last executing test programs: 6.676221028s ago: executing program 3 (id=300): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x2081c80, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000900)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x160) 6.614765091s ago: executing program 3 (id=302): sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)={0x14, 0x12, 0xa01, 0x0, 0x0, {0x7, 0x2}}, 0x14}}, 0x0) 6.268622934s ago: executing program 3 (id=304): socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSACCEPT(r0, 0x89e3) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sched_setscheduler(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) unshare(0x8000000) r2 = semget$private(0x0, 0x4000, 0x764) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000400)=""/86) semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f00000002c0)=""/225) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3}, 0x48) 3.129898561s ago: executing program 1 (id=328): mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000300)={[{@mpol={'mpol', 0x3d, {'bind', '=static'}}}]}) 3.030553616s ago: executing program 1 (id=329): syz_emit_ethernet(0x82, &(0x7f0000000000)={@local, @empty, @val, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "5f1060", 0x24, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {0x8, 0x88be, 0x86ddffff}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) fsopen(&(0x7f0000000180)='jfs\x00', 0x1) 2.794674586s ago: executing program 1 (id=330): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8}]}}}]}, 0x3c}}, 0x0) 2.716406393s ago: executing program 1 (id=331): r0 = memfd_create(&(0x7f0000000300)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4C\x80\x00\x02\x00\x00\x00\xadt\xa24>X@\rq@\xf2\xe9[\xc9\x10\x04\x00\x00\x1dz\xd0\x11\xe3\x05N\xb1\x84\xea\x91^%A\xf5\x9e\x13TdT\xc6^p\xcc#P\x04\x06\xae\xeb\x7f;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\a`\xf0\xc728\xfc\xfc\x00\x00?\x86\xac\xd4\x00\x00\x00\x00\x00\x00\x80\f\xed{u[\xbd\x9d^\xffj\xa0\x14\xb7\xb6v\x1d*1>\x00\x00\x00\x00\x00\x00\x00\t\x00\x003F\xf1 \x17-\x964C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\x8c\xcd\b\xb5U\xec\x85\x9b\xe4Q>\xed\xdf\xdf\a\xd0lg\x13\r\x8c:s\x18@\xe6\x80\xb3\x9f#\x15$\x97I\xf0LC\xfc\xe7\xdf\x86\xfck\xdc\xe0\x9d\xd3[i\x1b\x9b{4)\xb9\xd8\xb8\x8f\xa22)\x8d\xec\xf0(!\xf0\xb5-e+><\xc8X\xdaNz,u\x8f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\xb7\xe7(.9\x00\xf6\x8e\xed\x02}&\xde\xf1\xa2\\m05u6\xaf\xa6j-\x9aJ\x83\xdf1\xa3\xff\xf1\xfac}\xc8i\"2\x7f\x98\xd5SENEn\xaa\xf7\xcf<\xee\xd2\xaf\xcb\x8b\xa2\xc6P\xc4\xff+\x83\xfd\x06\x16\xbd\x8a\xd9X(S\xb47\x9c)\x8cE\xdf\x13Kc|\x82\xc1\xaa\xdeT\x1f\xaf\xa0,\xb0ec\x03\xfd\xe4\xde&\xf8\xcd_\xaa\x9aO\x9cP', 0x7) fcntl$addseals(r0, 0x409, 0x12) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x4013, r0, 0x0) 2.668301844s ago: executing program 1 (id=332): r0 = io_uring_setup(0x32df, &(0x7f00000001c0)={0x0, 0xf012, 0x1000}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000000308000000000000000000000000001400048008000340000000000800084000"/52], 0x34}}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="020000002000000000000100040000000000000010003c000000000000200000009d060000"], 0x24, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x3, [@typedef={0x0, 0x0, 0x0, 0x8, 0x3}, @ptr={0x9, 0x0, 0x0, 0x2, 0x4}, @restrict={0x0, 0x0, 0x0, 0xb, 0x5}, @typedef={0x5, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x0]}}, &(0x7f00000002c0)=""/234, 0x4b, 0xea, 0x1, 0x5265}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000400)=0x6) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, &(0x7f0000000440)={0x1, [0x0]}) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x1b, &(0x7f0000000140)={@ipv4={'\x00', '\xff\xff', @loopback}, 0x2a, 0x0, 0x2, 0x0, 0x80, 0x2}, 0x20) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) acct(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00') acct(0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000003e00250304000000000000000a", @ANYRES16=r2, @ANYRESHEX=r2, @ANYRES64=r1], 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) fsmount(r6, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000040)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a841d", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r7, &(0x7f0000000380)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 1.685888116s ago: executing program 0 (id=340): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r0, &(0x7f0000000140)=@name={0x1e, 0x2, 0xfffffffffffffffe, {{0x42, 0x2}}}, 0x10) 1.586360866s ago: executing program 0 (id=341): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x19, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000039000000bf0900000000000055090100000000009500000000000000bf910000000000e9b70200000000000085000000baeb0000b70000000000000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.43523896s ago: executing program 0 (id=342): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) socket$inet(0x2, 0x2, 0x1) inotify_init() r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000140)={0x0, 0x0}) r4 = syz_open_procfs(r3, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r4, 0xc0185879, &(0x7f0000000180)={@id={0x2, 0x0, @auto="ffee8e7268b4d909e4003f00"}}) 1.424137418s ago: executing program 2 (id=343): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x3c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]]}, 0x3c}}, 0x0) 1.319224657s ago: executing program 2 (id=344): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x48, 0x30, 0x9, 0x0, 0x0, {}, [{0x34, 0x1, [@m_skbedit={0x30, 0x1, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc, 0xa}, {0xc, 0x9}}}]}]}, 0x48}}, 0x0) 1.312124217s ago: executing program 0 (id=345): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000077c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000042c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b5300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002860714800", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0x541b, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.206297667s ago: executing program 2 (id=346): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.126386888s ago: executing program 2 (id=347): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xe1000, 0x0, 0x28011, r0, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000100), 0x2) 1.047288018s ago: executing program 2 (id=348): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000540)='kfree\x00'}, 0x10) mkdir(0x0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f0000000900), 0x0, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000480)='Y', 0x1}, {&(0x7f0000000100)="d5", 0xf4240}], 0x2}}], 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) mq_open(0x0, 0x0, 0x0, 0x0) 1.038955741s ago: executing program 0 (id=349): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @none, 0x0, 0x2}, 0x5c) 920.521029ms ago: executing program 3 (id=305): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000000000091000040"]) 873.23316ms ago: executing program 0 (id=350): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@bloom_filter={0x1e, 0x1, 0x2, 0x2, 0x1901, 0x1, 0x1adf, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x2, 0x3}, 0x48) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x324) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, 0x0}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000400)={&(0x7f0000b36000/0x12000)=nil, &(0x7f0000841000/0x4000)=nil, 0x12000}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$UFFDIO_CONTINUE(r4, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}, 0x1}) syz_io_uring_setup(0x6866, &(0x7f00000003c0)={0x0, 0x0, 0x2000}, &(0x7f0000000080), &(0x7f0000000140)) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_open_procfs$userns(0x0, &(0x7f00000002c0)) userfaultfd(0x80001) 512.203243ms ago: executing program 3 (id=351): syz_open_procfs(0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'vlan1\x00', @ifru_map={0x4}}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB, @ANYRESDEC=0x0]) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r2, 0x1, 0x11, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x27) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCGETSGCNT(0xffffffffffffffff, 0x89e1, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) setresuid(0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f000000a400)={0x2020, 0x0, 0x0}, 0x2020) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000340)={0x50, 0x0, r7}, 0x50) ioctl$sock_netdev_private(r0, 0x89f0, &(0x7f0000000000)) 216.763181ms ago: executing program 3 (id=352): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='sessionid\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0xf29) socket$unix(0x1, 0x0, 0x0) r0 = socket(0x15, 0x5, 