last executing test programs: 36.744444197s ago: executing program 3 (id=107): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=@newsa={0x138, 0x10, 0xd, 0xfffffffe, 0x0, {{@in6=@local, @in6=@empty}, {@in=@local, 0x0, 0x6c}, @in6=@mcast2, {0x0, 0x40000, 0xfffffffffffffa32, 0x0, 0x251c, 0x3}, {0x0, 0x0, 0x20}, {}, 0x80, 0x3502, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 36.384680857s ago: executing program 3 (id=108): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$notify(r0, 0x402, 0x80000010) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fcntl$notify(r1, 0x402, 0x29) readv(r0, 0x0, 0x0) 36.012921635s ago: executing program 3 (id=110): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000000c0)='sched_process_wait\x00', r0}, 0x18) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@ifindex, 0x11, 0x0, 0x4, &(0x7f0000000240)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 35.374282378s ago: executing program 3 (id=115): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) mount$bind(&(0x7f00000001c0)='.\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x905891, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x212f4d1, 0x0) mount$9p_xen(0x0, &(0x7f0000000200)='./file0/file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) 35.087477651s ago: executing program 3 (id=120): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000280)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fc00101}]}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000680)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000340)) ppoll(&(0x7f0000000000)=[{r0, 0x8020}], 0x1, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000300)={r1}) 34.398043777s ago: executing program 3 (id=126): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00007fd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00008d7000/0x2000)=nil) madvise(&(0x7f00003c1000/0x1000)=nil, 0xdfc3efff, 0x14) 34.261742639s ago: executing program 32 (id=126): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00007fd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00008d7000/0x2000)=nil) madvise(&(0x7f00003c1000/0x1000)=nil, 0xdfc3efff, 0x14) 6.258224008s ago: executing program 2 (id=311): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0xa0, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x49, 0xe, {{{}, {0xb4c}, @device_a, @device_b, @random="2d08ef617d40"}, 0x0, @default, 0x0, @val, @void, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @void, @val={0x25, 0x3, {0x0, 0x34}}, @void, @val={0x3c, 0x4, {0x1, 0x6, 0xb8, 0x4}}, @void, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_BEACON_TAIL={0x20, 0xf, [@ht={0x2d, 0x1a, {0x20, 0x2, 0x5, 0x0, {0x2, 0x2, 0x0, 0x4, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x8, 0x0, 0x2}}]}]]}, 0xa0}, 0x1, 0x0, 0x0, 0x90}, 0x0) 6.027483s ago: executing program 2 (id=315): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$9p_virtio(&(0x7f0000000440), &(0x7f0000000480)='./bus\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=virtio,mmap,cache=none,cache=loose,posixacl']) lsetxattr$system_posix_acl(&(0x7f0000000080)='./bus\x00', &(0x7f0000000200)='system.posix_acl_access\x00', 0x0, 0x0, 0x3) r0 = openat2$dir(0xffffff9c, &(0x7f0000000040)='./bus\x00', &(0x7f00000000c0)={0x220200, 0x8, 0x8}, 0x18) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', r0, &(0x7f0000000100)='./bus\x00', 0x1) 5.775975313s ago: executing program 2 (id=317): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r3, 0x4) sendmsg$inet(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) 5.417165292s ago: executing program 2 (id=321): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000440)='./file0\x00', &(0x7f0000000080)='./file0\x00') 5.286976047s ago: executing program 1 (id=324): r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 5.217779602s ago: executing program 2 (id=325): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$sock(r1, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000200)='N', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000002f40)="cd", 0x1}], 0x1}}], 0x2, 0x8004) 4.709209615s ago: executing program 2 (id=329): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21}, {0xa, 0x0, 0x0, @mcast2}, r3}}, 0x48) 4.313402805s ago: executing program 33 (id=329): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0xa, 0x0, 0x0, @mcast2}, r1}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0x2, 0x4e21}, {0xa, 0x0, 0x0, @mcast2}, r3}}, 0x48) 3.044262298s ago: executing program 4 (id=333): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="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"/296], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x7300, 0x4000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x4}, 0x28) 2.639834319s ago: executing program 4 (id=335): syz_open_dev$loop(&(0x7f00000001c0), 0x75d, 0x185382) r0 = syz_io_uring_setup(0x5169, &(0x7f0000000200)={0x0, 0xffffffff, 0x10101}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x5e2, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r0, 0xb15, 0x0, 0x0, 0x0, 0x0) 2.459304751s ago: executing program 1 (id=337): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r3, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0003000000080026000816"], 0x40}}, 0x0) 2.354443035s ago: executing program 0 (id=338): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) accept4(r0, 0x0, 0x0, 0x0) 2.327387502s ago: executing program 4 (id=339): socket$vsock_stream(0x28, 0x1, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000002480)=[{&(0x7f0000000480)="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", 0x5d5}], 0x1}}], 0x1, 0x0) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) recvmmsg(r0, &(0x7f0000000e80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 2.192030356s ago: executing program 4 (id=340): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = creat(&(0x7f0000000100)='./file0\x00', 0x0) close(r2) ioctl$EXT4_IOC_MIGRATE(r1, 0xff09) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) 2.113711284s ago: executing program 0 (id=341): r0 = mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x20, &(0x7f0000000100)={0xb6, 0x1, 0x9, 0xfffffffffffffffa}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sysvipc/shm\x00', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x20100000, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) mq_timedreceive(r0, &(0x7f0000000340)=""/221, 0xdd, 0x0, 0x0) 2.111670886s ago: executing program 1 (id=342): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, 0x0, &(0x7f0000000080)) 1.883573888s ago: executing program 0 (id=343): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0x0) pipe2$watch_queue(&(0x7f0000000080)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r2, 0x91) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r1, 0xffffffffffffffff) 1.883154593s ago: executing program 4 (id=344): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000073000000850000002a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) r1 = socket(0x11, 0x2, 0x0) setsockopt(r1, 0x107, 0x1, &(0x7f00000001c0)="010000000000060000071a80010061cc", 0x10) 1.835008843s ago: executing program 1 (id=345): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000000c0)={0x32b, @tick=0x20000180}) 1.697792016s ago: executing program 0 (id=346): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='veno\x00', 0x5) shutdown(r0, 0x1) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2, 0x80000000}, 0x1c) 1.643624103s ago: executing program 0 (id=347): sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xffffffffffffffbb, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="00010000", @ANYRES16, @ANYBLOB="c88845e7e05ae52d00009300000008003117"], 0x1c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @private0}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) 1.047195795s ago: executing program 1 (id=348): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s\x92ync_\x00le\xf4H.