last executing test programs: 53.570303558s ago: executing program 2 (id=239): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd(0xff7ffff7) r3 = eventfd(0x2) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000280)={r2, 0x2, 0x2, r3}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r3, 0x1, 0x2, r2}) r4 = eventfd(0x8000) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r3, 0xd, 0x2, r4}) 53.450553304s ago: executing program 2 (id=242): r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000340)) r3 = dup(r2) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1, r3}) close_range(r0, 0xffffffffffffffff, 0x0) 53.450360887s ago: executing program 2 (id=243): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000840)='./bus\x00', 0xa4) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000540)={{}, {0x18, 0xfe}, 0xfffffffc, 0x1}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0xc0189436, &(0x7f0000000140)) 53.424042402s ago: executing program 2 (id=244): pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000400db000000000000000000181100", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) splice(r1, 0x0, r0, 0x0, 0x6, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x3ff) fcntl$setstatus(r0, 0x4, 0x7c00) dup3(r1, r0, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c000000010605"], 0x2c}, 0x1, 0x0, 0x0, 0x40001d0}, 0x0) 53.190159177s ago: executing program 2 (id=245): mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x24) mount$binder(0x0, &(0x7f0000000780)='./file0\x00', &(0x7f0000000680), 0x8001, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00'}, 0x10) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 52.34963341s ago: executing program 2 (id=250): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001300)=@delchain={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x2}, {}, {0xf, 0xf}}}, 0x24}}, 0x20040010) 38.87794302s ago: executing program 1 (id=212): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000300)={0x73622a85, 0x0, 0x1}) syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) 36.903680049s ago: executing program 32 (id=250): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001300)=@delchain={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x2}, {}, {0xf, 0xf}}}, 0x24}}, 0x20040010) 30.515388523s ago: executing program 1 (id=212): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000300)={0x73622a85, 0x0, 0x1}) syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) 23.413468671s ago: executing program 1 (id=212): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000300)={0x73622a85, 0x0, 0x1}) syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) 15.697737421s ago: executing program 1 (id=212): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000300)={0x73622a85, 0x0, 0x1}) syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) 8.757479782s ago: executing program 1 (id=212): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000300)={0x73622a85, 0x0, 0x1}) syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) 4.169053456s ago: executing program 3 (id=451): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0x4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000440)={@flat=@binder={0x73622a85, 0x1001, 0x1}, @flat=@binder={0x73622a85, 0xa, 0x1}, @flat=@weak_handle={0x77682a85, 0x110a, 0x1}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000100)=[@release={0x40486311, 0x1}], 0x0, 0x0, 0x0}) 4.098061571s ago: executing program 3 (id=453): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000080)={0x0, 0x0, 0x6, &(0x7f0000000000)={0x0, "e922fe53e14fcad1ebe6ff00000000000000080000000000000000000021b49d61"}}) socket(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x1}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="f800000019000100000000000000000000000000000000000000000000000000ff0100000000000000000000010000010000000e000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000008000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000010000004400050020010000000000000000000000000000000000022b000000020000000000000000000000000000000000040000000500"/176], 0xf8}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, 0x0, 0x0) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0xbb8) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x11}}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioperm(0x6, 0x3, 0xb017) recvmsg(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r8 = syz_io_uring_setup(0x117, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1000}, &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) syz_init_net_socket$ax25(0x3, 0x3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0xffffffffffffffff, 0x0, 0x0, 0xc}) io_uring_enter(r8, 0x47f6, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) socket$rds(0x15, 0x5, 0x0) 3.189696857s ago: executing program 3 (id=460): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f00000002c0)={{}, 0x0, 0x0, @inherit={0x48, &(0x7f0000001800)=ANY=[]}, @subvolid=0x2}) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1a00fe00000000bda100000000000007010000f8ffffffb702000008000000b70300000000000085000000760000009500000000000000d36b59ac17a572d7444fe29366d8bcacdf913a8e7588905bf6cca226529c4362b31459e7b4279afff4c2"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003e00), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r5, &(0x7f0000003f00)={0x0, 0x0, &(0x7f0000003ec0)={&(0x7f0000000280)={0x24, r6, 0x401, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x20040050) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$cdrom(0xffffff9c, 0x0, 0x42880, 0x0) socket$l2tp6(0xa, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_usbip_server_init(0x3) add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000580)='X', 0x1, 0xfffffffffffffffe) lstat(&(0x7f00000004c0)='./file0\x00', 0x0) add_key$user(0x0, 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) 2.489637951s ago: executing program 0 (id=464): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x7, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x702}]}, 0x34}}, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295a5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_ADDRESS={0x14, 0x1, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2.420059322s ago: executing program 0 (id=465): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x4008032, 0xffffffffffffffff, 0x2000) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x181001, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r1, 0x80044dff, &(0x7f0000000180)) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r2, &(0x7f0000001340)=[{&(0x7f0000000580)=""/148, 0x94}], 0x1) readv(r2, &(0x7f0000001240)=[{&(0x7f0000000040)=""/73, 0x49}], 0x1) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x3) 2.24941255s ago: executing program 0 (id=467): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB='7'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x19, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061121c000000000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40186f40, &(0x7f0000000440)=0x1f) 2.039768086s ago: executing program 1 (id=212): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000300)={0x73622a85, 0x0, 0x1}) syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) 1.027350785s ago: executing program 0 (id=470): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e78, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0x3, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x7c}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40010) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket(0x2c, 0x4, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x141) setrlimit(0x8, &(0x7f0000001680)={0x1, 0x715}) r5 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0xfffff, 0xffffffffffffffff) keyctl$read(0x2, r5, &(0x7f00000003c0)=""/4096, 0x1000) vmsplice(r4, &(0x7f0000000780)=[{0x0}, {&(0x7f0000000800)="366c3d15cc3b565398e8b36c499f4ccb64274b83315c98a12cc2779ffd7920b8adb39bfd42274ad6c9300b77a2d6f571271493ccccdfb2b0e3335ff33fd688cf1adc1b5959e221d41b6a2c11d09fb84c7fc6ebdcd120ea360c615f41dc8f0dd8af2b625f284651122701cc408838ff5b0b8c9885add6cecb43095db68aed35614b71abe87abc1e4abbb074e47813e0625d373d555064a08440261365", 0x9c}], 0x2, 0x4) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f0000001640), 0x0, &(0x7f00000015c0)=ANY=[@ANYRESOCT=r0, @ANYRES16, @ANYRESDEC=0x0, @ANYRESOCT=r2, @ANYRESOCT, @ANYRESOCT=r4]) chdir(&(0x7f0000000300)='./file0\x00') r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYRES16, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=@known='trusted.overlay.impure\x00') r7 = socket$inet_sctp(0x2, 0x5, 0x84) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000340)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x80}, 0xa) sendto$inet(r7, &(0x7f00000004c0)="ab", 0xff04, 0xc0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 1.02682939s ago: executing program 3 (id=472): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e78, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc}, {0x3, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x7c}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40010) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket(0x2c, 0x4, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x141) setrlimit(0x8, &(0x7f0000001680)={0x1, 0x715}) r5 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0xfffff, 0xffffffffffffffff) keyctl$read(0x2, r5, &(0x7f00000003c0)=""/4096, 0x1000) vmsplice(r4, &(0x7f0000000780)=[{0x0}, {&(0x7f0000000800)="366c3d15cc3b565398e8b36c499f4ccb64274b83315c98a12cc2779ffd7920b8adb39bfd42274ad6c9300b77a2d6f571271493ccccdfb2b0e3335ff33fd688cf1adc1b5959e221d41b6a2c11d09fb84c7fc6ebdcd120ea360c615f41dc8f0dd8af2b625f284651122701cc408838ff5b0b8c9885add6cecb43095db68aed35614b71abe87abc1e4abbb074e47813e0625d373d555064a08440261365", 0x9c}], 0x2, 0x4) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f0000001640), 0x0, &(0x7f00000015c0)=ANY=[@ANYRESOCT=r0, @ANYRES16, @ANYRESDEC=0x0, @ANYRESOCT=r2, @ANYRESOCT, @ANYRESOCT=r4]) chdir(&(0x7f0000000300)='./file0\x00') r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYRES16, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=@known='trusted.overlay.impure\x00') r7 = socket$inet_sctp(0x2, 0x5, 0x84) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000340)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x80}, 0xa) sendto$inet(r7, &(0x7f00000004c0)="ab", 0xff04, 0xc0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 1.015367184s ago: executing program 4 (id=473): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x64a, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) unshare(0x28040680) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000000c0), 0x1048b, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x101800, 0x3) fdatasync(r5) 617.748528ms ago: executing program 4 (id=474): pipe(0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, 0x0, 0x0) sendmsg$NL80211_CMD_GET_KEY(r0, 0x0, 0x4008010) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010024bd7000fcdbdf252100000008000300", @ANYRES32=r3], 0x24}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3ea35512) 530.003887ms ago: executing program 4 (id=475): epoll_create1(0x0) epoll_create1(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0xffffffffffffffff, 0xe, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x8d5, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 280.099736ms ago: executing program 4 (id=476): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000340), 0x276, 0x200) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x0, 0x40000000002, 0x8000000000000000, 0x8000f, 0x7fff, 0xfffffffffffffffe, 0x100, 0x10001000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0x9, 0x4, 0x2, 0x0, 0x2, 0x7}, 0x0, 0x0) 265.053813ms ago: executing program 4 (id=477): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) landlock_create_ruleset(&(0x7f0000000000)={0x0, 0x3}, 0x10, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r1, &(0x7f0000000040)="a6", 0xffffff4c, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e23, 0x2, @private0, 0x1}, 0x1c) 126.493601ms ago: executing program 0 (id=478): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000003}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000180), 0x2) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000780)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000700)={@fd={0x66642a85, 0x0, r4}, @fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, &(0x7f0000000900)=""/4096, 0x1000, 0x1, 0x2c}}, &(0x7f0000000680)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d1499097488fcad724a1"}) 126.056565ms ago: executing program 3 (id=479): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x5a) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000a0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40400, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) 125.762061ms ago: executing program 0 (id=480): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000080)={0x0, 0x0, 0x6, &(0x7f0000000000)={0x0, "e922fe53e14fcad1ebe6ff00000000000000080000000000000000000021b49d61"}}) socket(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x1}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="f800000019000100000000000000000000000000000000000000000000000000ff0100000000000000000000010000010000000e000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000008000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000010000004400050020010000000000000000000000000000000000022b000000020000000000000000000000000000000000040000000500"/176], 0xf8}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, 0x0, 0x0) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0xbb8) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x11}}) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioperm(0x6, 0x3, 0xb017) recvmsg(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r8 = syz_io_uring_setup(0x117, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1000}, &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) syz_init_net_socket$ax25(0x3, 0x3, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0xffffffffffffffff, 0x0, 0x0, 0xc}) io_uring_enter(r8, 0x47f6, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) socket$rds(0x15, 0x5, 0x0) 120.841692ms ago: executing program 4 (id=481): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f00000002c0)={{}, 0x0, 0x0, @inherit={0x48, &(0x7f0000001800)=ANY=[]}, @subvolid=0x2}) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x0, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1a00fe00000000bda100000000000007010000f8ffffffb702000008000000b70300000000000085000000760000009500000000000000d36b59ac17a572d7444fe29366d8bcacdf913a8e7588905bf6cca226529c4362b31459e7b4279afff4c2"], &(0x7f0000000180)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000003e00), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r5, &(0x7f0000003f00)={0x0, 0x0, &(0x7f0000003ec0)={&(0x7f0000000280)={0x24, r6, 0x401, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x20040050) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$cdrom(0xffffff9c, 0x0, 0x42880, 0x0) socket$l2tp6(0xa, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_usbip_server_init(0x3) add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000580)='X', 0x1, 0xfffffffffffffffe) lstat(&(0x7f00000004c0)='./file0\x00', 0x0) add_key$user(0x0, 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) 0s ago: executing program 3 (id=482): setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000027c0], 0x0, 0x0, 0x0}, 0x78) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)={'#! ', '', [], 0x8, "2c36ce35fe800000000000009d94165f433d388e6577f86274e326d04670000000002c"}, 