0x0) connect$l2tp6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x20) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008000640"], 0x6c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000030603000000000002000000000000000500010007"], 0x1c}}, 0x0) 159.410665ms ago: executing program 1 (id=353): mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[]) socket(0x2c, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0xfffffe5d) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) r2 = open(&(0x7f0000000080)='./file1\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x15) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x3f3) io_setup(0x7, &(0x7f0000000000)=0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$9p_fd(0x20100000, 0x0, 0x0, 0x0, 0x0) setxattr$incfs_id(&(0x7f0000000240)='./file1\x00', &(0x7f0000000880), &(0x7f00000008c0)={'0000000000000000000000000000000', 0x31}, 0x20, 0x6) io_submit(r3, 0x1, &(0x7f0000000700)=[0x0]) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x4c, 0x0, &(0x7f0000000c40)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) open_by_handle_at(r7, &(0x7f0000000100)=@ocfs2={0xc, 0xfe, {0x4}}, 0x408100) 0s ago: executing program 2 (id=354): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="38010000", @ANYRES16=0x0, @ANYBLOB="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"], 0x138}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="020000000000800080001200080001007674693674000200"], 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:45732' (ED25519) to the list of known hosts. [ 42.697499][ T5269] cgroup: Unknown subsys name 'net' [ 42.893868][ T5269] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 44.059402][ T5269] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 48.457370][ T5341] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 48.467602][ T5341] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 48.471721][ T5341] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 48.476635][ T5341] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 48.481853][ T5341] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 48.487387][ T5344] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 48.490191][ T5344] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 48.493891][ T5344] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 48.497675][ T5347] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 48.501732][ T5347] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 48.505724][ T5347] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 48.509876][ T5347] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 48.526725][ T5347] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 48.536968][ T5349] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 48.546591][ T5349] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 48.551240][ T5349] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 48.554964][ T5349] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 48.559277][ T5349] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 48.583398][ T67] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 48.588105][ T67] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 48.591902][ T67] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 48.603904][ T67] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 48.617223][ T67] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 48.620075][ T67] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 48.853198][ T5338] chnl_net:caif_netlink_parms(): no params data found [ 48.944062][ T5342] chnl_net:caif_netlink_parms(): no params data found [ 49.092184][ T5338] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.096099][ T5338] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.099798][ T5338] bridge_slave_0: entered allmulticast mode [ 49.104147][ T5338] bridge_slave_0: entered promiscuous mode [ 49.143848][ T5338] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.146692][ T5338] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.149198][ T5338] bridge_slave_1: entered allmulticast mode [ 49.152289][ T5338] bridge_slave_1: entered promiscuous mode [ 49.155443][ T5343] chnl_net:caif_netlink_parms(): no params data found [ 49.300240][ T5342] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.303570][ T5342] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.306964][ T5342] bridge_slave_0: entered allmulticast mode [ 49.310791][ T5342] bridge_slave_0: entered promiscuous mode [ 49.318204][ T5338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.350818][ T5342] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.354008][ T5342] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.357526][ T5342] bridge_slave_1: entered allmulticast mode [ 49.361465][ T5342] bridge_slave_1: entered promiscuous mode [ 49.392368][ T5351] chnl_net:caif_netlink_parms(): no params data found [ 49.407812][ T5338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.499257][ T5342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.531058][ T5338] team0: Port device team_slave_0 added [ 49.536914][ T5338] team0: Port device team_slave_1 added [ 49.565891][ T5342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.701073][ T5343] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.703541][ T5343] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.706013][ T5343] bridge_slave_0: entered allmulticast mode [ 49.710686][ T5343] bridge_slave_0: entered promiscuous mode [ 49.718208][ T5342] team0: Port device team_slave_0 added [ 49.751449][ T5338] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.754438][ T5338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.764566][ T5338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.770071][ T5343] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.772483][ T5343] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.774918][ T5343] bridge_slave_1: entered allmulticast mode [ 49.778000][ T5343] bridge_slave_1: entered promiscuous mode [ 49.783952][ T5342] team0: Port device team_slave_1 added [ 49.804732][ T5338] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.807264][ T5338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.816661][ T5338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.857404][ T5351] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.860166][ T5351] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.862627][ T5351] bridge_slave_0: entered allmulticast mode [ 49.865735][ T5351] bridge_slave_0: entered promiscuous mode [ 49.920262][ T5351] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.922708][ T5351] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.925254][ T5351] bridge_slave_1: entered allmulticast mode [ 49.929235][ T5351] bridge_slave_1: entered promiscuous mode [ 49.955638][ T5343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.959520][ T5342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.962702][ T5342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 49.974407][ T5342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.031285][ T5351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.037956][ T5343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.042533][ T5342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.045612][ T5342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.057011][ T5342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.093565][ T5351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.147341][ T5338] hsr_slave_0: entered promiscuous mode [ 50.150928][ T5338] hsr_slave_1: entered promiscuous mode [ 50.201880][ T5351] team0: Port device team_slave_0 added [ 50.206239][ T5343] team0: Port device team_slave_0 added [ 50.212729][ T5343] team0: Port device team_slave_1 added [ 50.217463][ T5351] team0: Port device team_slave_1 added [ 50.393431][ T5342] hsr_slave_0: entered promiscuous mode [ 50.397364][ T5342] hsr_slave_1: entered promiscuous mode [ 50.401287][ T5342] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.404906][ T5342] Cannot create hsr debugfs directory [ 50.408198][ T5351] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.411354][ T5351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.421396][ T5351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.425849][ T5343] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.428544][ T5343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.438553][ T5343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.452555][ T5351] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.455015][ T5351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.463722][ T5351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.468355][ T5343] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.470751][ T5343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 50.479439][ T5343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.537102][ T67] Bluetooth: hci0: command tx timeout [ 50.616569][ T67] Bluetooth: hci2: command tx timeout [ 50.627076][ T67] Bluetooth: hci1: command tx timeout [ 50.643846][ T5351] hsr_slave_0: entered promiscuous mode [ 50.647236][ T5351] hsr_slave_1: entered promiscuous mode [ 50.649615][ T5351] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.652174][ T5351] Cannot create hsr debugfs directory [ 50.696634][ T67] Bluetooth: hci3: command tx timeout [ 50.744242][ T5343] hsr_slave_0: entered promiscuous mode [ 50.747068][ T5343] hsr_slave_1: entered promiscuous mode [ 50.750705][ T5343] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 50.753272][ T5343] Cannot create hsr debugfs directory [ 50.945251][ T5338] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 50.956418][ T5338] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 51.019526][ T5338] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 51.063730][ T5338] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 51.138943][ T5342] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 51.146571][ T5342] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 51.155071][ T5342] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 51.163369][ T5342] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 51.226288][ T5351] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 51.231638][ T5351] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 51.247165][ T5351] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 51.252378][ T5351] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 51.296130][ T5343] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 51.301815][ T5343] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 51.307338][ T5343] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 51.312407][ T5343] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 51.352921][ T5338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.406072][ T5338] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.423812][ T3266] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.427154][ T3266] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.448257][ T5342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.453396][ T3266] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.456255][ T3266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.526159][ T5342] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.535599][ T5351] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.550217][ T3227] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.553062][ T3227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.563901][ T5343] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.585998][ T3288] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.589309][ T3288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.596519][ T5351] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.620022][ T5343] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.626308][ T3288] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.629457][ T3288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.641422][ T3288] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.644224][ T3288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.649034][ T3288] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.651715][ T3288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.693011][ T3227] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.696354][ T3227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.763252][ T5338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.833071][ T5338] veth0_vlan: entered promiscuous mode [ 51.850247][ T5338] veth1_vlan: entered promiscuous mode [ 51.854371][ T5342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.875002][ T5351] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.916906][ T5338] veth0_macvtap: entered promiscuous mode [ 51.924121][ T5342] veth0_vlan: entered promiscuous mode [ 51.935887][ T5342] veth1_vlan: entered promiscuous mode [ 51.944868][ T5338] veth1_macvtap: entered promiscuous mode [ 51.951488][ T5343] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.997180][ T5338] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.008681][ T5338] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.018015][ T5351] veth0_vlan: entered promiscuous mode [ 52.025789][ T5338] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.029845][ T5338] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.033329][ T5338] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.037665][ T5338] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.043955][ T5342] veth0_macvtap: entered promiscuous mode [ 52.055185][ T5351] veth1_vlan: entered promiscuous mode [ 52.060737][ T5342] veth1_macvtap: entered promiscuous mode [ 52.085016][ T5343] veth0_vlan: entered promiscuous mode [ 52.105452][ T5342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.110773][ T5342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.116640][ T5342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.123618][ T5343] veth1_vlan: entered promiscuous mode [ 52.130243][ T5342] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.134534][ T5342] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.140864][ T5342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.151223][ T5342] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.154784][ T5342] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.160455][ T5342] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.163461][ T5342] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.207033][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.210607][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.217855][ T5351] veth0_macvtap: entered promiscuous mode [ 52.223496][ T5351] veth1_macvtap: entered promiscuous mode [ 52.255181][ T84] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.261416][ T84] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.281417][ T5351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.285687][ T5351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.289522][ T5351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.292932][ T5351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.298742][ T5351] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.311226][ T5351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.315633][ T5351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.319897][ T5351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.324119][ T5351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.329309][ T5351] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.332085][ T5343] veth0_macvtap: entered promiscuous mode [ 52.346207][ T5343] veth1_macvtap: entered promiscuous mode [ 52.355652][ T5351] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.360019][ T5351] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.363807][ T5351] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.368153][ T5351] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.379769][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.383138][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.434994][ T5343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.446496][ T5343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.451256][ T5343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.455821][ T5343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.460959][ T5343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 52.465352][ T5343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.472142][ T5343] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.481309][ T5343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.485577][ T5343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.491549][ T5343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.495586][ T5343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.499458][ T5343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 52.503674][ T5343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 52.509664][ T5343] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.519856][ T5343] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.523762][ T5343] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.525814][ T5401] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 52.527883][ T5343] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.533640][ T5343] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.541635][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.544842][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.586624][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.590103][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.616982][ T67] Bluetooth: hci0: command tx timeout [ 52.696334][ T84] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.697064][ T67] Bluetooth: hci1: command tx timeout [ 52.701519][ T67] Bluetooth: hci2: command tx timeout [ 52.703124][ T84] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.762217][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.765743][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.789774][ T67] Bluetooth: hci3: command tx timeout [ 52.859520][ T84] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.867347][ T84] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.330014][ T5423] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9'. [ 53.405905][ T5427] loop7: detected capacity change from 0 to 16384 [ 53.418658][ T5420] netlink: 188 bytes leftover after parsing attributes in process `syz.1.7'. [ 53.422425][ T5420] netlink: 'syz.1.7': attribute type 1 has an invalid length. [ 53.424850][ T5420] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7'. [ 53.462545][ T5420] Process accounting resumed [ 53.486684][ T5427] loop7: detected capacity change from 16384 to 16383 [ 53.556907][ T39] audit: type=1326 audit(1723295215.184:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5438 comm="syz.2.18" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739e579 code=0x7ffc0000 [ 53.568000][ T39] audit: type=1326 audit(1723295215.194:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5438 comm="syz.2.18" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739e579 code=0x7ffc0000 [ 53.586851][ T39] audit: type=1326 audit(1723295215.204:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5438 comm="syz.2.18" exe="/syz-executor" sig=0 arch=40000003 syscall=43 compat=1 ip=0xf739e579 code=0x7ffc0000 [ 53.595793][ T39] audit: type=1326 audit(1723295215.204:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5438 comm="syz.2.18" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739e579 code=0x7ffc0000 [ 53.613235][ T39] audit: type=1326 audit(1723295215.204:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5438 comm="syz.2.18" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf739e579 code=0x7ffc0000 [ 53.764446][ T5446] process 'syz.0.20' launched './file0' with NULL argv: empty string added [ 53.884052][ T5448] openvswitch: netlink: nsh attr 2048 is out of range max 3 [ 53.998137][ T1284] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.001849][ T1284] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.005134][ T1284] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.012232][ T1284] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.015553][ T1284] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.020689][ T1284] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.024017][ T1284] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.029027][ T1284] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.032352][ T1284] hid-generic 0000:0000:0000.0002: unknown main item tag 0x1 [ 54.035733][ T1284] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.039683][ T1284] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.043023][ T1284] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.046278][ T1284] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.050826][ T1284] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.056732][ T1284] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.067069][ T1284] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.070685][ T1284] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.080077][ T1284] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.083497][ T1284] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.091565][ T1284] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.102490][ T1284] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.107336][ T1284] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.118261][ T1284] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.121584][ T1284] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.126154][ T1284] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.138320][ T1284] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.141680][ T1284] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.145011][ T1284] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.150137][ T1284] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.153499][ T1284] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.156894][ T1284] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.160355][ T1284] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.163637][ T1284] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.167947][ T1284] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.171371][ T1284] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.174604][ T1284] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.179857][ T1284] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.183102][ T1284] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.186441][ T1284] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.190259][ T1284] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.193596][ T1284] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.198308][ T1284] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.201559][ T1284] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 54.209355][ T1284] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [syz0] on syz0 [ 54.209663][ T5463] netlink: 36 bytes leftover after parsing attributes in process `syz.2.26'. [ 54.398168][ T5466] netlink: 12 bytes leftover after parsing attributes in process `syz.1.27'. [ 54.401412][ T5466] netlink: 'syz.1.27': attribute type 30 has an invalid length. [ 54.701807][ T67] Bluetooth: hci0: command tx timeout [ 54.734171][ T5478] can0: slcan on ttyprintk. [ 54.776577][ T67] Bluetooth: hci2: command tx timeout [ 54.778885][ T67] Bluetooth: hci1: command tx timeout [ 54.788768][ T5446] kexec: Could not allocate control_code_buffer [ 54.857020][ T67] Bluetooth: hci3: command tx timeout [ 55.098450][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 55.199407][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 55.797200][ T5477] can0 (unregistered): slcan off ttyprintk. [ 55.854806][ T5517] program syz.1.43 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 55.923828][ T5517] netlink: 'syz.1.43': attribute type 10 has an invalid length. [ 55.945945][ T5517] batman_adv: batadv0: Adding interface: team0 [ 55.949303][ T5517] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.960570][ T5517] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 55.984918][ T5517] Zero length message leads to an empty skb [ 56.439093][ T5551] netlink: 'syz.3.54': attribute type 30 has an invalid length. [ 56.736254][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 56.747382][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 56.770345][ T5554] netlink: 8 bytes leftover after parsing attributes in process `syz.0.55'. [ 56.776670][ T67] Bluetooth: hci0: command tx timeout [ 56.833006][ T5556] capability: warning: `syz.0.56' uses deprecated v2 capabilities in a way that may be insecure [ 56.856632][ T67] Bluetooth: hci1: command tx timeout [ 56.857031][ T5349] Bluetooth: hci2: command tx timeout [ 56.937085][ T5349] Bluetooth: hci3: command tx timeout [ 57.097089][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 57.225605][ T5564] netlink: 'syz.1.59': attribute type 4 has an invalid length. [ 57.431823][ T5566] delete_channel: no stack [ 58.106895][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 58.465257][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 58.484486][ T5598] warning: `syz.1.74' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 58.491872][ T5598] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 58.680578][ T5605] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 58.756555][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 58.989189][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 59.629484][ T5629] netlink: 64 bytes leftover after parsing attributes in process `syz.3.85'. [ 59.652084][ T5633] netlink: 4 bytes leftover after parsing attributes in process `syz.0.88'. [ 59.834438][ T5639] syz_tun: entered promiscuous mode [ 60.194205][ T5658] netlink: 28 bytes leftover after parsing attributes in process `syz.2.99'. [ 60.204289][ T5658] netlink: 24 bytes leftover after parsing attributes in process `syz.2.99'. [ 60.208957][ T5658] netlink: 8 bytes leftover after parsing attributes in process `syz.2.99'. [ 60.546561][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 60.630148][ T5671] tipc: Started in network mode [ 60.631852][ T5671] tipc: Node identity 1, cluster identity 4711 [ 60.634146][ T5671] tipc: Node number set to 1 [ 61.196572][ T5552] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 61.304248][ T5665] orangefs_mount: mount request failed with -4 [ 61.391343][ T5552] usb 5-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 61.398003][ T5552] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.411355][ T5552] usb 5-1: config 0 descriptor?? [ 61.430733][ T5699] ======================================================= [ 61.430733][ T5699] WARNING: The mand mount option has been deprecated and [ 61.430733][ T5699] and is ignored by this kernel. Remove the mand [ 61.430733][ T5699] option from the mount to silence this warning. [ 61.430733][ T5699] ======================================================= [ 61.650972][ T5687] PKCS7: Unknown OID: [4] 2.19.13055.940354.15722 [ 61.654460][ T5687] PKCS7: Only support pkcs7_signedData type [ 61.819622][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.864519][ T5552] hackrf 5-1:0.0: usb_control_msg() failed -71 request 0f [ 61.873349][ T5552] hackrf 5-1:0.0: Could not detect board [ 61.875716][ T5552] hackrf 5-1:0.0: probe with driver hackrf failed with error -71 [ 61.892319][ T5552] usb 5-1: USB disconnect, device number 2 [ 61.925569][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.997869][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.091970][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.156232][ T67] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 62.160916][ T67] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 62.167986][ T67] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 62.172368][ T67] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 62.178147][ T67] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 62.182298][ T67] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 62.262302][ T11] bridge_slave_1: left allmulticast mode [ 62.265110][ T11] bridge_slave_1: left promiscuous mode [ 62.271228][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.285752][ T11] bridge_slave_0: left allmulticast mode [ 62.288435][ T11] bridge_slave_0: left promiscuous mode [ 62.291098][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.690139][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 62.699713][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 62.705681][ T11] bond0 (unregistering): Released all slaves [ 62.786029][ T5712] syzkaller0: entered promiscuous mode [ 62.792206][ T5712] syzkaller0: entered allmulticast mode [ 62.847588][ T5717] tipc: Enabled bearer , priority 0 [ 62.896428][ T5717] tipc: Resetting bearer [ 62.957209][ T5715] tipc: Resetting bearer [ 63.968412][ T5715] tipc: Disabling bearer [ 64.218931][ T67] Bluetooth: hci1: command tx timeout [ 64.732871][ T5746] netlink: 'syz.1.128': attribute type 10 has an invalid length. [ 65.219540][ T11] hsr_slave_0: left promiscuous mode [ 65.222747][ T11] hsr_slave_1: left promiscuous mode [ 65.225848][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.230663][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.234646][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.238216][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.270138][ T11] veth1_macvtap: left promiscuous mode [ 65.272686][ T11] veth0_macvtap: left promiscuous mode [ 65.275081][ T11] veth1_vlan: left promiscuous mode [ 65.277683][ T11] veth0_vlan: left promiscuous mode [ 65.910281][ T11] team0 (unregistering): Port device team_slave_1 removed [ 65.960513][ T11] team0 (unregistering): Port device team_slave_0 removed [ 66.296531][ T67] Bluetooth: hci1: command tx timeout [ 66.443864][ T5703] chnl_net:caif_netlink_parms(): no params data found [ 66.557513][ T5785] Bluetooth: MGMT ver 1.23 [ 66.575435][ T5788] Driver unsupported XDP return value 0 on prog (id 15) dev N/A, expect packet loss! [ 66.743633][ T5703] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.750710][ T5703] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.753746][ T5703] bridge_slave_0: entered allmulticast mode [ 66.764763][ T5703] bridge_slave_0: entered promiscuous mode [ 66.784401][ T5703] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.789261][ T5703] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.792175][ T5703] bridge_slave_1: entered allmulticast mode [ 66.800794][ T5703] bridge_slave_1: entered promiscuous mode [ 66.940650][ T5703] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.949226][ T5703] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.134904][ T5816] pim6reg: entered allmulticast mode [ 67.150257][ T5819] macvlan0: entered allmulticast mode [ 67.152653][ T5819] veth1_vlan: entered allmulticast mode [ 67.155342][ T5823] pim6reg: left allmulticast mode [ 67.161436][ T5823] macvlan0: left allmulticast mode [ 67.163827][ T5823] veth1_vlan: left allmulticast mode [ 67.191155][ T5703] team0: Port device team_slave_0 added [ 67.211758][ T5703] team0: Port device team_slave_1 added [ 67.220327][ T5825] cgroup: release_agent respecified [ 67.286807][ T5703] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.289689][ T5703] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.300756][ T5703] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.306805][ T5703] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.309430][ T5703] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.321692][ T5703] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.377042][ T39] audit: type=1800 audit(1723295229.004:7): pid=5839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.151" name="/" dev="fuse" ino=1 res=0 errno=0 [ 67.408847][ T5703] hsr_slave_0: entered promiscuous mode [ 67.414865][ T5703] hsr_slave_1: entered promiscuous mode [ 67.420428][ T5703] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.423671][ T5703] Cannot create hsr debugfs directory [ 68.064951][ T5703] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 68.074103][ T5703] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 68.081498][ T5703] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 68.088065][ T5703] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 68.169332][ T5703] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.188515][ T5703] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.195595][ T3266] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.198161][ T3266] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.208014][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.211268][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.376513][ T67] Bluetooth: hci1: command tx timeout [ 68.407122][ T5703] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.453689][ T5703] veth0_vlan: entered promiscuous mode [ 68.462212][ T5703] veth1_vlan: entered promiscuous mode [ 68.502350][ T5703] veth0_macvtap: entered promiscuous mode [ 68.510038][ T5703] veth1_macvtap: entered promiscuous mode [ 68.531335][ T5703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.535794][ T5703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.540873][ T5703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.545102][ T5703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.547491][ T5885] Bluetooth: MGMT ver 1.23 [ 68.549525][ T5703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.555551][ T5703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.563840][ T5703] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.580358][ T5703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.584725][ T5703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.589098][ T5703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.593595][ T5703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.598021][ T5703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.602325][ T5703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.610167][ T5703] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.625384][ T5703] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.629698][ T5346] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 68.630356][ T5703] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.636813][ T5703] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.640599][ T5703] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.727117][ T3266] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.730281][ T3266] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.748148][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.751666][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.807812][ T5901] netlink: 32 bytes leftover after parsing attributes in process `syz.0.162'. [ 68.809858][ T5346] usb 6-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 68.814941][ T5346] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.821863][ T5346] usb 6-1: config 0 descriptor?? [ 68.831239][ T5346] input: bcm5974 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input5 [ 69.008664][ T5919] overlayfs: overlapping lowerdir path [ 69.135759][ T5346] usb 6-1: USB disconnect, device number 2 [ 69.345507][ T5930] netlink: 28 bytes leftover after parsing attributes in process `syz.0.171'. [ 69.349906][ T5930] netlink: 'syz.0.171': attribute type 7 has