last executing test programs: 19.55499781s ago: executing program 2 (id=681): r0 = syz_io_uring_setup(0xdaa, &(0x7f0000000380)={0x0, 0x0, 0x13291, 0x0, 0x2000}, 0x0, &(0x7f0000000000)) io_uring_enter(r0, 0x1, 0xffffffff, 0x1, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) socket$inet(0x2, 0x6, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0x58, &(0x7f0000000400)}, 0x10) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000680)={{0x1, 0x1, 0x18, r4, {r4}}, './file0/file0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_setup(0x3ac2, &(0x7f00000000c0)={0x0, 0x0, 0x1000, 0x3, 0x3}) pread64(r4, &(0x7f0000001440)=""/120, 0x78, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r5, &(0x7f0000000340)='\x00', 0x1, 0x0, 0x0, 0x0) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x0, 0x0, 0xfffffffffffffd25) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x18) close_range(r3, 0xffffffffffffffff, 0x0) 18.335338766s ago: executing program 2 (id=677): r0 = syz_open_dev$video(&(0x7f0000000000), 0x3, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3}) 18.264535025s ago: executing program 2 (id=679): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffd) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2004cb], 0x0, 0x202}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000240)={[{0x0, 0x0, 0x0, 0x2}], 0xfffffffd}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 18.104234473s ago: executing program 2 (id=684): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000300)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) 18.045837199s ago: executing program 2 (id=685): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4000011) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) sendmmsg(0xffffffffffffffff, &(0x7f0000000280)=[{{0x0, 0x700003a, 0x0, 0x0, 0x0, 0x0, 0x700}, 0x4}], 0x400000000000085, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r2 = fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r2, 0x6, &(0x7f0000000140)=0xfff) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r4 = openat$sequencer2(0xffffff9c, &(0x7f0000000180), 0x84381, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r4, 0x5404) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29, r6}, './file0\x00'}) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='nilfs2\x00', 0x0, 0x0) 17.839514154s ago: executing program 2 (id=688): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r0 = syz_open_procfs(0x0, &(0x7f0000002180)='net/ip_mr_vif\x00') pread64(r0, &(0x7f0000000700)=""/202, 0xca, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x232}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x3) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000040)=0x193a, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SET_TSC(0x1a, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x7fff0000}]}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xcc) write$binfmt_elf64(r2, &(0x7f00000000c0)=ANY=[], 0xc63b9e35) recvmmsg(r2, &(0x7f0000000140), 0x0, 0x0, 0x0) 17.446107854s ago: executing program 3 (id=692): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r4 = openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$RTC_SET_TIME(r4, 0x4024700a, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000cc0)={0x2c, r2, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4, 0xa}, @NL80211_KEY_IDX={0x5, 0x2, 0x6}]}]}, 0x2c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) sendmsg$NL80211_CMD_START_NAN(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40400000}, 0xc, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x3050}, 0x90) r6 = socket$unix(0x1, 0x5, 0x0) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_UIE_ON(r7, 0x7003) ioctl$RTC_AIE_ON(r7, 0x7001) ioctl$RTC_SET_TIME(r7, 0x4024700a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x17, 0x0, 0x4f}) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYRES64=r0, @ANYRES16=r2, @ANYRES32=r5, @ANYRESOCT=r5], 0x24}, 0x1, 0x0, 0x0, 0x881}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x58}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x40000}, 0x90) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0xe8, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0xbc, 0xe, {{{}, {}, @device_a, @device_b}, 0x0, @default, 0x0, @void, @val, @val={0x3, 0x1}, @void, @void, @val={0x5, 0x71, {0x7, 0xbc, 0xa, "aa621bac19544af41e81262c4e354e288760f4ac140b6f11d442da65681c690b4669ca120c82969052887149b8b41b71396f8c3d1095b6f44eacab19355db79347ee2cae21a4541fa3dca56c4d014328d663d0d52609caab0d9b0970f2dd516ee5c4d22d64d576075bfdddec1954"}}, @void, @void, @void, @val={0x2d, 0x1a}, @void, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon]}, 0xe8}, 0x1, 0x0, 0x0, 0x200400f1}, 0x0) setgroups(0x0, 0x0) r9 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0x0, "7fa83dab0d3366512d5be841797d7df93815e60c650932d7ec32e239af37da22bb8a299a5f539d3c7f18a266d61654fead1f5509316491a77a08835ac6cae26a"}, 0x48, 0xfffffffffffffffd) keyctl$chown(0x4, r9, 0xffffffffffffffff, 0xee00) 16.866361919s ago: executing program 3 (id=693): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r1, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) 16.816486519s ago: executing program 3 (id=694): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0}, 0x2020) ioprio_set$uid(0x3, r1, 0x0) 16.753105354s ago: executing program 3 (id=696): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_TX={0x8}]}, 0x34}}, 0x0) 16.676399181s ago: executing program 3 (id=697): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4000011) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) sendmmsg(0xffffffffffffffff, &(0x7f0000000280)=[{{0x0, 0x700003a, 0x0, 0x0, 0x0, 0x0, 0x700}, 0x4}], 0x400000000000085, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r2 = fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r2, 0x6, &(0x7f0000000140)=0xfff) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r4 = openat$sequencer2(0xffffff9c, &(0x7f0000000180), 0x84381, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r4, 0x5404) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29, r6}, './file0\x00'}) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='nilfs2\x00', 0x0, 0x0) 16.512980302s ago: executing program 3 (id=700): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000080)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 5.539116841s ago: executing program 1 (id=703): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001240)=ANY=[@ANYBLOB="3c00000000000000000000302c3f81979a63bae6a38f0dab5cad43d82a917f822a49c8fe15b406000000000000004e1599d392aa18e1a5ff89e7045ef865c395883d98225db66769d0b4a11fcf74db8457f57a55f767d1ff59125898fac4", @ANYRES32=r1, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c0002800800070000000000"], 0x3c}}, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000180), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_1\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001380)=ANY=[@ANYBLOB="4400000011002901000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a80080000003e0000000000000000c25fcc37bcaa5d836101e59edf0d37c852ad187f6821b7ded369af7163e6bce940b0672dca012b2d93d1c9542bc984b5d897b84be00eba33cdf9d3a7f7ea1117942aa7de9329ed66c3135208f8ff8be6272cc9886c3b18d7995bcd11da6d21b99ad2b591e0165d0b47eaf4fb2f9b80e70a3ad19b6253c403a8adabcd503a875243d2429831291b451b77e61121beab7789c4d55731f2"], 0x44}, 0x1, 0x0, 0x0, 0x4000050}, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = openat$capi20(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r6, 0xc0104320, &(0x7f0000001040)={0xa, 0x0}) socket$inet6(0xa, 0x3, 0xff) socket$nl_generic(0x10, 0x3, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0x1c, 0x0, &(0x7f0000000480)="b9ff03076844268cb89e14f088a847", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.545428741s ago: executing program 1 (id=707): r0 = syz_io_uring_setup(0x1114, &(0x7f0000000300), &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffc}) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) 3.44053408s ago: executing program 1 (id=709): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r0, &(0x7f00000027c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/104, 0x68}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 2.998047785s ago: executing program 1 (id=712): r0 = openat$fb1(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000380)={0x3c0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}) 2.895688818s ago: executing program 1 (id=713): bind$inet6(0xffffffffffffffff, &(0x7f0000ed3fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000440)=ANY=[@ANYRES8], 0x0, 0x5, 0xc3, &(0x7f0000000600)=""/195}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x4c) r1 = gettid() sched_setaffinity(r1, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = userfaultfd(0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="0000950000000000000000000000000000000000f8910feb1628e8fbff925b7ac900000000"], &(0x7f0000000000)='GPL\x00'}, 0x90) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r4, 0x0, 0x48c, &(0x7f00000003c0)={0x1, 'veth1_to_bond\x00', 0xffffffff}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x6c}}, 0x0) gettid() syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="e8020000070903002dbd7000fcdbdf250000000304000000fee258e161b082f377b3e783da5b27f320ebeca0db0dc1b40410627d0a190000800c00000024283a2381290b004900dff5ebe87162a400000014000000fe8000000000000000000000000000aa0601a98010df3f0daab936f1a3e6af8ff63acff89db7cef49c88f0b9dadcda6cb1c480ccc57a2f2eae2065fb7c86285a3ab2877f7e4bbbae046279040000008a33d415481d2eb9026483cde841b7a327c336869616acd62aca979da8bfdcb7b02763736049dbf4745cc57fc56a17351eee7eb8987fe7ecfac884b323fefc6105c9f4d205742bb21d9484e81b8a3ba6a820924cae6b00ac36cdb4dda3119f3c7e3ff8f7d3f6b5e5b4d16dec75f869e157039f7dc34d4aba943e58ef282409380eea0fdde47251d34df4c1ee7f00daa734c9c8e700f76788464399a9a5b436ea468fee2bbfd240f37951c29f6e86ce61f0a0fb1d3036b73f0338", @ANYRES32=0x0, @ANYBLOB="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"], 0x2e8}}, 0x0) syz_emit_vhci(0x0, 0xd) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_SET_PIN_FILE(r3, 0x4004f50d, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010008000000000000000700000008000300", @ANYBLOB="0c0099000000000000000000140004006e6963766630000000000000000000000800050007"], 0x44}}, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f00000004c0)={0x21, 0x3, 0x0, {0x5}}, 0x21) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x16, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @remote, {[@timestamp={0x44, 0x14, 0x7c, 0x0, 0x0, [0x0, 0x0, 0x0, 0xfffffff8]}, @noop, @noop, @lsrr={0x83, 0x7, 0x0, [@private=0xa010100]}, @timestamp_prespec={0x44, 0x24, 0xaa, 0x3, 0x0, [{@private=0xa010101, 0x5f2}, {@dev={0xac, 0x14, 0x14, 0x21}, 0x1}, {@multicast1, 0xb}, {@broadcast, 0x6}]}]}}}}}) 2.715266461s ago: executing program 0 (id=716): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000004180)=[{{&(0x7f0000001f80)={0xa, 0x4e24, 0x0, @private1}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=[@rthdr={{0x28, 0x29, 0x39, {0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}}}], 0x28}}], 0x1, 0x0) 2.612359686s ago: executing program 0 (id=717): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@allocspi={0xf8, 0x16, 0x3b5bef62e1571d3d, 0x0, 0x0, {{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@local}, {@in6=@loopback, 0x0, 0x33}, @in6=@mcast2}, 0x18}}, 0xf8}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r4, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000010801"], 0x14}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r5, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newqdisc={0x54, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_clsact={0xb}]}, 0x54}}, 0x0) r6 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r6, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @empty}, {0xa, 0x0, 0x0, @dev}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, 0x5c) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xfffffffffffffddf, 0x0) 1.80005987s ago: executing program 0 (id=718): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) close(r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x100002, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) pwritev(r0, &(0x7f0000000180)=[{&(0x7f0000000140)='2', 0x1}], 0x1, 0x4000000, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendfile(r2, r0, 0x0, 0xfacf) 659.423506ms ago: executing program 1 (id=719): syz_open_dev$sndctrl(&(0x7f0000004e80), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) syz_emit_vhci(&(0x7f00000004c0)=ANY=[@ANYBLOB="02c8a081007d00010004070400ffff0d0007ff0400ff7f08000a050200060005015a00cd0003000100010280000409010c08f30000049f6c04090403050400040004000610020209000100000001000000080008000102564b38ecff02a516ab8300000c0000002f01000006100301f8ff5b3c7e6700010000020000000c0805001000060003"], 0x86) socket(0x10, 0x0, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x10}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000240)='tlb_flush\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r3 = fsopen(&(0x7f0000000100)='proc\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r4 = fsmount(r3, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f00000000c0)={0x2, 0x4e24, @remote}, 0x10) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) sendmmsg(r5, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)='k', 0x1}], 0x1}}], 0x1, 0x0) recvmmsg(r5, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1, 0x10122, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xf}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}]}]}], {0x14, 0x10}}, 0xc8}}, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@bloom_filter={0x1e, 0x3, 0x8, 0x5, 0x220, r4, 0x7fffffff, '\x00', 0x0, r4, 0x0, 0x2, 0x0, 0xe}, 0x48) socket(0x0, 0xa, 0xaed) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, 0x0) 653.815948ms ago: executing program 0 (id=725): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000500)) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x3, 0x4, 0x4, 0xfffffff7}, 0x48) 536.185975ms ago: executing program 0 (id=720): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r0, &(0x7f00000027c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/104, 0x68}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) 0s ago: executing program 0 (id=721): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsconfig$FSCONFIG_SET_FLAG(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4000011) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast1}, 0x2}}, 0x2e) sendmmsg(0xffffffffffffffff, &(0x7f0000000280)=[{{0x0, 0x700003a, 0x0, 0x0, 0x0, 0x0, 0x700}, 0x4}], 0x400000000000085, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r2 = fcntl$getown(0xffffffffffffffff, 0x9) sched_setscheduler(r2, 0x6, &(0x7f0000000140)=0xfff) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r4 = openat$sequencer2(0xffffff9c, &(0x7f0000000180), 0x84381, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r4, 0x5404) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29, r6}, './file0\x00'}) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='nilfs2\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:10793' (ED25519) to the list of known hosts. [ 58.642739][ T5330] cgroup: Unknown subsys name 'net' [ 58.813105][ T5330] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 60.245442][ T5330] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 66.328950][ T67] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.336645][ T5351] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 66.337097][ T67] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.342907][ T5357] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 66.343293][ T5351] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 66.350625][ T5351] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.352443][ T5357] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 66.361907][ T5357] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 66.364774][ T5351] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 66.365471][ T5357] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.369718][ T5351] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 66.372447][ T5355] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 66.374471][ T5362] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 66.375514][ T5351] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 66.376013][ T5351] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 66.377243][ T5355] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 66.380561][ T5357] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 66.383412][ T5351] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 66.384909][ T5363] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 66.385265][ T5363] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 66.387138][ T5363] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 66.389280][ T5362] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 66.389571][ T5351] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 66.411308][ T5352] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 66.816868][ T5358] chnl_net:caif_netlink_parms(): no params data found [ 66.845109][ T5346] chnl_net:caif_netlink_parms(): no params data found [ 67.009568][ T5354] chnl_net:caif_netlink_parms(): no params data found [ 67.045316][ T5345] chnl_net:caif_netlink_parms(): no params data found [ 67.221045][ T5346] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.225122][ T5346] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.228515][ T5346] bridge_slave_0: entered allmulticast mode [ 67.234850][ T5346] bridge_slave_0: entered promiscuous mode [ 67.284542][ T5358] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.290385][ T5358] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.295566][ T5358] bridge_slave_0: entered allmulticast mode [ 67.300072][ T5358] bridge_slave_0: entered promiscuous mode [ 67.310028][ T5358] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.315749][ T5358] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.319477][ T5358] bridge_slave_1: entered allmulticast mode [ 67.324597][ T5358] bridge_slave_1: entered promiscuous mode [ 67.358295][ T5346] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.361471][ T5346] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.365142][ T5346] bridge_slave_1: entered allmulticast mode [ 67.368975][ T5346] bridge_slave_1: entered promiscuous mode [ 67.527456][ T5358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.565642][ T5354] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.570068][ T5354] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.573581][ T5354] bridge_slave_0: entered allmulticast mode [ 67.577459][ T5354] bridge_slave_0: entered promiscuous mode [ 67.588517][ T5358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.625108][ T5346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.629507][ T5354] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.633145][ T5354] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.635933][ T5354] bridge_slave_1: entered allmulticast mode [ 67.639424][ T5354] bridge_slave_1: entered promiscuous mode [ 67.700747][ T5346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.765541][ T5345] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.768177][ T5345] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.771384][ T5345] bridge_slave_0: entered allmulticast mode [ 67.775464][ T5345] bridge_slave_0: entered promiscuous mode [ 67.844475][ T5354] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.851914][ T5358] team0: Port device team_slave_0 added [ 67.856206][ T5345] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.859439][ T5345] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.862449][ T5345] bridge_slave_1: entered allmulticast mode [ 67.866640][ T5345] bridge_slave_1: entered promiscuous mode [ 67.901052][ T5354] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.928028][ T5358] team0: Port device team_slave_1 added [ 68.001101][ T5346] team0: Port device team_slave_0 added [ 68.048086][ T5358] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.050716][ T5358] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.062723][ T5358] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.070444][ T5345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.077130][ T5345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.083163][ T5346] team0: Port device team_slave_1 added [ 68.088124][ T5354] team0: Port device team_slave_0 added [ 68.091373][ T5358] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.097375][ T5358] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.108290][ T5358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.186907][ T5354] team0: Port device team_slave_1 added [ 68.224809][ T5345] team0: Port device team_slave_0 added [ 68.230608][ T5345] team0: Port device team_slave_1 added [ 68.309067][ T5354] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.311498][ T5354] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.323214][ T5354] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.347162][ T5346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.350091][ T5346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.363439][ T5346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.369773][ T5354] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.372488][ T5354] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.382128][ T5354] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.413176][ T5345] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.416146][ T5345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.426747][ T5345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.433044][ T5346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.436070][ T5346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.444003][ T4773] Bluetooth: hci0: command tx timeout [ 68.444029][ T5362] Bluetooth: hci3: command tx timeout [ 68.446263][ T5362] Bluetooth: hci1: command tx timeout [ 68.447164][ T5346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.455091][ T4773] Bluetooth: hci2: command tx timeout [ 68.503639][ T5345] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.506737][ T5345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.518338][ T5345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.559123][ T5346] hsr_slave_0: entered promiscuous mode [ 68.562604][ T5346] hsr_slave_1: entered promiscuous mode [ 68.571258][ T5358] hsr_slave_0: entered promiscuous mode [ 68.574035][ T5358] hsr_slave_1: entered promiscuous mode [ 68.576781][ T5358] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.580127][ T5358] Cannot create hsr debugfs directory [ 68.679566][ T5345] hsr_slave_0: entered promiscuous mode [ 68.682554][ T5345] hsr_slave_1: entered promiscuous mode [ 68.685806][ T5345] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.688869][ T5345] Cannot create hsr debugfs directory [ 68.698861][ T5354] hsr_slave_0: entered promiscuous mode [ 68.702619][ T5354] hsr_slave_1: entered promiscuous mode [ 68.711197][ T5354] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.715348][ T5354] Cannot create hsr debugfs directory [ 69.293568][ T5358] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.303893][ T5358] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.309152][ T5358] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.315263][ T5358] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.367058][ T5346] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.376954][ T5346] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.383374][ T5346] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.389780][ T5346] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.448291][ T5354] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.455778][ T5354] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.467515][ T5354] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.472632][ T5354] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.548571][ T5345] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.554810][ T5345] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.568316][ T5345] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.573428][ T5345] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.634178][ T5358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.676459][ T5358] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.686079][ T5346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.704228][ T1108] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.707544][ T1108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.724559][ T5346] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.731703][ T5354] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.737393][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.740159][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.763377][ T1108] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.765990][ T1108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.781803][ T5354] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.796836][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.800087][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.824848][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.828008][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.851489][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.854105][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.892054][ T5345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.954594][ T5345] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.987221][ T84] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.990326][ T84] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.996589][ T84] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.999609][ T84] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.032628][ T5345] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 70.037751][ T5345] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.108226][ T5358] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.129228][ T5346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.160666][ T5354] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.212121][ T5346] veth0_vlan: entered promiscuous mode [ 70.243586][ T5346] veth1_vlan: entered promiscuous mode [ 70.268357][ T5358] veth0_vlan: entered promiscuous mode [ 70.278697][ T5358] veth1_vlan: entered promiscuous mode [ 70.282858][ T5354] veth0_vlan: entered promiscuous mode [ 70.298590][ T5345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.311559][ T5354] veth1_vlan: entered promiscuous mode [ 70.326626][ T5346] veth0_macvtap: entered promiscuous mode [ 70.338818][ T5346] veth1_macvtap: entered promiscuous mode [ 70.376592][ T5358] veth0_macvtap: entered promiscuous mode [ 70.384112][ T5346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.391510][ T5346] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.415134][ T5358] veth1_macvtap: entered promiscuous mode [ 70.420079][ T5346] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.425500][ T5346] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.430876][ T5346] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.435136][ T5346] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.444645][ T5354] veth0_macvtap: entered promiscuous mode [ 70.452434][ T5354] veth1_macvtap: entered promiscuous mode [ 70.475242][ T5345] veth0_vlan: entered promiscuous mode [ 70.495844][ T5358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.500549][ T5358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.507241][ T5358] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.515174][ T5354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.519378][ T5354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.523587][ T4773] Bluetooth: hci1: command tx timeout [ 70.523612][ T4773] Bluetooth: hci3: command tx timeout [ 70.528870][ T5354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.532661][ T5354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.533091][ T5362] Bluetooth: hci2: command tx timeout [ 70.536609][ T4773] Bluetooth: hci0: command tx timeout [ 70.537972][ T5354] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.540459][ T5358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.548379][ T5358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.554444][ T5358] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.557941][ T5345] veth1_vlan: entered promiscuous mode [ 70.577734][ T5358] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.581609][ T5358] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.586053][ T5358] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.589851][ T5358] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.596366][ T5354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.600756][ T5354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.604942][ T5354] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.609332][ T5354] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.615959][ T5354] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.647730][ T5354] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.651095][ T5354] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.654916][ T5354] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.658544][ T5354] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.686327][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.692468][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.754921][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.759097][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.777411][ T5345] veth0_macvtap: entered promiscuous mode [ 70.787498][ T1099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.789637][ T5345] veth1_macvtap: entered promiscuous mode [ 70.790645][ T1099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.818398][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.823601][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.849569][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.856996][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.863520][ T5345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.867847][ T5345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.872695][ T5345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.881206][ T5345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.887324][ T5345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.893404][ T5345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.898747][ T5345] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.927330][ T5345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.932202][ T5345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.942684][ T5345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.948122][ T5345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.952644][ T5345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.958045][ T5345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.965359][ T5345] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.976608][ T5345] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.982675][ T5345] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.987185][ T5345] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.991161][ T5345] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.002507][ T1108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.029447][ T1108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.113344][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.116642][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.150519][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.184309][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.372896][ T5424] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 71.376298][ T5424] overlayfs: failed to set xattr on upper [ 71.378848][ T5424] overlayfs: ...falling back to redirect_dir=nofollow. [ 71.381940][ T5424] overlayfs: ...falling back to index=off. [ 71.386045][ T5424] overlayfs: ...falling back to uuid=null. [ 71.388826][ T5424] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 71.555845][ T5436] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 71.673752][ T5447] syz.2.17 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 71.728699][ T5436] kvm: pic: level sensitive irq not supported [ 71.729606][ T5436] kvm: pic: non byte read [ 71.937147][ T5452] syz.2.19 uses obsolete (PF_INET,SOCK_PACKET) [ 72.007636][ T5456] sch_fq: defrate 0 ignored. [ 72.303088][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.329185][ T5465] process 'syz.1.23' launched './file0' with NULL argv: empty string added [ 72.604617][ T4773] Bluetooth: hci2: command tx timeout [ 72.604735][ T5362] Bluetooth: hci0: command tx timeout [ 72.607024][ T5352] Bluetooth: hci3: command tx timeout [ 72.607061][ T5352] Bluetooth: hci1: command tx timeout [ 72.763337][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 73.563201][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 73.673061][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 73.703084][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 73.797531][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 73.868713][ T5509] netlink: 28 bytes leftover after parsing attributes in process `syz.0.42'. [ 73.943066][ T5389] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 74.154114][ T5389] usb 8-1: Using ep0 maxpacket: 32 [ 74.167006][ T5389] usb 8-1: config index 0 descriptor too short (expected 156, got 27) [ 74.171482][ T5389] usb 8-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 74.181000][ T5389] usb 8-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 74.186080][ T5389] usb 8-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 74.191770][ T5389] usb 8-1: config 0 interface 0 has no altsetting 0 [ 74.202533][ T5389] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 74.208286][ T5389] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 74.214739][ T5389] usb 8-1: Product: syz [ 74.216654][ T5389] usb 8-1: Manufacturer: syz [ 74.218892][ T5389] usb 8-1: SerialNumber: syz [ 74.227331][ T5389] usb 8-1: config 0 descriptor?? [ 74.239736][ T5389] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 74.259201][ T5389] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 74.364200][ T5523] netlink: 12 bytes leftover after parsing attributes in process `syz.2.48'. [ 74.499180][ T5408] usb 8-1: USB disconnect, device number 2 [ 74.503039][ T5525] sg_write: data in/out 196608/4 bytes for SCSI command 0xdb-- guessing data in; [ 74.503039][ T5525] program syz.2.49 not setting count and/or reply_len properly [ 74.514088][ T5408] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 74.684922][ T5352] Bluetooth: hci1: command tx timeout [ 74.693580][ T4773] Bluetooth: hci0: command tx timeout [ 74.696142][ T4773] Bluetooth: hci3: command tx timeout [ 74.735644][ T5532] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 74.806161][ T5536] Bluetooth: MGMT ver 1.23 [ 75.004637][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 75.032045][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 75.059625][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 75.063520][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 75.070411][ T5547] input: syz0 as /devices/virtual/input/input5 [ 75.472936][ T1428] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 75.653513][ T1428] usb 6-1: Using ep0 maxpacket: 8 [ 75.659013][ T1428] usb 6-1: config 0 has no interfaces? [ 75.666355][ T1428] usb 6-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 75.670297][ T1428] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.674033][ T1428] usb 6-1: Product: syz [ 75.677720][ T1428] usb 6-1: Manufacturer: syz [ 75.682135][ T1428] usb 6-1: SerialNumber: syz [ 75.693888][ T1428] usb 6-1: config 0 descriptor?? [ 75.957050][ T1428] usb 6-1: USB disconnect, device number 2 [ 76.768454][ T1377] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.793500][ T1377] ieee802154 phy1 wpan1: encryption failed: -22 [ 77.173137][ T1428] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 77.217243][ T5567] syzkaller0: entered promiscuous mode [ 77.219775][ T5567] syzkaller0: entered allmulticast mode [ 77.367205][ T5572] 9pnet_fd: Insufficient options for proto=fd [ 77.383185][ T1428] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 77.389107][ T1428] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 77.394238][ T1428] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 77.400134][ T1428] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 77.404362][ T1428] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.430646][ T1428] usb 6-1: config 0 descriptor?? [ 77.439934][ T5563] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 77.887465][ T1428] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 77.897569][ T1428] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 77.921456][ T1428] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 78.264793][ T1428] usb 6-1: USB disconnect, device number 3 [ 78.296423][ T5352] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 78.300734][ T5352] Bluetooth: hci2: Injecting HCI hardware error event [ 78.305757][ T5352] Bluetooth: hci2: hardware error 0x00 [ 79.032358][ T5586] 9pnet_fd: Insufficient options for proto=fd [ 79.090236][ T5586] syz.1.70: attempt to access beyond end of device [ 79.090236][ T5586] nbd1: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 79.096003][ T5595] netlink: 'syz.2.75': attribute type 3 has an invalid length. [ 79.099857][ T5595] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.75'. [ 79.102924][ T5586] SQUASHFS error: Failed to read block 0x0: -5 [ 79.107328][ T5586] unable to read squashfs_super_block [ 79.572919][ T4773] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 79.574565][ T5348] Bluetooth: hci4: command 0x1003 tx timeout [ 79.670885][ T5599] ntfs3: nullb0: Primary boot signature is not NTFS. [ 79.679567][ T5599] ntfs3: nullb0: try to read out of volume at offset 0x3e7ffffe00 [ 80.003100][ T39] audit: type=1326 audit(1723341487.730:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5601 comm="syz.2.78" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7fc00000 [ 80.012957][ T39] audit: type=1326 audit(1723341487.740:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5601 comm="syz.2.78" exe="/syz-executor" sig=0 arch=40000003 syscall=354 compat=1 ip=0xf7f95579 code=0x7fc00000 [ 80.363593][ T5352] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 80.656985][ T39] audit: type=1326 audit(1723341488.390:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5601 comm="syz.2.78" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7fc00000 [ 80.969726][ T5626] capability: warning: `syz.0.87' uses deprecated v2 capabilities in a way that may be insecure [ 80.978323][ T5626] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 81.527898][ T39] audit: type=1326 audit(1723341489.260:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5638 comm="syz.0.89" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2579 code=0x7fc00000 [ 81.614188][ T39] audit: type=1326 audit(1723341489.330:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5638 comm="syz.0.89" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7fa2579 code=0x7fc00000 [ 82.217257][ T5422] kernel write not supported for file /vcs (pid: 5422 comm: kworker/2:4) [ 82.303800][ T5661] [U]  [ 82.344857][ T39] audit: type=1326 audit(1723341490.080:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5638 comm="syz.0.89" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7fa25a7 code=0x7fc00000 [ 82.746530][ T5686] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 0, id = 0 [ 82.758178][ T5685] IPVS: stopping backup sync thread 5686 ... [ 83.013251][ T5689] netlink: 'syz.2.108': attribute type 10 has an invalid length. [ 83.023361][ T5689] bridge0: port 3(team0) entered blocking state [ 83.026628][ T5689] bridge0: port 3(team0) entered disabled state [ 83.032890][ T5689] team0: entered allmulticast mode [ 83.035480][ T5689] team_slave_0: entered allmulticast mode [ 83.037752][ T5689] team_slave_1: entered allmulticast mode [ 83.042055][ T5689] team0: entered promiscuous mode [ 83.044434][ T5689] team_slave_0: entered promiscuous mode [ 83.046786][ T5689] team_slave_1: entered promiscuous mode [ 83.050180][ T5689] bridge0: port 3(team0) entered blocking state [ 83.053422][ T5689] bridge0: port 3(team0) entered forwarding state [ 84.053972][ T5717] block device autoloading is deprecated and will be removed. [ 84.065814][ T5718] netlink: 4 bytes leftover after parsing attributes in process `syz.0.119'. [ 84.434662][ T5725] netlink: 8 bytes leftover after parsing attributes in process `syz.2.122'. [ 84.833992][ T5742] netlink: 4 bytes leftover after parsing attributes in process `syz.2.130'. [ 84.834685][ T39] audit: type=1326 audit(1723341492.570:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5732 comm="syz.3.126" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f85579 code=0x7fc00000 [ 84.995771][ T5754] deleting an unspecified loop device is not supported. [ 85.014037][ T5739] netlink: 24 bytes leftover after parsing attributes in process `syz.1.128'. [ 85.242469][ T5761] netlink: 'syz.1.136': attribute type 3 has an invalid length. [ 85.291631][ T5763] netlink: 'syz.1.137': attribute type 4 has an invalid length. [ 85.340093][ T5763] netlink: 'syz.1.137': attribute type 4 has an invalid length. [ 85.475101][ T39] audit: type=1326 audit(1723341493.210:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5732 comm="syz.3.126" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f85579 code=0x7fc00000 [ 85.961566][ T5785] Bluetooth: MGMT ver 1.23 [ 85.991249][ T5783] REISERFS warning (device nullb0): sh-2021 reiserfs_fill_super: can not find reiserfs on nullb0 [ 87.006323][ T60] cfg80211: failed to load regulatory.db [ 89.619665][ T5802] netlink: 5312 bytes leftover after parsing attributes in process `syz.1.150'. [ 89.623831][ T5802] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 89.903998][ T5807] syz.0.151 (5807): drop_caches: 2 [ 89.915280][ T5807] syz.0.151 (5807): drop_caches: 2 [ 90.049463][ T5812] batadv_slave_0: entered promiscuous mode [ 90.056958][ T5811] batadv_slave_0: left promiscuous mode [ 90.147845][ T5807] syz.0.151 (5807): drop_caches: 2 [ 90.151082][ T5807] syz.0.151 (5807): drop_caches: 2 [ 90.405403][ T5825] Zero length message leads to an empty skb [ 90.808213][ T5827] overlay: ./file0 is not a directory [ 92.046057][ T5855] netlink: 80 bytes leftover after parsing attributes in process `syz.0.169'. [ 92.219056][ T5846] block nbd1: shutting down sockets [ 92.282140][ T5859] netlink: 4 bytes leftover after parsing attributes in process `syz.2.171'. [ 92.819464][ T39] audit: type=1326 audit(1723341500.550:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5863 comm="syz.1.173" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f32579 code=0x0 [ 93.051421][ T5878] input: syz1 as /devices/virtual/input/input7 [ 93.963280][ T1283] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 94.182999][ T1283] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 94.187719][ T1283] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 94.201472][ T1283] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 94.212302][ T1283] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 94.218310][ T1283] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 94.229779][ T1283] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 94.241014][ T1283] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 94.245282][ T1283] usb 6-1: Product: syz [ 94.247233][ T1283] usb 6-1: Manufacturer: syz [ 94.259023][ T1283] cdc_wdm 6-1:1.0: skipping garbage [ 94.261887][ T1283] cdc_wdm 6-1:1.0: skipping garbage [ 94.270278][ T1283] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 94.273750][ T1283] cdc_wdm 6-1:1.0: Unknown control protocol [ 94.540954][ T983] usb 6-1: USB disconnect, device number 4 [ 95.446054][ T5922] mmap: syz.2.190 (5922) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 97.128631][ T5944] ======================================================= [ 97.128631][ T5944] WARNING: The mand mount option has been deprecated and [ 97.128631][ T5944] and is ignored by this kernel. Remove the mand [ 97.128631][ T5944] option from the mount to silence this warning. [ 97.128631][ T5944] ======================================================= [ 97.662740][ T5954] netlink: 'syz.0.203': attribute type 1 has an invalid length. [ 97.666424][ T5954] netlink: 224 bytes leftover after parsing attributes in process `syz.0.203'. [ 97.670098][ T5954] netlink: 8 bytes leftover after parsing attributes in process `syz.0.203'. [ 97.748173][ T5954] netlink: 4 bytes leftover after parsing attributes in process `syz.0.203'. [ 97.787211][ T5960] mkiss: ax0: crc mode is auto. [ 98.499482][ T5977] batadv0: entered promiscuous mode [ 98.625591][ T5979] netlink: 'syz.2.213': attribute type 1 has an invalid length. [ 98.733341][ T1283] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 98.943478][ T1283] usb 6-1: Using ep0 maxpacket: 8 [ 98.953470][ T1283] usb 6-1: config 0 has no interfaces? [ 98.966008][ T1283] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 98.969890][ T1283] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.974982][ T1283] usb 6-1: Product: syz [ 98.976470][ T1283] usb 6-1: Manufacturer: syz [ 98.992880][ T1283] usb 6-1: SerialNumber: syz [ 98.999312][ T1283] usb 6-1: config 0 descriptor?? [ 99.154837][ T39] audit: type=1326 audit(1723341506.890:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5984 comm="syz.0.215" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa2579 code=0x0 [ 99.217230][ T5995] vivid-000: ================= START STATUS ================= [ 99.221102][ T5995] vivid-000: Radio HW Seek Mode: Bounded [ 99.226738][ T5995] vivid-000: Radio Programmable HW Seek: false [ 99.229484][ T5995] vivid-000: RDS Rx I/O Mode: Block I/O [ 99.232031][ T5995] vivid-000: Generate RBDS Instead of RDS: false [ 99.235567][ T5995] vivid-000: RDS Reception: true [ 99.237753][ T5995] vivid-000: RDS Program Type: 0 inactive [ 99.240244][ T5995] vivid-000: RDS PS Name: inactive [ 99.242632][ T5995] vivid-000: RDS Radio Text: inactive [ 99.245129][ T5995] vivid-000: RDS Traffic Announcement: false inactive [ 99.247968][ T5995] vivid-000: RDS Traffic Program: false inactive [ 99.250864][ T5995] vivid-000: RDS Music: false inactive [ 99.253679][ T5995] vivid-000: ================== END STATUS ================== [ 99.355860][ T5422] usb 6-1: USB disconnect, device number 5 [ 99.698271][ T6008] Illegal XDP return value 568665152 on prog (id 63) dev N/A, expect packet loss! [ 100.091612][ T6024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.226'. [ 100.103280][ T6024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.226'. [ 100.110140][ T6024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.226'. [ 100.415565][ T6034] xt_CT: You must specify a L4 protocol and not use inversions on it [ 100.706122][ T5422] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 100.892858][ T5422] usb 6-1: Using ep0 maxpacket: 8 [ 100.896361][ T5422] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 100.899751][ T5422] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 100.920538][ T5422] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 100.924653][ T5422] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 100.928013][ T5422] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 100.932457][ T5422] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 100.936553][ T5422] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.172964][ T5422] usb 6-1: GET_CAPABILITIES returned 0 [ 101.175354][ T5422] usbtmc 6-1:16.0: can't read capabilities [ 101.363958][ T1099] bond0: (slave bond_slave_0): interface is now down [ 101.370374][ T1099] bond0: (slave bond_slave_1): interface is now down [ 101.381064][ T1099] bond0: now running without any active interface! [ 101.383806][ T5422] usb 6-1: USB disconnect, device number 6 [ 101.604123][ T6036] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 101.713630][ T6051] netlink: 12 bytes leftover after parsing attributes in process `syz.0.235'. [ 101.718745][ T6051] netlink: 'syz.0.235': attribute type 30 has an invalid length. [ 102.210117][ T6075] overlayfs: workdir and upperdir must reside under the same mount [ 102.344493][ T6086] netlink: 24 bytes leftover after parsing attributes in process `syz.2.244'. [ 102.409847][ T6081] netlink: 4 bytes leftover after parsing attributes in process `syz.1.242'. [ 102.417401][ T6081] netlink: 173 bytes leftover after parsing attributes in process `syz.1.242'. [ 102.769107][ T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 102.955332][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 102.967737][ T10] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 102.972007][ T10] usb 7-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 102.977384][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.987815][ T10] usb 7-1: config 0 descriptor?? [ 103.020553][ T10] gspca_main: spca561-2.14.0 probing abcd:cdee [ 103.253020][ T5352] Bluetooth: hci0: command tx timeout [ 103.389281][ T6109] infiniband syz1: set down [ 103.392666][ T6109] infiniband syz1: added ipvlan1 [ 103.536255][ T10] spca561 7-1:0.0: probe with driver spca561 failed with error -22 [ 103.548524][ T10] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 103.551794][ T10] usb 7-1: MIDIStreaming interface descriptor not found [ 103.567449][ T6109] RDS/IB: syz1: added [ 103.571294][ T6109] smc: adding ib device syz1 with port count 1 [ 103.574554][ T6109] smc: ib device syz1 port 1 has pnetid [ 104.087041][ T6123] netlink: 'syz.0.252': attribute type 33 has an invalid length. [ 104.099177][ T6123] netlink: 152 bytes leftover after parsing attributes in process `syz.0.252'. [ 104.456377][ T5408] usb 7-1: USB disconnect, device number 2 [ 104.659077][ T6128] netlink: 12 bytes leftover after parsing attributes in process `syz.3.254'. [ 104.674069][ T6128] netlink: 4 bytes leftover after parsing attributes in process `syz.3.254'. [ 104.869640][ T6138] cgroup: release_agent respecified [ 105.381212][ T6165] netlink: 3838 bytes leftover after parsing attributes in process `syz.1.267'. [ 105.386064][ T6165] netlink: 208572 bytes leftover after parsing attributes in process `syz.1.267'. [ 105.591695][ T6162] netlink: 16 bytes leftover after parsing attributes in process `syz.0.266'. [ 105.743045][ T60] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 105.947740][ T60] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.966018][ T60] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.970415][ T60] usb 6-1: New USB device found, idVendor=056a, idProduct=009f, bcdDevice= 0.00 [ 105.979506][ T60] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.986493][ T60] usb 6-1: config 0 descriptor?? [ 106.425185][ T5422] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 106.501322][ T6167] warning: `syz.1.268' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 106.561542][ T60] usbhid 6-1:0.0: can't add hid device: -71 [ 106.566463][ T60] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 106.571538][ T60] usb 6-1: USB disconnect, device number 7 [ 106.613560][ T5422] usb 5-1: Using ep0 maxpacket: 8 [ 106.624222][ T5422] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 106.627825][ T5422] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 106.632010][ T5422] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 106.637120][ T5422] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 106.641158][ T5422] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 106.645887][ T5422] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 106.649594][ T5422] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.904247][ T5422] usb 5-1: usb_control_msg returned -32 [ 106.907380][ T5422] usbtmc 5-1:16.0: can't read capabilities [ 107.538845][ T58] usb 5-1: USB disconnect, device number 2 [ 107.553742][ T6183] usbtmc 5-1:16.0: usb_control_msg returned -71 [ 108.505746][ T6225] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.510119][ T6225] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.719025][ T6225] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3832186367 (7664372734 ns) > initial count (4194304 ns). Using initial count to start timer. [ 108.732341][ T6225] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.735134][ T6225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.738805][ T6225] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.741889][ T6225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.744816][ T6225] bridge0: entered promiscuous mode [ 108.746954][ T6225] bridge0: entered allmulticast mode [ 109.019527][ T6233] Invalid ELF section header overflow [ 109.620852][ T6250] fuse: Bad value for 'fd' [ 110.902895][ T57] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 111.098170][ T57] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 111.104573][ T57] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 111.109863][ T57] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 111.115744][ T57] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 111.122028][ T57] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 111.126863][ T57] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.152052][ T57] usb 6-1: config 0 descriptor?? [ 111.155607][ T6259] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 111.272954][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 111.465197][ T10] usb 5-1: config 0 has no interfaces? [ 111.467805][ T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 111.471893][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.479267][ T10] usb 5-1: config 0 descriptor?? [ 111.585380][ T57] plantronics 0003:047F:FFFF.0003: unknown main item tag 0xd [ 111.590074][ T57] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 111.612415][ T57] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 111.914804][ T59] Bluetooth: Short BCSP packet [ 111.924174][ T58] usb 5-1: USB disconnect, device number 3 [ 112.173238][ T84] Bluetooth: Error in BCSP hdr checksum [ 113.343252][ T5422] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 113.573049][ T5422] usb 5-1: Using ep0 maxpacket: 32 [ 113.577224][ T5422] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.582309][ T5422] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.602886][ T5422] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 113.607353][ T5422] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 113.611931][ T5422] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 113.622898][ T5422] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 113.629878][ T5422] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 113.633858][ T5422] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.637292][ T5422] usb 5-1: Product: syz [ 113.639124][ T5422] usb 5-1: Manufacturer: syz [ 113.641149][ T5422] usb 5-1: SerialNumber: syz [ 113.671340][ T6303] evm: overlay not supported [ 113.708045][ T1428] usb 6-1: USB disconnect, device number 8 [ 113.722929][ T5352] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 113.881677][ T5422] cdc_ncm 5-1:1.0: bind() failure [ 113.934671][ T5422] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 113.937672][ T5422] cdc_ncm 5-1:1.1: bind() failure [ 113.964783][ T5422] usb 5-1: USB disconnect, device number 4 [ 113.996083][ T6305] input: syz0 as /devices/virtual/input/input10 [ 114.770484][ T6317] No source specified [ 114.843199][ T39] audit: type=1804 audit(1723341522.570:12): pid=6317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.314" name="/newroot/77/bus/file0" dev="overlay" ino=434 res=1 errno=0 [ 115.903104][ T6331] serio: Serial port ptm0 [ 115.941531][ T6335] Invalid ELF section name index: 0 || e_shstrndx (0) >= e_shnum (0) [ 116.036395][ T6339] netlink: 188 bytes leftover after parsing attributes in process `syz.2.320'. [ 116.613003][ T1428] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 116.807293][ T6355] netlink: 24 bytes leftover after parsing attributes in process `syz.0.325'. [ 116.848125][ T6355] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 116.860198][ T39] audit: type=1326 audit(1723341524.590:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6351 comm="syz.0.325" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa2579 code=0x0 [ 116.882860][ T1428] usb 7-1: Using ep0 maxpacket: 8 [ 116.897672][ T1428] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 116.901032][ T1428] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.904822][ T1428] usb 7-1: Product: syz [ 116.906398][ T1428] usb 7-1: Manufacturer: syz [ 116.908056][ T1428] usb 7-1: SerialNumber: syz [ 116.921956][ T6352] infiniband syz2: set active [ 116.924321][ T6352] infiniband syz2: added team_slave_1 [ 116.963823][ T6352] RDS/IB: syz2: added [ 116.965712][ T6352] smc: adding ib device syz2 with port count 1 [ 116.968381][ T6352] smc: ib device syz2 port 1 has pnetid [ 117.141801][ T1428] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 117.377005][ T983] usb 7-1: USB disconnect, device number 3 [ 117.389263][ T983] usblp0: removed [ 120.663632][ T6388] input: syz0 as /devices/virtual/input/input11 [ 120.971640][ T6396] netlink: 12 bytes leftover after parsing attributes in process `syz.0.335'. [ 123.121638][ T6413] syz.2.340 (6413): drop_caches: 2 [ 123.128178][ T6413] syz.2.340 (6413): drop_caches: 2 [ 123.218710][ T6419] 9pnet_fd: Insufficient options for proto=fd [ 123.237455][ T6418] syz.2.340 (6418): drop_caches: 2 [ 123.260919][ T6418] syz.2.340 (6418): drop_caches: 2 [ 123.334923][ T59] Bluetooth: hci4: Frame reassembly failed (-84) [ 123.337620][ T59] Bluetooth: hci4: Frame reassembly failed (-84) [ 123.340531][ T59] Bluetooth: hci4: Frame reassembly failed (-84) [ 124.844103][ T6438] REISERFS warning (device nullb0): sh-2021 reiserfs_fill_super: can not find reiserfs on nullb0 [ 124.876308][ T6436] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 125.403831][ T5352] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 125.404140][ T4773] Bluetooth: hci4: command 0x1003 tx timeout [ 126.861045][ T6444] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.864881][ T6444] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.081741][ T6444] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3832186367 (7664372734 ns) > initial count (4194304 ns). Using initial count to start timer. [ 127.103300][ T6444] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.106515][ T6444] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.110888][ T6444] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.114127][ T6444] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.121735][ T6444] bridge0: entered promiscuous mode [ 127.124681][ T6444] bridge0: entered allmulticast mode [ 127.767013][ T6445] block nbd0: shutting down sockets [ 128.078356][ T6457] xt_CT: You must specify a L4 protocol and not use inversions on it [ 131.084541][ T983] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 131.274987][ T983] usb 6-1: config 0 has no interfaces? [ 131.277815][ T983] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 131.292879][ T983] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.303911][ T983] usb 6-1: config 0 descriptor?? [ 131.588619][ T6487] bridge0: port 3(team0) entered disabled state [ 131.591654][ T6487] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.596161][ T6487] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.762679][ T6487] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3832186367 (7664372734 ns) > initial count (4194304 ns). Using initial count to start timer. [ 131.773016][ T6487] bridge0: port 3(team0) entered blocking state [ 131.775824][ T6487] bridge0: port 3(team0) entered forwarding state [ 131.779224][ T6487] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.782610][ T6487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.786003][ T6487] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.789541][ T6487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.794224][ T6487] bridge0: entered promiscuous mode [ 131.796515][ T6487] bridge0: entered allmulticast mode [ 131.812634][ T57] usb 6-1: USB disconnect, device number 9 [ 132.470836][ T6507] xt_CT: You must specify a L4 protocol and not use inversions on it [ 134.451974][ T6524] syzkaller0: entered promiscuous mode [ 134.472935][ T6524] syzkaller0: entered allmulticast mode [ 136.124579][ T6535] sch_fq: defrate 0 ignored. [ 136.128060][ T6540] netlink: 'syz.1.373': attribute type 10 has an invalid length. [ 136.135761][ T6540] bridge0: port 3(team0) entered blocking state [ 136.139854][ T6540] bridge0: port 3(team0) entered disabled state [ 136.145514][ T6540] team0: entered allmulticast mode [ 136.149605][ T6540] team_slave_0: entered allmulticast mode [ 136.152104][ T6540] team_slave_1: entered allmulticast mode [ 136.157578][ T6540] team0: entered promiscuous mode [ 136.160026][ T6540] team_slave_0: entered promiscuous mode [ 136.164928][ T6540] team_slave_1: entered promiscuous mode [ 136.168613][ T6540] bridge0: port 3(team0) entered blocking state [ 136.171723][ T6540] bridge0: port 3(team0) entered forwarding state [ 136.682400][ T39] audit: type=1326 audit(1723341544.410:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6541 comm="syz.3.375" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f85579 code=0x0 [ 136.903418][ T1283] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 137.103426][ T1283] usb 7-1: Using ep0 maxpacket: 8 [ 137.134348][ T1283] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 137.137834][ T1283] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 137.142089][ T1283] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 137.151837][ T1283] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 137.156467][ T1283] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 137.162097][ T1283] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 137.168327][ T1283] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.461020][ T1283] usb 7-1: usb_control_msg returned -32 [ 137.465145][ T1283] usbtmc 7-1:16.0: can't read capabilities [ 138.037848][ T6552] usbtmc 7-1:16.0: usb_control_msg returned -71 [ 138.039276][ T1283] usb 7-1: USB disconnect, device number 4 [ 138.207469][ T1377] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.210320][ T1377] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.964906][ T6559] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 138.987207][ T6559] netlink: 24 bytes leftover after parsing attributes in process `syz.1.380'. [ 139.062373][ T6565] input: syz0 as /devices/virtual/input/input12 [ 139.097200][ T6559] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 139.121155][ T39] audit: type=1326 audit(1723341546.850:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6557 comm="syz.1.380" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f32579 code=0x0 [ 140.285177][ T6572] REISERFS warning (device nullb0): sh-2021 reiserfs_fill_super: can not find reiserfs on nullb0 [ 141.243746][ T6580] syzkaller0: entered promiscuous mode [ 141.246232][ T6580] syzkaller0: entered allmulticast mode [ 144.833516][ T6613] netlink: 8 bytes leftover after parsing attributes in process `syz.1.393'. [ 146.274122][ T6623] 9pnet_fd: Insufficient options for proto=fd [ 146.306417][ T5352] Bluetooth: hci4: sending frame failed (-49) [ 146.310980][ T5348] Bluetooth: hci4: Opcode 0x1003 failed: -49 [ 147.985298][ T6628] block nbd3: shutting down sockets [ 148.174544][ T5348] Bluetooth: Unexpected start frame (len 18) [ 148.202683][ T6640] syz.1.399 (6640): drop_caches: 2 [ 148.209017][ T6640] syz.1.399 (6640): drop_caches: 2 [ 148.360968][ T6644] syz.1.399 (6644): drop_caches: 2 [ 148.364776][ T6644] syz.1.399 (6644): drop_caches: 2 [ 149.300569][ T6663] syz.3.415 (6663): drop_caches: 2 [ 149.308964][ T6663] syz.3.415 (6663): drop_caches: 2 [ 149.432563][ T6667] syz.3.415 (6667): drop_caches: 2 [ 149.448943][ T6667] syz.3.415 (6667): drop_caches: 2 [ 151.346877][ T6691] 9pnet_fd: Insufficient options for proto=fd [ 151.400090][ T59] Bluetooth: hci4: Frame reassembly failed (-84) [ 152.178261][ T6701] netlink: 4 bytes leftover after parsing attributes in process `syz.2.413'. [ 152.247979][ T6706] cgroup: fork rejected by pids controller in /syz2 [ 152.442379][ T6705] REISERFS warning (device nullb0): sh-2021 reiserfs_fill_super: can not find reiserfs on nullb0 [ 153.308636][ T4773] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 153.314690][ T4773] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 153.318751][ T4773] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 153.327002][ T4773] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 153.331356][ T4773] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 153.335139][ T4773] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 153.413056][ T5348] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 153.416152][ T5352] Bluetooth: hci4: command 0x1003 tx timeout [ 153.780772][ T6715] chnl_net:caif_netlink_parms(): no params data found [ 153.932459][ T6715] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.936980][ T6715] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.944645][ T6715] bridge_slave_0: entered allmulticast mode [ 153.952585][ T6715] bridge_slave_0: entered promiscuous mode [ 153.978797][ T6715] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.984446][ T6715] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.988005][ T6715] bridge_slave_1: entered allmulticast mode [ 153.991775][ T6715] bridge_slave_1: entered promiscuous mode [ 154.112135][ T6715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.129801][ T6715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.209680][ T6715] team0: Port device team_slave_0 added [ 154.217717][ T6715] team0: Port device team_slave_1 added [ 154.295180][ T6715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.297262][ T6715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.313687][ T6715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.338007][ T6715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.341973][ T6715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.353489][ T6715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.415233][ T6715] hsr_slave_0: entered promiscuous mode [ 154.419867][ T6715] hsr_slave_1: entered promiscuous mode [ 154.422525][ T6715] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 154.425790][ T6715] Cannot create hsr debugfs directory [ 154.616903][ T6715] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.811474][ T6715] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.901339][ T6715] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.988923][ T6715] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.144695][ T6715] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 155.151056][ T6715] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 155.157745][ T6715] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 155.164921][ T6715] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 155.246703][ T6715] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.259225][ T6715] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.267525][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.270431][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.278647][ T1099] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.281294][ T1099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.403003][ T5348] Bluetooth: hci0: command tx timeout [ 155.438734][ T6715] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.471287][ T6715] veth0_vlan: entered promiscuous mode [ 155.478340][ T6715] veth1_vlan: entered promiscuous mode [ 155.499444][ T6715] veth0_macvtap: entered promiscuous mode [ 155.508560][ T6715] veth1_macvtap: entered promiscuous mode [ 155.522335][ T6715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.526356][ T6715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.529814][ T6715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.534753][ T6715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.538842][ T6715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.543231][ T6715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.548132][ T6715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.552562][ T6715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.557853][ T6715] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.566552][ T6715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.570941][ T6715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.577356][ T6715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.581806][ T6715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.585790][ T6715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.590290][ T6715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.594732][ T6715] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.599110][ T6715] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.605367][ T6715] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.614067][ T6715] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.617814][ T6715] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.621535][ T6715] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.626210][ T6715] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.679401][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.682485][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.701093][ T1099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.706180][ T1099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.776215][ T39] audit: type=1326 audit(1723341563.510:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6731 comm="syz.2.418" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa6579 code=0x0 [ 157.482904][ T5348] Bluetooth: hci0: command tx timeout [ 159.131017][ T6771] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.432'. [ 159.135270][ T6771] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 159.381995][ T6779] input: syz0 as /devices/virtual/input/input13 [ 159.563021][ T5348] Bluetooth: hci0: command tx timeout [ 160.369161][ T6789] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 161.643477][ T5348] Bluetooth: hci0: command tx timeout [ 161.774174][ T6799] vxcan1: tx address claim with different name [ 161.798863][ T39] audit: type=1326 audit(1723341569.530:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6801 comm="syz.1.443" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f32579 code=0x0 [ 163.129907][ T11] bond0: (slave bond_slave_0): interface is now down [ 163.133675][ T11] bond0: (slave bond_slave_1): interface is now down [ 163.160295][ T84] bond0: (slave bond_slave_0): interface is now down [ 163.164707][ T84] bond0: (slave bond_slave_1): interface is now down [ 163.170764][ T84] bond0: now running without any active interface! [ 164.079668][ T6833] input: syz0 as /devices/virtual/input/input14 [ 165.082912][ T5348] Bluetooth: hci3: command tx timeout [ 165.268548][ T6842] 9pnet_fd: Insufficient options for proto=fd [ 165.355371][ T1103] Bluetooth: hci4: Frame reassembly failed (-84) [ 166.903432][ T6862] Invalid ELF section name index: 0 || e_shstrndx (0) >= e_shnum (0) [ 167.403202][ T5352] Bluetooth: hci4: command 0x1003 tx timeout [ 167.403360][ T5348] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 170.634954][ T6920] 9pnet_fd: Insufficient options for proto=fd [ 170.754987][ T6917] Invalid ELF section name index: 0 || e_shstrndx (0) >= e_shnum (0) [ 170.768789][ T6922] syzkaller0: entered promiscuous mode [ 170.789259][ T6922] syzkaller0: entered allmulticast mode [ 172.766480][ T5352] Bluetooth: hci4: command 0x1003 tx timeout [ 172.769790][ T5348] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 