 0 interface 156 has no altsetting 0 [ 444.410722][ T1288] usb 7-1: New USB device found, idVendor=257a, idProduct=2609, bcdDevice=7e.22 [ 444.424900][ T1288] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.437359][ T1288] usb 7-1: config 0 descriptor?? [ 444.445392][ T1288] hub 7-1:0.156: bad descriptor, ignoring hub [ 444.456427][ T1288] hub 7-1:0.156: probe with driver hub failed with error -5 [ 444.462281][ T1288] option 7-1:0.156: GSM modem (1-port) converter detected [ 444.474567][ T9426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 444.569462][ T9426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 444.658002][ T9439] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1202'. [ 444.724284][ T9439] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1202'. [ 444.756428][ T9439] netlink: 98 bytes leftover after parsing attributes in process `syz.0.1202'. [ 444.766870][ T9432] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1201'. [ 444.771168][ T9432] netlink: 'syz.2.1201': attribute type 2 has an invalid length. [ 444.773070][ T9439] unsupported nla_type 256 [ 444.794938][ T9432] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1201'. [ 444.798294][ T9426] team0: Port device team_slave_0 added [ 444.807999][ T9426] team0: Port device team_slave_1 added [ 444.926912][ T1288] usb 7-1: USB disconnect, device number 14 [ 444.961017][ T1288] option 7-1:0.156: device disconnected [ 445.120567][ T5362] Bluetooth: hci14: command tx timeout [ 445.268667][ T9426] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 445.271852][ T9426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 445.315428][ T9426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 445.324783][ T9426] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 445.328010][ T9426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 445.339934][ T9426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 445.351163][ T1377] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.607387][ T9426] hsr_slave_0: entered promiscuous mode [ 445.683607][ T9426] hsr_slave_1: entered promiscuous mode [ 445.802379][ T9426] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 445.856740][ T9426] Cannot create hsr debugfs directory [ 446.946795][ T5362] Bluetooth: hci13: Controller not accepting commands anymore: ncmd = 0 [ 446.951259][ T5362] Bluetooth: hci13: Injecting HCI hardware error event [ 446.956074][ T5365] Bluetooth: hci13: hardware error 0x00 [ 447.042594][ T9426] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.186598][ T5362] Bluetooth: hci14: command tx timeout [ 447.453305][ T9426] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.749043][ T9426] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.084914][ T9426] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.437018][ T9426] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 448.485714][ T9426] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 448.545856][ T9426] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 448.577354][ T9426] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 448.878830][ T9426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.933303][ T9426] 8021q: adding VLAN 0 to HW filter on device team0 [ 448.963005][ T89] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.968091][ T89] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.008079][ T89] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.012815][ T89] bridge0: port 2(bridge_slave_1) entered forwarding state [ 449.197085][ T5365] Bluetooth: hci13: Opcode 0x0c03 failed: -110 [ 449.276722][ T5365] Bluetooth: hci14: command tx timeout [ 449.331123][ T9441] ------------[ cut here ]------------ [ 449.333936][ T9441] WARNING: CPU: 0 PID: 9441 at mm/page_table_check.c:207 __page_table_check_ptes_set+0x2fa/0x3e0 [ 449.352190][ T9441] Modules linked in: [ 449.353611][ T9441] CPU: 0 UID: 0 PID: 9441 Comm: syz.0.1203 Not tainted 6.11.0-rc3-syzkaller-00010-g6b4aa469f049 #0 [ 449.370553][ T9441] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 449.378959][ T9441] RIP: 0010:__page_table_check_ptes_set+0x2fa/0x3e0 [ 449.382898][ T9441] Code: e9 91 fe ff ff e8 46 3a 97 ff 48 8b 2c 24 31 ff 83 e5 02 48 89 ee e8 a5 3c 97 ff 48 85 ed 0f 84 85 00 00 00 e8 27 3a 97 ff 90 <0f> 0b 90 e9 e9 fd ff ff e8 19 3a 97 ff eb 69 cc cc cc e8 0f 3a 97 [ 449.398032][ T9441] RSP: 0000:ffffc90006c77a28 EFLAGS: 00010293 [ 449.401284][ T9441] RAX: 0000000000000000 RBX: ffff88805078a000 RCX: ffffffff81f3e88b [ 449.405250][ T9441] RDX: ffff888046c9c880 RSI: ffffffff81f3e899 RDI: 0000000000000007 [ 449.410872][ T9441] RBP: 0000000000000002 R08: 0000000000000007 R09: 0000000000000000 [ 449.415201][ T9441] R10: 0000000000000002 R11: 0000000000000000 R12: 0000000000000001 [ 449.419381][ T9441] R13: ffff88801d314280 R14: 0000000000000001 R15: 1ffff92000d8ef47 [ 449.423790][ T9441] FS: 0000000000000000(0000) GS:ffff88802c000000(0063) knlGS:0000000057295440 [ 449.427885][ T9441] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 449.431202][ T9441] CR2: 00000000200002c0 CR3: 000000004c946000 CR4: 0000000000350ef0 [ 449.434891][ T9441] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 000000000000031f [ 449.438478][ T9441] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 449.442340][ T9441] Call Trace: [ 449.443905][ T9441] [ 449.445693][ T9441] ? show_regs+0x8c/0xa0 [ 449.447640][ T9441] ? __warn+0xe5/0x3c0 [ 449.449594][ T9441] ? __page_table_check_ptes_set+0x2fa/0x3e0 [ 449.452228][ T9441] ? report_bug+0x3c0/0x580 [ 449.454284][ T9441] ? handle_bug+0x3d/0x70 [ 449.456233][ T9441] ? exc_invalid_op+0x17/0x50 [ 449.458364][ T9441] ? asm_exc_invalid_op+0x1a/0x20 [ 449.460568][ T9441] ? __page_table_check_ptes_set+0x2eb/0x3e0 [ 449.463215][ T9441] ? __page_table_check_ptes_set+0x2f9/0x3e0 [ 449.465791][ T9441] ? __page_table_check_ptes_set+0x2fa/0x3e0 [ 449.468641][ T9441] ? __page_table_check_ptes_set+0x2f9/0x3e0 [ 449.471298][ T9441] ? find_held_lock+0x2d/0x110 [ 449.473523][ T9441] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 449.477311][ T9441] ? rcu_read_unlock+0x17/0x60 [ 449.479435][ T9441] set_ptes.constprop.0+0x193/0x1d0 [ 449.481910][ T9441] ? __pfx_set_ptes.constprop.0+0x10/0x10 [ 449.484466][ T9441] do_swap_page+0x1214/0x3dc0 [ 449.486581][ T9441] ? __pfx_do_swap_page+0x10/0x10 [ 449.488653][ T9441] ? pte_offset_map_nolock+0xfe/0x1c0 [ 449.491013][ T9441] ? __pfx_pte_offset_map_nolock+0x10/0x10 [ 449.493606][ T9441] __handle_mm_fault+0x146b/0x5360 [ 449.497242][ T9441] ? down_read_trylock+0x1ed/0x3f0 [ 449.499539][ T9441] ? lock_vma_under_rcu+0x1e2/0x8f0 [ 449.501850][ T9441] ? __pfx___handle_mm_fault+0x10/0x10 [ 449.504324][ T9441] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 449.507763][ T9441] ? do_user_addr_fault+0xe50/0x13f0 [ 449.510151][ T9441] handle_mm_fault+0x44e/0x7b0 [ 449.512292][ T9441] ? __pkru_allows_pkey+0x52/0xb0 [ 449.514519][ T9441] do_user_addr_fault+0x60d/0x13f0 [ 449.516910][ T9441] exc_page_fault+0x5c/0xc0 [ 449.518883][ T9441] asm_exc_page_fault+0x26/0x30 [ 449.521498][ T9441] RIP: 0023:0xf72a0d71 [ 449.524945][ T9441] Code: 00 00 74 02 a4 49 50 89 c8 c1 e9 02 83 e0 03 f3 a5 89 c1 f3 a4 58 89 c7 89 d6 8b 44 24 04 c3 d1 e9 73 01 a4 d1 e9 73 02 66 a5 a5 eb e8 66 90 66 90 66 90 66 90 66 90 90 8b 44 24 0c 39 44 24 [ 449.534549][ T9441] RSP: 002b:00000000ffee3e2c EFLAGS: 00010202 [ 449.537377][ T9441] RAX: 0000000000000000 RBX: 00000000f7440ff4 RCX: 0000000000000002 [ 449.540903][ T9441] RDX: 0000000000000008 RSI: 00000000f6d603ae RDI: 00000000200002c0 [ 449.544057][ T9441] RBP: 00000000ffee40a8 R08: 0000000000000000 R09: 0000000000000000 [ 449.547203][ T9441] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 SYZFAIL: failed to recv rpc [ 449.552240][ T9441] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 449.556240][ T9441] [ 449.557864][ T9441] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 449.561615][ T9441] CPU: 0 UID: 0 PID: 9441 Comm: syz.0.1203 Not tainted 6.11.0-rc3-syzkaller-00010-g6b4aa469f049 #0 fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 449.567636][ T9441] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 449.573664][ T9441] Call Trace: [ 449.575478][ T9441] [ 449.577085][ T9441] dump_stack_lvl+0x3d/0x1f0 [ 449.579619][ T9441] panic+0x6f5/0x7a0 [ 449.581766][ T9441] ? __pfx_panic+0x10/0x10 [ 449.584040][ T9441] ? show_trace_log_lvl+0x363/0x500 [ 449.586431][ T9441] ? check_panic_on_warn+0x1f/0xb0 [ 449.589101][ T9441] ? __page_table_check_ptes_set+0x2fa/0x3e0 [ 449.592040][ T9441] check_panic_on_warn+0xab/0xb0 [ 449.594540][ T9441] __warn+0xf1/0x3c0 [ 449.596418][ T9441] ? __page_table_check_ptes_set+0x2fa/0x3e0 [ 449.599102][ T9441] report_bug+0x3c0/0x580 [ 449.601319][ T9441] handle_bug+0x3d/0x70 [ 449.603567][ T9441] exc_invalid_op+0x17/0x50 [ 449.605646][ T9441] asm_exc_invalid_op+0x1a/0x20 [ 449.607939][ T9441] RIP: 0010:__page_table_check_ptes_set+0x2fa/0x3e0 [ 449.611179][ T9441] Code: e9 91 fe ff ff e8 46 3a 97 ff 48 8b 2c 24 31 ff 83 e5 02 48 89 ee e8 a5 3c 97 ff 48 85 ed 0f 84 85 00 00 00 e8 27 3a 97 ff 90 <0f> 0b 90 e9 e9 fd ff ff e8 19 3a 97 ff eb 69 cc cc cc e8 0f 3a 97 [ 449.623577][ T9441] RSP: 0000:ffffc90006c77a28 EFLAGS: 00010293 [ 449.626240][ T9441] RAX: 0000000000000000 RBX: ffff88805078a000 RCX: ffffffff81f3e88b [ 449.631131][ T9441] RDX: ffff888046c9c880 RSI: ffffffff81f3e899 RDI: 0000000000000007 [ 449.636709][ T9441] RBP: 0000000000000002 R08: 0000000000000007 R09: 0000000000000000 [ 449.641706][ T9441] R10: 0000000000000002 R11: 0000000000000000 R12: 0000000000000001 [ 449.646023][ T9441] R13: ffff88801d314280 R14: 0000000000000001 R15: 1ffff92000d8ef47 [ 449.650321][ T9441] ? __page_table_check_ptes_set+0x2eb/0x3e0 [ 449.653727][ T9441] ? __page_table_check_ptes_set+0x2f9/0x3e0 [ 449.656944][ T9441] ? __page_table_check_ptes_set+0x2f9/0x3e0 [ 449.660278][ T9441] ? find_held_lock+0x2d/0x110 [ 449.663046][ T9441] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 449.666141][ T9441] ? rcu_read_unlock+0x17/0x60 [ 449.668742][ T9441] set_ptes.constprop.0+0x193/0x1d0 [ 449.671580][ T9441] ? __pfx_set_ptes.constprop.0+0x10/0x10 [ 449.674695][ T9441] do_swap_page+0x1214/0x3dc0 [ 449.677274][ T9441] ? __pfx_do_swap_page+0x10/0x10 [ 449.680084][ T9441] ? pte_offset_map_nolock+0xfe/0x1c0 [ 449.683378][ T9441] ? __pfx_pte_offset_map_nolock+0x10/0x10 [ 449.687049][ T9441] __handle_mm_fault+0x146b/0x5360 [ 449.690856][ T9441] ? down_read_trylock+0x1ed/0x3f0 [ 449.693557][ T9441] ? lock_vma_under_rcu+0x1e2/0x8f0 [ 449.695875][ T9441] ? __pfx___handle_mm_fault+0x10/0x10 [ 449.698286][ T9441] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 449.700766][ T9441] ? do_user_addr_fault+0xe50/0x13f0 [ 449.703023][ T9441] handle_mm_fault+0x44e/0x7b0 [ 449.705204][ T9441] ? __pkru_allows_pkey+0x52/0xb0 [ 449.708411][ T9441] do_user_addr_fault+0x60d/0x13f0 [ 449.710806][ T9441] exc_page_fault+0x5c/0xc0 [ 449.712902][ T9441] asm_exc_page_fault+0x26/0x30 [ 449.715176][ T9441] RIP: 0023:0xf72a0d71 [ 449.717151][ T9441] Code: 00 00 74 02 a4 49 50 89 c8 c1 e9 02 83 e0 03 f3 a5 89 c1 f3 a4 58 89 c7 89 d6 8b 44 24 04 c3 d1 e9 73 01 a4 d1 e9 73 02 66 a5 a5 eb e8 66 90 66 90 66 90 66 90 66 90 90 8b 44 24 0c 39 44 24 [ 449.726725][ T9441] RSP: 002b:00000000ffee3e2c EFLAGS: 00010202 [ 449.730446][ T9441] RAX: 0000000000000000 RBX: 00000000f7440ff4 RCX: 0000000000000002 [ 449.741693][ T9441] RDX: 0000000000000008 RSI: 00000000f6d603ae RDI: 00000000200002c0 [ 449.745559][ T9441] RBP: 00000000ffee40a8 