an invalid length. [ 69.353233][ T5930] netlink: 'syz.0.171': attribute type 8 has an invalid length. [ 69.356205][ T5930] netlink: 4 bytes leftover after parsing attributes in process `syz.0.171'. [ 69.365774][ T5930] gretap0: entered promiscuous mode [ 69.369842][ T5930] batadv_slave_1: entered promiscuous mode [ 70.200485][ T5963] netlink: 32 bytes leftover after parsing attributes in process `syz.0.182'. [ 70.204663][ T5963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.182'. [ 70.223602][ T5963] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 70.267992][ T5961] syz.2.181 uses obsolete (PF_INET,SOCK_PACKET) [ 70.460901][ T67] Bluetooth: hci1: command tx timeout [ 70.621297][ T5968] binder: 5967:5968 ioctl c0306201 20000580 returned -14 [ 70.946752][ T1989] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 71.149545][ T1989] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 71.154149][ T1989] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.159198][ T1989] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 71.163027][ T1989] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 71.176670][ T1989] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 71.180618][ T1989] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 71.184358][ T1989] usb 8-1: Manufacturer: syz [ 71.191412][ T1989] usb 8-1: config 0 descriptor?? [ 71.262360][ T1376] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.267566][ T1376] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.388161][ T67] Bluetooth: hci0: Malformed LE Event: 0x0b [ 71.437662][ T1989] usbhid 8-1:0.0: can't add hid device: -71 [ 71.439865][ T1989] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 71.454933][ T1989] usb 8-1: USB disconnect, device number 2 [ 71.676515][ T1284] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 71.864408][ T1284] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 71.876420][ T1284] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 71.880639][ T1284] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 71.885387][ T1284] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 71.906428][ T1284] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 71.910312][ T1284] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.917695][ T1284] usb 5-1: config 0 descriptor?? [ 71.920834][ T5984] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 72.002353][ T5994] overlayfs: overlapping lowerdir path [ 72.080553][ T5997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.194'. [ 72.211047][ T6001] netlink: 'syz.2.196': attribute type 1 has an invalid length. [ 72.214175][ T6001] netlink: 9396 bytes leftover after parsing attributes in process `syz.2.196'. [ 72.242133][ T5999] overlayfs: failed to decode file handle (len=5, type=251, flags=0, err=-22) [ 72.408361][ T1284] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 72.412814][ T1284] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 72.440724][ T1284] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 72.530130][ T6012] dvmrp0: entered allmulticast mode [ 73.111267][ T6049] netlink: 4 bytes leftover after parsing attributes in process `syz.3.212'. [ 73.120893][ T6049] netlink: 20 bytes leftover after parsing attributes in process `syz.3.212'. [ 73.169530][ T39] audit: type=1326 audit(1723295234.804:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6050 comm="syz.1.213" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f70579 code=0x0 [ 73.322883][ T6055] netlink: 'syz.3.215': attribute type 1 has an invalid length. [ 73.816894][ T5384] usb 5-1: reset high-speed USB device number 3 using dummy_hcd [ 74.184687][ T6077] netlink: 'syz.1.225': attribute type 1 has an invalid length. [ 74.187941][ T6077] netlink: 24 bytes leftover after parsing attributes in process `syz.1.225'. [ 74.701526][ T6081] macvlan0: entered allmulticast mode [ 74.707476][ T6081] veth1_vlan: entered allmulticast mode [ 74.711666][ T6081] macvlan0: left allmulticast mode [ 74.714201][ T6081] veth1_vlan: left allmulticast mode [ 75.319869][ T6099] overlay: Unknown parameter '/' [ 75.572881][ T6099] netlink: 40 bytes leftover after parsing attributes in process `syz.1.230'. [ 75.960141][ T6109] netlink: 12 bytes leftover after parsing attributes in process `syz.1.232'. [ 76.091797][ T6114] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(11) [ 76.095002][ T6114] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 76.102200][ T6114] vhci_hcd vhci_hcd.0: Device attached [ 76.129431][ T6115] vhci_hcd: connection closed [ 76.138404][ T1149] vhci_hcd: stop threads [ 76.152718][ T1149] vhci_hcd: release socket [ 76.163284][ T1149] vhci_hcd: disconnect device [ 76.283987][ T6120] 9pnet: Could not find request transport: fdrfdno=0x000000000000000d [ 76.431980][ T4811] usb 5-1: USB disconnect, device number 3 [ 76.458754][ T6128] netlink: 8 bytes leftover after parsing attributes in process `syz.2.237'. [ 77.131065][ T6140] xt_NFQUEUE: number of queues (257) out of range (got 65786) [ 77.192817][ T6145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.246'. [ 77.825020][ T6168] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.865204][ T6172] netlink: 12 bytes leftover after parsing attributes in process `syz.2.251'. [ 77.869144][ T6172] netlink: 12 bytes leftover after parsing attributes in process `syz.2.251'. [ 78.039866][ T6180] syz.3.255[6180] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 78.039951][ T6180] syz.3.255[6180] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 78.880388][ T6206] binder: BINDER_SET_CONTEXT_MGR already set [ 78.889155][ T6206] binder: 6205:6206 ioctl 4018620d 200001c0 returned -16 [ 79.036720][ T67] Bluetooth: hci0: unexpected event 0x08 length: 78 > 4 [ 79.317594][ T6219] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.872253][ T6205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 80.392000][ T6247] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 80.980427][ T6269] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.503853][ T6277] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 81.512303][ T57] cfg80211: failed to load regulatory.db [ 82.390827][ T39] audit: type=1326 audit(1723295244.024:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6301 comm="syz.1.297" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f70579 code=0x0 [ 82.510637][ T6304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.296'. [ 83.588781][ T1149] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.661958][ T1149] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.717049][ T5384] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 83.750966][ T1149] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.877147][ T5349] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 83.882345][ T5349] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.886049][ T5349] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.890343][ T5349] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.894252][ T5349] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 83.896653][ T5384] usb 5-1: Using ep0 maxpacket: 16 [ 83.898280][ T5349] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.914529][ T5384] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 83.926218][ T5384] usb 5-1: New USB device found, idVendor=0b05, idProduct=1807, bcdDevice= 0.40 [ 83.934790][ T5384] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.938887][ T5384] usb 5-1: Product: syz [ 83.938908][ T1149] bridge_slave_1: left allmulticast mode [ 83.940868][ T5384] usb 5-1: Manufacturer: syz [ 83.942787][ T1149] bridge_slave_1: left promiscuous mode [ 83.944905][ T5384] usb 5-1: SerialNumber: syz [ 83.950560][ T1149] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.952772][ T5384] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 83.959125][ T1149] bridge_slave_0: left allmulticast mode [ 83.961113][ T1149] bridge_slave_0: left promiscuous mode [ 83.963566][ T1149] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.174461][ T39] audit: type=1326 audit(1723295245.804:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6328 comm="syz.2.308" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f3f579 code=0x7ffc0000 [ 84.182718][ T5384] usb 5-1: USB disconnect, device number 4 [ 84.192426][ T39] audit: type=1326 audit(1723295245.804:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6328 comm="syz.2.308" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f3f579 code=0x7ffc0000 [ 84.207044][ T39] audit: type=1326 audit(1723295245.814:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6328 comm="syz.2.308" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f3f579 code=0x7ffc0000 [ 84.215660][ T39] audit: type=1326 audit(1723295245.814:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6328 comm="syz.2.308" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f3f579 