0x27) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x1, &(0x7f0000000300)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x1, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:63181' (ED25519) to the list of known hosts. [ 41.910363][ T5860] cgroup: Unknown subsys name 'net' [ 42.051378][ T5860] cgroup: Unknown subsys name 'cpuset' [ 42.056051][ T5860] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 42.957268][ T5860] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.476502][ T5953] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.479553][ T5953] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.482223][ T5953] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.485185][ T5953] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.487725][ T5953] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.491434][ T5954] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.494691][ T5954] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.495755][ T5309] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.497066][ T5955] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.498433][ T5954] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.500176][ T5955] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.501053][ T5309] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.501852][ T5309] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.503653][ T5954] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.503763][ T5309] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.505668][ T5955] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.512807][ T5961] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.513685][ T5955] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.516083][ T5961] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 46.518234][ T5955] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 46.754830][ T5944] chnl_net:caif_netlink_parms(): no params data found [ 46.885580][ T5945] chnl_net:caif_netlink_parms(): no params data found [ 47.039996][ T5944] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.042982][ T5944] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.045720][ T5944] bridge_slave_0: entered allmulticast mode [ 47.049755][ T5944] bridge_slave_0: entered promiscuous mode [ 47.053734][ T5949] chnl_net:caif_netlink_parms(): no params data found [ 47.112376][ T5944] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.114701][ T5944] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.116956][ T5944] bridge_slave_1: entered allmulticast mode [ 47.119724][ T5944] bridge_slave_1: entered promiscuous mode [ 47.155696][ T5945] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.157766][ T5945] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.159970][ T5945] bridge_slave_0: entered allmulticast mode [ 47.162694][ T5945] bridge_slave_0: entered promiscuous mode [ 47.180126][ T5959] chnl_net:caif_netlink_parms(): no params data found [ 47.194245][ T5945] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.196567][ T5945] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.200214][ T5945] bridge_slave_1: entered allmulticast mode [ 47.202919][ T5945] bridge_slave_1: entered promiscuous mode [ 47.207810][ T5944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.217164][ T5944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.316547][ T5945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.321282][ T5945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.342195][ T5949] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.344887][ T5949] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.347880][ T5949] bridge_slave_0: entered allmulticast mode [ 47.351416][ T5949] bridge_slave_0: entered promiscuous mode [ 47.401176][ T5944] team0: Port device team_slave_0 added [ 47.404003][ T5949] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.406575][ T5949] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.409230][ T5949] bridge_slave_1: entered allmulticast mode [ 47.412299][ T5949] bridge_slave_1: entered promiscuous mode [ 47.416481][ T5945] team0: Port device team_slave_0 added [ 47.421939][ T5945] team0: Port device team_slave_1 added [ 47.428776][ T5944] team0: Port device team_slave_1 added [ 47.542155][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.544414][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.552648][ T5944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.557872][ T5949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.562972][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.565964][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.577022][ T5945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.598949][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.601361][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.612027][ T5944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.618227][ T5949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.621819][ T5945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.624752][ T5945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.635491][ T5945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.640308][ T5959] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.642622][ T5959] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.644969][ T5959] bridge_slave_0: entered allmulticast mode [ 47.647657][ T5959] bridge_slave_0: entered promiscuous mode [ 47.693101][ T5959] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.695544][ T5959] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.697953][ T5959] bridge_slave_1: entered allmulticast mode [ 47.701882][ T5959] bridge_slave_1: entered promiscuous mode [ 47.736333][ T5959] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.741917][ T5949] team0: Port device team_slave_0 added [ 47.746134][ T5949] team0: Port device team_slave_1 added [ 47.776892][ T5959] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.878433][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.880470][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.887560][ T5949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.893741][ T5945] hsr_slave_0: entered promiscuous mode [ 47.896031][ T5945] hsr_slave_1: entered promiscuous mode [ 47.916239][ T5944] hsr_slave_0: entered promiscuous mode [ 47.918726][ T5944] hsr_slave_1: entered promiscuous mode [ 47.921006][ T5944] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.923671][ T5944] Cannot create hsr debugfs directory [ 47.926036][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.928063][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.936648][ T5949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.947658][ T5959] team0: Port device team_slave_0 added [ 47.951741][ T5959] team0: Port device team_slave_1 added [ 48.043308][ T5959] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 48.046222][ T5959] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.057642][ T5959] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 48.092561][ T5959] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 48.094807][ T5959] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 48.102792][ T5959] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 48.109035][ T5949] hsr_slave_0: entered promiscuous mode [ 48.111271][ T5949] hsr_slave_1: entered promiscuous mode [ 48.113348][ T5949] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.115689][ T5949] Cannot create hsr debugfs directory [ 48.303237][ T5959] hsr_slave_0: entered promiscuous mode [ 48.305524][ T5959] hsr_slave_1: entered promiscuous mode [ 48.307651][ T5959] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 48.310126][ T5959] Cannot create hsr debugfs directory [ 48.517264][ T5945] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.525907][ T5945] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.536362][ T5945] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.551811][ T5945] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.569235][ T5955] Bluetooth: hci3: command tx timeout [ 48.571935][ T5944] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.576352][ T5944] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.579002][ T5955] Bluetooth: hci0: command tx timeout [ 48.579171][ T5953] Bluetooth: hci2: command tx timeout [ 48.580701][ T5950] Bluetooth: hci1: command tx timeout [ 48.590769][ T5944] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.595703][ T5944] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.654208][ T5949] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.660998][ T5949] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.665573][ T5949] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.669881][ T5949] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.728848][ T5959] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.734870][ T5959] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.740328][ T5959] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.746807][ T5959] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.766042][ T5945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.797893][ T5945] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.807909][ T1154] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.810371][ T1154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.814988][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.817598][ T1154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.834985][ T5944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.856890][ T5944] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.873055][ T1154] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.876143][ T1154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.890317][ T5949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.902570][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.905649][ T1154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.929506][ T5949] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.949862][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.952624][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.972199][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.975185][ T1154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.992972][ T5944] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 49.000336][ T5959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.021657][ T5959] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.041292][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.044370][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.053171][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.055995][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.094615][ T5945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.138786][ T5945] veth0_vlan: entered promiscuous mode [ 49.142715][ T5944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.150434][ T5945] veth1_vlan: entered promiscuous mode [ 49.182290][ T5944] veth0_vlan: entered promiscuous mode [ 49.184621][ T5945] veth0_macvtap: entered promiscuous mode [ 49.191599][ T5944] veth1_vlan: entered promiscuous mode [ 49.194971][ T5945] veth1_macvtap: entered promiscuous mode [ 49.219730][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.231643][ T5945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.241574][ T5949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.246456][ T5945] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.252786][ T5945] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.256456][ T5945] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.260257][ T5945] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.265136][ T5944] veth0_macvtap: entered promiscuous mode [ 49.271230][ T5944] veth1_macvtap: entered promiscuous mode [ 49.295247][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.306746][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.311728][ T5959] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.340215][ T5944] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.343457][ T5944] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.346208][ T5944] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.349017][ T5944] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.362075][ T5949] veth0_vlan: entered promiscuous mode [ 49.372009][ T1154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.375375][ T1154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.394893][ T5949] veth1_vlan: entered promiscuous mode [ 49.410876][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.413377][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.427711][ T5959] veth0_vlan: entered promiscuous mode [ 49.436034][ T1154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.438778][ T1154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.443317][ T5959] veth1_vlan: entered promiscuous mode [ 49.451916][ T5945] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.467757][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.470298][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.477415][ T5949] veth0_macvtap: entered promiscuous mode [ 49.493573][ T5949] veth1_macvtap: entered promiscuous mode [ 49.503600][ T5959] veth0_macvtap: entered promiscuous mode [ 49.507514][ T5959] veth1_macvtap: entered promiscuous mode [ 49.517622][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.527082][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.533658][ T5949] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.537237][ T5949] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.541207][ T5949] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.544862][ T5949] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.555048][ T5959] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.563666][ T6010] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5'. [ 49.566784][ T5959] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.591696][ T5959] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.595298][ T5959] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.598577][ T5959] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.601338][ T5959] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.650593][ T1154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.653049][ T1154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.676040][ T99] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.686569][ T99] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.726922][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.731913][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.747101][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.751330][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.808432][ T40] audit: type=1326 audit(1749002403.022:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6027 comm="syz.2.3" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 49.817072][ T40] audit: type=1326 audit(1749002403.032:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6027 comm="syz.2.3" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 49.825850][ T40] audit: type=1326 audit(1749002403.032:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6027 comm="syz.2.3" exe="/syz-executor" sig=0 arch=40000003 syscall=118 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 49.832456][ T40] audit: type=1326 audit(1749002403.032:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6027 comm="syz.2.3" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 49.839156][ T40] audit: type=1326 audit(1749002403.032:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6027 comm="syz.2.3" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70fe579 code=0x7ffc0000 [ 49.865127][ T6036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12'. [ 49.916191][ T6037] Zero length message leads to an empty skb [ 49.996097][ T6051] Bluetooth: MGMT ver 1.23 [ 50.004028][ T24] Process accounting resumed [ 50.041193][ T838] hid (null): unknown global tag 0xd [ 50.045070][ T838] hid-generic 0005:10CF:4501.0002: unknown global tag 0xd [ 50.047271][ T838] hid-generic 0005:10CF:4501.0002: item 0 0 1 13 parsing failed [ 50.050282][ T838] hid-generic 0005:10CF:4501.0002: probe with driver hid-generic failed with error -22 [ 50.121278][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 50.123875][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 50.126750][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 50.129514][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 50.132092][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 50.136006][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 50.139261][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 50.141899][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 50.145318][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 50.150806][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 50.261320][ T6070] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve0, syncid = 10802, id = 0 [ 50.650556][ T5950] Bluetooth: hci1: command tx timeout [ 50.658706][ T5953] Bluetooth: hci2: command tx timeout [ 50.660545][ T5953] Bluetooth: hci3: command tx timeout [ 50.662588][ T5953] Bluetooth: hci0: command tx timeout [ 50.969199][ T6076] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 51.161513][ T6082] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 5, id = 0 [ 51.178215][ T6081] IPVS: stopping backup sync thread 6082 ... [ 51.893580][ T6089] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 52.299137][ T6091] netlink: 'syz.1.28': attribute type 25 has an invalid length. [ 52.363012][ T6097] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 52.446446][ T6105] tipc: Started in network mode [ 52.448020][ T6105] tipc: Node identity 4, cluster identity 4711 [ 52.450209][ T6105] tipc: Node number set to 4 [ 52.676190][ T5986] libceph: connect (1)[c::]:6789 error -101 [ 52.679296][ T5986] libceph: mon0 (1)[c::]:6789 connect error [ 52.704986][ T6118] ceph: No mds server is up or the cluster is laggy [ 52.730385][ T5955] Bluetooth: hci0: command tx timeout [ 52.730456][ T5950] Bluetooth: hci3: command tx timeout [ 52.730481][ T5955] Bluetooth: hci1: command tx timeout [ 52.730499][ T5950] Bluetooth: hci2: command tx timeout [ 52.891569][ T5953] Bluetooth: hci3: Unable to find connection for big 0x00 [ 53.120206][ T24] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 53.124749][ T24] hid-generic 0000:0000:0000.0003: hidraw1: HID v0.00 Device [syz1] on syz0 [ 53.528580][ T5987] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 53.681074][ T5987] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 53.684927][ T5987] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 53.688016][ T5987] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 53.696931][ T5987] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 53.701037][ T5987] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.704437][ T5987] usb 7-1: Product: syz [ 53.706306][ T5987] usb 7-1: Manufacturer: syz [ 53.708282][ T5987] usb 7-1: SerialNumber: syz [ 53.718186][ T5987] cdc_mbim 7-1:1.0: skipping garbage [ 53.720627][ T5987] cdc_mbim 7-1:1.0: CDC Union missing and no IAD found [ 53.723637][ T5987] cdc_mbim 7-1:1.0: bind() failure [ 53.921798][ T72] usb 7-1: USB disconnect, device number 2 [ 54.318972][ T6164] process 'syz.3.52' launched '/dev/fd/12' with NULL argv: empty string added [ 54.568006][ T6181] netlink: 56 bytes leftover after parsing attributes in process `syz.1.61'. [ 54.798432][ T34] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 54.809831][ T5950] Bluetooth: hci0: command tx timeout [ 54.809911][ T5953] Bluetooth: hci1: command tx timeout [ 54.819116][ T5950] Bluetooth: hci3: command tx timeout [ 54.820877][ T5953] Bluetooth: hci2: command tx timeout [ 54.950239][ T34] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 54.955048][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 54.961848][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 54.965918][ T34] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 54.971472][ T34] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 54.974821][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.986166][ T34] usb 7-1: config 0 descriptor?? [ 55.078438][ T6196] fuse: Bad value for 'fd' [ 55.425336][ T34] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 55.428549][ T34] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 55.431814][ T34] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 55.434854][ T34] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 55.439585][ T34] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 55.443914][ T34] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 55.448522][ T34] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 55.452188][ T34] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 55.461322][ T34] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 55.468439][ T34] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 55.471115][ T34] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 55.478423][ T34] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 55.480697][ T34] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 55.488502][ T34] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 55.491356][ T34] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 55.499135][ T34] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 55.509642][ T34] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 55.553272][ T6204] loop2: detected capacity change from 0 to 7 [ 55.557628][ T6204] Dev loop2: unable to read RDB block 7 [ 55.559988][ T6204] loop2: AHDI p1 p2 [ 55.561450][ T6204] loop2: partition table partially beyond EOD, truncated [ 55.565009][ T6204] loop2: p1 size 4244635647 extends beyond EOD, truncated [ 55.586335][ T5957] udevd[5957]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 55.609221][ T6206] capability: warning: `syz.0.69' uses deprecated v2 capabilities in a way that may be insecure [ 55.683348][ T6006] usb 7-1: USB disconnect, device number 3 [ 55.811297][ T6219] syz.1.75 uses obsolete (PF_INET,SOCK_PACKET) [ 55.918495][ T6223] kvm: kvm [6222]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x4000001b) [ 55.921982][ T72] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 56.049725][ T6226] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 56.055662][ T6226] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 56.099303][ T72] usb 5-1: Using ep0 maxpacket: 8 [ 56.104309][ T72] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 56.109259][ T72] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 56.113082][ T72] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.120385][ T72] usb 5-1: config 0 descriptor?? [ 56.306001][ T6242] netlink: 8 bytes leftover after parsing attributes in process `syz.3.86'. [ 56.332903][ T72] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 56.367342][ T40] audit: type=1326 audit(1749002409.582:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6248 comm="syz.1.89" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 56.378283][ T40] audit: type=1326 audit(1749002409.582:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6248 comm="syz.1.89" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 56.384697][ T40] audit: type=1326 audit(1749002409.582:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6248 comm="syz.1.89" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 56.391883][ T40] audit: type=1326 audit(1749002409.582:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6248 comm="syz.1.89" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 56.398401][ T40] audit: type=1326 audit(1749002409.582:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6248 comm="syz.1.89" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 56.406944][ T40] audit: type=1326 audit(1749002409.592:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6248 comm="syz.1.89" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 56.410226][ T5358] udevd[5358]: worker [5956] terminated by signal 33 (Unknown signal 33) [ 56.414484][ T40] audit: type=1326 audit(1749002409.592:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6248 comm="syz.1.89" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 56.424965][ T40] audit: type=1326 audit(1749002409.592:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6248 comm="syz.1.89" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 56.433094][ T40] audit: type=1326 audit(1749002409.592:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6248 comm="syz.1.89" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf706e5a7 code=0x7ffc0000 [ 56.439883][ T40] audit: type=1326 audit(1749002409.592:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6248 comm="syz.1.89" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf706e579 code=0x7ffc0000 [ 56.495139][ T6259] af_packet: tpacket_rcv: packet too big, clamped from 65075 to 3936. macoff=96 [ 56.535033][ T34] usb 5-1: USB disconnect, device number 2 [ 56.537487][ C3] iowarrior 5-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 56.680553][ T6268] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.98' sets config #0 [ 56.709535][ T72] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 56.868846][ T72] usb 7-1: Using ep0 maxpacket: 8 [ 56.874075][ T72] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 56.877539][ T72] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 56.883375][ T72] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 56.886539][ T72] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 56.891959][ T72] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 56.894998][ T72] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.106488][ T72] usb 7-1: GET_CAPABILITIES returned 0 [ 57.108399][ T72] usbtmc 7-1:16.0: can't read capabilities [ 57.294477][ T6280] Driver unsupported XDP return value 0 on prog (id 14) dev N/A, expect packet loss! [ 57.309700][ T34] usb 7-1: USB disconnect, device number 4 [ 57.633650][ T6297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.111'. [ 57.636565][ T6297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.111'. [ 57.650467][ T6006] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 57.768521][ T72] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 57.878426][ T6006] usb 8-1: Using ep0 maxpacket: 32 [ 57.880794][ T6308] syzkaller1: entered promiscuous mode [ 57.882926][ T6308] syzkaller1: entered allmulticast mode [ 57.883670][ T6006] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 57.889505][ T6006] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 57.892650][ T6006] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 57.896764][ T6006] usb 8-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 57.900248][ T6006] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.904031][ T6006] usb 8-1: config 0 descriptor?? [ 58.125159][ T72] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.128603][ T72] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.131473][ T72] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 58.134182][ T72] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.138401][ T72] usb 5-1: config 0 descriptor?? [ 58.278393][ T34] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 58.321416][ T6006] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:0458:5011.0005/input/input5 [ 58.330120][ T6006] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:0458:5011.0005/input/input6 [ 58.339943][ T6006] kye 0003:0458:5011.0005: input,hiddev0,hidraw1: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.3-1/input0 [ 58.430573][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.435048][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.439276][ T34] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 58.444333][ T34] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 58.447941][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.453047][ T34] usb 7-1: config 0 descriptor?? [ 58.550453][ T72] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 58.552848][ T72] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 58.556546][ T72] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:0D8C:0022.0006/input/input7 [ 58.572196][ T5987] usb 8-1: USB disconnect, device number 2 [ 58.572242][ T72] cm6533_jd 0003:0D8C:0022.0006: input,hiddev1,hidraw2: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 58.650276][ T6314] warning: `syz.1.118' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 58.751749][ T6025] usb 5-1: USB disconnect, device number 3 [ 59.058396][ T59] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 59.063699][ T34] usbhid 7-1:0.0: can't add hid device: -71 [ 59.065622][ T34] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 59.069014][ T34] usb 7-1: USB disconnect, device number 5 [ 59.213862][ T59] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.217225][ T59] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.220809][ T59] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 59.224787][ T59] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 59.227598][ T59] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.232299][ T59] usb 6-1: config 0 descriptor?? [ 59.578434][ T6006] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 59.640079][ T59] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 59.644756][ T59] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 59.750913][ T6006] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 59.755543][ T6006] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 59.759620][ T6006] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 59.764107][ T6006] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 59.774549][ T6006] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 59.778828][ T6006] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.782146][ T6006] usb 5-1: Product: syz [ 59.783950][ T6006] usb 5-1: Manufacturer: syz [ 59.785873][ T6006] usb 5-1: SerialNumber: syz [ 59.789919][ T6006] usb 5-1: config 0 descriptor?? [ 59.840329][ T5987] usb 6-1: USB disconnect, device number 2 [ 59.998511][ T6006] adutux 5-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 60.201172][ T5987] usb 5-1: USB disconnect, device number 4 [ 60.868474][ T5987] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 61.028482][ T5987] usb 6-1: Using ep0 maxpacket: 8 [ 61.032119][ T5987] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 61.035142][ T5987] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 61.039376][ T5987] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 61.042755][ T5987] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 61.047532][ T5987] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 61.050487][ T5987] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.196251][ T6392] veth0: entered promiscuous mode [ 61.201221][ T6390] veth0: left promiscuous mode [ 61.234690][ T6396] Bluetooth: MGMT ver 1.23 [ 61.259268][ T5987] usb 6-1: GET_CAPABILITIES returned 0 [ 61.261127][ T5987] usbtmc 6-1:16.0: can't read capabilities [ 61.290916][ T99] wlan1: Trigger new scan to find an IBSS to join [ 61.460649][ T5987] usb 6-1: USB disconnect, device number 3 [ 61.607060][ T6410] fuse: Bad value for 'fd' [ 62.155238][ T6431] 9pnet_virtio: no channels available for device syz [ 62.638389][ T59] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 62.790336][ T59] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 62.794744][ T59] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 62.797503][ T59] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.801011][ T59] usb 8-1: config 0 descriptor?? [ 62.808886][ T6435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.169'. [ 62.937784][ T6447] netlink: 'syz.1.175': attribute type 10 has an invalid length. [ 62.941480][ T6447] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.944481][ T6447] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.951293][ T6447] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.953530][ T6447] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.955941][ T6447] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.958129][ T6447] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.964606][ T6447] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 63.007389][ T59] usbhid 8-1:0.0: can't add hid device: -71 [ 63.009931][ T59] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 63.014559][ T59] usb 8-1: USB disconnect, device number 3 [ 63.518442][ T59] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 63.668374][ T59] usb 8-1: Using ep0 maxpacket: 32 [ 63.671425][ T59] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.674961][ T59] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 63.677892][ T59] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.682117][ T59] usb 8-1: config 0 descriptor?? [ 63.685272][ T59] ldusb 8-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 63.689031][ T59] ldusb 8-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 64.091277][ T5987] usb 8-1: USB disconnect, device number 4 [ 64.096460][ T5987] ldusb 8-1:0.0: LD USB Device #0 now disconnected [ 64.328538][ T1141] wlan1: Trigger new scan to find an IBSS to join [ 64.342248][ T6478] Invalid ELF header magic: != ELF [ 64.599858][ T6486] trusted_key: syz.2.190 sent an empty control message without MSG_MORE. [ 65.250606][ T53] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 65.411136][ T53] usb 8-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 65.414990][ T53] usb 8-1: config 1 interface 0 has no altsetting 0 [ 65.420023][ T53] usb 8-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.40 [ 65.423642][ T53] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.426742][ T53] usb 8-1: Product: syz [ 65.428594][ T53] usb 8-1: Manufacturer: syz [ 65.430597][ T53] usb 8-1: SerialNumber: syz [ 65.646068][ T53] usbhid 8-1:1.0: can't add hid device: -71 [ 65.648782][ T53] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 65.649214][ T34] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 65.657374][ T53] usb 8-1: USB disconnect, device number 5 [ 65.808412][ T34] usb 6-1: Using ep0 maxpacket: 32 [ 65.812533][ T34] usb 6-1: config 224 has an invalid interface number: 115 but max is 0 [ 65.816009][ T34] usb 6-1: config 224 has no interface number 0 [ 65.820978][ T34] usb 6-1: New USB device found, idVendor=1410, idProduct=9011, bcdDevice= f.f3 [ 65.824817][ T34] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.828117][ T34] usb 6-1: Product: syz [ 65.829970][ T34] usb 6-1: Manufacturer: syz [ 65.831906][ T34] usb 6-1: SerialNumber: syz [ 65.928392][ T5987] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 66.044575][ T34] usb 6-1: USB disconnect, device number 4 [ 66.080929][ T5987] usb 5-1: Using ep0 maxpacket: 16 [ 66.085353][ T5987] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.089878][ T5987] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.093833][ T5987] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 66.099262][ T5987] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 66.102887][ T5987] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.108025][ T5987] usb 5-1: config 0 descriptor?? [ 66.373614][ T6519] netlink: 68 bytes leftover after parsing attributes in process `syz.3.203'. [ 66.445098][ T6521] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 66.518652][ T5987] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 66.526489][ T5987] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:045E:07DA.0008/input/input8 [ 66.587844][ T5953] Bluetooth: Unknown BR/EDR signaling command 0x0e [ 66.590890][ T5953] Bluetooth: Wrong link type (-22) [ 66.590912][ T5987] microsoft 0003:045E:07DA.0008: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 66.592544][ T5953] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 66.599708][ T5953] Bluetooth: Wrong link type (-22) [ 66.720643][ T5951] usb 5-1: USB disconnect, device number 5 [ 66.902712][ T60] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.038664][ T10] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 67.047974][ T60] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.094416][ T5950] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.097806][ T5950] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.101154][ T5950] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.104192][ T5950] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.106876][ T5950] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.123098][ T60] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.189507][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 67.191187][ T60] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.192424][ T10] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 67.196887][ T10] usb 7-1: config 0 has no interface number 0 [ 67.199292][ T10] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 67.202829][ T10] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 67.205703][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.209834][ T10] usb 7-1: config 0 descriptor?? [ 67.213937][ T10] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 67.250496][ T6533] chnl_net:caif_netlink_parms(): no params data found [ 67.337197][ T6533] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.339560][ T6533] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.341834][ T6533] bridge_slave_0: entered allmulticast mode [ 67.344460][ T6533] bridge_slave_0: entered promiscuous mode [ 67.357131][ T6533] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.359905][ T6533] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.362189][ T6533] bridge_slave_1: entered allmulticast mode [ 67.364827][ T6533] bridge_slave_1: entered promiscuous mode [ 67.368880][ T13] wlan1: Trigger new scan to find an IBSS to join [ 67.401013][ T6533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.408828][ T6533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.412069][ T60] bridge_slave_1: left allmulticast mode [ 67.414219][ T60] bridge_slave_1: left promiscuous mode [ 67.417227][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.422914][ T60] bridge_slave_0: left allmulticast mode [ 67.424670][ T60] bridge_slave_0: left promiscuous mode [ 67.425901][ T6326] usb 7-1: USB disconnect, device number 6 [ 67.426465][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.541398][ T60] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 67.657043][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 67.662787][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 67.666506][ T60] bond0 (unregistering): Released all slaves [ 67.715233][ T6553] syzkaller0: entered promiscuous mode [ 67.717448][ T6553] syzkaller0: entered allmulticast mode [ 67.831267][ T60] IPVS: stopping master sync thread 6070 ... [ 68.250283][ T5953] Bluetooth: hci3: command tx timeout [ 68.284331][ T6562] sd 0:0:0:0: PR command failed: 1026 [ 68.286889][ T6562] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 68.290667][ T6562] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 68.291031][ T1141] wlan1: Creating new IBSS network, BSSID de:1e:01:0e:e5:5b [ 68.478248][ T6565] fuse: root generation should be zero [ 68.614700][ T6533] team0: Port device team_slave_0 added [ 68.645582][ T6533] team0: Port device team_slave_1 added [ 68.705467][ T6533] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.707637][ T6533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.724865][ T6533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.734776][ T6533] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.737928][ T6533] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.748345][ T6533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.847023][ T6533] hsr_slave_0: entered promiscuous mode [ 68.852920][ T6533] hsr_slave_1: entered promiscuous mode [ 68.856441][ T6533] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.859582][ T6533] Cannot create hsr debugfs directory [ 68.871942][ T60] hsr_slave_0: left promiscuous mode [ 68.874165][ T60] hsr_slave_1: left promiscuous mode [ 68.876234][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.879413][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.882971][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.885323][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.904535][ T60] veth1_macvtap: left promiscuous mode [ 68.906530][ T60] veth0_macvtap: left promiscuous mode [ 68.908467][ T60] veth1_vlan: left promiscuous mode [ 68.910235][ T60] veth0_vlan: left promiscuous mode [ 69.060117][ T6577] fuse: Bad value for 'fd' [ 69.140403][ T5953] Bluetooth: hci0: command tx timeout [ 69.566258][ T60] team0 (unregistering): Port device team_slave_1 removed [ 69.625825][ T60] team0 (unregistering): Port device team_slave_0 removed [ 70.103998][ T6598] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 70.106839][ T6598] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 70.528277][ T6533] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.533080][ T6533] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.537394][ T6533] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.549820][ T6533] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.588566][ T6533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.601496][ T6533] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.606860][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.609835][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.616225][ T99] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.618347][ T99] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.735857][ T6533] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.760557][ T6533] veth0_vlan: entered promiscuous mode [ 70.765779][ T6533] veth1_vlan: entered promiscuous mode [ 70.786820][ T6533] veth0_macvtap: entered promiscuous mode [ 70.790984][ T6533] veth1_macvtap: entered promiscuous mode [ 70.799398][ T6533] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.805662][ T6533] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.813685][ T6533] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.816406][ T6533] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.819314][ T6533] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.822019][ T6533] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.852101][ T99] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.854821][ T99] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.867880][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.870446][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.891658][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.893973][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.619674][ T6643] netlink: 24 bytes leftover after parsing attributes in process `syz.2.244'. [ 73.113641][ T60] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.208140][ T6652] netlink: 4 bytes leftover after parsing attributes in process `syz.3.247'. [ 73.378838][ T5950] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.383080][ T5950] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.386680][ T5950] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.391245][ T5950] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.394613][ T5950] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.539139][ T6654] chnl_net:caif_netlink_parms(): no params data found [ 73.642134][ T6654] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.644614][ T6654] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.647000][ T6654] bridge_slave_0: entered allmulticast mode [ 73.651290][ T6654] bridge_slave_0: entered promiscuous mode [ 73.654855][ T6654] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.657234][ T6654] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.660758][ T6654] bridge_slave_1: entered allmulticast mode [ 73.663939][ T6654] bridge_slave_1: entered promiscuous mode [ 73.696828][ T6654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.702022][ T6654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.736840][ T6654] team0: Port device team_slave_0 added [ 73.741676][ T6654] team0: Port device team_slave_1 added [ 73.759311][ T6674] binder_alloc: 6673: binder_alloc_buf size -296 failed, no address space [ 73.762236][ T6674] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096) [ 73.774542][ T6654] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.776782][ T6654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.785290][ T6654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.792545][ T6654] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.794915][ T6654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.803346][ T6654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.846450][ T6654] hsr_slave_0: entered promiscuous mode [ 73.849270][ T6654] hsr_slave_1: entered promiscuous mode [ 73.851892][ T6654] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.855044][ T6654] Cannot create hsr debugfs directory [ 74.739443][ T6684] fuse: Bad value for 'fd' [ 74.837927][ T60] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.922675][ T60] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.013910][ T60] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.115916][ T60] bridge_slave_1: left allmulticast mode [ 75.118209][ T60] bridge_slave_1: left promiscuous mode [ 75.122489][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.127142][ T60] bridge_slave_0: left allmulticast mode [ 75.129151][ T60] bridge_slave_0: left promiscuous mode [ 75.131013][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.342678][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 75.346854][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 75.351060][ T60] bond0 (unregistering): Released all slaves [ 75.458690][ T5953] Bluetooth: hci0: command tx timeout [ 75.780834][ T60] hsr_slave_0: left promiscuous mode [ 75.783051][ T60] hsr_slave_1: left promiscuous mode [ 75.785179][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.787584][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.790752][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.793189][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.811195][ T60] veth1_macvtap: left promiscuous mode [ 75.813085][ T60] veth0_macvtap: left promiscuous mode [ 75.815078][ T60] veth1_vlan: left promiscuous mode [ 75.816829][ T60] veth0_vlan: left promiscuous mode [ 76.344987][ T60] team0 (unregistering): Port device team_slave_1 removed [ 76.397269][ T60] team0 (unregistering): Port device team_slave_0 removed [ 76.920505][ T6654] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 76.925747][ T6654] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 76.932650][ T6654] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 76.938038][ T6654] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 76.982678][ T6654] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.995127][ T6654] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.003646][ T99] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.005954][ T99] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.027327][ T6704] infiniband syz1: set active [ 77.030764][ T6704] infiniband syz1: added syz_tun [ 