last executing test programs: 2.986896588s ago: executing program 2 (id=1624): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000000500)=""/213, 0xd5}], 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a010200000000000000000100000009000300739c7a320000000014000480080002400000000008000140000000050900010073797a310000000044000000050a01020000000000000000010000000c00024000000000000000010900010073797a3100000000180004"], 0xcc}}, 0x0) 2.840115042s ago: executing program 2 (id=1627): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) sendfile(r0, r1, 0x0, 0x8000002b) 2.211729544s ago: executing program 1 (id=1634): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/net\x00') 1.961345978s ago: executing program 3 (id=1636): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = memfd_create(&(0x7f0000000b00)='+\x8b\x8a\xa9\x16\x11\x91J\xbc+ \x18\x17\xc2:}\xa3\x9bO\xdd\xdf\xdf\x92\xd5\xed\xb4\x17\xe5\xd6\x9a\xb2\xd8\x9ba\xde\xb2.F\xc0\x99}|\xaf\xd3\x1d\x84[*_\x9f\x9d\xb0rYP\x1b\x9f \xe0\x9cgq\x103\x89\x11\x87Rv\x169\xdf\xe3>B\x04\x00\x00\x00W\xd3\xec\xfb\xdf?\xa2\x90+\xa4!\xb2\xf2\xff\x90\a\xc3\x12\xc4;\xffh\xf1x=\xb9c\xce\x03h\xdap\x88U\x1788\x82\xd7\xfd\x83\x00Sx\x91%\x99_\xde\xd4c\x83\x86\x0f\xa4a-\xaf\x9e\xd9\xef\xe0)]\x00F\xfa\x03\xbc4\xc4\x9a\v\x03\x8b\xa4\xf3\x8f\xf4\"\'\xd3\a9\x14H}j&~\xe9\x16\x83o\xbd\xab\xcd[\xbd\xcb\x04\xfc\xe7\xe3\x9e?\x12\xf0\xf4\x83M3\xd98\x92?@\v\xe6\xd1\xd2\xe4\xde\xdaUeJ\x9fR\xd1`\xfa\xc8\v\xed\xfd\x0e\xc8\x89W\x847\x88\x82\x94\x14\xe33\xb7H\xc8b\xd6@3F\xc6\x8b\x81L\xa3e9za\x0fI\xf4\xfe\xf8\x06j\x19Pz&\xb8\x0f\x98`W\xdb\xc6\"81A\xa4\x8bT\xf1\xcb\xab\xa3\t\xef\xdf&\x0e\xad\x03\x123.\xc2V\xaa\xd5\xf8\xde\x8aV\xa4\xe1\b\xa6\xd2{_\xfcp{\xcez\xa2\x92\xdb8*wLO\f\x97X\x05\x9a\xc2\xe8\x85\x9d\xcb\xc8\xf0\xc4\x01\x03\xe3?\x9f1\xf4\xfb`KB\xdf\xae#\x94C\a\x04\xea\xccG\xf2\b\x8f\xf7\xb1\xe96\x90\xf5P\xa4\'\xce\xe3\xa24\x196\xc5Q\xa1K\x95\xd6\xfal\xe9\xd1\\\r&\xb2c\xb3\x8d\xa7\xb7\xa8\x03S\xbd\xdd\b{\xae\f\x10\xc2\xbb\xd0\xdd*\xa3\xb4\fJ\x00X\xab`N; LF\xa5D\xee\xdf\x7f\x80p\xf6o\x1c\xbdXR\xf2\xa0\x81a\xa1\xe1B\x93Xn\xaf\xfc\x05?\xab\xac\x91x\xa8#\xe1\xbeQ\xd1^\x9b\xb9)\xd3\n\xf7(3!\x18\b\xc0\xaampRl\xfdQ\x03\x8c\xd5\xe4\\\xed\x9a\xd1?\xd21\xc8\x90\x1dl|\xd1\x14\xbc3\xe0\x1e\x0e\xe6\x88Y\x99K\x93\x1c@_P\x8c\xc7\x9eZ\xb74KT:\x8a\xdbJ#w\x18\x14\x00\x93S\x9c2\xf2\xf6M\xe7D\xf4*\xe3X\x1d\x19\x83\xa7w\xc7+7\x89s\xed\x8a\xd7O\xdd\rhh`\xc0\xa8$\x06pu\xa0\xd0L\x0ez@I\xb8\x83\xb2f\x93j\a0I\xc8l\xe5\x9b\x06\xb5\xac`d\xa3\xcf/\x14\x10\xab\xab\t\xec\xc1c\fA\xaf\x14\xef\xbap@*7\x86\xdf\',\x03Y\xb1$\xf0\xb5}\xf0\x82%)9`\x8f\x04\x85m\x80\xd2\xcf@\x06}\xea\xe7w`\xa5\x11\x9f\x9b\x9e\x8f\xb7cb\x1a\xe1\xcf\x87\x1c\\\xfb\xc21\xf7\x82C*\xd5;\x00\x00\x00\x00\x03\xba\xe3\xdc\x92\'\x8e\xd5\x7fG\xfd.\x91\x89T\x99t\xd4d,\xd5\x92O\xf1\xafT!Y\x8e\\\xac\xf7\x11R\x05p\x1a\"\xd5\x18\xde\xeb\xe5\x19\xdd\xebQ8\xc5iS+\x06D\x16\xfe\xf5.\xe5\v\x89\xb0\"\xa3M\xe9\x81\x11P\xdb\xc4\xc2y\x14\x04\x06\xf6\f\xb0\xecz\x8d`\xb5\x9b\xb43\xcc1\xa7\x9e\xa8\xb5\'\xc6MAe\x0f\xd1\xfcG\xc2/\xe8\xe9t\xcaQ\xf1\fI\x1chM\xc1\x92\xe3\xc3\x01M\xc8/\xefJ\xcb\xd0]\f\xff\xf5\x92\xce\x97Z\xea\xe8\x99\xfa\x96\xce\xa7\x02\xad\xa2\xce\x955\xcaNg\x02\xcd\xfd\x1a}.\b\x00x\x89/8H\xc2\x93B\na)\x86\xa9U\xa0\xb7\x18\xfb\xe9\xd1\x97\x19\x87Qf\xbcJ\x91\xad\xf6\x1d\xe9\xb6\x13\xc8\xe4k\xfcX\x12\x9a\xc0\xab\xe9P\xad\xea\xc3e\a\xf0S\xce$\x81w\x93Q\xfd\xdc\"\xf2e{J\xef\xd8f\x18e6k|\x1b\x1e\xc7bD\x95H\xe8\xaf2\x99\\\x0ep\xa3\x03 \xb4\xba\xf6\x11\xe3\xa4\x1a\xdc_w\xe7n\xd1\xb62+\xfd\b\x1a\xf8)\xc4\xa9\x1c\x13\xb0\xf2\xc7\x80\x8e\xbd\xf2\xe6u\xc8\xb08?