code=0x7ffc0000 [ 84.224935][ T39] audit: type=1326 audit(1723295245.814:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6328 comm="syz.2.308" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f3f579 code=0x7ffc0000 [ 84.233343][ T39] audit: type=1326 audit(1723295245.814:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6328 comm="syz.2.308" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f3f579 code=0x7ffc0000 [ 84.246162][ T39] audit: type=1326 audit(1723295245.814:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6328 comm="syz.2.308" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f3f579 code=0x7ffc0000 [ 84.254532][ T39] audit: type=1326 audit(1723295245.814:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6328 comm="syz.2.308" exe="/syz-executor" sig=0 arch=40000003 syscall=235 compat=1 ip=0xf7f3f579 code=0x7ffc0000 [ 84.262686][ T39] audit: type=1326 audit(1723295245.814:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6328 comm="syz.2.308" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f3f579 code=0x7ffc0000 [ 84.355301][ T1149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 84.362463][ T1149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.368335][ T1149] bond0 (unregistering): Released all slaves [ 84.618250][ T6326] chnl_net:caif_netlink_parms(): no params data found [ 84.678139][ T6356] netlink: 8 bytes leftover after parsing attributes in process `syz.1.315'. [ 84.785994][ T6359] netlink: 36 bytes leftover after parsing attributes in process `syz.2.317'. [ 84.954782][ T1149] hsr_slave_0: left promiscuous mode [ 84.969324][ T1149] hsr_slave_1: left promiscuous mode [ 84.973818][ T1149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.977985][ T1149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.985833][ T1149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.992472][ T1149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.039979][ T1149] veth1_macvtap: left promiscuous mode [ 85.042518][ T1149] veth0_macvtap: left promiscuous mode [ 85.045100][ T1149] veth1_vlan: left promiscuous mode [ 85.047672][ T1149] veth0_vlan: left promiscuous mode [ 85.256795][ T59] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 85.453226][ T59] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 85.457834][ T59] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 85.462920][ T59] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 85.467920][ T59] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 85.471134][ T59] usb 7-1: SerialNumber: syz [ 85.861533][ T1149] team0 (unregistering): Port device team_slave_1 removed [ 85.934641][ T1149] team0 (unregistering): Port device team_slave_0 removed [ 85.979922][ T5349] Bluetooth: hci3: command tx timeout [ 86.472351][ T6326] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.475487][ T6326] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.479428][ T6326] bridge_slave_0: entered allmulticast mode [ 86.483337][ T6326] bridge_slave_0: entered promiscuous mode [ 86.506497][ T6326] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.506633][ T6326] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.506755][ T6326] bridge_slave_1: entered allmulticast mode [ 86.527586][ T6326] bridge_slave_1: entered promiscuous mode [ 86.545981][ T59] usb 7-1: 0:2 : does not exist [ 86.548564][ T59] usb 7-1: unit 5 not found! [ 86.579866][ T59] usb 7-1: USB disconnect, device number 2 [ 86.657190][ T6326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.671694][ T6326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.720815][ T6394] tmpfs: Bad value for 'mpol' [ 86.767988][ T6326] team0: Port device team_slave_0 added [ 86.772825][ T6326] team0: Port device team_slave_1 added [ 86.852752][ T5340] udevd[5340]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 86.883718][ T6326] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.887489][ T6326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.898964][ T6326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.905223][ T6326] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.908346][ T6326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.920639][ T6326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.999364][ T6326] hsr_slave_0: entered promiscuous mode [ 87.004055][ T6326] hsr_slave_1: entered promiscuous mode [ 87.007802][ T6326] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.010851][ T6326] Cannot create hsr debugfs directory [ 87.324507][ T6419] Process accounting resumed [ 87.869885][ T6326] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.880842][ T6326] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.909204][ T6326] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.917691][ T6326] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.056794][ T5349] Bluetooth: hci3: command tx timeout [ 88.110688][ T6326] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.140652][ T6326] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.171984][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.175224][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.213211][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.216068][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.494419][ T6326] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.552781][ T6326] veth0_vlan: entered promiscuous mode [ 88.560424][ T6326] veth1_vlan: entered promiscuous mode [ 88.590425][ T6326] veth0_macvtap: entered promiscuous mode [ 88.598515][ T6326] veth1_macvtap: entered promiscuous mode [ 88.614034][ T6326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.618222][ T6326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.622379][ T6326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.626423][ T6326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.630976][ T6326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.634887][ T6326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.641151][ T6326] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.649639][ T6326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.653912][ T6326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.658538][ T6326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.662103][ T6326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.665958][ T6326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.671771][ T6326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.677908][ T6326] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.684331][ T6326] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.688828][ T6326] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.692465][ T6326] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.696108][ T6326] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.797771][ T1099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.804148][ T1099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.845673][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.853233][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.450086][ T6509] fuse: Bad value for 'fd' [ 89.536723][ T6509] netlink: 20 bytes leftover after parsing attributes in process `syz.3.351'. [ 89.672578][ T39] kauditd_printk_skb: 1 callbacks suppressed [ 89.672592][ T39] audit: type=1326 audit(1723295251.304:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6510 comm="syz.3.352" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf746e579 code=0x0 [ 89.815579][ T6519] netlink: 92 bytes leftover after parsing attributes in process `syz.2.354'. [ 90.037759][ T6502] ------------[ cut here ]------------ [ 90.040571][ T6502] WARNING: CPU: 2 PID: 6502 at mm/page_table_check.c:207 __page_table_check_ptes_set+0x2fa/0x3e0 [ 90.044385][ T6502] Modules linked in: [ 90.046789][ T6502] CPU: 2 UID: 0 PID: 6502 Comm: syz.0.350 Not tainted 6.11.0-rc2-syzkaller-00239-g34ac1e82e5a7 #0 [ 90.052937][ T6502] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 90.057723][ T6502] RIP: 0010:__page_table_check_ptes_set+0x2fa/0x3e0 [ 90.060593][ T6502] Code: e9 91 fe ff ff e8 46 3a 97 ff 48 8b 2c 24 31 ff 83 e5 02 48 89 ee e8 a5 3c 97 ff 48 85 ed 0f 84 85 00 00 00 e8 27 3a 97 ff 90 <0f> 0b 90 e9 e9 fd ff ff e8 19 3a 97 ff eb 69 cc cc cc e8 0f 3a 97 [ 90.069180][ T6502] RSP: 0000:ffffc90003547a28 EFLAGS: 00010293 [ 90.071868][ T6502] RAX: 0000000000000000 RBX: ffff88805a2ed000 RCX: ffffffff81f3e7fb [ 90.075338][ T6502] RDX: ffff88801b990000 RSI: ffffffff81f3e809 RDI: 0000000000000007 [ 90.078925][ T6502] RBP: 0000000000000002 R08: 0000000000000007 R09: 0000000000000000 [ 90.082273][ T6502] R10: 0000000000000002 R11: 0000000000000000 R12: 0000000000000001 [ 90.085589][ T6502] R13: ffff8880220f9c80 R14: 0000000000000001 R15: 1ffff920006a8f47 [ 90.089047][ T6502] FS: 0000000000000000(0000) GS:ffff88802c200000(0063) knlGS:000000005718e440 [ 90.092951][ T6502] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 90.096022][ T6502] CR2: 00000000200002c0 CR3: 0000000028c94000 CR4: 0000000000350ef0 [ 90.099534][ T6502] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 90.102487][ T6502] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 90.105210][ T6502] Call Trace: [ 90.106432][ T6502] [ 90.107466][ T6502] ? show_regs+0x8c/0xa0 [ 90.109340][ T6502] ? __warn+0xe5/0x3c0 [ 90.111209][ T6502] ? __page_table_check_ptes_set+0x2fa/0x3e0 [ 90.114019][ T6502] ? report_bug+0x3c0/0x580 [ 90.116122][ T6502] ? handle_bug+0x3d/0x70 [ 90.118252][ T6502] ? exc_invalid_op+0x17/0x50 [ 90.120228][ T6502] ? asm_exc_invalid_op+0x1a/0x20 [ 90.122429][ T6502] ? __page_table_check_ptes_set+0x2eb/0x3e0 [ 90.125117][ T6502] ? __page_table_check_ptes_set+0x2f9/0x3e0 [ 90.127773][ T6502] ? __page_table_check_ptes_set+0x2fa/0x3e0 [ 90.130212][ T6502] ? __page_table_check_ptes_set+0x2f9/0x3e0 [ 90.132843][ T6502] ? find_held_lock+0x2d/0x110 [ 90.135004][ T6502] ? __pfx___page_table_check_ptes_set+0x10/0x10 SYZFAIL: failed to recv rpc [ 90.138265][ T6502] ? rcu_read_unlock+0x17/0x60 [ 90.140518][ T6502] set_ptes.constprop.0+0x193/0x1d0 [ 90.143238][ T6502] ? __pfx_set_ptes.constprop.0+0x10/0x10 [ 90.145817][ T6502] do_swap_page+0x1214/0x3dc0 [ 90.147075][ T67] Bluetooth: hci3: command tx timeout [ 90.147960][ T6502] ? __pfx_do_swap_page+0x10/0x10 [ 90.152502][ T6502] ? pte_offset_map_nolock+0xfe/0x1c0 [ 90.154916][ T6502] ? __pfx_pte_offset_map_nolock+0x10/0x10 [ 90.157740][ T6502] __handle_mm_fault+0x146b/0x5360 [ 90.160017][ T6502] ? down_read_trylock+0x1ed/0x3f0 [ 90.162379][ T6502] ? lock_vma_under_rcu+0x1e2/0x8f0 [ 90.164689][ T6502] ? __pfx___handle_mm_fault+0x10/0x10 [ 90.167189][ T6502] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 90.169618][ T6502] handle_mm_fault+0x44e/0x7b0 [ 90.171846][ T6502] ? __pkru_allows_pkey+0x52/0xb0 [ 90.174057][ T6502] do_user_addr_fault+0x60d/0x13f0 [ 90.176314][ T6502] exc_page_fault+0x5c/0xc0 [ 90.178336][ T6502] asm_exc_page_fault+0x26/0x30 [ 90.180676][ T6502] RIP: 0023:0xf72cfd71 fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 90.182319][ T6502] Code: 00 00 74 02 a4 49 50 89 c8 c1 e9 02 83 e0 03 f3 a5 89 c1 f3 a4 58 89 c7 89 d6 8b 44 24 04 c3 d1 e9 73 01 a4 d1 e9 73 02 66 a5 a5 eb e8 66 90 66 90 66 90 66 90 66 90 90 8b 44 24 0c 39 44 24 [ 90.190720][ T6502] RSP: 002b:00000000ffd43e1c EFLAGS: 00010202 [ 90.195935][ T6502] RAX: 0000000000000000 RBX: 00000000f745cff4 RCX: 0000000000000002 [ 90.199585][ T6502] RDX: 0000000000000008 RSI: 00000000f6d903ae RDI: 00000000200002c0 [ 90.202907][ T6502] RBP: 00000000ffd44098 R08: 0000000000000000 R09: 0000000000000000 [ 90.206316][ T6502] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 90.209963][ T6502] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 90.212976][ T6502] [ 90.214212][ T6502] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 90.217026][ T6502] CPU: 2 UID: 0 PID: 6502 Comm: syz.0.350 Not tainted 6.11.0-rc2-syzkaller-00239-g34ac1e82e5a7 #0 [ 90.221201][ T6502] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 90.226181][ T6502] Call Trace: [ 90.227658][ T6502] [ 90.228929][ T6502] dump_stack_lvl+0x3d/0x1f0 [ 90.230879][ T6502] panic+0x6f5/0x7a0 [ 90.232599][ T6502] ? __pfx_panic+0x10/0x10 [ 90.234310][ T6502] ? show_trace_log_lvl+0x363/0x500 [ 90.236090][ T6502] ? check_panic_on_warn+0x1f/0xb0 [ 90.237969][ T6502] ? __page_table_check_ptes_set+0x2fa/0x3e0 [ 90.240981][ T6502] check_panic_on_warn+0xab/0xb0 [ 90.243417][ T6502] __warn+0xf1/0x3c0 [ 90.245336][ T6502] ? __page_table_check_ptes_set+0x2fa/0x3e0 [ 90.248398][ T6502] report_bug+0x3c0/0x580 [ 90.250378][ T6502] handle_bug+0x3d/0x70 [ 90.252307][ T6502] exc_invalid_op+0x17/0x50 [ 90.254253][ T6502] asm_exc_invalid_op+0x1a/0x20 [ 90.256321][ T6502] RIP: 0010:__page_table_check_ptes_set+0x2fa/0x3e0 [ 90.259357][ T6502] Code: e9 91 fe ff ff e8 46 3a 97 ff 48 8b 2c 24 31 ff 83 e5 02 48 89 ee e8 a5 3c 97 ff 48 85 ed 0f 84 85 00 00 00 e8 27 3a 97 ff 90 <0f> 0b 90 e9 e9 fd ff ff e8 19 3a 97 ff eb 69 cc cc cc e8 0f 3a 97 [ 90.267027][ T6502] RSP: 0000:ffffc90003547a28 EFLAGS: 00010293 [ 90.269450][ T6502] RAX: 0000000000000000 RBX: ffff88805a2ed000 RCX: ffffffff81f3e7fb [ 90.272965][ T6502] RDX: ffff88801b990000 RSI: ffffffff81f3e809 RDI: 0000000000000007 [ 90.276559][ T6502] RBP: 0000000000000002 R08: 0000000000000007 R09: 0000000000000000 [ 90.280040][ T6502] R10: 0000000000000002 R11: 0000000000000000 R12: 0000000000000001 [ 90.283238][ T6502] R13: ffff8880220f9c80 R14: 0000000000000001 R15: 1ffff920006a8f47 [ 90.286178][ T6502] ? __page_table_check_ptes_set+0x2eb/0x3e0 [ 90.288796][ T6502] ? __page_table_check_ptes_set+0x2f9/0x3e0 [ 90.291323][ T6502] ? __page_table_check_ptes_set+0x2f9/0x3e0 [ 90.293908][ T6502] ? find_held_lock+0x2d/0x110 [ 90.295909][ T6502] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 90.298001][ T6502] ? rcu_read_unlock+0x17/0x60 [ 90.300531][ T6502] set_ptes.constprop.0+0x193/0x1d0 [ 90.302918][ T6502] ? __pfx_set_ptes.constprop.0+0x10/0x10 [ 90.305523][ T6502] do_swap_page+0x1214/0x3dc0 [ 90.307699][ T6502] ? __pfx_do_swap_page+0x10/0x10 [ 90.309833][ T6502] ? pte_offset_map_nolock+0xfe/0x1c0 [ 90.312154][ T6502] ? __pfx_pte_offset_map_nolock+0x10/0x10 [ 90.314401][ T6502] __handle_mm_fault+0x146b/0x5360 [ 90.316500][ T6502] ? down_read_trylock+0x1ed/0x3f0 [ 90.318586][ T6502] ? lock_vma_under_rcu+0x1e2/0x8f0 [ 90.320705][ T6502] ? __pfx___handle_mm_fault+0x10/0x10 [ 90.323004][ T6502] ? __pfx_lock_vma_under_rcu+0x10/0x10 [ 90.324997][ T6502] handle_mm_fault+0x44e/0x7b0 [ 90.326676][ T6502] ? __pkru_allows_pkey+0x52/0xb0 [ 90.328247][ T6502] do_user_addr_fault+0x60d/0x13f0 [ 90.330127][ T6502] exc_page_fault+0x5c/0xc0 [ 90.331735][ T6502] asm_exc_page_fault+0x26/0x30 [ 90.333470][ T6502] RIP: 0023:0xf72cfd71 [ 90.335202][ T6502] Code: 00 00 74 02 a4 49 50 89 c8 c1 e9 02 83 e0 03 f3 a5 89 c1 f3 a4 58 89 c7 89 d6 8b 44 24 04 c3 d1 e9 73 01 a4 d1 e9 73 02 66 a5 a5 eb e8 66 90 66 90 66 90 66 90 66 90 90 8b 44 24 0c 39 44 24 [ 90.342701][ T6502] RSP: 002b:00000000ffd43e1c EFLAGS: 00010202 [ 90.345163][ T6502] RAX: 0000000000000000 RBX: 00000000f745cff4 RCX: 0000000000000002 [ 90.348631][ T6502] RDX: 0000000000000008 RSI: 00000000f6d903ae RDI: 00000000200002c0 [ 90.351590][ T6502] RBP: 00000000ffd44098 R08: 0000000000000000 R09: 0000000000000000 [ 90.354933][ T6502] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 90.358489][ T6502] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 90.361913][ T6502] [ 90.363932][ T6502] Kernel Offset: disabled [ 90.366330][ T6502] Rebooting in 86400 seconds.. VM DIAGNOSIS: 13:07:31 Registers: info registers vcpu 0 CPU#0 RAX=ffffed10057fae1f RBX=ffffed10057fae1f RCX=ffffffff8166183c RDX=ffffed10057fae1f RSI=0000000000000008 RDI=ffff88802bfd70f0 RBP=ffffed10057fae1e RSP=ffffc90000007d20 R8 =0000000000000000 R9 =ffffed10057fae1e R10=ffff88802bfd70f7 R11=ffffe8ffad165440 R12=0000000000000001 R13=0000000000000000 R14=ffff88802bfd7000 R15=0000000000000000 RIP=ffffffff81e9b62f RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c000000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000206d8000 CR3=0000000000a74000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=1ffff920006f7e6b RCX=ffffffff8169581b RDX=fffffbfff2022434 RSI=ffffffff8bb04760 RDI=ffffffff8bb047a0 RBP=0000000000000001 RSP=ffffc900037bf328 R8 =0000000000000000 R9 =fffffbfff2022433 R10=ffffffff9011219f R11=0000000000000000 R12=0000000000000001 R13=0000000000000000 R14=ffff888016f51078 R15=0000000000000000 RIP=ffffffff8b067360 RFL=00000283 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802c100000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000206f1000 CR3=0000000000a74000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 00c800a400000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000200000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff84fa73f5 RDI=ffffffff9511c340 RBP=ffffffff9511c300 RSP=ffffc90003547400 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000030 R14=ffffffff84fa7390 R15=0000000000000000 RIP=ffffffff84fa741f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802c200000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000200002c0 CR3=0000000028c94000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffff88805089c100 RCX=ffffffff8169c1ad RDX=0000000000000001 RSI=0000000000000004 RDI=ffffc90000e3fab0 RBP=1ffff920001c7f52 RSP=ffffc90000e3fa88 R8 =0000000000000001 R9 =fffff520001c7f56 R10=0000000000000003 R11=0000000000000000 R12=ffff88805089c108 R13=ffff88805089c110 R14=ffff88801a0bac00 R15=ffff88802b911820 RIP=ffffffff8169c1be RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c300000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000020615000 CR3=0000000028c94000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000