\xab%nN\xd4\xa2\x88\x00\xd1l,\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000000300)=""/104, 0x68) getdents(r1, &(0x7f0000001fc0)=""/182, 0xb6) 912.15592ms ago: executing program 1 (id=349): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/net\x00') 237.644429ms ago: executing program 0 (id=350): r0 = memfd_create(&(0x7f0000000280)='%\x00', 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x200000f, 0x4002012, r0, 0x0) r1 = io_uring_setup(0x3eae, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) migrate_pages(0x0, 0x3, &(0x7f00000002c0)=0x7f, &(0x7f0000000300)=0xa) 0s ago: executing program 4 (id=351): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x40046207, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000000)={0x8, 0x0, &(0x7f00000003c0)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x10, 0x0, &(0x7f00000002c0)=[@request_death={0x400c6313}], 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:20308' (ED25519) to the list of known hosts. syzkaller login: [ 97.173930][ T5972] cgroup: Unknown subsys name 'net' [ 97.357016][ T5972] cgroup: Unknown subsys name 'cpuset' [ 97.362712][ T5972] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 99.383144][ T5972] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 109.217959][ T833] cfg80211: failed to load regulatory.db [ 109.757195][ T68] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 109.765359][ T5988] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 109.770223][ T5988] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 109.771717][ T5989] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 109.775022][ T5988] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 109.779262][ T5989] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 109.784181][ T68] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 109.801078][ T5989] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 109.807884][ T5989] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 109.807970][ T68] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 109.816638][ T5989] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 109.818624][ T5989] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 109.818988][ T5989] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 109.819718][ T5989] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 109.823178][ T5989] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 109.828920][ T5985] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 109.829658][ T5985] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 109.830147][ T5985] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 109.846943][ T5989] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 109.858185][ T5985] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 109.861292][ T5989] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 109.892270][ T68] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 109.955219][ T68] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 109.960037][ T68] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 110.424692][ T5983] chnl_net:caif_netlink_parms(): no params data found [ 110.587161][ T5982] chnl_net:caif_netlink_parms(): no params data found [ 110.683154][ T5991] chnl_net:caif_netlink_parms(): no params data found [ 110.756269][ T5990] chnl_net:caif_netlink_parms(): no params data found [ 110.777508][ T5983] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.784128][ T5983] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.788248][ T5983] bridge_slave_0: entered allmulticast mode [ 110.791646][ T5983] bridge_slave_0: entered promiscuous mode [ 110.814043][ T5983] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.817770][ T5983] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.824686][ T5983] bridge_slave_1: entered allmulticast mode [ 110.830258][ T5983] bridge_slave_1: entered promiscuous mode [ 111.052758][ T5982] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.054992][ T5982] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.057387][ T5982] bridge_slave_0: entered allmulticast mode [ 111.062802][ T5982] bridge_slave_0: entered promiscuous mode [ 111.067412][ T5982] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.079852][ T5982] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.082117][ T5982] bridge_slave_1: entered allmulticast mode [ 111.084805][ T5982] bridge_slave_1: entered promiscuous mode [ 111.091029][ T5983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.213780][ T5983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.321068][ T5982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.417252][ T5991] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.421118][ T5991] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.424198][ T5991] bridge_slave_0: entered allmulticast mode [ 111.435106][ T5991] bridge_slave_0: entered promiscuous mode [ 111.440692][ T5991] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.444536][ T5991] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.448264][ T5991] bridge_slave_1: entered allmulticast mode [ 111.452401][ T5991] bridge_slave_1: entered promiscuous mode [ 111.457992][ T5982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.498081][ T5983] team0: Port device team_slave_0 added [ 111.560163][ T5983] team0: Port device team_slave_1 added [ 111.674382][ T5991] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.707087][ T5990] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.709732][ T5990] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.712681][ T5990] bridge_slave_0: entered allmulticast mode [ 111.723677][ T5990] bridge_slave_0: entered promiscuous mode [ 111.749958][ T5983] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.753616][ T5983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.769127][ T5983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.776833][ T5991] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.825931][ T5982] team0: Port device team_slave_0 added [ 111.831259][ T5990] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.833774][ T5990] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.836658][ T5990] bridge_slave_1: entered allmulticast mode [ 111.841058][ T5990] bridge_slave_1: entered promiscuous mode [ 111.846026][ T5983] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.848479][ T5983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.873870][ T5983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.911979][ T5992] Bluetooth: hci1: command tx timeout [ 111.914473][ T5992] Bluetooth: hci3: command tx timeout [ 111.917213][ T68] Bluetooth: hci0: command tx timeout [ 111.951610][ T5991] team0: Port device team_slave_0 added [ 111.955983][ T5991] team0: Port device team_slave_1 added [ 111.962932][ T5982] team0: Port device team_slave_1 added [ 111.998975][ T68] Bluetooth: hci2: command tx timeout [ 112.147388][ T5990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.152523][ T5990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.219106][ T5991] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.223641][ T5991] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.238702][ T5991] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.258299][ T5982] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.264735][ T5982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.306078][ T5982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.318838][ T5982] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.321339][ T5982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.348922][ T5982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.466430][ T5983] hsr_slave_0: entered promiscuous mode [ 112.501011][ T5983] hsr_slave_1: entered promiscuous mode [ 112.505562][ T5991] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.508442][ T5991] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.529950][ T5991] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.584485][ T5982] hsr_slave_0: entered promiscuous mode [ 112.587644][ T5982] hsr_slave_1: entered promiscuous mode [ 112.597539][ T5982] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.603120][ T5982] Cannot create hsr debugfs directory [ 112.734893][ T5990] team0: Port device team_slave_0 added [ 112.739452][ T5990] team0: Port device team_slave_1 added [ 113.181727][ T5991] hsr_slave_0: entered promiscuous mode [ 113.186637][ T5991] hsr_slave_1: entered promiscuous mode [ 113.198651][ T5991] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 113.209599][ T5991] Cannot create hsr debugfs directory [ 113.274362][ T5990] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.277794][ T5990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.292958][ T5990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.340857][ T5990] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.343589][ T5990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.357895][ T5990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.604661][ T5990] hsr_slave_0: entered promiscuous mode [ 113.608476][ T5990] hsr_slave_1: entered promiscuous mode [ 113.615629][ T5990] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 113.637840][ T5990] Cannot create hsr debugfs directory [ 113.834799][ T5983] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 113.846003][ T5983] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 113.917933][ T5983] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 113.973291][ T5983] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 113.989507][ T68] Bluetooth: hci0: command tx timeout [ 114.009381][ T68] Bluetooth: hci3: command tx timeout [ 114.011190][ T68] Bluetooth: hci1: command tx timeout [ 114.078917][ T5989] Bluetooth: hci2: command tx timeout [ 114.124653][ T5982] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 114.209218][ T5982] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 114.267324][ T5982] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 114.275211][ T5991] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 114.283533][ T5990] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 114.288882][ T5990] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 114.306116][ T5990] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 114.330518][ T5982] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 114.338886][ T5991] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 114.345178][ T5991] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 114.355681][ T5990] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 114.364145][ T5991] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 114.496746][ T5983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.603640][ T5983] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.648596][ T5982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.664261][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.667151][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.712887][ T5990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.723049][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.726700][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.764428][ T5982] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.831108][ T5983] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 114.834388][ T5983] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 114.872990][ T5990] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.877460][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.881735][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.896347][ T5991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.927812][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.930618][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.939968][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.943056][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.963296][ T5991] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.999813][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.002946][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.088603][ T1152] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.094907][ T1152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.105190][ T1152] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.110481][ T1152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.157977][ T5991] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 115.164502][ T5991] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 115.251274][ T5982] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 115.277872][ T5983] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.457983][ T5983] veth0_vlan: entered promiscuous mode [ 115.480143][ T5983] veth1_vlan: entered promiscuous mode [ 115.535631][ T5983] veth0_macvtap: entered promiscuous mode [ 115.542833][ T5983] veth1_macvtap: entered promiscuous mode [ 115.595603][ T5982] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.603508][ T5991] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.637324][ T5983] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.643868][ T5990] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.660182][ T5983] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.664136][ T5983] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.667371][ T5983] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.689475][ T5983] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.693934][ T5983] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.785907][ T5991] veth0_vlan: entered promiscuous mode [ 115.792309][ T5991] veth1_vlan: entered promiscuous mode [ 115.858250][ T5982] veth0_vlan: entered promiscuous mode [ 115.888374][ T5991] veth0_macvtap: entered promiscuous mode [ 116.010574][ T5982] veth1_vlan: entered promiscuous mode [ 116.044531][ T5991] veth1_macvtap: entered promiscuous mode [ 116.048274][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.052614][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.070313][ T5989] Bluetooth: hci1: command tx timeout [ 116.072924][ T5989] Bluetooth: hci3: command tx timeout [ 116.074037][ T68] Bluetooth: hci0: command tx timeout [ 116.111992][ T5990] veth0_vlan: entered promiscuous mode [ 116.133972][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.136438][ T5991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.137766][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.159802][ T5991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.160814][ T5991] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.169303][ T68] Bluetooth: hci2: command tx timeout [ 116.206590][ T5982] veth0_macvtap: entered promiscuous mode [ 116.224690][ T5991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.239333][ T5991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.246345][ T5991] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.252282][ T5990] veth1_vlan: entered promiscuous mode [ 116.305853][ T5983] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 116.334131][ T5991] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.337273][ T5991] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.340788][ T5991] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.343837][ T5991] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.369804][ T5982] veth1_macvtap: entered promiscuous mode [ 116.380318][ T5982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.384268][ T5982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.387925][ T5982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.390843][ T5982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.403055][ T5982] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.407929][ T5982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.439815][ T5982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.443275][ T5982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.454556][ T5982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.471992][ T5982] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.516457][ T5982] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.521504][ T5982] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.534534][ T5982] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.538040][ T5982] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.663087][ T6046] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET) [ 116.711987][ T5990] veth0_macvtap: entered promiscuous mode [ 116.723386][ T5990] veth1_macvtap: entered promiscuous mode [ 116.760259][ T106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.763249][ T106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.787885][ T5990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.796201][ T5990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.802929][ T5990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.814738][ T5990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.822004][ T5990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.825995][ T5990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.832146][ T5990] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.910367][ T5990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.915591][ T5990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.919615][ T5990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.939911][ T5990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.943312][ T5990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.946432][ T5990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.951197][ T5990] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.013882][ T1152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.036014][ T1152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.074449][ T5990] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.082409][ T5990] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.086631][ T5990] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.108125][ T5990] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.199058][ T1137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.203275][ T1137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.284625][ T1152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.304299][ T1152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.571384][ T1137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.591100][ T1137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.700791][ T106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.706061][ T106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.021081][ T6062] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 2304 [ 118.157873][ T68] Bluetooth: hci0: command tx timeout [ 118.164413][ T5992] Bluetooth: hci3: command tx timeout [ 118.169473][ T5989] Bluetooth: hci1: command tx timeout [ 118.234374][ T5992] Bluetooth: hci2: command tx timeout [ 118.524054][ T6070] loop2: detected capacity change from 0 to 7 [ 118.544635][ T6070] Dev loop2: unable to read RDB block 7 [ 118.547545][ T6070] loop2: unable to read partition table [ 118.555958][ T6070] loop2: partition table beyond EOD, truncated [ 118.560250][ T6070] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 119.769349][ T6116] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 119.909829][ T6106] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 119.913674][ T6106] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 119.962976][ T6121] raw_sendmsg: syz.2.23 forgot to set AF_INET. Fix it! [ 120.007748][ T6106] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 120.023345][ T6106] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 120.025832][ T6106] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 120.109570][ T6106] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 120.141936][ T6106] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 120.161514][ T6106] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 120.275439][ T6106] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 120.299716][ T6106] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 120.328550][ T6106] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 120.364864][ T6106] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 121.101381][ T6154] [U] [ 121.103244][ T6154] [U] [ 121.104876][ T6154] [U] B-lrj[ќ6}%4 h@k-YLeU@f%Peze,9F* [ 121.111531][ T6154] [U] Cw* 9JQ#esWCv1! GpX [ 121.115267][ T6154] [U] n%9C_nBc$4( [ 121.118641][ T6154] [U] h q؛toRI#TNBs_R櫰:t 0W_[Hn% [ 121.125570][ T6154] [U] 4RЛ<)6jG؃K^R\ [ 121.127774][ T6154] [U] 7R:j37 [ 121.140464][ T6154] [U] yPDyj>|h0=TXZY֦ʢĚ4i5Az~Za~k^tGsJI:OD!M2KWR>KC?x8H*@Qeۻu .j9ȓ~{`'r)-Ǭ=5֝JLy CB;+LP,fnY%3p&)][ȋ4l㶣!J> [ 121.158934][ T6154] [U] .CeJj@KJ605RxUTTO&XO\&N%y176`Iw [ 121.192968][ T6154] [U] M<@nkJ(6))Vlr [ 121.195281][ T6154] [U] >Yg z?`OmX"9+dE{$~byDUMe!xݛAAU}j2n%mbq [ 121.199787][ T6154] [U] WVw@HZ=(Ej~OS@bH:"!jIUJ=)U gԖ=y=kadr:=SaX X [ 121.221914][ T6154] [U] BIe߄}ET@3( ߥv{κ~uk+{3T$ƻ.N[8sʇ""ʔ캄]RG5 [ 121.250490][ T6154] [U] v{ըvNb>DmtQt [ 121.252585][ T6154] [U] G*|9ٺ冸 [ 121.253984][ T6154] [U] Gmiue! Tό*8a7i5-|6lk [ 121.256096][ T6154] [U] NūD  S}RbYwIoQ&O,p],7훍uI [ 121.264643][ T6154] [U] $Lu2f_3+|nWµZEP1w~N(o͝8d ScDʮf65zgR{tK"@ :5}GBdѸ\k [ 121.289471][ T6154] [U] yҟ844n<; [ 121.291631][ T6154] [U] uI7x#e4vml苬G픔A)-(N̗Nl#)׌Su6 [ 121.294707][ T6154] [U] )<E?aUܤ9 %]dCCe+L<'t1Kȅ3. wSZYϼ9i>]Ȝ}{/`5'E 41 TnAXQI t%G7l~Bs [ 121.331375][ T6154] [U]  [ 121.332786][ T6154] [U] Zu4&e~8Eσ1l{ȨGvY$PnO4M*F`ATM0?*i#;Ѥ+4vGa%H[aYx)lG]F H|zve/ϧ17笳-ǽhO+^)8&E@A8g녌-wrs-v-ұO>q#9uaH)fSA֙inz@C>kLVD^1)m$/78..qa|)9">d>e#i`\|{ufh.. eMw}]5 -,Ţrk}FqCo*pNF [ 121.385658][ T6154] [U]  [ 121.396102][ T6154] [U] T0ԝ*XAɣa4WKc]x]L= [ 121.416143][ T6154] [U] $cUGSe6tτPpZ3T2荣9W-֑aRnBڎ:^xϧB~{j [ 121.435487][ T6154] [U] TE' 2l*a -;p;Bt.n`ߐ_;*U;5C#R/QK*msa#)aB>YؐO\;^'o5_yhlce&a`;œss{h TM0Bi^l>8٢VV8<-{$>D ]wu0?k ˼[uIrb_iL/eSi*ws*zS͎ђ [ 121.444490][ T6154] [U] [ 121.467460][ T6153] [U] [ 121.605404][ T5992] Bluetooth: hci0: command 0x0c1a tx timeout [ 121.806012][ T6170] netlink: 'syz.1.42': attribute type 27 has an invalid length. [ 122.081069][ T5992] Bluetooth: hci1: command 0x0c1a tx timeout [ 122.155566][ C3] vkms_vblank_simulate: vblank timer overrun [ 122.169470][ T5992] Bluetooth: hci2: command 0x0c1a tx timeout [ 122.309125][ T5992] Bluetooth: hci3: command 0x0c1a tx timeout [ 122.425638][ C3] vkms_vblank_simulate: vblank timer overrun [ 123.104317][ T832] kernel read not supported for file /admmidi2 (pid: 832 comm: kworker/1:2) [ 123.113295][ C3] vkms_vblank_simulate: vblank timer overrun [ 123.141692][ C3] vkms_vblank_simulate: vblank timer overrun [ 123.240636][ T6210] vlan2: entered promiscuous mode [ 123.242277][ T6210] gretap0: entered promiscuous mode [ 123.243981][ T6210] vlan2: entered allmulticast mode [ 123.246087][ T6210] gretap0: entered allmulticast mode [ 123.517380][ T106] Bluetooth: hci4: Frame reassembly failed (-84) [ 123.682966][ T68] Bluetooth: hci0: command 0x0c1a tx timeout [ 123.761704][ C3] vkms_vblank_simulate: vblank timer overrun [ 124.157858][ T68] Bluetooth: hci1: command 0x0c1a tx timeout [ 124.228950][ T68] Bluetooth: hci2: command 0x0c1a tx timeout [ 124.389850][ T68] Bluetooth: hci3: command 0x0c1a tx timeout [ 124.471026][ T832] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 124.747604][ T832] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 124.779277][ T832] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.806963][ T832] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 124.811954][ T832] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 124.816457][ T832] usb 6-1: Manufacturer: syz [ 124.826196][ T832] usb 6-1: config 0 descriptor?? [ 124.948809][ T832] rc_core: IR keymap rc-hauppauge not found [ 124.964517][ T832] Registered IR keymap rc-empty [ 124.978184][ C3] vkms_vblank_simulate: vblank timer overrun [ 124.992354][ T832] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 125.036270][ T832] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input5 [ 125.154300][ T832] usb 6-1: USB disconnect, device number 2 [ 125.222703][ T6254] warning: `syz.3.74' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 125.226381][ T6254] net veth1_virt_wifi virt_wifi0: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 125.227528][ T6253] netlink: 8 bytes leftover after parsing attributes in process `syz.2.75'. [ 125.362971][ T6258] netlink: 'syz.3.76': attribute type 1 has an invalid length. [ 125.605972][ T5992] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 125.609440][ T68] Bluetooth: hci4: command 0x1003 tx timeout [ 125.698803][ T6271] 9pnet: p9_errstr2errno: server reported unknown error i# [ 125.760166][ T5992] Bluetooth: hci0: command 0x0c1a tx timeout [ 126.079128][ T6287] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 126.242066][ T5992] Bluetooth: hci1: command 0x0c1a tx timeout [ 126.288920][ T6278] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 126.319506][ T5992] Bluetooth: hci2: command 0x0c1a tx timeout [ 126.486949][ T5992] Bluetooth: hci3: command 0x0c1a tx timeout [ 126.658790][ C3] vkms_vblank_simulate: vblank timer overrun [ 126.705700][ C3] vkms_vblank_simulate: vblank timer overrun [ 126.840499][ T6310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.851200][ T6310] bond0: (slave rose0): Enslaving as an active interface with an up link [ 127.124592][ T35] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 127.240617][ T6324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.100'. [ 127.321852][ T35] usb 7-1: Using ep0 maxpacket: 8 [ 127.379743][ T35] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 127.388028][ T35] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 127.398848][ T35] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 127.414212][ T35] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 127.419500][ T35] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 127.449984][ T35] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 127.488935][ C3] vkms_vblank_simulate: vblank timer overrun [ 127.493467][ T35] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 127.497281][ T35] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 127.535822][ T35] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 127.539963][ T35] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 127.546184][ T35] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 127.549012][ T35] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 127.552317][ T35] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 127.556678][ T35] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 127.577975][ T35] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 127.635990][ T35] usb 7-1: string descriptor 0 read error: -22 [ 127.638351][ T35] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 127.648201][ T35] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.678960][ T35] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 127.825656][ C3] vkms_vblank_simulate: vblank timer overrun [ 127.959574][ T5660] usb 7-1: USB disconnect, device number 2 [ 128.210048][ C3] vkms_vblank_simulate: vblank timer overrun [ 128.265617][ T6349] netlink: 4 bytes leftover after parsing attributes in process `syz.3.107'. [ 128.375963][ T6349] netlink: 4 bytes leftover after parsing attributes in process `syz.3.107'. [ 128.602105][ C3] vkms_vblank_simulate: vblank timer overrun [ 128.693734][ C3] vkms_vblank_simulate: vblank timer overrun [ 128.841654][ C3] vkms_vblank_simulate: vblank timer overrun [ 128.911515][ C3] vkms_vblank_simulate: vblank timer overrun [ 128.982629][ C3] vkms_vblank_simulate: vblank timer overrun [ 129.061691][ C3] vkms_vblank_simulate: vblank timer overrun [ 129.101666][ C3] vkms_vblank_simulate: vblank timer overrun [ 129.229312][ T6358] TCP: request_sock_TCPv6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 129.489634][ C3] vkms_vblank_simulate: vblank timer overrun [ 129.572628][ T6369] ======================================================= [ 129.572628][ T6369] WARNING: The mand mount option has been deprecated and [ 129.572628][ T6369] and is ignored by this kernel. Remove the mand [ 129.572628][ T6369] option from the mount to silence this warning. [ 129.572628][ T6369] ======================================================= [ 129.660181][ C3] vkms_vblank_simulate: vblank timer overrun [ 129.726194][ C3] vkms_vblank_simulate: vblank timer overrun [ 130.152446][ T35] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 130.318027][ T35] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 130.326741][ T35] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 130.333463][ T35] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 130.340209][ T35] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.363223][ T6377] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 130.373676][ T35] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 130.540763][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:2. Sending cookies. [ 130.600077][ T58] usb 7-1: USB disconnect, device number 3 [ 130.726456][ T1137] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.011180][ T106] Bluetooth: hci0: Frame reassembly failed (-84) [ 131.046502][ T1137] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.081856][ T5989] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 131.094393][ T5989] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 131.112837][ T5989] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 131.133960][ T5989] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 131.140782][ T5989] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 131.144698][ T5989] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 131.283547][ T1137] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.620105][ T1137] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.985401][ T6397] chnl_net:caif_netlink_parms(): no params data found [ 132.249163][ T1137] bridge_slave_1: left allmulticast mode [ 132.268331][ T1137] bridge_slave_1: left promiscuous mode [ 132.276172][ T1137] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.361049][ T1137] bridge_slave_0: left allmulticast mode [ 132.364197][ T1137] bridge_slave_0: left promiscuous mode [ 132.367639][ T1137] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.035129][ T68] Bluetooth: hci0: command 0xfc11 tx timeout [ 133.035147][ T5992] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 133.195960][ T5992] Bluetooth: hci4: command tx timeout [ 133.354512][ T6025] kernel read not supported for file /rfkill (pid: 6025 comm: kworker/0:3) [ 133.978078][ T1137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 134.059309][ T1137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.078598][ T1137] bond0 (unregistering): Released all slaves [ 135.254233][ T6397] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.257258][ T6397] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.260389][ T6397] bridge_slave_0: entered allmulticast mode [ 135.265979][ T6397] bridge_slave_0: entered promiscuous mode [ 135.269907][ T6397] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.272706][ T6397] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.277886][ T5992] Bluetooth: hci4: command tx timeout [ 135.302008][ T6397] bridge_slave_1: entered allmulticast mode [ 135.310113][ T6397] bridge_slave_1: entered promiscuous mode [ 136.392033][ T6397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.402238][ T6397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.582578][ T6517] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:0 [ 136.670757][ T6397] team0: Port device team_slave_0 added [ 136.702048][ T6397] team0: Port device team_slave_1 added [ 136.800787][ T1137] hsr_slave_0: left promiscuous mode [ 136.841700][ T1137] hsr_slave_1: left promiscuous mode [ 136.874621][ T1137] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.879569][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.926255][ T1137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.940752][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.068542][ T1137] veth1_macvtap: left promiscuous mode [ 137.088015][ T1137] veth0_macvtap: left promiscuous mode [ 137.090342][ T1137] veth1_vlan: left promiscuous mode [ 137.092163][ T1137] veth0_vlan: left promiscuous mode [ 137.359324][ T5992] Bluetooth: hci4: command tx timeout [ 139.430426][ T5992] Bluetooth: hci4: command tx timeout [ 140.050898][ T1137] team0 (unregistering): Port device team_slave_1 removed [ 140.494749][ T1137] team0 (unregistering): Port device team_slave_0 removed [ 142.782948][ T6397] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.785550][ T6397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.812400][ T6397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.968171][ T6397] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.972443][ T6397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.029190][ T6397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.319585][ T6397] hsr_slave_0: entered promiscuous mode [ 143.324118][ T6397] hsr_slave_1: entered promiscuous mode [ 143.340018][ T6397] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 143.342433][ T6397] Cannot create hsr debugfs directory [ 143.651200][ T6556] syzkaller1: entered promiscuous mode [ 143.653228][ T6556] syzkaller1: entered allmulticast mode [ 143.848850][ T6563] input input6: cannot allocate more than FF_MAX_EFFECTS effects [ 144.155802][ T6574] netlink: 'syz.1.185': attribute type 11 has an invalid length. [ 144.218943][ T6397] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 144.281823][ T6397] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 144.385168][ T6397] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 144.412904][ T6397] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 144.517577][ C2] vkms_vblank_simulate: vblank timer overrun [ 144.674415][ C2] vkms_vblank_simulate: vblank timer overrun [ 144.703834][ T6397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.776267][ T6397] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.800193][ T1137] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.810640][ T1137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.827947][ T1137] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.845688][ T1137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.922107][ T6397] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 144.951334][ T6397] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 145.045890][ T1404] ieee802154 phy0 wpan0: encryption failed: -22 [ 145.048458][ T1404] ieee802154 phy1 wpan1: encryption failed: -22 [ 145.351873][ T6397] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.395907][ T6616] netlink: 4 bytes leftover after parsing attributes in process `syz.2.196'. [ 145.623582][ T5660] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 145.763003][ T6397] veth0_vlan: entered promiscuous mode [ 145.794423][ T6397] veth1_vlan: entered promiscuous mode [ 145.814301][ T6397] veth0_macvtap: entered promiscuous mode [ 145.842902][ T6397] veth1_macvtap: entered promiscuous mode [ 145.862945][ C2] vkms_vblank_simulate: vblank timer overrun [ 145.867078][ T5660] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.867109][ T5660] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.867136][ T5660] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 145.867157][ T5660] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.871327][ T6397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.871348][ T6397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.871357][ T6397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.871370][ T6397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.871379][ T6397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.871391][ T6397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.872296][ T6397] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.873893][ T6397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.873912][ T6397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.873922][ T6397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.873935][ T6397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.873944][ T6397] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.873954][ T6397] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.874765][ T6397] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.876736][ T6397] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.876813][ T6397] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.876842][ T6397] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.876871][ T6397] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.884469][ T5660] usb 6-1: config 0 descriptor?? [ 145.940001][ T6642] netlink: 4 bytes leftover after parsing attributes in process `syz.2.203'. [ 146.301536][ C2] vkms_vblank_simulate: vblank timer overrun [ 146.365422][ T5660] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 146.387994][ T5660] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 146.392804][ T5660] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:0D8C:0022.0002/input/input7 [ 146.434156][ T5660] cm6533_jd 0003:0D8C:0022.0002: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 146.460173][ T1152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.467670][ T1152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.556631][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.561784][ C2] vkms_vblank_simulate: vblank timer overrun [ 146.578807][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.606835][ T5660] usb 6-1: USB disconnect, device number 3 [ 147.113463][ C2] vkms_vblank_simulate: vblank timer overrun [ 147.280436][ T6669] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 147.469767][ T5768] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 147.659330][ T5768] usb 7-1: Using ep0 maxpacket: 16 [ 147.665921][ T5768] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.675837][ T5768] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.679810][ T5768] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 147.684767][ T5768] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 147.688024][ T5768] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.697501][ C2] vkms_vblank_simulate: vblank timer overrun [ 147.718271][ T5768] usb 7-1: config 0 descriptor?? [ 148.120704][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 148.198084][ T5768] input: HID 0955:7214 Haptics as /devices/virtual/input/input8 [ 148.379530][ T5768] shield 0003:0955:7214.0003: Registered Thunderstrike controller [ 148.383700][ T5768] shield 0003:0955:7214.0003: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.2-1/input0 [ 148.395159][ T6670] random: crng reseeded on system resumption [ 148.445464][ C2] vkms_vblank_simulate: vblank timer overrun [ 148.462705][ T5768] usb 7-1: USB disconnect, device number 4 [ 148.480007][ T35] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 148.497797][ C2] vkms_vblank_simulate: vblank timer overrun [ 148.581504][ C2] vkms_vblank_simulate: vblank timer overrun [ 148.581612][ T35] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 148.592626][ T35] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 148.598401][ T35] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 149.911727][ T6758] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 150.454270][ T6028] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 150.629078][ T6028] usb 5-1: Using ep0 maxpacket: 16 [ 150.809784][ T6028] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.813931][ T6028] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 150.830795][ T6028] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 150.837233][ T6781] 9pnet: p9_errstr2errno: server reported unknown error @΂ [ 150.850736][ T6783] netlink: 4 bytes leftover after parsing attributes in process `syz.4.243'. [ 150.854619][ T6028] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.929566][ T6028] usb 5-1: config 0 descriptor?? [ 151.249517][ T832] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 151.407535][ T6028] usbhid 5-1:0.0: can't add hid device: -71 [ 151.421289][ T832] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 151.424896][ T6028] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 151.474758][ T6028] usb 5-1: USB disconnect, device number 2 [ 151.497530][ T832] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 151.515987][ T832] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 151.522978][ T832] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 151.531236][ T832] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 151.536081][ T832] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.580874][ T832] usb 9-1: config 0 descriptor?? [ 151.590908][ T6785] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 151.813637][ T6798] netlink: 20 bytes leftover after parsing attributes in process `syz.2.251'. [ 152.309146][ T832] plantronics 0003:047F:FFFF.0004: unknown main item tag 0xd [ 152.315668][ T832] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 152.363843][ T832] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 152.599124][ T6025] usb 9-1: USB disconnect, device number 2 [ 153.682102][ T6834] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 154.211889][ T106] Bluetooth: (null): Invalid header checksum [ 154.229877][ T1137] Bluetooth: (null): Invalid header checksum [ 155.085636][ T6870] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 155.088988][ T6870] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 155.092623][ T6870] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 155.096329][ T6870] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 155.106101][ T6870] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 155.228518][ T6870] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 155.498887][ T6028] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 155.675779][ T6028] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.698869][ T6028] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.711338][ T6028] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 155.731948][ T6028] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 155.737164][ T6028] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.752315][ T6028] usb 6-1: config 0 descriptor?? [ 155.979486][ T6895] input: syz1 as /devices/virtual/input/input10 [ 156.189686][ T6028] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 156.241913][ T6028] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 156.254602][ T6903] netlink: 24 bytes leftover after parsing attributes in process `syz.4.293'. [ 156.264437][ T6903] netlink: 8 bytes leftover after parsing attributes in process `syz.4.293'. [ 156.274199][ T6903] netlink: 24 bytes leftover after parsing attributes in process `syz.4.293'. [ 156.293953][ T6028] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 156.372704][ T68] Bluetooth: hci1: unexpected cc 0x042d length: 63 > 7 [ 156.388298][ T68] Bluetooth: hci1: unexpected event for opcode 0x042d [ 156.533241][ T6028] usb 6-1: USB disconnect, device number 4 [ 156.985413][ C2] vkms_vblank_simulate: vblank timer overrun [ 157.228619][ T68] Bluetooth: hci4: command 0x0c1a tx timeout [ 157.239155][ T5992] Bluetooth: hci3: command 0x0c1a tx timeout [ 157.248418][ T68] Bluetooth: hci2: command 0x0c1a tx timeout [ 157.340551][ T6931] netlink: 4 bytes leftover after parsing attributes in process `syz.1.301'. [ 157.621624][ T6938] netlink: 'syz.2.303': attribute type 1 has an invalid length. [ 157.633688][ T6938] Zero length message leads to an empty skb [ 157.674228][ C2] vkms_vblank_simulate: vblank timer overrun [ 157.705410][ C2] vkms_vblank_simulate: vblank timer overrun [ 159.303381][ T5992] Bluetooth: hci4: command 0x0c1a tx timeout [ 159.569396][ C2] vkms_vblank_simulate: vblank timer overrun [ 159.637398][ C2] vkms_vblank_simulate: vblank timer overrun [ 159.879254][ C2] vkms_vblank_simulate: vblank timer overrun [ 160.064651][ T6031] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 160.071795][ C2] vkms_vblank_simulate: vblank timer overrun [ 160.102894][ T7002] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.234168][ T6031] usb 5-1: Using ep0 maxpacket: 8 [ 160.305593][ T6031] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 160.308857][ T6031] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 160.311950][ T6031] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 160.338837][ T6031] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 160.345863][ T6031] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 160.393800][ T6031] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 160.397995][ T6031] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.404710][ T5992] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 160.409989][ T5992] Bluetooth: hci1: Injecting HCI hardware error event [ 160.415554][ T5992] Bluetooth: hci1: hardware error 0x00 [ 160.525337][ C2] vkms_vblank_simulate: vblank timer overrun [ 160.641901][ T6031] usb 5-1: GET_CAPABILITIES returned 0 [ 160.660241][ T7002] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.701540][ T6031] usbtmc 5-1:16.0: can't read capabilities [ 160.836139][ C2] vkms_vblank_simulate: vblank timer overrun [ 160.843987][ T1137] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.885958][ T6031] usb 5-1: USB disconnect, device number 3 [ 160.941645][ C2] vkms_vblank_simulate: vblank timer overrun [ 161.089642][ C2] vkms_vblank_simulate: vblank timer overrun [ 161.114669][ T7002] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.126149][ T68] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 161.142366][ T68] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 161.147410][ T68] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 161.180339][ T68] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 161.205614][ T68] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 161.241399][ T68] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 161.265722][ T1137] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.339745][ T7002] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.349538][ T68] Bluetooth: hci4: command 0x0c1a tx timeout [ 161.463124][ T1137] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.689801][ C2] vkms_vblank_simulate: vblank timer overrun [ 161.749327][ C2] vkms_vblank_simulate: vblank timer overrun [ 161.885350][ C2] vkms_vblank_simulate: vblank timer overrun [ 161.904299][ T1137] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.136718][ T7002] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.158196][ T7002] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.206621][ T7002] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.291386][ T7002] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.478882][ T5992] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 162.518134][ T7026] chnl_net:caif_netlink_parms(): no params data found [ 162.592879][ T1137] bridge_slave_1: left allmulticast mode [ 162.596766][ T1137] bridge_slave_1: left promiscuous mode [ 162.601874][ T1137] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.729920][ T1137] bridge_slave_0: left allmulticast mode [ 162.783479][ T7073] kernel read not supported for file /!selinuxselinux (pid: 7073 comm: syz.0.341) [ 162.815215][ T1137] bridge_slave_0: left promiscuous mode [ 162.818052][ T1137] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.826465][ T40] audit: type=1800 audit(1732756775.321:2): pid=7073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.341" name="!selinuxselinux" dev="mqueue" ino=15407 res=0 errno=0 [ 162.867496][ T5660] kernel read not supported for file /sysvipc/shm (pid: 5660 comm: kworker/2:3) [ 163.307575][ T5992] Bluetooth: hci0: command tx timeout [ 164.456139][ T1137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.470901][ T1137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.488072][ T1137] bond0 (unregistering): Released all slaves [ 164.968118][ T5768] ================================================================== [ 164.971195][ T5768] BUG: KASAN: slab-use-after-free in __list_del_entry_valid_or_report+0x14c/0x1c0 [ 164.993699][ T5768] Read of size 8 at addr ffff88806b931888 by task kworker/3:3/5768 [ 165.011997][ T5768] [ 165.012991][ T5768] CPU: 3 UID: 0 PID: 5768 Comm: kworker/3:3 Not tainted 6.12.0-syzkaller-10553-gb86545e02e8c #0 [ 165.028558][ T5768] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 165.032428][ T5768] Workqueue: events binder_deferred_func [ 165.033969][ T5768] Call Trace: [ 165.034855][ T5768] [ 165.049506][ T5768] dump_stack_lvl+0x116/0x1f0 [ 165.050977][ T5768] print_report+0xc3/0x620 [ 165.052383][ T5768] ? __virt_addr_valid+0x5e/0x590 [ 165.053843][ T5768] ? __phys_addr+0xc6/0x150 [ 165.055158][ T5768] kasan_report+0xd9/0x110 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 165.056507][ T5768] ? __list_del_entry_valid_or_report+0x14c/0x1c0 [ 165.072183][ T5768] ? __list_del_entry_valid_or_report+0x14c/0x1c0 [ 165.074983][ T5768] __list_del_entry_valid_or_report+0x14c/0x1c0 [ 165.077336][ T5768] binder_release_work+0x9b/0x490 [ 165.079205][ T5768] binder_deferred_func+0xe6e/0x12e0 [ 165.081089][ T5768] process_one_work+0x958/0x1b30 [ 165.106986][ T5768] ? __pfx_lru_add_drain_per_cpu+0x10/0x10 [ 165.109007][ T5768] ? __pfx_process_one_work+0x10/0x10 [ 165.110669][ T5768] ? rcu_is_watching+0x12/0xc0 [ 165.112177][ T5768] ? assign_work+0x1a0/0x250 [ 165.113752][ T5768] worker_thread+0x6c8/0xf00 [ 165.115470][ T5768] ? __kthread_parkme+0x148/0x220 [ 165.133559][ T5768] ? __pfx_worker_thread+0x10/0x10 [ 165.137434][ T5768] kthread+0x2c1/0x3a0 [ 165.140400][ T5768] ? _raw_spin_unlock_irq+0x23/0x50 [ 165.143506][ T5768] ? __pfx_kthread+0x10/0x10 [ 165.146001][ T5768] ret_from_fork+0x45/0x80 [ 165.149790][ T5768] ? __pfx_kthread+0x10/0x10 [ 165.166479][ T5768] ret_from_fork_asm+0x1a/0x30 [ 165.169075][ T5768] [ 165.170888][ T5768] [ 165.173081][ T5768] Allocated by task 7110: [ 165.176383][ T5768] kasan_save_stack+0x33/0x60 [ 165.179092][ T5768] kasan_save_track+0x14/0x30 [ 165.180966][ T5768] __kasan_kmalloc+0xaa/0xb0 [ 165.183068][ T5768] binder_thread_write+0xe18/0x4c70 [ 165.187741][ T5768] binder_ioctl+0x269d/0x7080 [ 165.214592][ T5768] compat_ptr_ioctl+0x6b/0xa0 [ 165.217316][ T5768] __do_compat_sys_ioctl+0x1cb/0x2c0 [ 165.219880][ T5768] __do_fast_syscall_32+0x73/0x120 [ 165.222287][ T5768] do_fast_syscall_32+0x32/0x80 [ 165.224567][ T5768] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 165.227745][ T5768] [ 165.238156][ T5768] Freed by task 5768: [ 165.240215][ T5768] kasan_save_stack+0x33/0x60 [ 165.241896][ T5768] kasan_save_track+0x14/0x30 [ 165.243704][ T5768] kasan_save_free_info+0x3b/0x60 [ 165.245603][ T5768] __kasan_slab_free+0x51/0x70 [ 165.264601][ T5768] kfree+0x14f/0x4b0 [ 165.286436][ T5768] binder_deferred_func+0xdd7/0x12e0 [ 165.288298][ T5768] process_one_work+0x958/0x1b30 [ 165.289944][ T5768] worker_thread+0x6c8/0xf00 [ 165.291465][ T5768] kthread+0x2c1/0x3a0 [ 165.292969][ T5768] ret_from_fork+0x45/0x80 [ 165.294820][ T5768] ret_from_fork_asm+0x1a/0x30 [ 165.300031][ T5768] [ 165.301609][ T5768] The buggy address belongs to the object at ffff88806b931880 [ 165.301609][ T5768] which belongs to the cache kmalloc-64 of size 64 [ 165.325698][ T5768] The buggy address is located 8 bytes inside of [ 165.325698][ T5768] freed 64-byte region [ffff88806b931880, ffff88806b9318c0) [ 165.334207][ T5768] [ 165.335457][ T5768] The buggy address belongs to the physical page: [ 165.354092][ T5992] Bluetooth: hci0: command tx timeout [ 165.366086][ T5768] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x6b931 [ 165.366115][ T5768] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 165.366132][ T5768] page_type: f5(slab) [ 165.366151][ T5768] raw: 04fff00000000000 ffff88801ac428c0 dead000000000100 dead000000000122 [ 165.366169][ T5768] raw: 0000000000000000 0000000080200020 00000001f5000000 0000000000000000 [ 165.366181][ T5768] page dumped because: kasan: bad access detected [ 165.366191][ T5768] page_owner tracks the page as allocated [ 165.366197][ T5768] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5991, tgid 5991 (syz-executor), ts 132126018364, free_ts 132125644810 [ 165.366233][ T5768] post_alloc_hook+0x2d1/0x350 [ 165.366262][ T5768] get_page_from_freelist+0xfce/0x2f80 [ 165.366288][ T5768] __alloc_pages_noprof+0x223/0x25a0 [ 165.366313][ T5768] alloc_pages_mpol_noprof+0x2c9/0x610 [ 165.366343][ T5768] new_slab+0x2c9/0x410 [ 165.366368][ T5768] ___slab_alloc+0xd1d/0x16e0 [ 165.366389][ T5768] __slab_alloc.constprop.0+0x56/0xb0 [ 165.366411][ T5768] __kmalloc_noprof+0x2de/0x4f0 [ 165.366435][ T5768] xt_replace_table+0x633/0x940 [ 165.366459][ T5768] __do_replace+0x1d3/0x9e0 [ 165.366487][ T5768] compat_do_replace+0x3ca/0x500 [ 165.366513][ T5768] do_ip6t_set_ctl+0x686/0xc20 [ 165.366540][ T5768] nf_setsockopt+0x8a/0xf0 [ 165.366561][ T5768] ipv6_setsockopt+0x135/0x170 [ 165.366587][ T5768] tcp_setsockopt+0xa4/0x100 [ 165.366615][ T5768] do_sock_setsockopt+0x222/0x480 [ 165.366633][ T5768] page last free pid 5991 tgid 5991 stack trace: [ 165.366642][ T5768] free_unref_page+0x661/0x1080 [ 165.366659][ T5768] vfree+0x17a/0x890 [ 165.366675][ T5768] compat_get_entries+0x5d5/0x850 [ 165.366695][ T5768] do_ip6t_get_ctl+0x596/0xaf0 [ 165.366715][ T5768] nf_getsockopt+0x79/0xe0 [ 165.366731][ T5768] ipv6_getsockopt+0x1f7/0x280 [ 165.366750][ T5768] tcp_getsockopt+0x9e/0x100 [ 165.366769][ T5768] do_sock_getsockopt+0x3fe/0x870 [ 165.366787][ T5768] __sys_getsockopt+0x12f/0x260 [ 165.366802][ T5768] __do_compat_sys_socketcall+0x42b/0x700 [ 165.366820][ T5768] __do_fast_syscall_32+0x73/0x120 [ 165.366842][ T5768] do_fast_syscall_32+0x32/0x80 [ 165.366862][ T5768] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 165.366878][ T5768] [ 165.366881][ T5768] Memory state around the buggy address: [ 165.366888][ T5768] ffff88806b931780: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 165.366898][ T5768] ffff88806b931800: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 165.366909][ T5768] >ffff88806b931880: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 165.366917][ T5768] ^ [ 165.366924][ T5768] ffff88806b931900: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 165.366934][ T5768] ffff88806b931980: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 165.366942][ T5768] ================================================================== [ 165.367685][ T5768] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 165.367698][ T5768] CPU: 3 UID: 0 PID: 5768 Comm: kworker/3:3 Not tainted 6.12.0-syzkaller-10553-gb86545e02e8c #0 [ 165.367716][ T5768] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 165.367727][ T5768] Workqueue: events binder_deferred_func [ 165.367755][ T5768] Call Trace: [ 165.367760][ T5768] [ 165.367767][ T5768] dump_stack_lvl+0x3d/0x1f0 [ 165.367792][ T5768] panic+0x71d/0x800 [ 165.367813][ T5768] ? mark_held_locks+0x9f/0xe0 [ 165.367828][ T5768] ? __pfx_panic+0x10/0x10 [ 165.367848][ T5768] ? irqentry_exit+0x3b/0x90 [ 165.367869][ T5768] ? lockdep_hardirqs_on+0x7c/0x110 [ 165.367891][ T5768] ? check_panic_on_warn+0x1f/0xb0 [ 165.367911][ T5768] check_panic_on_warn+0xab/0xb0 [ 165.367932][ T5768] end_report+0x117/0x180 [ 165.367952][ T5768] kasan_report+0xe9/0x110 [ 165.367971][ T5768] ? __list_del_entry_valid_or_report+0x14c/0x1c0 [ 165.367997][ T5768] ? __list_del_entry_valid_or_report+0x14c/0x1c0 [ 165.368015][ T5768] __list_del_entry_valid_or_report+0x14c/0x1c0 [ 165.368031][ T5768] binder_release_work+0x9b/0x490 [ 165.368055][ T5768] binder_deferred_func+0xe6e/0x12e0 [ 165.368081][ T5768] process_one_work+0x958/0x1b30 [ 165.368099][ T5768] ? __pfx_lru_add_drain_per_cpu+0x10/0x10 [ 165.368121][ T5768] ? __pfx_process_one_work+0x10/0x10 [ 165.368134][ T5768] ? rcu_is_watching+0x12/0xc0 [ 165.368155][ T5768] ? assign_work+0x1a0/0x250 [ 165.368177][ T5768] worker_thread+0x6c8/0xf00 [ 165.368194][ T5768] ? __kthread_parkme+0x148/0x220 [ 165.368214][ T5768] ? __pfx_worker_thread+0x10/0x10 [ 165.368229][ T5768] kthread+0x2c1/0x3a0 [ 165.368246][ T5768] ? _raw_spin_unlock_irq+0x23/0x50 [ 165.368265][ T5768] ? __pfx_kthread+0x10/0x10 [ 165.368282][ T5768] ret_from_fork+0x45/0x80 [ 165.368296][ T5768] ? __pfx_kthread+0x10/0x10 [ 165.368313][ T5768] ret_from_fork_asm+0x1a/0x30 [ 165.368343][ T5768] [ 165.378115][ T5768] Kernel Offset: disabled VM DIAGNOSIS: 01:19:38 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffff88802b744a40 RCX=ffffffff8181fadc RDX=ffff88801caaa440 RSI=ffffffff8181fab6 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc900001d79a0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000006 R12=ffffed10056e8949 R13=0000000000000001 R14=ffff88802b744a48 R15=ffff88802b43fe40 RIP=ffffffff8181fabd RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f7496188 CR3=000000000dd7e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000f000000000 0000000300000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffffffff96bf3cc0 RBX=0000000000000021 RCX=ffffffff816a139e RDX=0000000000000000 RSI=0000000000000008 RDI=ffffffff96bf3cc0 RBP=0000000000000000 RSP=ffffc90003f9f488 R8 =0000000000000001 R9 =0000000000000001 R10=0000000000000005 R11=0000000000000002 R12=0000000000000000 R13=ffff888023ea4880 R14=0000000000000021 R15=ffff888023ea5388 RIP=ffffffff81f0ae42 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f3701a37440 CR3=000000000dd7e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000002000 Opmask01=0000000000801022 Opmask02=00000000bffffffb Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737373737373 7373737373737373 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6565656565656565 6565656565656565 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffff0000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe488bb468 0000000000000000 00007f3701c84136 0000007672526966 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c6f7365722f6574 6174732d6b6f6f68 2f6463706368642f 6e75722f7261762f ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 632e766c6f736572 2f65746174732d6b 6f6f682f64637063 68642f6e75722f72 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657572743d646572 756769666e6f635f 6669006b6e696c2e 366874652e666e6f ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=1ffffffff2de8725 RBX=ffffffff96f438f8 RCX=1ffffffff2bf0750 RDX=0000000000000154 RSI=1ffffffff2bf0754 RDI=ffffffff96f43928 RBP=ffffffff96f0a4e8 RSP=ffffc90000547c20 R8 =0000000000000000 R9 =ffffffff96bfa6a0 R10=0000000000000005 R11=0000000000000008 R12=ffffffff8169fef0 R13=ffffffff96f0a508 R14=dffffc0000000000 R15=ffffffff96f0a4d8 RIP=ffffffff816a4df1 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7f76e40 CR3=000000000dd7e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 005858585858582e 7a7973e0000000e4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ff0f0e0d0c0b0a09 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000000005b RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8509ed75 RDI=ffffffff9a8a3280 RBP=ffffffff9a8a3240 RSP=ffffc9000397f518 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=73696c5f5f203f20 R12=0000000000000000 R13=000000000000005b R14=ffffffff8509ed10 R15=0000000000000000 RIP=ffffffff8509ed9f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000033815ff8 CR3=000000006a8b6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000f000000000 0000000300000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000