\xbc\xbc\xcao\xa8^3T\xed\xf6\xce\x04q\xfcC)\x8d\xa6-\xfb3\x80\x1eAT\x1b\xa7\xbc\xa2\xb2\'/\xa7\x18|7C\xc8\x9e\xc3\a<\xc9\xcb46\xae\xa2\xb5\xbf\x1d}O\x98\xfcD,\xfb\x8c\xc1Y\xf7\xa9\xb17\xc0A\xe8\xcc:Yi_H\xf5:9\xa6lZ\xfa\x84\f\xdcl*gL\bz\x87l)\xa5', 0x2) write$binfmt_misc(r1, &(0x7f0000000300)=ANY=[], 0xff67) sendfile(r0, r1, &(0x7f0000000000), 0xfffb) fcntl$addseals(r1, 0x409, 0x8) lseek(r1, 0xfffffffffffffffc, 0x3) 1.845009222s ago: executing program 2 (id=1637): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000005c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_RMFB(r1, 0xc00464af, &(0x7f0000000000)=r3) 1.667479723s ago: executing program 3 (id=1638): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000008c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x8}]}, 0x8) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000980)=ANY=[], 0x578) 1.604028667s ago: executing program 3 (id=1639): ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x408140) 1.589847602s ago: executing program 2 (id=1640): r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}]}, 0x3c}}, 0x0) 1.461458667s ago: executing program 3 (id=1642): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x8, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r2, 0x0, 0x0}, 0x20) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x5000aea5, &(0x7f0000000080)=ANY=[@ANYRESDEC, @ANYBLOB="57764eb7bb473e"]) 1.300017398s ago: executing program 0 (id=1643): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup3(r0, r1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@setlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_SPORT={0x6}]}}}]}, 0x40}}, 0x0) 1.291930473s ago: executing program 1 (id=1644): r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) listen(r0, 0x400000001ffffffd) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) 1.183199628s ago: executing program 0 (id=1645): r0 = syz_io_uring_setup(0x24fa, &(0x7f00000009c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000340)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='/'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1.176180634s ago: executing program 3 (id=1646): prlimit64(0x0, 0x8, &(0x7f00000001c0), 0x0) setreuid(0xee00, 0x0) r0 = getuid() setreuid(0xee00, r0) r1 = io_uring_setup(0x1694, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4088, 0xff8}], 0x1) 1.07704014s ago: executing program 1 (id=1647): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)={0x38, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8}]}, 0x38}}, 0x0) 1.076538715s ago: executing program 3 (id=1648): syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902"], 0x0) r0 = gettid() timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 1.037794981s ago: executing program 0 (id=1649): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000180)=0x20000006, 0x4) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 833.63184ms ago: executing program 0 (id=1650): madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x2, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f00000000c0)=[r2], &(0x7f00000020c0), 0x0, 0x0}) 826.2586ms ago: executing program 1 (id=1651): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000200)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={&(0x7f0000000180)=[0x0], 0x1, r3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) 675.449525ms ago: executing program 0 (id=1652): madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r0, &(0x7f0000000300)='1\x00', 0xffffff4a) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) write$sysctl(r0, &(0x7f0000000000)='2\x00', 0x2) 607.622887ms ago: executing program 1 (id=1653): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30a) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close(0x3) 467.66228ms ago: executing program 2 (id=1654): mq_open(&(0x7f0000000000)='+!