77.036171][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.038575][ T1154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.071808][ T6704] RDS/IB: syz1: added [ 77.074879][ T6704] smc: adding ib device syz1 with port count 1 [ 77.077545][ T6704] smc: ib device syz1 port 1 has pnetid [ 77.158525][ T6654] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.191506][ T6654] veth0_vlan: entered promiscuous mode [ 77.196185][ T6654] veth1_vlan: entered promiscuous mode [ 77.214874][ T6654] veth0_macvtap: entered promiscuous mode [ 77.220820][ T6654] veth1_macvtap: entered promiscuous mode [ 77.231475][ T6654] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.239265][ T6654] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.244266][ T6654] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.247704][ T6654] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.250617][ T6654] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.253384][ T6654] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.306043][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.310045][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.334702][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.337284][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.358689][ T6717] fuse: Bad value for 'fd' [ 78.651668][ T6732] evm: overlay not supported [ 78.806672][ T6736] tipc: Started in network mode [ 78.808941][ T6736] tipc: Node identity 7e2ee0248b9f, cluster identity 4711 [ 78.812023][ T6736] tipc: Enabled bearer , priority 0 [ 78.841859][ T6736] syzkaller0: entered promiscuous mode [ 78.843663][ T6736] syzkaller0: entered allmulticast mode [ 78.845819][ T6736] tipc: Resetting bearer [ 78.851971][ T6735] tipc: Resetting bearer [ 79.020397][ T40] kauditd_printk_skb: 463 callbacks suppressed [ 79.020410][ T40] audit: type=1800 audit(1749002432.242:480): pid=6738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.275" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 79.462115][ T6743] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 79.464338][ T6743] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 79.501168][ T6743] vhci_hcd vhci_hcd.0: Device attached [ 79.692606][ T6735] tipc: Disabling bearer [ 79.768433][ T53] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 79.791110][ T99] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.891070][ T6744] vhci_hcd: connection reset by peer [ 79.895911][ T1154] vhci_hcd: stop threads [ 79.898041][ T1154] vhci_hcd: release socket [ 79.900546][ T1154] vhci_hcd: disconnect device [ 80.015174][ T5950] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.018693][ T5950] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.021560][ T5950] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.025193][ T5950] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.028137][ T5950] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.222954][ T6751] chnl_net:caif_netlink_parms(): no params data found [ 80.289471][ T6751] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.291650][ T6751] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.293880][ T6751] bridge_slave_0: entered allmulticast mode [ 80.296418][ T6751] bridge_slave_0: entered promiscuous mode [ 80.299958][ T6751] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.302150][ T6751] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.304382][ T6751] bridge_slave_1: entered allmulticast mode [ 80.307312][ T6751] bridge_slave_1: entered promiscuous mode [ 80.340473][ T6751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.344923][ T6751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.380051][ T6751] team0: Port device team_slave_0 added [ 80.383454][ T6751] team0: Port device team_slave_1 added [ 80.424180][ T6751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.426489][ T6751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.435014][ T6751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.439428][ T6751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.441635][ T6751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.450645][ T6751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.500421][ T6751] hsr_slave_0: entered promiscuous mode [ 80.503199][ T6751] hsr_slave_1: entered promiscuous mode [ 80.505267][ T6751] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.507620][ T6751] Cannot create hsr debugfs directory [ 80.750302][ T6764] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 81.034601][ T6771] mmap: syz.3.282 (6771) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 81.048716][ T6771] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 81.051662][ T6771] UDF-fs: Scanning with blocksize 2048 failed [ 81.054981][ T6771] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 81.057281][ T6771] UDF-fs: Scanning with blocksize 4096 failed [ 81.104930][ T6773] tipc: Enabled bearer , priority 0 [ 81.126589][ T6773] syzkaller0: entered promiscuous mode [ 81.128723][ T6773] syzkaller0: entered allmulticast mode [ 81.130858][ T6773] tipc: Resetting bearer [ 81.139727][ T29] cfg80211: failed to load regulatory.db [ 81.142719][ T6772] tipc: Resetting bearer [ 81.932486][ T6772] tipc: Disabling bearer [ 81.953369][ T6782] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 81.955463][ T6782] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 81.959264][ T6782] vhci_hcd vhci_hcd.0: Device attached [ 82.088501][ T5953] Bluetooth: hci0: command tx timeout [ 82.359757][ T99] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.424772][ T99] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.500812][ T6785] vhci_hcd: connection closed [ 82.502078][ T60] vhci_hcd: stop threads [ 82.507308][ T60] vhci_hcd: release socket [ 82.509103][ T60] vhci_hcd: disconnect device [ 82.515347][ T99] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.600213][ T99] bridge_slave_1: left allmulticast mode [ 82.602030][ T99] bridge_slave_1: left promiscuous mode [ 82.604038][ T99] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.609475][ T99] bridge_slave_0: left allmulticast mode [ 82.611290][ T99] bridge_slave_0: left promiscuous mode [ 82.613161][ T99] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.847622][ T99] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 82.852583][ T99] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 82.856349][ T99] bond0 (unregistering): Released all slaves [ 83.075352][ T6794] netlink: 4 bytes leftover after parsing attributes in process `syz.0.289'. [ 83.196456][ T99] hsr_slave_0: left promiscuous mode [ 83.199366][ T99] hsr_slave_1: left promiscuous mode [ 83.202146][ T99] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.205219][ T99] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.207964][ T99] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.210471][ T99] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.228931][ T99] veth1_macvtap: left promiscuous mode [ 83.231478][ T99] veth0_macvtap: left promiscuous mode [ 83.233401][ T99] veth1_vlan: left promiscuous mode [ 83.235186][ T99] veth0_vlan: left promiscuous mode [ 83.689274][ T99] team0 (unregistering): Port device team_slave_1 removed [ 83.742970][ T99] team0 (unregistering): Port device team_slave_0 removed [ 83.815733][ T6802] usb usb8: usbfs: process 6802 (syz.3.292) did not claim interface 0 before use [ 84.169592][ T5953] Bluetooth: hci0: command tx timeout [ 84.298925][ T6751] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.303110][ T6751] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.307401][ T6751] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.316335][ T6751] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.359173][ T6751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.368785][ T6751] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.374158][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.377847][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.385033][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.387344][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.495247][ T6751] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.516516][ T6751] veth0_vlan: entered promiscuous mode [ 84.521284][ T6751] veth1_vlan: entered promiscuous mode [ 84.537671][ T6751] veth0_macvtap: entered promiscuous mode [ 84.541536][ T6751] veth1_macvtap: entered promiscuous mode [ 84.550360][ T6751] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.555779][ T6751] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.561687][ T6751] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.564490][ T6751] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.567197][ T6751] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.571279][ T6751] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.600841][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.603928][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.616128][ T99] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.619872][ T99] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.816780][ T5953] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 84.820939][ T5953] CPU: 3 UID: 0 PID: 5953 Comm: kworker/u33:3 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) [ 84.820997][ T5953] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 84.821011][ T5953] Workqueue: hci3 hci_rx_work [ 84.821034][ T5953] Call Trace: [ 84.821042][ T5953] [ 84.821050][ T5953] dump_stack_lvl+0x16c/0x1f0 [ 84.821082][ T5953] sysfs_warn_dup+0x7f/0xa0 [ 84.821105][ T5953] sysfs_create_dir_ns+0x24b/0x2b0 [ 84.821131][ T5953] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 84.821152][ T5953] ? find_held_lock+0x2b/0x80 [ 84.821176][ T5953] ? do_raw_spin_unlock+0x172/0x230 [ 84.821212][ T5953] kobject_add_internal+0x2c4/0x9b0 [ 84.821238][ T5953] kobject_add+0x16e/0x240 [ 84.821258][ T5953] ? __pfx_kobject_add+0x10/0x10 [ 84.821280][ T5953] ? do_raw_spin_unlock+0x172/0x230 [ 84.821308][ T5953] ? kobject_put+0xab/0x5a0 [ 84.821336][ T5953] device_add+0x288/0x1a70 [ 84.821361][ T5953] ? __pfx_dev_set_name+0x10/0x10 [ 84.821387][ T5953] ? __pfx_device_add+0x10/0x10 [ 84.821412][ T5953] ? mgmt_send_event_skb+0x2fb/0x460 [ 84.821437][ T5953] hci_conn_add_sysfs+0x17e/0x230 [ 84.821456][ T5953] le_conn_complete_evt+0x1075/0x1d70 [ 84.821491][ T5953] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 84.821516][ T5953] ? hci_event_packet+0x459/0x11c0 [ 84.821548][ T5953] hci_le_conn_complete_evt+0x23c/0x370 [ 84.821583][ T5953] hci_le_meta_evt+0x357/0x5e0 [ 84.821602][ T5953] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 84.821631][ T5953] hci_event_packet+0x682/0x11c0 [ 84.821660][ T5953] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 84.821678][ T5953] ? __pfx_hci_event_packet+0x10/0x10 [ 84.821709][ T5953] ? kcov_remote_start+0x3c9/0x6d0 [ 84.821735][ T5953] ? lockdep_hardirqs_on+0x7c/0x110 [ 84.821769][ T5953] hci_rx_work+0x2c5/0x16b0 [ 84.821789][ T5953] ? rcu_is_watching+0x12/0xc0 [ 84.821811][ T5953] process_one_work+0x9cf/0x1b70 [ 84.821849][ T5953] ? __pfx_process_one_work+0x10/0x10 [ 84.821890][ T5953] ? assign_work+0x1a0/0x250 [ 84.821913][ T5953] worker_thread+0x6c8/0xf10 [ 84.821951][ T5953] ? __pfx_worker_thread+0x10/0x10 [ 84.821978][ T5953] kthread+0x3c2/0x780 [ 84.822004][ T5953] ? __pfx_kthread+0x10/0x10 [ 84.822029][ T5953] ? rcu_is_watching+0x12/0xc0 [ 84.822044][ T5953] ? __pfx_kthread+0x10/0x10 [ 84.822066][ T5953] ret_from_fork+0x5d7/0x6f0 [ 84.822088][ T5953] ? __pfx_kthread+0x10/0x10 [ 84.822112][ T5953] ret_from_fork_asm+0x1a/0x30 [ 84.822144][ T5953] [ 84.822207][ T5953] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 84.888461][ T53] vhci_hcd: vhci_device speed not set [ 84.888828][ T5953] Bluetooth: hci3: failed to register connection device [ 85.081698][ T5953] Bluetooth: hci3: Dropping invalid advertising data [ 85.085652][ T5953] Bluetooth: hci3: unknown advertising packet type: 0x10 [ 85.085679][ T5953] Bluetooth: hci3: Malformed LE Event: 0x02 [ 86.205552][ T6846] syz_tun: entered allmulticast mode [ 86.222110][ T6845] syz_tun: left allmulticast mode [ 87.017376][ T60] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.633887][ T5950] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.637139][ T5950] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.640402][ T5950] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.643360][ T5950] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.645970][ T5950] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.846731][ T6867] chnl_net:caif_netlink_parms(): no params data found [ 87.905485][ T6867] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.907771][ T6867] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.910104][ T6867] bridge_slave_0: entered allmulticast mode [ 87.912722][ T6867] bridge_slave_0: entered promiscuous mode [ 87.915824][ T6867] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.918090][ T6867] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.920437][ T6867] bridge_slave_1: entered allmulticast mode [ 87.923012][ T6867] bridge_slave_1: entered promiscuous mode [ 87.962852][ T6867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.967326][ T6867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.000836][ T6867] team0: Port device team_slave_0 added [ 88.005116][ T6867] team0: Port device team_slave_1 added [ 88.035080][ T6867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.037288][ T6867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.045650][ T6867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.050403][ T6867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.052542][ T6867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.060567][ T6867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.096859][ T6867] hsr_slave_0: entered promiscuous mode [ 88.099203][ T6867] hsr_slave_1: entered promiscuous mode [ 88.101336][ T6867] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.103685][ T6867] Cannot create hsr debugfs directory [ 88.668624][ T60] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.779126][ T60] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.846851][ T60] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.929092][ T60] bridge_slave_1: left allmulticast mode [ 88.931170][ T60] bridge_slave_1: left promiscuous mode [ 88.933110][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.936926][ T60] bridge_slave_0: left allmulticast mode [ 88.938960][ T60] bridge_slave_0: left promiscuous mode [ 88.940758][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.085541][ T5953] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.088961][ T5953] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.091833][ T5953] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.095517][ T5953] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.098233][ T5953] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.187576][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.193204][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.196793][ T60] bond0 (unregistering): Released all slaves [ 89.321912][ T6887] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 89.329907][ T6887] syzkaller0: entered promiscuous mode [ 89.331618][ T6887] syzkaller0: entered allmulticast mode [ 89.689041][ T5953] Bluetooth: hci0: command tx timeout [ 89.724324][ T6890] fuse: Bad value for 'fd' [ 90.186582][ T6895] netlink: 12 bytes leftover after parsing attributes in process `syz.0.320'. [ 90.214553][ T6895] sch_tbf: burst 129 is lower than device bridge1 mtu (1514) ! [ 90.233353][ T6881] chnl_net:caif_netlink_parms(): no params data found [ 90.323537][ T60] hsr_slave_0: left promiscuous mode [ 90.326242][ T60] hsr_slave_1: left promiscuous mode [ 