R08: 0000000000000000 R09: 0000000000000000 [ 449.748397][ T9441] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 449.753081][ T9441] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 449.756442][ T9441] [ 449.758362][ T9441] Kernel Offset: disabled [ 449.760874][ T9441] Rebooting in 86400 seconds.. VM DIAGNOSIS: 17:20:20 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff84fa7ac0 RDI=ffffffff9511e340 RBP=ffffffff9511e300 RSP=ffffc90006c77408 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=ffffffff9511e300 R14=ffffffff9511e350 R15=0000000000000078 RIP=ffffffff84fa7ae7 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802c000000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000200002c0 CR3=000000004c946000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=000000000000031f DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000b2e RBX=ffffffff94612cb0 RCX=1ffff920000b3197 RDX=0000000000000046 RSI=0000000000000000 RDI=ffffc90000598cb0 RBP=ffffffff9521c3a0 RSP=ffffc90000598928 R8 =0000000000000001 R9 =0000000000000001 R10=ffffffff90112a9f R11=0000000000000000 R12=ffffc90000598cb0 R13=0000000000000000 R14=0000000000000000 R15=ffffffff94e96120 RIP=ffffffff8b066b44 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c100000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7179870 CR3=000000004925a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=000000000000031f DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000003 RCX=1ffffffff28b74ae RDX=ffff88801b8ba440 RSI=ffffffff813be4f4 RDI=ffffffff8bb04c60 RBP=ffff88802732da20 RSP=ffffc90000e4ed18 R8 =0000000000000001 R9 =fffffbfff28b6ed8 R10=ffffffff945b76c7 R11=0000000000000000 R12=0000000000000003 R13=0000000000000003 R14=ffff88802c23fc80 R15=ffffed1004e65b44 RIP=ffffffff813be4f6 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00000000 DS =0000 0000000000000000 ffffffff 00000000 FS =0000 0000000000000000 ffffffff 00000000 GS =0000 ffff88802c200000 ffffffff 00000000 LDT=0000 0000000000000000 ffffffff 00000000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007faa2721db90 CR3=000000000db7c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000401 Opmask01=0000000000000000 Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff72073e20 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6565656565656565 6565656565656565 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffff0000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3554205b5d343730 3635392e36343420 205b3e333c00746e 65766520726f7200 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3554205157343730 3635332436343420 2051343336007464 6576652072657200 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3036353120656820 20544d2065686920 646c696f63000020 2e656362616d7020 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3036352020655320 20204d2061676320 3036353120000020 20544d2061676320 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6d64637e7e6f592a 246f69646b677865 6c786f7a2a6f627e 2a7e696b7a67632a ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c786f7a2a6f627e 2a7e696b7a67632a 6e667f65690a0024 676f666865787a2a ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000046 RBX=0000000000000003 RCX=ffffffff816948e9 RDX=1ffffffff1bb728c RSI=ffffffff8b4cd320 RDI=ffffffff8bb04c60 RBP=ffffffff90115b78 RSP=ffffc90000e7f9d0 R8 =0000000000000000 R9 =fffffbfff2022553 R10=ffffffff90112a9f R11=0000000000000000 R12=ffffffff8ddb9460 R13=0000000000000000 R14=ffff88801b8b8000 R15=ffff8880173ba000 RIP=ffffffff8b06837d RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 000fffff 00000000 GS =0000 ffff88802c300000 ffffffff 00c00000 LDT=0000 0000000000000000 000fffff 00000000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c248239 CR3=000000004efcc000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000