173.758091][ T6985] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 173.885244][ T13] bond0: (slave bond_slave_0): interface is now down [ 173.911060][ T13] bond0: (slave bond_slave_1): interface is now down [ 173.933235][ T13] bond0: (slave bond_slave_0): interface is now down [ 173.936315][ T13] bond0: (slave bond_slave_1): interface is now down [ 173.948233][ T13] bond0: now running without any active interface! [ 174.731136][ T7004] 9pnet_fd: Insufficient options for proto=fd [ 174.788916][ T45] Bluetooth: hci4: Frame reassembly failed (-84) [ 174.791868][ T13] Bluetooth: hci4: Frame reassembly failed (-84) [ 175.561880][ T7023] input: syz1 as /devices/virtual/input/input15 [ 175.600644][ T7022] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.604117][ T7022] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.612103][ T7022] bridge0: left promiscuous mode [ 175.614149][ T7022] bridge0: left allmulticast mode [ 176.008008][ T59] bond0: (slave bond_slave_0): interface is now down [ 176.011316][ T59] bond0: (slave bond_slave_1): interface is now down [ 176.026650][ T59] bond0: now running without any active interface! [ 176.853270][ T4773] Bluetooth: hci4: command 0x1003 tx timeout [ 176.853309][ T5348] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 177.723062][ T5348] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 177.727212][ T5348] Bluetooth: hci0: Injecting HCI hardware error event [ 177.732189][ T4773] Bluetooth: hci0: hardware error 0x00 [ 177.973321][ T5348] Bluetooth: hci1: command tx timeout [ 178.043013][ T5422] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 178.099341][ T7054] netlink: 'syz.1.518': attribute type 1 has an invalid length. [ 178.233063][ T5422] usb 7-1: Using ep0 maxpacket: 8 [ 178.238619][ T5422] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 178.242406][ T5422] usb 7-1: config 0 has no interface number 0 [ 178.246369][ T5422] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 178.251451][ T5422] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 178.256161][ T5422] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.265030][ T5422] usb 7-1: config 0 descriptor?? [ 178.287917][ T5422] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 178.483304][ T5422] usb 7-1: USB disconnect, device number 5 [ 178.495058][ T5422] iowarrior 7-1:0.1: I/O-Warror #0 now disconnected [ 178.815465][ T7064] netlink: 28 bytes leftover after parsing attributes in process `syz.0.532'. [ 179.236117][ T7073] No source specified [ 179.282961][ T39] audit: type=1804 audit(1723341587.010:18): pid=7073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.526" name="/newroot/24/bus/file0" dev="overlay" ino=152 res=1 errno=0 [ 179.803609][ T4773] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 179.825515][ T7087] 9pnet_fd: Insufficient options for proto=fd [ 179.883166][ T45] Bluetooth: hci4: Frame reassembly failed (-84) [ 181.717971][ T7117] netlink: 32 bytes leftover after parsing attributes in process `syz.2.542'. [ 181.839156][ T7121] netlink: 28 bytes leftover after parsing attributes in process `syz.2.542'. [ 181.883077][ T4773] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 181.968933][ T39] audit: type=1326 audit(1723341589.700:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7123 comm="syz.2.543" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 181.978368][ T39] audit: type=1326 audit(1723341589.700:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7123 comm="syz.2.543" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 181.988670][ T39] audit: type=1326 audit(1723341589.720:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7123 comm="syz.2.543" exe="/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 181.999378][ T39] audit: type=1326 audit(1723341589.720:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7123 comm="syz.2.543" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 182.011215][ T39] audit: type=1326 audit(1723341589.720:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7123 comm="syz.2.543" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 182.020195][ T39] audit: type=1326 audit(1723341589.720:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7123 comm="syz.2.543" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 182.028504][ T39] audit: type=1326 audit(1723341589.720:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7123 comm="syz.2.543" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 182.049469][ T39] audit: type=1326 audit(1723341589.730:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7123 comm="syz.2.543" exe="/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 182.058856][ T39] audit: type=1326 audit(1723341589.730:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7123 comm="syz.2.543" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 182.441250][ T7131] No source specified [ 183.794879][ T7160] netlink: 'syz.1.562': attribute type 14 has an invalid length. [ 185.295843][ T7179] syzkaller0: entered promiscuous mode [ 185.298567][ T7179] syzkaller0: entered allmulticast mode [ 188.208378][ T7210] Process accounting resumed [ 189.026537][ T7236] ip6t_REJECT: ECHOREPLY is not supported [ 190.344368][ T7301] overlay: ./file0 is not a directory [ 190.465929][ T7309] netlink: 188 bytes leftover after parsing attributes in process `syz.1.580'. [ 190.470003][ T7309] netlink: 20 bytes leftover after parsing attributes in process `syz.1.580'. [ 190.486210][ T7311] syz.2.583[7311] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 190.486354][ T7311] syz.2.583[7311] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 190.503797][ T39] kauditd_printk_skb: 20 callbacks suppressed [ 190.503812][ T39] audit: type=1326 audit(1723341598.230:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7310 comm="syz.2.583" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 190.522018][ T39] audit: type=1326 audit(1723341598.240:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7310 comm="syz.2.583" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 190.531639][ T39] audit: type=1326 audit(1723341598.240:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7310 comm="syz.2.583" exe="/syz-executor" sig=0 arch=40000003 syscall=312 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 190.540394][ T39] audit: type=1326 audit(1723341598.240:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7310 comm="syz.2.583" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 190.549571][ T39] audit: type=1326 audit(1723341598.240:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7310 comm="syz.2.583" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 190.568496][ T39] audit: type=1326 audit(1723341598.240:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7310 comm="syz.2.583" exe="/syz-executor" sig=0 arch=40000003 syscall=311 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 190.579014][ T39] audit: type=1326 audit(1723341598.240:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7310 comm="syz.2.583" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa6579 code=0x7ffc0000 [ 190.662439][ T7322] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 190.666366][ T7322] IPv6: NLM_F_CREATE should be set when creating new route [ 190.669884][ T7322] IPv6: NLM_F_CREATE should be set when creating new route [ 190.693055][ T7324] netlink: 'syz.2.589': attribute type 13 has an invalid length. [ 190.734454][ T7322] netlink: 36 bytes leftover after parsing attributes in process `syz.0.587'. [ 191.178391][ T7338] netlink: 'syz.0.591': attribute type 1 has an invalid length. [ 191.483025][ T5352] Bluetooth: hci3: command 0x0406 tx timeout [ 191.483330][ T5362] Bluetooth: hci1: command 0x0406 tx timeout [ 192.416945][ T7355] Bluetooth: hci3: expected 2 bytes, got 7 bytes [ 193.931496][ T7379] netlink: 4 bytes leftover after parsing attributes in process `syz.3.605'. [ 193.934883][ T7379] netlink: 12 bytes leftover after parsing attributes in process `syz.3.605'. [ 194.035834][ T7379] netlink: 4 bytes leftover after parsing attributes in process `syz.3.605'. [ 194.088419][ T7377] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.603'. [ 194.092405][ T7377] openvswitch: netlink: Duplicate key (type 0). [ 194.600086][ T7287] team0: left allmulticast mode [ 194.602476][ T7287] team_slave_0: left allmulticast mode [ 194.607796][ T7287] team_slave_1: left allmulticast mode [ 194.610294][ T7287] team0: left promiscuous mode [ 194.612464][ T7287] team_slave_0: left promiscuous mode [ 194.617436][ T7287] team_slave_1: left promiscuous mode [ 194.623120][ T7287] bridge0: port 3(team0) entered disabled state [ 194.640420][ T7287] bridge_slave_1: left allmulticast mode [ 194.643432][ T7287] bridge_slave_1: left promiscuous mode [ 194.645994][ T7287] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.657003][ T7287] bridge_slave_0: left allmulticast mode [ 194.659545][ T7287] bridge_slave_0: left promiscuous mode [ 194.662429][ T7287] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.231288][ T7287] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 195.240643][ T7287] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 195.250750][ T7287] bond0 (unregistering): Released all slaves [ 195.492359][ T7397] input: syz0 as /devices/virtual/input/input16 [ 195.647617][ T5422] hid-generic 0000:0000:0000.0004: hidraw1: HID v0.00 Device [syz1] on syz1 [ 196.130448][ T7287] hsr_slave_0: left promiscuous mode [ 196.143361][ T7287] hsr_slave_1: left promiscuous mode [ 196.148621][ T7287] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 196.151803][ T7287] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.156827][ T7287] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.160008][ T7287] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.212060][ T7287] veth1_macvtap: left promiscuous mode [ 196.215378][ T7287] veth0_macvtap: left promiscuous mode [ 196.218035][ T7287] veth1_vlan: left promiscuous mode [ 196.220735][ T7287] veth0_vlan: left promiscuous mode [ 197.762607][ T7287] team0 (unregistering): Port device team_slave_1 removed [ 197.865210][ T7287] team0 (unregistering): Port device team_slave_0 removed [ 198.719007][ T7441] input: syz0 as /devices/virtual/input/input17 [ 198.868401][ T1283] hid-generic 0000:0000:0000.0005: hidraw1: HID v0.00 Device [syz1] on syz1 [ 199.204925][ T7447] ipt_ECN: cannot use operation on non-tcp rule [ 199.373427][ T7453] netlink: 44 bytes leftover after parsing attributes in process `syz.2.631'. [ 199.376948][ T7453] netlink: 43 bytes leftover after parsing attributes in process `syz.2.631'. [ 199.380581][ T7453] netlink: 'syz.2.631': attribute type 5 has an invalid length. [ 199.385676][ T7453] netlink: 43 bytes leftover after parsing attributes in process `syz.2.631'. [ 199.637724][ T7279] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.662045][ T1377] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.664940][ T1377] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.758832][ T7279] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.877790][ T7279] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.009916][ T7279] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.266343][ T7279] team0: left allmulticast mode [ 200.268923][ T7279] team_slave_0: left allmulticast mode [ 200.271117][ T7279] team_slave_1: left allmulticast mode [ 200.277458][ T7279] team0: left promiscuous mode [ 200.279288][ T7279] team_slave_0: left promiscuous mode [ 200.281723][ T7279] team_slave_1: left promiscuous mode [ 200.283747][ T7461] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 200.317228][ T7279] bridge0: port 3(team0) entered disabled state [ 200.321720][ T4773] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 200.327159][ T7279] bridge_slave_1: left allmulticast mode [ 200.329687][ T7279] bridge_slave_1: left promiscuous mode [ 200.329716][ T4773] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 200.339215][ T4773] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 200.345272][ T4773] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 200.345705][ T7279] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.352405][ T4773] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 200.356004][ T4773] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 200.373555][ T7279] bridge_slave_0: left allmulticast mode [ 200.380182][ T7279] bridge_slave_0: left promiscuous mode [ 200.382726][ T7279] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.184291][ T7279] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.223199][ T7279] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.230251][ T7279] bond0 (unregistering): Released all slaves [ 201.714624][ T7482] infiniband syz2: set active [ 202.120830][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 202.132042][ T7279] hsr_slave_0: left promiscuous mode [ 202.138748][ T7279] hsr_slave_1: left promiscuous mode [ 202.169948][ T7279] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.173659][ T7279] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.178528][ T7279] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.181758][ T7279] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.237367][ T7279] veth1_macvtap: left promiscuous mode [ 202.240094][ T7279] veth0_macvtap: left promiscuous mode [ 202.243673][ T7279] veth1_vlan: left promiscuous mode [ 202.246045][ T7279] veth0_vlan: left promiscuous mode [ 202.446103][ T5348] Bluetooth: hci1: command tx timeout [ 202.517464][ T7287] smc: removing ib device syz1 [ 202.544146][ T7499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.641'. [ 203.491683][ T7279] team0 (unregistering): Port device team_slave_1 removed [ 203.580709][ T7279] team0 (unregistering): Port device team_slave_0 removed [ 204.399411][ T7465] chnl_net:caif_netlink_parms(): no params data found [ 204.456474][ T7513] fuse: Bad value for 'fd' [ 204.524075][ T5348] Bluetooth: hci1: command tx timeout [ 204.624757][ T7465] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.627606][ T7465] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.630255][ T7465] bridge_slave_0: entered allmulticast mode [ 204.634954][ T7465] bridge_slave_0: entered promiscuous mode [ 204.640223][ T7465] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.645565][ T7465] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.648492][ T7465] bridge_slave_1: entered allmulticast