90.328229][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.330901][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.333584][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.335851][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.362944][ T60] veth1_macvtap: left promiscuous mode [ 90.365276][ T60] veth0_macvtap: left promiscuous mode [ 90.367589][ T60] veth1_vlan: left promiscuous mode [ 90.370265][ T60] veth0_vlan: left promiscuous mode [ 90.529836][ T6902] netlink: 8 bytes leftover after parsing attributes in process `syz.3.322'. [ 90.549387][ T6900] fuse: Bad value for 'fd' [ 90.898663][ T60] team0 (unregistering): Port device team_slave_1 removed [ 90.951363][ T60] team0 (unregistering): Port device team_slave_0 removed [ 91.130960][ T5953] Bluetooth: hci2: command tx timeout [ 91.476453][ T6881] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.479202][ T6881] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.481966][ T6881] bridge_slave_0: entered allmulticast mode [ 91.484520][ T6881] bridge_slave_0: entered promiscuous mode [ 91.498981][ T6881] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.501858][ T6881] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.504102][ T6881] bridge_slave_1: entered allmulticast mode [ 91.506657][ T6881] bridge_slave_1: entered promiscuous mode [ 91.560623][ T6881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.573282][ T6881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.595357][ T6867] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.616081][ T6881] team0: Port device team_slave_0 added [ 91.621640][ T6867] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.626304][ T6867] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.636904][ T6881] team0: Port device team_slave_1 added [ 91.647964][ T6925] netlink: 156 bytes leftover after parsing attributes in process `syz.0.329'. [ 91.659865][ T6867] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.679662][ T6881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.681923][ T6881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.691038][ T6881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.695504][ T6881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.697929][ T6881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.706142][ T6881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.760838][ T6881] hsr_slave_0: entered promiscuous mode [ 91.763275][ T6881] hsr_slave_1: entered promiscuous mode [ 91.765437][ T6881] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.767858][ T6881] Cannot create hsr debugfs directory [ 91.768418][ T5953] Bluetooth: hci0: command tx timeout [ 91.930447][ T6867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.990502][ T6867] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.998888][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.001158][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.004493][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.006748][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.014778][ T6881] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.033566][ T6881] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.045213][ T6881] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.056623][ T6881] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.112664][ T6881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.124159][ T6881] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.135304][ T1154] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.137561][ T1154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.146848][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.149855][ T1154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.158543][ T6926] fuse: Bad value for 'fd' [ 92.165580][ T6933] 9pnet_virtio: no channels available for device syz [ 92.186060][ T60] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.216420][ T6881] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.222873][ T6867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.248503][ T6867] veth0_vlan: entered promiscuous mode [ 92.254020][ T6867] veth1_vlan: entered promiscuous mode [ 92.270999][ T60] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.285437][ T6867] veth0_macvtap: entered promiscuous mode [ 92.290787][ T6867] veth1_macvtap: entered promiscuous mode [ 92.301037][ T6867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.307033][ T6867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.313960][ T6867] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.317165][ T6867] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.320999][ T6867] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.324060][ T6867] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.342497][ T60] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.367232][ T6881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.390328][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.393608][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.424234][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.426785][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.440690][ T60] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.561713][ T60] bridge_slave_1: left allmulticast mode [ 92.563581][ T60] bridge_slave_1: left promiscuous mode [ 92.565476][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.572686][ T60] bridge_slave_0: left allmulticast mode [ 92.575020][ T60] bridge_slave_0: left promiscuous mode [ 92.577687][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.828856][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.833675][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.837119][ T60] bond0 (unregistering): Released all slaves [ 92.871390][ T6881] veth0_vlan: entered promiscuous mode [ 92.879336][ T6881] veth1_vlan: entered promiscuous mode [ 92.899833][ T6881] veth0_macvtap: entered promiscuous mode [ 92.905513][ T6881] veth1_macvtap: entered promiscuous mode [ 92.920496][ T6881] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.930484][ T6881] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.945082][ T6881] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.948767][ T6881] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.952124][ T6881] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.955483][ T6881] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.005202][ T1154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.008087][ T1154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.022793][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.025226][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.208613][ T5953] Bluetooth: hci2: command tx timeout [ 93.323904][ T60] hsr_slave_0: left promiscuous mode [ 93.326138][ T60] hsr_slave_1: left promiscuous mode [ 93.328183][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.330980][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.333756][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.336095][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.352369][ T60] veth1_macvtap: left promiscuous mode [ 93.354132][ T60] veth0_macvtap: left promiscuous mode [ 93.355868][ T60] veth1_vlan: left promiscuous mode [ 93.357522][ T60] veth0_vlan: left promiscuous mode [ 94.080284][ T6980] netlink: 68 bytes leftover after parsing attributes in process `syz.4.340'. [ 94.089119][ T60] team0 (unregistering): Port device team_slave_1 removed [ 94.238257][ T60] team0 (unregistering): Port device team_slave_0 removed [ 94.443969][ T6984] fuse: Bad value for 'fd' [ 94.922471][ T6988] 9pnet_virtio: no channels available for device syz [ 94.926988][ T6988] fuse: Bad value for 'fd' [ 95.288577][ T5953] Bluetooth: hci2: command tx timeout [ 95.434186][ T60] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.796197][ T6992] fuse: Bad value for 'fd' [ 95.994631][ T6997] overlayfs: upper fs does not support file handles, falling back to index=off. [ 96.139675][ T5950] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.143923][ T5950] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.147719][ T5950] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.153728][ T5950] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.156221][ T5950] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.405404][ T60] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.474482][ T7001] chnl_net:caif_netlink_parms(): no params data found [ 96.524975][ T60] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.574899][ T7001] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.577449][ T7001] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.580429][ T7001] bridge_slave_0: entered allmulticast mode [ 96.583730][ T7001] bridge_slave_0: entered promiscuous mode [ 96.587230][ T7001] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.590100][ T7001] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.592992][ T7001] bridge_slave_1: entered allmulticast mode [ 96.596901][ T7001] bridge_slave_1: entered promiscuous mode [ 96.640108][ T60] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.694753][ T7001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.709395][ T7001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.757104][ T7001] team0: Port device team_slave_0 added [ 96.759146][ T6326] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 96.773617][ T7001] team0: Port device team_slave_1 added [ 96.824012][ T7001] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.826216][ T7001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.834236][ T7001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.838113][ T60] bridge_slave_1: left allmulticast mode [ 96.840150][ T60] bridge_slave_1: left promiscuous mode [ 96.842026][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.846139][ T60] bridge_slave_0: left allmulticast mode [ 96.847967][ T60] bridge_slave_0: left promiscuous mode [ 96.850526][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.911337][ T6326] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.917047][ T6326] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.921129][ T6326] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 96.925350][ T6326] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 96.928381][ T6326] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.932354][ T6326] usb 8-1: config 0 descriptor?? [ 97.125631][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.131441][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.139587][ T60] bond0 (unregistering): Released all slaves [ 97.146271][ T7001] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.148579][ T7001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.156472][ T7001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.203974][ T7001] hsr_slave_0: entered promiscuous mode [ 97.206180][ T7001] hsr_slave_1: entered promiscuous mode [ 97.208154][ T7001] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.211943][ T7001] Cannot create hsr debugfs directory [ 97.343200][ T6326] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x6 [ 97.346251][ T6326] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 97.351783][ T6326] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 97.368738][ T5950] Bluetooth: hci2: command tx timeout [ 97.530449][ T60] hsr_slave_0: left promiscuous mode [ 97.532587][ T60] hsr_slave_1: left promiscuous mode [ 97.534802][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.537322][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.542579][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.544909][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.545473][ T72] usb 8-1: USB disconnect, device number 6 [ 97.573403][ T60] veth1_macvtap: left promiscuous mode [ 97.575201][ T60] veth0_macvtap: left promiscuous mode [ 97.576998][ T60] veth1_vlan: left promiscuous mode [ 97.579273][ T60] veth0_vlan: left promiscuous mode [ 98.116710][ T60] team0 (unregistering): Port device team_slave_1 removed [ 98.177818][ T60] team0 (unregistering): Port device team_slave_0 removed [ 98.248534][ T5950] Bluetooth: hci0: command tx timeout [ 98.354992][ T7038] fuse: Bad value for 'fd' [ 98.733916][ T7042] 9pnet_virtio: no channels available for device syz [ 98.815231][ T7001] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 98.820263][ T7001] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 98.825558][ T7001] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 98.830124][ T7001] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 98.891223][ T7001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.904147][ T7001] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.923547][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.926130][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.929435][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.931697][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.048117][ T7001] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.075859][ T7001] veth0_vlan: entered promiscuous mode [ 99.081998][ T7001] veth1_vlan: entered promiscuous mode [ 99.095696][ T7001] veth0_macvtap: entered promiscuous mode [ 99.099717][ T7001] veth1_macvtap: entered promiscuous mode [ 99.107744][ T7001] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.114334][ T7001] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.119190][ T7001] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.121842][ T7001] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.124512][ T7001] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.127130][ T7001] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.161375][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.163961][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.180796][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.183640][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.798470][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 99.958425][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 99.961800][ T10] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 99.964543][ T10] usb 5-1: config 0 has no interface number 0 [ 99.967162][ T10] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 99.971799][ T10] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 99.976341][ T10] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 99.980867][ T10] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 99.985617][ T10] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 99.988628][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.994849][ T10] usb 5-1: config 0 descriptor?? [ 99.999773][ T10] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 100.202894][ T6956] usb 5-1: USB disconnect, device number 6 [ 100.207517][ T6956] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 100.376453][ T7058] fuse: Bad value for 'fd' [ 101.211500][ T7071] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 101.213554][ T7071] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 101.216396][ T7071] vhci_hcd vhci_hcd.0: Device attached [ 101.508437][ T5951] usb 37-1: new high-speed USB device number 3 using vhci_hcd [ 101.578128][ T7072] vhci_hcd: connection reset by peer [ 101.586750][ T1154] vhci_hcd: stop threads [ 101.588150][ T1154] vhci_hcd: release socket [ 101.591620][ T1154] vhci_hcd: disconnect device [ 102.253564][ T7082] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.386138][ T7083] fuse: Bad value for 'fd' [ 102.401176][ T60] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.090948][ T7090] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 103.102264][ T7091] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 103.181529][ T5953] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 103.184790][ T5953] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 103.187628][ T5953] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 103.193444][ T5953] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 103.195991][ T5953] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 103.386823][ T7099] chnl_net:caif_netlink_parms(): no params data found [ 103.450079][ T7099] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.452238][ T7099] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.454495][ T7099] bridge_slave_0: entered allmulticast mode [ 103.457049][ T7099] bridge_slave_0: entered promiscuous mode [ 103.460763][ T7099] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.462910][ T7099] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.465060][ T7099] bridge_slave_1: entered allmulticast mode [ 103.467591][ T7099] bridge_slave_1: entered promiscuous mode [ 103.469424][ T6882] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 103.502646][ T7099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.506955][ T7099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.542848][ T7099] team0: Port device team_slave_0 added [ 103.546082][ T7099] team0: Port device team_slave_1 added [ 103.583176][ T7099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.585947][ T7099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.596063][ T7099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.601948][ T7099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.604703][ T7099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.614232][ T7099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.639778][ T6882] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 103.642287][ T6882] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 103.645209][ T6882] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 103.647887][ T6882] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 103.651131][ T6882] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 103.656085][ T6882] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 103.658909][ T6882] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 103.662070][ T6882] usb 5-1: Product: syz [ 103.663762][ T6882] usb 5-1: Manufacturer: syz [ 103.671266][ T6882] cdc_wdm 5-1:1.0: skipping garbage [ 103.673446][ T6882] cdc_wdm 5-1:1.0: skipping garbage [ 103.677161][ T6882] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 103.680689][ T6882] cdc_wdm 5-1:1.0: Unknown control protocol [ 103.687824][ T7099] hsr_slave_0: entered promiscuous mode [ 103.690234][ T7099] hsr_slave_1: entered promiscuous mode [ 103.692307][ T7099] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 103.694699][ T7099] Cannot create hsr debugfs directory [ 104.077384][ T6882] usb 5-1: USB disconnect, device number 7 [ 104.265233][ T7121] fuse: Bad value for 'fd' [ 104.483270][ T60] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.553357][ T60] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.657954][ T60] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.775698][ T60] bridge_slave_1: left allmulticast mode [ 104.777574][ T60] bridge_slave_1: left promiscuous mode [ 104.779594][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.790422][ T60] bridge_slave_0: left allmulticast mode [ 104.792279][ T60] bridge_slave_0: left promiscuous mode [ 104.794625][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.211024][ T5950] Bluetooth: hci0: command tx timeout [ 105.523914][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.529981][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.534241][ T60] bond0 (unregistering): Released all slaves [ 106.001359][ T60] hsr_slave_0: left promiscuous mode [ 106.003311][ T60] hsr_slave_1: left promiscuous mode [ 106.005055][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.007033][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.011167][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.013319][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.037539][ T60] veth1_macvtap: left promiscuous mode [ 106.039564][ T60] veth0_macvtap: left promiscuous mode [ 106.041385][ T60] veth1_vlan: left promiscuous mode [ 106.043096][ T60] veth0_vlan: left promiscuous mode [ 106.592425][ T60] team0 (unregistering): Port device team_slave_1 removed [ 106.638902][ T5951] vhci_hcd: vhci_device speed not set [ 106.654925][ T60] team0 (unregistering): Port device team_slave_0 removed [ 106.998003][ T7171] fuse: Bad value for 'fd' [ 107.148425][ T7161] tipc: Enabling of bearer rejected, failed to enable media [ 107.180617][ T7099] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 107.186666][ T7099] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 107.194025][ T7099] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 107.200415][ T7099] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 107.270386][ T7099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.281307][ T7099] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.286049][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.288182][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.288626][ T5950] Bluetooth: hci0: command tx timeout [ 107.296001][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.298143][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.354646][ T7099] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 107.370839][ T7173] tipc: Enabled bearer , priority 0 [ 107.375053][ T7172] tipc: Resetting bearer [ 108.242972][ T7172] tipc: Disabling bearer [ 108.299935][ T7099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.328233][ T7099] veth0_vlan: entered promiscuous mode [ 108.334776][ T7099] veth1_vlan: entered promiscuous mode [ 108.351283][ T7099] veth0_macvtap: entered promiscuous mode [ 108.356015][ T7099] veth1_macvtap: entered promiscuous mode [ 108.367319][ T7099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.374710][ T7099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.378917][ T7099] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.382188][ T7099] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.385521][ T7099] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.388830][ T7099] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.417740][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.421919][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.439241][ T1154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.442146][ T1154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.602118][ T7187] syzkaller0: entered promiscuous mode [ 108.603823][ T7187] syzkaller0: entered allmulticast mode [ 109.184111][ T7189] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 109.809129][ T7214] fuse: Bad value for 'fd' [ 110.195281][ T1141] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.102367][ T7225] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 111.198250][ T7230] siw: device registration error -23 [ 111.209339][ T5953] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 111.222885][ T5953] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 111.225992][ T5953] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 111.228828][ T5953] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 111.231789][ T5953] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 111.593817][ T7233] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 111.596550][ T7233] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 111.601174][ T7233] vhci_hcd vhci_hcd.0: Device attached [ 111.684698][ T7228] chnl_net:caif_netlink_parms(): no params data found [ 111.786905][ T1141] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.809242][ T7241] fuse: Bad value for 'fd' [ 111.867756][ T7228] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.870119][ T7228] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.873261][ T7228] bridge_slave_0: entered allmulticast mode [ 111.877111][ T7228] bridge_slave_0: entered promiscuous mode [ 111.881606][ T7228] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.883916][ T7228] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.886333][ T7228] bridge_slave_1: entered allmulticast mode [ 111.889659][ T7228] bridge_slave_1: entered promiscuous mode [ 111.940106][ T7228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.943828][ T7235] vhci_hcd: connection closed [ 111.945075][ T60] vhci_hcd: stop threads [ 111.949288][ T60] vhci_hcd: release socket [ 111.951821][ T60] vhci_hcd: disconnect device [ 111.952702][ T7228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.008075][ T7228] team0: Port device team_slave_0 added [ 112.009119][ T5951] usb 37-1: new high-speed USB device number 4 using vhci_hcd [ 112.013264][ T5951] usb 37-1: enqueue for inactive port 0 [ 112.016532][ T7228] team0: Port device team_slave_1 added [ 112.076615][ T7228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.078693][ T5951] vhci_hcd: vhci_device speed not set [ 112.082446][ T7228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.090501][ T7228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.095002][ T7228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.097299][ T7228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.106202][ T7228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.146579][ T7228] hsr_slave_0: entered promiscuous mode [ 112.149034][ T7228] hsr_slave_1: entered promiscuous mode [ 112.151228][ T7228] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.153863][ T7228] Cannot create hsr debugfs directory [ 112.210794][ T1141] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.317492][ T1141] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.422864][ T1141] bridge_slave_1: left allmulticast mode [ 112.424747][ T1141] bridge_slave_1: left promiscuous mode [ 112.426757][ T1141] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.431751][ T1141] bridge_slave_0: left allmulticast mode [ 112.433797][ T1141] bridge_slave_0: left promiscuous mode [ 112.435822][ T1141] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.734202][ T1141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.739963][ T1141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.749054][ T1141] bond0 (unregistering): Released all slaves [ 113.088232][ T7259] fuse: Bad value for 'fd' [ 113.251250][ T1141] hsr_slave_0: left promiscuous mode [ 113.253738][ T1141] hsr_slave_1: left promiscuous mode [ 113.255860][ T1141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.258418][ T1141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.261527][ T1141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.263952][ T1141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.288464][ T5953] Bluetooth: hci0: command tx timeout [ 113.299390][ T1141] veth1_macvtap: left promiscuous mode [ 113.301828][ T1141] veth0_macvtap: left promiscuous mode [ 113.304359][ T1141] veth1_vlan: left promiscuous mode [ 113.306761][ T1141] veth0_vlan: left promiscuous mode [ 113.785405][ T7264] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 113.972259][ T1141] team0 (unregistering): Port device team_slave_1 removed [ 114.046560][ T1141] team0 (unregistering): Port device team_slave_0 removed [ 114.631814][ T7270] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 114.657256][ T7228] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 114.662107][ T7228] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 114.666192][ T7228] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 114.671402][ T7228] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 114.722505][ T7228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.732476][ T7228] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.737645][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.740301][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.747561][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.749900][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.798193][ T7274] binder: 7273:7274 ioctl c0306201 80000080 returned -14 [ 114.898699][ T7228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.922120][ T7228] veth0_vlan: entered promiscuous mode [ 114.927623][ T7228] veth1_vlan: entered promiscuous mode [ 114.945163][ T7228] veth0_macvtap: entered promiscuous mode [ 114.949931][ T7228] veth1_macvtap: entered promiscuous mode [ 114.958579][ T7228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.964785][ T7228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.970470][ T7228] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.973467][ T7228] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.976332][ T7228] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.979701][ T7228] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.007016][ T7282] binder: 7281:7282 ioctl c0306201 80000080 returned -14 [ 115.031047][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.034250][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.056429][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.060180][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.160757][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805f470400: rx timeout, send abort [ 115.166211][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88805f470400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 115.208555][ T7286] fuse: Bad value for 'fd' [ 116.029009][ T7294] fuse: Bad value for 'fd' [ 117.133414][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.127421][ T5950] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 118.130632][ T5950] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 118.133717][ T5950] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 118.140377][ T5950] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 118.143211][ T5950] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 118.262376][ T7323] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.319889][ T7323] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.370300][ T7316] chnl_net:caif_netlink_parms(): no params data found [ 118.384193][ T7328] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.452959][ T7316] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.455254][ T7316] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.457637][ T7316] bridge_slave_0: entered allmulticast mode [ 118.460366][ T7316] bridge_slave_0: entered promiscuous mode [ 118.463461][ T7316] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.465795][ T7316] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.468876][ T7316] bridge_slave_1: entered allmulticast mode [ 118.471472][ T7316] bridge_slave_1: entered promiscuous mode [ 118.510043][ T7316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.514562][ T7316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.547916][ T7316] team0: Port device team_slave_0 added [ 118.552199][ T7316] team0: Port device team_slave_1 added [ 118.582670][ T7316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.584864][ T7316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.593554][ T7316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.597770][ T7316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.599983][ T7316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.608223][ T7316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.623283][ T7334] fuse: Bad value for 'fd' [ 118.631235][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.701689][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.710649][ T7316] hsr_slave_0: entered promiscuous mode [ 118.712898][ T7316] hsr_slave_1: entered promiscuous mode [ 118.715046][ T7316] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 118.717494][ T7316] Cannot create hsr debugfs directory [ 118.769434][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.837270][ T12] bridge_slave_1: left