mode [ 204.651845][ T7465] bridge_slave_1: entered promiscuous mode [ 204.759616][ T7465] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.776464][ T7465] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.853768][ T5348] Bluetooth: hci3: unexpected event for opcode 0x0060 [ 204.887557][ T7465] team0: Port device team_slave_0 added [ 204.896314][ T7465] team0: Port device team_slave_1 added [ 204.966309][ T7465] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.968861][ T7465] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.997352][ T7465] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.003959][ T7465] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.006722][ T7465] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.022943][ T7465] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.172290][ T7561] ip6erspan0: entered allmulticast mode [ 205.190313][ T7465] hsr_slave_0: entered promiscuous mode [ 205.198613][ T7465] hsr_slave_1: entered promiscuous mode [ 205.513176][ T7563] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 206.162440][ T7580] netlink: 'syz.2.664': attribute type 1 has an invalid length. [ 206.604435][ T5348] Bluetooth: hci1: command tx timeout [ 206.654778][ T7465] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 206.696602][ T7465] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 206.730447][ T7465] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 206.761697][ T7465] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 207.000380][ T7465] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.030863][ T7465] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.040683][ T7287] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.043636][ T7287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.055985][ T7279] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.059259][ T7279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.268658][ T7614] Process accounting resumed [ 207.402368][ T7465] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.441252][ T7465] veth0_vlan: entered promiscuous mode [ 207.450769][ T7465] veth1_vlan: entered promiscuous mode [ 207.501717][ T7465] veth0_macvtap: entered promiscuous mode [ 207.522399][ T7465] veth1_macvtap: entered promiscuous mode [ 207.541936][ T7465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.547774][ T7465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.552121][ T7465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.559914][ T7465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.565733][ T7465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.570505][ T7465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.578255][ T7465] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.592242][ T7465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.602382][ T7465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.613250][ T7465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.617851][ T7465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.622679][ T7465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 207.627556][ T7465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.635994][ T7465] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.649239][ T7465] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.653976][ T7465] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.657042][ T7465] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.660809][ T7465] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.741670][ T7286] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.749179][ T7286] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.790706][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.800734][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.683009][ T5348] Bluetooth: hci1: command tx timeout [ 209.117982][ T7655] infiniband syz1: set active [ 209.120780][ T7655] infiniband syz1: added ipvlan1 [ 209.147581][ T7655] RDS/IB: syz1: added [ 209.153028][ T7655] smc: adding ib device syz1 with port count 1 [ 209.155889][ T7655] smc: ib device syz1 port 1 has pnetid [ 210.295674][ T7673] netlink: 24 bytes leftover after parsing attributes in process `syz.1.675'. [ 210.310457][ T5348] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 210.572956][ T10] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 210.726047][ T7696] NILFS (nbd2): device size too small [ 210.756527][ T10] usb 6-1: config index 0 descriptor too short (expected 106, got 36) [ 210.760411][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.765020][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.769200][ T10] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 210.772696][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.779709][ T10] usb 6-1: config 0 descriptor?? [ 210.939201][ T7703] Bluetooth: MGMT ver 1.23 [ 211.249923][ T10] corsair 0003:1B1C:1B3E.0006: unknown main item tag 0x0 [ 211.255624][ T10] corsair 0003:1B1C:1B3E.0006: unknown main item tag 0x0 [ 211.259696][ T10] corsair 0003:1B1C:1B3E.0006: unknown main item tag 0x0 [ 211.265890][ T10] corsair 0003:1B1C:1B3E.0006: unknown main item tag 0x0 [ 211.268518][ T10] corsair 0003:1B1C:1B3E.0006: unknown main item tag 0x0 [ 211.272245][ T10] corsair 0003:1B1C:1B3E.0006: failed to start in urb: -90 [ 211.280673][ T10] corsair 0003:1B1C:1B3E.0006: hidraw1: USB HID v0.00 Device [HID 1b1c:1b3e] on usb-dummy_hcd.1-1/input0 [ 211.565914][ T1412] usb 6-1: USB disconnect, device number 10 [ 211.697782][ T7708] rtc_cmos 00:05: Alarms can be up to one day in the future [ 211.958407][ T60] rtc_cmos 00:05: Alarms can be up to one day in the future [ 211.964413][ T60] rtc_cmos 00:05: Alarms can be up to one day in the future [ 211.969100][ T60] rtc_cmos 00:05: Alarms can be up to one day in the future [ 211.974430][ T60] rtc_cmos 00:05: Alarms can be up to one day in the future [ 211.982863][ T60] rtc rtc0: __rtc_set_alarm: err=-22 [ 212.085340][ T7722] NILFS (nbd3): device size too small [ 221.570910][ T7279] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.664667][ T7279] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.746954][ T7279] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.839252][ T7279] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.974014][ T7279] bridge_slave_1: left allmulticast mode [ 221.976697][ T7279] bridge_slave_1: left promiscuous mode [ 221.980564][ T7279] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.986180][ T7279] bridge_slave_0: left allmulticast mode [ 221.988271][ T7279] bridge_slave_0: left promiscuous mode [ 221.990440][ T7279] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.317929][ T7279] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 222.324565][ T7279] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 222.329083][ T7279] bond0 (unregistering): Released all slaves [ 223.007038][ T4773] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 223.026779][ T4773] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 223.035983][ T4773] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 223.040699][ T4773] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 223.045678][ T4773] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 223.048931][ T4773] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 223.052279][ T7279] hsr_slave_0: left promiscuous mode [ 223.060680][ T7279] hsr_slave_1: left promiscuous mode [ 223.065067][ T7279] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.068190][ T7279] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.072514][ T7279] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.076222][ T7279] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.115632][ T7279] veth1_macvtap: left promiscuous mode [ 223.118209][ T7279] veth0_macvtap: left promiscuous mode [ 223.120720][ T7279] veth1_vlan: left promiscuous mode [ 223.126871][ T7279] veth0_vlan: left promiscuous mode [ 223.351559][ T5348] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 223.358912][ T5348] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 223.365191][ T5348] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 223.377283][ T5348] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 223.381407][ T5348] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 223.384694][ T5348] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 224.284146][ T7279] team0 (unregistering): Port device team_slave_1 removed [ 224.387562][ T7279] team0 (unregistering): Port device team_slave_0 removed [ 225.082975][ T4773] Bluetooth: hci0: command tx timeout [ 225.482901][ T4773] Bluetooth: hci3: command tx timeout [ 225.579554][ T7775] 9pnet: Could not find request transport: fdrfdno=0x000000000000000d [ 225.861956][ T7279] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.882078][ T7759] chnl_net:caif_netlink_parms(): no params data found [ 225.916305][ T7801] netlink: 40 bytes leftover after parsing attributes in process `syz.1.713'. [ 226.005621][ T7279] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.058560][ T7811] netlink: 4 bytes leftover after parsing attributes in process `syz.0.717'. [ 226.118651][ T7279] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.131558][ T7811] netlink: 24 bytes leftover after parsing attributes in process `syz.0.717'. [ 226.191187][ T7759] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.195722][ T7759] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.199977][ T7759] bridge_slave_0: entered allmulticast mode [ 226.207855][ T7759] bridge_slave_0: entered promiscuous mode [ 226.224198][ T7814] netlink: 4 bytes leftover after parsing attributes in process `syz.0.717'. [ 226.263082][ T7279] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.284758][ T7759] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.288137][ T7759] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.291389][ T7759] bridge_slave_1: entered allmulticast mode [ 226.304510][ T7759] bridge_slave_1: entered promiscuous mode [ 226.444023][ T7759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.452683][ T7759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.615217][ T7759] team0: Port device team_slave_0 added [ 226.628845][ T7759] team0: Port device team_slave_1 added [ 226.709726][ T7748] chnl_net:caif_netlink_parms(): no params data found [ 226.765422][ T7279] bridge_slave_1: left allmulticast mode [ 226.767803][ T7279] bridge_slave_1: left promiscuous mode [ 226.770425][ T7279] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.778146][ T7279] bridge_slave_0: left allmulticast mode [ 226.780788][ T7279] bridge_slave_0: left promiscuous mode [ 226.783865][ T7279] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.137143][ T7279] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 227.147964][ T7279] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 227.154596][ T7279] bond0 (unregistering): Released all slaves [ 227.162942][ T4773] Bluetooth: hci0: command tx timeout [ 227.164429][ T7279] bond1 (unregistering): Released all slaves [ 227.197454][ T7759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.200678][ T7759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.211939][ T7759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.283089][ T7759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.285892][ T7759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.297592][ T7759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.453290][ T7759] hsr_slave_0: entered promiscuous mode [ 227.456955][ T7759] hsr_slave_1: entered promiscuous mode [ 227.470909][ T7759] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.473674][ T7759] Cannot create hsr debugfs directory [ 227.497713][ T7748] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.500133][ T7748] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.502738][ T7748] bridge_slave_0: entered allmulticast mode [ 227.508470][ T7748] bridge_slave_0: entered promiscuous mode [ 227.537428][ T7748] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.540545][ T7748] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.543649][ T7748] bridge_slave_1: entered allmulticast mode [ 227.546498][ T7748] bridge_slave_1: entered promiscuous mode [ 227.562989][ T4773] Bluetooth: hci3: command tx timeout [ 227.654637][ T7748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.711936][ T7748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.882601][ T7748] team0: Port device team_slave_0 added [ 227.897156][ T7748] team0: Port device team_slave_1 added [ 228.112880][ T7279] hsr_slave_0: left promiscuous mode [ 228.116073][ T7279] hsr_slave_1: left promiscuous mode [ 228.123111][ T7279] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.126370][ T7279] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.131142][ T7279] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.137125][ T7279] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.175623][ T7279] veth1_macvtap: left promiscuous mode [ 228.177603][ T7279] veth0_macvtap: left promiscuous mode [ 228.179967][ T7279] veth1_vlan: left promiscuous mode [ 228.182351][ T7279] veth0_vlan: left promiscuous mode [ 228.202353][ T7279] infiniband syz1: set down [ 228.467026][ T11] smc: removing ib device syz1 [ 228.932303][ T7850] fuse: Bad value for 'fd' [ 228.949805][ T7850] NILFS (nbd0): device size too small [ 229.128724][ T7279] team0 (unregistering): Port device team_slave_1 removed [ 229.230500][ T7279] team0 (unregistering): Port device team_slave_0 removed [ 229.247147][ T4773] Bluetooth: hci0: command tx timeout [ 229.653323][ T4773] Bluetooth: hci3: command tx timeout [ 229.978627][ T7748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.986942][ T7748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.998969][ T7748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.009710][ T7748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.013384][ T7748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.029898][ T7748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.037563][ T10] ================================================================== [ 230.041123][ T10] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x14d/0x160 [ 230.045028][ T10] Read of size 8 at addr ffff888048250308 by task kworker/0:1/10 [ 230.050157][ T10] [ 230.051772][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted 6.11.0-rc2-syzkaller-00257-g5189dafa4cf9 #0 [ 230.056291][ T10] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 230.060816][ T10] Workqueue: events smc_ib_port_event_work [ 230.063256][ T10] Call Trace: [ 230.064824][ T10] [ 230.066113][ T10] dump_stack_lvl+0x116/0x1f0 [ 230.068127][ T10] print_report+0xc3/0x620 [ 230.069936][ T10] ? __virt_addr_valid+0x5e/0x590 [ 230.071864][ T10] ? __phys_addr+0xc6/0x150 [ 230.073609][ T10] kasan_report+0xd9/0x110 [ 230.075315][ T10] ? __ethtool_get_link_ksettings+0x14d/0x160 [ 230.077825][ T10] ? __ethtool_get_link_ksettings+0x14d/0x160 [ 230.080483][ T10] __ethtool_get_link_ksettings+0x14d/0x160 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 230.083045][ T10] __ethtool_get_link_ksettings+0xd5/0x160 [ 230.085716][ T10] ib_get_eth_speed+0x123/0xb50 [ 230.087697][ T10] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 230.090044][ T10] ? __pfx___lock_acquire+0x10/0x10 [ 230.092334][ T10] rxe_query_port+0x72/0x200 [ 230.094382][ T10] ib_query_port+0x447/0x8b0 [ 230.096399][ T10] smc_ib_port_event_work+0x12c/0xba0 [ 230.098705][ T10] process_one_work+0x958/0x1ad0 [ 230.101018][ T10] ? __pfx_lock_acquire+0x10/0x10 [ 230.103174][ T10] ? __pfx_process_one_work+0x10/0x10 [ 230.105590][ T10] ? assign_work+0x1a0/0x250 [ 230.107610][ T10] worker_thread+0x6c8/0xf20 [ 230.109664][ T10] ? __pfx_worker_thread+0x10/0x10 [ 230.111909][ T10] kthread+0x2c1/0x3a0 [ 230.113679][ T10] ? _raw_spin_unlock_irq+0x23/0x50 [ 230.115901][ T10] ? __pfx_kthread+0x10/0x10 [ 230.117941][ T10] ret_from_fork+0x45/0x80 [ 230.119931][ T10] ? __pfx_kthread+0x10/0x10 [ 230.121966][ T10] ret_from_fork_asm+0x1a/0x30 [ 230.124090][ T10] [ 230.125463][ T10] [ 230.126525][ T10] Allocated by task 5358: [ 230.128323][ T10] kasan_save_stack+0x33/0x60 [ 230.130402][ T10] kasan_save_track+0x14/0x30 [ 230.132275][ T10] __kasan_kmalloc+0xaa/0xb0 [ 230.133873][ T10] __kmalloc_node_noprof+0x211/0x440 [ 230.135639][ T10] __kvmalloc_node_noprof+0x9d/0x1a0 [ 230.137423][ T10] alloc_netdev_mqs+0xc9/0x1290 [ 230.139067][ T10] rtnl_create_link+0xbed/0xf10 [ 230.140734][ T10] __rtnl_newlink+0x10b3/0x1960 [ 230.142659][ T10] rtnl_newlink+0x67/0xa0 [ 230.144467][ T10] rtnetlink_rcv_msg+0x3c7/0xea0 [ 230.146526][ T10] netlink_rcv_skb+0x165/0x410 [ 230.148547][ T10] netlink_unicast+0x544/0x830 [ 230.150594][ T10] netlink_sendmsg+0x8b8/0xd70 [ 230.152469][ T10] __sys_sendto+0x47f/0x4e0 [ 230.154229][ T10] __do_compat_sys_socketcall+0x5e2/0x700 [ 230.156455][ T10] __do_fast_syscall_32+0x73/0x120 [ 230.158483][ T10] do_fast_syscall_32+0x32/0x80 [ 230.160251][ T10] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 230.162894][ T10] [ 230.163731][ T10] Freed by task 7279: [ 230.165361][ T10] kasan_save_stack+0x33/0x60 [ 230.167412][ T10] kasan_save_track+0x14/0x30 [ 230.169205][ T10] kasan_save_free_info+0x3b/0x60 [ 230.170921][ T10] poison_slab_object+0xf7/0x160 [ 230.172562][ T10] __kasan_slab_free+0x32/0x50 [ 230.174617][ T10] kfree+0x12a/0x3b0 [ 230.176195][ T10] kvfree+0x47/0x50 [ 230.177502][ T10] device_release+0xa1/0x240 [ 230.179389][ T10] kobject_put+0x1fa/0x5b0 [ 230.181315][ T10] netdev_run_todo+0x7bc/0x12d0 [ 230.182999][ T10] default_device_exit_batch+0x736/0x9b0 [ 230.185099][ T10] ops_exit_list+0x128/0x180 [ 230.187078][ T10] cleanup_net+0x5b7/0xbf0 [ 230.188780][ T10] process_one_work+0x958/0x1ad0 [ 230.190340][ T10] worker_thread+0x6c8/0xf20 [ 230.192174][ T10] kthread+0x2c1/0x3a0 [ 230.193892][ T10] ret_from_fork+0x45/0x80 [ 230.195619][ T10] ret_from_fork_asm+0x1a/0x30 [ 230.197490][ T10] [ 230.198333][ T10] The buggy address belongs to the object at ffff888048250000 [ 230.198333][ T10] which belongs to the cache kmalloc-cg-4k of size 4096 [ 230.203299][ T10] The buggy address is located 776 bytes inside of [ 230.203299][ T10] freed 4096-byte region [ffff888048250000, ffff888048251000) [ 230.208243][ T10] [ 230.209069][ T10] The buggy address belongs to the physical page: [ 230.211452][ T10] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x48250 [ 230.214848][ T10] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 230.218143][ T10] flags: 0x4fff00000000040(head|node=1|zone=1|lastcpupid=0x7ff) [ 230.220929][ T10] page_type: 0xfdffffff(slab) [ 230.222713][ T10] raw: 04fff00000000040 ffff888015850280 dead000000000122 0000000000000000 [ 230.225975][ T10] raw: 0000000000000000 0000000000040004 00000001fdffffff 0000000000000000 [ 230.229091][ T10] head: 04fff00000000040 ffff888015850280 dead000000000122 0000000000000000 [ 230.232687][ T10] head: 0000000000000000 0000000000040004 00000001fdffffff 0000000000000000 [ 230.236184][ T10] head: 04fff00000000003 ffffea0001209401 ffffffffffffffff 0000000000000000 [ 230.239093][ T10] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 230.242502][ T10] page dumped because: kasan: bad access detected [ 230.244814][ T10] page_owner tracks the page as allocated [ 230.246874][ T10] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd60c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_RETRY_MAYFAIL|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5358, tgid 5358 (syz-executor), ts 68806191405, free_ts 68736118457 [ 230.255248][ T10] post_alloc_hook+0x2d1/0x350 [ 230.256895][ T10] get_page_from_freelist+0x1351/0x2e50 [ 230.258802][ T10] __alloc_pages_noprof+0x22b/0x2460 [ 230.260893][ T10] alloc_slab_page+0x4e/0xf0 [ 230.262714][ T10] new_slab+0x84/0x260 [ 230.264392][ T10] ___slab_alloc+0xdac/0x1870 [ 230.266347][ T10] __slab_alloc.constprop.0+0x56/0xb0 [ 230.268550][ T10] __kmalloc_node_noprof+0x367/0x440 [ 230.270709][ T10] __kvmalloc_node_noprof+0x9d/0x1a0 [ 230.272467][ T10] alloc_netdev_mqs+0xc9/0x1290 [ 230.274494][ T10] rtnl_create_link+0xbed/0xf10 [ 230.276663][ T10] __rtnl_newlink+0x10b3/0x1960 [ 230.278549][ T10] rtnl_newlink+0x67/0xa0 [ 230.280357][ T10] rtnetlink_rcv_msg+0x3c7/0xea0 [ 230.282424][ T10] netlink_rcv_skb+0x165/0x410 [ 230.284414][ T10] netlink_unicast+0x544/0x830 [ 230.286557][ T10] page last free pid 5346 tgid 5346 stack trace: [ 230.289136][ T10] free_unref_page+0x64a/0xe40 [ 230.291013][ T10] __put_partials+0x14c/0x170 [ 230.293040][ T10] qlist_free_all+0x4e/0x140 [ 230.295012][ T10] kasan_quarantine_reduce+0x192/0x1e0 [ 230.297133][ T10] __kasan_slab_alloc+0x69/0x90 [ 230.298939][ T10] __kmalloc_cache_noprof+0x11e/0x310 [ 230.300931][ T10] kobject_uevent_env+0x265/0x1670 [ 230.303106][ T10] __kobject_del+0x168/0x1f0 [ 230.304801][ T10] kobject_put+0x31c/0x5b0 [ 230.306332][ T10] net_rx_queue_update_kobjects+0x478/0x5f0 [ 230.308443][ T10] netif_set_real_num_rx_queues+0x169/0x210 [ 230.310540][ T10] veth_init_queues+0x151/0x190 [ 230.312352][ T10] veth_newlink+0x546/0xa10 [ 230.314241][ T10] __rtnl_newlink+0x119c/0x1960 [ 230.316215][ T10] rtnl_newlink+0x67/0xa0 [ 230.317862][ T10] rtnetlink_rcv_msg+0x3c7/0xea0 [ 230.319683][ T10] [ 230.320686][ T10] Memory state around the buggy address: [ 230.323041][ T10] ffff888048250200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 230.326408][ T10] ffff888048250280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 230.329746][ T10] >ffff888048250300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 230.332445][ T10] ^ [ 230.334142][ T10] ffff888048250380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 230.337568][ T10] ffff888048250400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 230.340258][ T10] ================================================================== [ 230.349295][ T10] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 230.352124][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted 6.11.0-rc2-syzkaller-00257-g5189dafa4cf9 #0 [ 230.355778][ T10] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 230.359567][ T10] Workqueue: events smc_ib_port_event_work [ 230.361676][ T10] Call Trace: [ 230.362844][ T10] [ 230.363892][ T10] dump_stack_lvl+0x3d/0x1f0 [ 230.365548][ T10] panic+0x6f5/0x7a0 [ 230.366929][ T10] ? __pfx_panic+0x10/0x10 [ 230.368318][ T10] ? irqentry_exit+0x3b/0x90 [ 230.369937][ T10] ? lockdep_hardirqs_on+0x7c/0x110 [ 230.371843][ T10] ? preempt_schedule_thunk+0x1a/0x30 [ 230.373660][ T10] ? preempt_schedule_common+0x44/0xc0 [ 230.375944][ T10] ? check_panic_on_warn+0x1f/0xb0 [ 230.377959][ T10] check_panic_on_warn+0xab/0xb0 [ 230.379748][ T10] end_report+0x117/0x180 [ 230.381690][ T10] kasan_report+0xe9/0x110 [ 230.383597][ T10] ? __ethtool_get_link_ksettings+0x14d/0x160 [ 230.385655][ T10] ? __ethtool_get_link_ksettings+0x14d/0x160 [ 230.387675][ T10] __ethtool_get_link_ksettings+0x14d/0x160 [ 230.389731][ T10] __ethtool_get_link_ksettings+0xd5/0x160 [ 230.392046][ T10] ib_get_eth_speed+0x123/0xb50 [ 230.393723][ T10] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 230.395542][ T10] ? __pfx___lock_acquire+0x10/0x10 [ 230.397368][ T10] rxe_query_port+0x72/0x200 [ 230.399121][ T10] ib_query_port+0x447/0x8b0 [ 230.400943][ T10] smc_ib_port_event_work+0x12c/0xba0 [ 230.403058][ T10] process_one_work+0x958/0x1ad0 [ 230.405023][ T10] ? __pfx_lock_acquire+0x10/0x10 [ 230.406583][ T10] ? __pfx_process_one_work+0x10/0x10 [ 230.408175][ T10] ? assign_work+0x1a0/0x250 [ 230.409761][ T10] worker_thread+0x6c8/0xf20 [ 230.411512][ T10] ? __pfx_worker_thread+0x10/0x10 [ 230.413634][ T10] kthread+0x2c1/0x3a0 [ 230.415059][ T10] ? _raw_spin_unlock_irq+0x23/0x50 [ 230.416845][ T10] ? __pfx_kthread+0x10/0x10 [ 230.418549][ T10] ret_from_fork+0x45/0x80 [ 230.420488][ T10] ? __pfx_kthread+0x10/0x10 [ 230.422574][ T10] ret_from_fork_asm+0x1a/0x30 [ 230.424256][ T10] [ 230.426110][ T10] Kernel Offset: disabled [ 230.427587][ T10] Rebooting in 86400 seconds.. VM DIAGNOSIS: 02:00:38 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff84fa7735 RDI=ffffffff9511e340 RBP=ffffffff9511e300 RSP=ffffc900003c7510 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000020 R14=ffffffff84fa76d0 R15=0000000000000000 RIP=ffffffff84fa775f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c000000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f99e2e0c683 CR3=0000000056da8000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000080000001 RBX=0000000000000001 RCX=dffffc0000000000 RDX=ffff88801b658000 RSI=ffffffff8183b7fa RDI=ffff888028982000 RBP=0000000000000001 RSP=ffffc900020171f0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffff888028982000 R13=ffff8880126b9040 R14=00000000fffffffb R15=000000000002d560 RIP=ffffffff818b226b RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c100000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffc19174d28 CR3=000000001d50a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000004080 Opmask01=0000000000000000 Opmask02=000000000000ffdf Opmask03=2040000404420020 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055610b403f30 000055610b4038a0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000ff000000ff00 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000ff00 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2ab66da3d370e12d 737326172e232edb ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737373737142 7373737373737373 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001e1 0000000000000000 44455a494c414954 494e495f43455355 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6f742079617272 6120656c75722079 7261726f706d6574 002a3f005b3f2a00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a4a51055c445757 440540495057055c 5744574a55484051 000f1a005b1a0f00 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 000055610b406060 0000000000000051 00302d78742f7300 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001e1 0000000033003131 6c6c696b66722f35 7968702f31313230 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff00000001 000055610b3f8910 0000000000000211 0000003177617264 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 264c383a3a264f38 3a3a264e383a3a26 49383a3a2648383a 3a2633383a3a2632 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692054524f50202c 2064696c61696d20 0070253a20252054 524f504d49005452 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692020520050202c 2025204f504d4900 0061253a20252000 2527204d49005452 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000080000000 RBX=ffffc90003a9f2e8 RCX=ffffffff813c877c RDX=ffff88801ee18000 RSI=0000000000000000 RDI=0000000000000005 RBP=0000000000000001 RSP=ffffc90003a9f2b8 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffc90003a9f2e8 R13=ffffffff8176d990 R14=ffffc90003a9f3a8 R15=ffff88801ee18000 RIP=ffffffff818b22ec RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c200000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f306797aba8 CR3=0000000026dfc000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff81d49f1c RDX=ffff88801c4e4880 RSI=ffffffff81e10770 RDI=0000000000000005 RBP=0000000000002b86 RSP=ffffc90003db7868 R8 =0000000000000005 R9 =0000000000000000 R10=0000000080000000 R11=0000000000000000 R12=ffffea0000aeb600 R13=0000000000000000 R14=0000000000002b85 R15=0000000000000003 RIP=ffffffff818b2230 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f5c85db4d00 ffffffff 00c00000 GS =0000 ffff88802c300000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055c036a1d000 CR3=0000000029860000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=1299640312996403 1299640312996403 1299640312996403 1299640312996403 1299640312996403 1299640312996403 1299640312996403 1299640312996403 ZMM22=0c35f2060c35f206 0c35f2060c35f206 0c35f2060c35f206 0c35f2060c35f206 0c35f2060c35f206 0c35f2060c35f206 0c35f2060c35f206 0c35f2060c35f206 ZMM23=0493e55c0493e55c 0493e55c0493e55c 0493e55c0493e55c 0493e55c0493e55c 0493e55c0493e55c 0493e55c0493e55c 0493e55c0493e55c 0493e55c0493e55c ZMM24=4a2da5514a2da551 4a2da5514a2da551 4a2da5514a2da551 4a2da5514a2da551 4a2da5514a2da551 4a2da5514a2da551 4a2da5514a2da551 4a2da5514a2da551 ZMM25=60f67ed760f67ed7 60f67ed760f67ed7 60f67ed760f67ed7 60f67ed760f67ed7 60f67ed760f67ed7 60f67ed760f67ed7 60f67ed760f67ed7 60f67ed760f67ed7 ZMM26=8772fbad8772fbad 8772fbad8772fbad 8772fbad8772fbad 8772fbad8772fbad 8772fbad8772fbad 8772fbad8772fbad 8772fbad8772fbad 8772fbad8772fbad ZMM27=353ff4e7353ff4e7 353ff4e7353ff4e7 353ff4e7353ff4e7 353ff4e7353ff4e7 353ff4e7353ff4e7 353ff4e7353ff4e7 353ff4e7353ff4e7 353ff4e7353ff4e7 ZMM28=000000300000002f 0000002e0000002d 0000002c0000002b 0000002a00000029 0000002800000027 0000002600000025 0000002400000023 0000002200000021 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=3308000033080000 3308000033080000 3308000033080000 3308000033080000 3308000033080000 3308000033080000 3308000033080000 3308000033080000