allmulticast mode [ 118.839219][ T12] bridge_slave_1: left promiscuous mode [ 118.841077][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.844885][ T12] bridge_slave_0: left allmulticast mode [ 118.846703][ T12] bridge_slave_0: left promiscuous mode [ 118.848878][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.123495][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.128034][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.131864][ T12] bond0 (unregistering): Released all slaves [ 119.467767][ T7352] netlink: 'syz.4.438': attribute type 10 has an invalid length. [ 119.470621][ T7352] netlink: 32 bytes leftover after parsing attributes in process `syz.4.438'. [ 119.569931][ T12] hsr_slave_0: left promiscuous mode [ 119.573842][ T12] hsr_slave_1: left promiscuous mode [ 119.575840][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.578177][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.585090][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.587450][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.622778][ T12] veth1_macvtap: left promiscuous mode [ 119.624563][ T12] veth0_macvtap: left promiscuous mode [ 119.626375][ T12] veth1_vlan: left promiscuous mode [ 119.628166][ T12] veth0_vlan: left promiscuous mode [ 120.178979][ T5950] Bluetooth: hci0: command tx timeout [ 120.329280][ T12] team0 (unregistering): Port device team_slave_1 removed [ 120.364452][ T7373] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 120.367306][ T7373] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 120.371532][ T7373] vhci_hcd vhci_hcd.0: Device attached [ 120.408197][ T12] team0 (unregistering): Port device team_slave_0 removed [ 120.705090][ T5951] usb 37-1: new high-speed USB device number 5 using vhci_hcd [ 120.775652][ T7384] fuse: Bad value for 'fd' [ 120.895239][ T7374] vhci_hcd: connection reset by peer [ 120.897039][ T1141] vhci_hcd: stop threads [ 120.899811][ T1141] vhci_hcd: release socket [ 120.901337][ T1141] vhci_hcd: disconnect device [ 121.033108][ T7388] 9pnet_virtio: no channels available for device syz [ 121.052047][ T7316] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 121.056796][ T7316] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 121.072410][ T7316] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 121.080905][ T7316] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 121.133743][ T7316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.142687][ T7316] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.147444][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.150889][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.161936][ T1154] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.164276][ T1154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.283072][ T7316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.302889][ T7316] veth0_vlan: entered promiscuous mode [ 121.310195][ T7316] veth1_vlan: entered promiscuous mode [ 121.326141][ T7316] veth0_macvtap: entered promiscuous mode [ 121.331311][ T7316] veth1_macvtap: entered promiscuous mode [ 121.342105][ T7316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.349962][ T7316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.354702][ T7316] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.357496][ T7316] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.360469][ T7316] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.363271][ T7316] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.402647][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.405135][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.420669][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.423430][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.122140][ T7413] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 122.494581][ T7419] fuse: Bad value for 'fd' [ 122.936495][ T7427] 9pnet_virtio: no channels available for device syz [ 123.296046][ T7429] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 123.298183][ T7429] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 123.301440][ T7429] vhci_hcd vhci_hcd.0: Device attached [ 123.525282][ T7430] vhci_hcd: connection closed [ 123.526734][ T1154] vhci_hcd: stop threads [ 123.530279][ T1154] vhci_hcd: release socket [ 123.531785][ T1154] vhci_hcd: disconnect device [ 123.572255][ T5986] usb 43-1: new high-speed USB device number 2 using vhci_hcd [ 123.574690][ T5986] usb 43-1: enqueue for inactive port 0 [ 123.648435][ T5986] vhci_hcd: vhci_device speed not set [ 123.689074][ T5950] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 123.692448][ T5950] Bluetooth: hci3: Injecting HCI hardware error event [ 123.695080][ T5950] Bluetooth: hci3: hardware error 0x00 [ 123.809485][ T7447] binder_alloc: 7446: pid 7446 spamming oneway? 1 buffers allocated for a total size of 6144 [ 123.844514][ T60] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.030116][ T7466] 9pnet_virtio: no channels available for device syz [ 125.148675][ T5955] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 125.152685][ T5955] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 125.155730][ T5955] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 125.158602][ T5955] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 125.161107][ T5955] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 125.274181][ T7470] netlink: 8 bytes leftover after parsing attributes in process `syz.4.474'. [ 125.347684][ T7465] chnl_net:caif_netlink_parms(): no params data found [ 125.411302][ T7465] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.413636][ T7465] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.415891][ T7465] bridge_slave_0: entered allmulticast mode [ 125.419232][ T7465] bridge_slave_0: entered promiscuous mode [ 125.422245][ T7465] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.424504][ T7465] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.426781][ T7465] bridge_slave_1: entered allmulticast mode [ 125.430208][ T7465] bridge_slave_1: entered promiscuous mode [ 125.463861][ T7465] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.468554][ T7465] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.503079][ T7465] team0: Port device team_slave_0 added [ 125.506775][ T7465] team0: Port device team_slave_1 added [ 125.536346][ T7465] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 125.538737][ T7465] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.548113][ T7465] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 125.552376][ T7465] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 125.554634][ T7465] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 125.562651][ T7465] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 125.605945][ T7465] hsr_slave_0: entered promiscuous mode [ 125.608234][ T7465] hsr_slave_1: entered promiscuous mode [ 125.611117][ T7465] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 125.613595][ T7465] Cannot create hsr debugfs directory [ 125.662044][ T60] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.760999][ T60] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.768533][ T5950] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 125.838399][ T5951] vhci_hcd: vhci_device speed not set [ 125.848052][ T60] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.867274][ T13] smc: removing ib device syz1 [ 125.870735][ T6326] syz1: Port: 1 Link DOWN [ 126.006954][ T60] bridge_slave_1: left allmulticast mode [ 126.010974][ T60] bridge_slave_1: left promiscuous mode [ 126.013366][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.016534][ T7497] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(11) [ 126.018769][ T7497] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 126.021591][ T7497] vhci_hcd vhci_hcd.0: Device attached [ 126.044986][ T60] bridge_slave_0: left allmulticast mode [ 126.047006][ T60] bridge_slave_0: left promiscuous mode [ 126.049445][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.268520][ T53] usb 45-1: new high-speed USB device number 2 using vhci_hcd [ 126.350046][ T13] ------------[ cut here ]------------ [ 126.351926][ T13] GID entry ref leak for dev syz1 index 2 ref=1 [ 126.354653][ T13] WARNING: CPU: 2 PID: 13 at drivers/infiniband/core/cache.c:806 gid_table_release_one+0x387/0x4b0 [ 126.358053][ T13] Modules linked in: [ 126.360056][ T13] CPU: 2 UID: 0 PID: 13 Comm: kworker/u32:1 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) [ 126.365947][ T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 126.369489][ T13] Workqueue: ib-unreg-wq ib_unregister_work [ 126.371355][ T13] RIP: 0010:gid_table_release_one+0x387/0x4b0 [ 126.373765][ T13] Code: 07 00 00 48 85 f6 74 2b 48 89 74 24 38 e8 01 b5 35 f9 48 8b 74 24 38 44 89 f1 44 89 ea 48 c7 c7 00 03 99 8c e8 5a d3 f4 f8 90 <0f> 0b 90 90 e9 6e fe ff ff e8 db b4 35 f9 48 8d bd 48 07 00 00 48 [ 126.379876][ T13] RSP: 0018:ffffc900001f7b50 EFLAGS: 00010286 [ 126.381811][ T13] RAX: 0000000000000000 RBX: ffff888050898800 RCX: ffffffff817a92c8 [ 126.384293][ T13] RDX: ffff88801d6c0000 RSI: ffffffff817a92d5 RDI: 0000000000000001 [ 126.387036][ T13] RBP: ffff88806fd8c000 R08: 0000000000000001 R09: 0000000000000000 [ 126.389804][ T13] R10: 0000000000000001 R11: 0000000000000001 R12: ffffed100a11311b [ 126.392274][ T13] R13: 0000000000000002 R14: 0000000000000001 R15: dffffc0000000000 [ 126.394786][ T13] FS: 0000000000000000(0000) GS:ffff888097972000(0000) knlGS:0000000000000000 [ 126.397589][ T13] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 126.399711][ T13] CR2: ffffffffd88f0000 CR3: 000000004e3ae000 CR4: 0000000000352ef0 [ 126.402240][ T13] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 126.404761][ T13] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 126.407255][ T13] Call Trace: [ 126.408401][ T13] [ 126.409396][ T13] ib_device_release+0xef/0x1e0 [ 126.410943][ T13] ? __pfx_ib_device_release+0x10/0x10 [ 126.412718][ T13] device_release+0xa1/0x240 [ 126.414208][ T13] kobject_put+0x1e7/0x5a0 [ 126.415623][ T13] put_device+0x1f/0x30 [ 126.416971][ T13] process_one_work+0x9cf/0x1b70 [ 126.418606][ T13] ? __pfx_process_one_work+0x10/0x10 [ 126.420310][ T13] ? assign_work+0x1a0/0x250 [ 126.421801][ T13] worker_thread+0x6c8/0xf10 [ 126.423310][ T13] ? __pfx_worker_thread+0x10/0x10 [ 126.424994][ T13] kthread+0x3c2/0x780 [ 126.426312][ T13] ? __pfx_kthread+0x10/0x10 [ 126.427792][ T13] ? rcu_is_watching+0x12/0xc0 [ 126.429411][ T13] ? __pfx_kthread+0x10/0x10 [ 126.430905][ T13] ret_from_fork+0x5d7/0x6f0 [ 126.432381][ T13] ? __pfx_kthread+0x10/0x10 [ 126.434476][ T13] ret_from_fork_asm+0x1a/0x30 [ 126.436013][ T13] [ 126.437025][ T13] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 126.439304][ T13] CPU: 2 UID: 0 PID: 13 Comm: kworker/u32:1 Not tainted 6.15.0-syzkaller-11796-g5abc7438f1e9 #0 PREEMPT(full) [ 126.443062][ T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 126.446467][ T13] Workqueue: ib-unreg-wq ib_unregister_work [ 126.448328][ T13] Call Trace: [ 126.449417][ T13] [ 126.450365][ T13] dump_stack_lvl+0x3d/0x1f0 [ 126.451843][ T13] panic+0x71c/0x800 [ 126.453106][ T13] ? __pfx_panic+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 126.454600][ T13] ? show_trace_log_lvl+0x29b/0x3e0 [ 126.456285][ T13] ? check_panic_on_warn+0x1f/0xb0 [ 126.457934][ T13] ? gid_table_release_one+0x387/0x4b0 [ 126.459656][ T13] check_panic_on_warn+0xab/0xb0 [ 126.461258][ T13] __warn+0xf6/0x3c0 [ 126.462515][ T13] ? preempt_schedule_notrace+0x62/0xe0 [ 126.464251][ T13] ? gid_table_release_one+0x387/0x4b0 [ 126.465984][ T13] report_bug+0x3c3/0x580 [ 126.467359][ T13] ? gid_table_release_one+0x387/0x4b0 [ 126.469083][ T13] handle_bug+0x184/0x210 [ 126.470450][ T13] exc_invalid_op+0x17/0x50 [ 126.471889][ T13] asm_exc_invalid_op+0x1a/0x20 [ 126.473500][ T13] RIP: 0010:gid_table_release_one+0x387/0x4b0 [ 126.475409][ T13] Code: 07 00 00 48 85 f6 74 2b 48 89 74 24 38 e8 01 b5 35 f9 48 8b 74 24 38 44 89 f1 44 89 ea 48 c7 c7 00 03 99 8c e8 5a d3 f4 f8 90 <0f> 0b 90 90 e9 6e fe ff ff e8 db b4 35 f9 48 8d bd 48 07 00 00 48 [ 126.481324][ T13] RSP: 0018:ffffc900001f7b50 EFLAGS: 00010286 [ 126.483248][ T13] RAX: 0000000000000000 RBX: ffff888050898800 RCX: ffffffff817a92c8 [ 126.485731][ T13] RDX: ffff88801d6c0000 RSI: ffffffff817a92d5 RDI: 0000000000000001 [ 126.488188][ T13] RBP: ffff88806fd8c000 R08: 0000000000000001 R09: 0000000000000000 [ 126.490655][ T13] R10: 0000000000000001 R11: 0000000000000001 R12: ffffed100a11311b [ 126.493155][ T13] R13: 0000000000000002 R14: 0000000000000001 R15: dffffc0000000000 [ 126.495621][ T13] ? __warn_printk+0x198/0x350 [ 126.497144][ T13] ? __warn_printk+0x1a5/0x350 [ 126.498662][ T13] ib_device_release+0xef/0x1e0 [ 126.500201][ T13] ? __pfx_ib_device_release+0x10/0x10 [ 126.501930][ T13] device_release+0xa1/0x240 [ 126.503403][ T13] kobject_put+0x1e7/0x5a0 [ 126.504825][ T13] put_device+0x1f/0x30 [ 126.506163][ T13] process_one_work+0x9cf/0x1b70 [ 126.507733][ T13] ? __pfx_process_one_work+0x10/0x10 [ 126.509433][ T13] ? assign_work+0x1a0/0x250 [ 126.510898][ T13] worker_thread+0x6c8/0xf10 [ 126.512408][ T13] ? __pfx_worker_thread+0x10/0x10 [ 126.514049][ T13] kthread+0x3c2/0x780 [ 126.515355][ T13] ? __pfx_kthread+0x10/0x10 [ 126.516832][ T13] ? rcu_is_watching+0x12/0xc0 [ 126.518343][ T13] ? __pfx_kthread+0x10/0x10 [ 126.519811][ T13] ret_from_fork+0x5d7/0x6f0 [ 126.521288][ T13] ? __pfx_kthread+0x10/0x10 [ 126.522714][ T13] ret_from_fork_asm+0x1a/0x30 [ 126.524236][ T13] [ 126.525860][ T13] Kernel Offset: disabled [ 126.527228][ T13] Rebooting in 86400 seconds.. VM DIAGNOSIS: 02:01:19 Registers: info registers vcpu 0 CPU#0 RAX=00000002000008fd RBX=ffff88801d6bc880 RCX=0000000000000830 RDX=0000000000000002 RSI=00000000000000fd RDI=0000000000000002 RBP=0000000000000008 RSP=ffffc9000410f5a0 R8 =0000000000000000 R9 =fffffbfff210faca R10=ffffffff9087d657 R11=0000000000000001 R12=0000000000000003 R13=1ffff92000821eb5 R14=0000000000000001 R15=ffffc9000410f5c8 RIP=ffffffff81692018 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097772000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=ffffffffd88f0000 CR3=000000006f049000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=ffff8880696486c0 RCX=ffffffff81984493 RDX=0000000000000000 RSI=0000000000000004 RDI=ffff8880696486c0 RBP=ffff8880696486c8 RSP=ffffc900001e7a70 R8 =0000000000000000 R9 =ffffed100d2c90d8 R10=ffff8880696486c3 R11=0000000000000001 R12=ffff8880696486d0 R13=ffff8880696486c0 R14=ffff888043ee0d80 R15=0000000000000000 RIP=ffffffff8b7c3f00 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097872000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=ffffffffd88f0000 CR3=000000006f049000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000033 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8555fc15 RDI=ffffffff9ae5ca00 RBP=ffffffff9ae5c9c0 RSP=ffffc900001f74c0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000033 R14=ffffffff9ae5c9c0 R15=ffffffff8555fbb0 RIP=ffffffff8555fc3f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097972000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=ffffffffd88f0000 CR3=000000004e3ae000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=ffffffff912aa98a RBX=ffffffff90a280dc RCX=dffffc0000000000 RDX=1ffffffff214501b RSI=0000000000000000 RDI=ffffffff90a280d0 RBP=ffffffff90a280d0 RSP=ffffc900005bf778 R8 =ffffffff912aa9f0 R9 =0000000000000000 R10=0000000000000000 R11=00000000000120fe R12=ffffffff90a280ec R13=ffffffff8220feb0 R14=ffffffff90a280d0 R15=ffffffff90a280d0 RIP=ffffffff816a6e60 RFL=00000a07 [-O---PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097a72000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=ffffffffd88f0000 CR3=000000004e3ae000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000