\x00', 0x40, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pselect6(0x40, &(0x7f0000000000)={0xfc}, 0x0, 0x0, 0x0, 0x0) 297.673005ms ago: executing program 1 (id=1655): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x14) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x14) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000140)=0x1, 0x4) 191.293317ms ago: executing program 2 (id=1656): r0 = io_uring_setup(0xc40, &(0x7f0000000100)) close(r0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc000ff}]}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000001300)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000003c0)) 0s ago: executing program 0 (id=1657): move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000440)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef) kernel console output (not intermixed with test programs): 62.438215][ T1109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.441589][ T1109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.483610][ T1109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.494245][ T1109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.534289][ T1109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.545407][ T1109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.997938][ T5394] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 63.000076][ T5413] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 63.197863][ T5413] usb 8-1: Using ep0 maxpacket: 32 [ 63.200647][ T5394] usb 6-1: config 0 has no interfaces? [ 63.204088][ T5394] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 63.207697][ T5394] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 63.210186][ T5413] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 63.210948][ T5394] usb 6-1: Product: syz [ 63.215204][ T5413] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 63.216736][ T5394] usb 6-1: Manufacturer: syz [ 63.222778][ T5413] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 63.224751][ T5394] usb 6-1: config 0 descriptor?? [ 63.226881][ T5413] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 63.237622][ T5413] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 63.242698][ T5413] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.245991][ T5413] usb 8-1: Product: syz [ 63.247744][ T5413] usb 8-1: Manufacturer: syz [ 63.249782][ T5413] usb 8-1: SerialNumber: syz [ 63.499973][ T5413] cdc_ncm 8-1:1.0: bind() failure [ 63.508619][ T5413] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 63.511314][ T5413] cdc_ncm 8-1:1.1: bind() failure [ 63.522953][ T5413] usb 8-1: USB disconnect, device number 2 [ 63.670178][ T5434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.674131][ T5434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.688791][ T5394] usb 6-1: USB disconnect, device number 2 [ 63.928247][ T4779] Bluetooth: hci3: command tx timeout [ 64.008527][ T4779] Bluetooth: hci0: command tx timeout [ 64.008561][ T5365] Bluetooth: hci2: command tx timeout [ 64.102341][ T5457] af_packet: tpacket_rcv: packet too big, clamped from 4192 to 3952. macoff=96 [ 64.165794][ T5459] Illegal XDP return value 191959447 on prog (id 4) dev syz_tun, expect packet loss! [ 64.361916][ T5468] syz.1.28 uses obsolete (PF_INET,SOCK_PACKET) [ 64.605559][ T5485] netlink: 8 bytes leftover after parsing attributes in process `syz.1.35'. [ 64.610432][ T5485] netlink: 28 bytes leftover after parsing attributes in process `syz.1.35'. [ 64.641267][ T5487] syz.2.36: attempt to access beyond end of device [ 64.641267][ T5487] loop2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 64.646377][ T5487] syz.2.36: attempt to access beyond end of device [ 64.646377][ T5487] loop2: rw=0, sector=256, nr_sectors = 1 limit=0 [ 64.653264][ T5487] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 64.657062][ T5487] syz.2.36: attempt to access beyond end of device [ 64.657062][ T5487] loop2: rw=0, sector=512, nr_sectors = 1 limit=0 [ 64.662245][ T5487] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 64.666597][ T5487] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 64.670164][ T5487] UDF-fs: Scanning with blocksize 512 failed [ 64.674322][ T5487] syz.2.36: attempt to access beyond end of device [ 64.674322][ T5487] loop2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 64.679767][ T5487] syz.2.36: attempt to access beyond end of device [ 64.679767][ T5487] loop2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 64.685841][ T5487] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 64.690395][ T5487] syz.2.36: attempt to access beyond end of device [ 64.690395][ T5487] loop2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 64.695752][ T5487] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 64.699671][ T5487] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 64.703529][ T5487] UDF-fs: Scanning with blocksize 1024 failed [ 64.706638][ T5487] syz.2.36: attempt to access beyond end of device [ 64.706638][ T5487] loop2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 64.711775][ T5487] syz.2.36: attempt to access beyond end of device [ 64.711775][ T5487] loop2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 64.717223][ T5487] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 64.723147][ T5487] syz.2.36: attempt to access beyond end of device [ 64.723147][ T5487] loop2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 64.731802][ T5487] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 64.735928][ T5487] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 64.739138][ T5487] UDF-fs: Scanning with blocksize 2048 failed [ 64.742229][ T5487] syz.2.36: attempt to access beyond end of device [ 64.742229][ T5487] loop2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 64.747720][ T5487] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 64.752193][ T5487] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 64.756142][ T5487] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 64.759665][ T5487] UDF-fs: Scanning with blocksize 4096 failed [ 64.762229][ T5487] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 64.976943][ T39] audit: type=1326 audit(1725400150.983:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5497 comm="syz.1.42" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f30579 code=0x0 [ 65.028718][ T76] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.054727][ T5505] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 65.087399][ T5505] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 65.374830][ T4779] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 65.379982][ T4779] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 65.384311][ T4779] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 65.404608][ T4779] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 65.408991][ T4779] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 65.411625][ T4779] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 65.430950][ T39] audit: type=1326 audit(1725400151.433:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5521 comm="syz.2.52" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2579 code=0x7ffc0000 [ 65.443115][ T39] audit: type=1326 audit(1725400151.453:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5521 comm="syz.2.52" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2579 code=0x7ffc0000 [ 65.456520][ T39] audit: type=1326 audit(1725400151.453:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5521 comm="syz.2.52" exe="/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf7fa2579 code=0x7ffc0000 [ 65.470263][ T39] audit: type=1326 audit(1725400151.453:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5521 comm="syz.2.52" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2579 code=0x7ffc0000 [ 65.480050][ T39] audit: type=1326 audit(1725400151.453:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5521 comm="syz.2.52" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fa2579 code=0x7ffc0000 [ 65.674179][ T5519] chnl_net:caif_netlink_parms(): no params data found [ 65.844260][ T5543] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 65.856149][ T5519] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.859524][ T5519] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.863804][ T5519] bridge_slave_0: entered allmulticast mode [ 65.880865][ T5519] bridge_slave_0: entered promiscuous mode [ 65.885670][ T5519] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.890174][ T5519] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.893380][ T5519] bridge_slave_1: entered allmulticast mode [ 65.906936][ T5519] bridge_slave_1: entered promiscuous mode [ 65.917280][ T5545] capability: warning: `syz.2.59' uses deprecated v2 capabilities in a way that may be insecure [ 65.997390][ T5519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.004654][ T5519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.008109][ T5365] Bluetooth: hci3: command tx timeout [ 66.083016][ T5519] team0: Port device team_slave_0 added [ 66.089250][ T5365] Bluetooth: hci0: command tx timeout [ 66.090259][ T5519] team0: Port device team_slave_1 added [ 66.097913][ T5365] Bluetooth: hci2: command tx timeout [ 66.169946][ T5519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.172676][ T5519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.186018][ T5519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.192484][ T5519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.197902][ T5519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.209649][ T5519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.274203][ T5519] hsr_slave_0: entered promiscuous mode [ 66.277756][ T5519] hsr_slave_1: entered promiscuous mode [ 66.284644][ T5519] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.289101][ T5519] Cannot create hsr debugfs directory [ 66.327081][ T5560] process 'syz.2.66' launched './file1' with NULL argv: empty string added [ 66.527272][ T5394] IPVS: starting estimator thread 0... [ 66.542063][ T5569] tipc: Started in network mode [ 66.544034][ T5569] tipc: Node identity ac1414aa, cluster identity 4711 [ 66.548260][ T5569] tipc: Enabled bearer , priority 10 [ 66.612473][ T5572] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 66.619314][ T5575] Bluetooth: MGMT ver 1.23 [ 66.638217][ T5570] IPVS: using max 20 ests per chain, 48000 per kthread [ 66.805120][ T76] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.883443][ T76] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.144461][ T76] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.305994][ T76] bridge_slave_1: left allmulticast mode [ 67.309699][ T76] bridge_slave_1: left promiscuous mode [ 67.313877][ T76] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.325062][ T76] bridge_slave_0: left allmulticast mode [ 67.334588][ T76] bridge_slave_0: left promiscuous mode [ 67.337260][ T76] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.458267][ T5365] Bluetooth: hci1: command tx timeout [ 67.559191][ T5359] tipc: Node number set to 2886997162 [ 67.670916][ T5615] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 67.816328][ T76] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 67.828482][ T76] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 67.835682][ T76] bond0 (unregistering): Released all slaves [ 67.883484][ T5620] gretap0: entered promiscuous mode [ 67.886181][ T5620] vlan2: entered promiscuous mode [ 67.889106][ T5620] vlan2: entered allmulticast mode [ 67.891779][ T5620] gretap0: entered allmulticast mode [ 67.896969][ T5622] netlink: 'syz.3.92': attribute type 5 has an invalid length. [ 68.133414][ T5636] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 68.345517][ T39] audit: type=1326 audit(1725400154.353:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5651 comm="syz.2.103" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fa2579 code=0x0 [ 68.452256][ T76] hsr_slave_0: left promiscuous mode [ 68.455521][ T76] hsr_slave_1: left promiscuous mode [ 68.462311][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.465597][ T76] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.473548][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.476798][ T76] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.524963][ T76] veth1_macvtap: left promiscuous mode [ 68.531416][ T76] veth0_macvtap: left promiscuous mode [ 68.534057][ T76] veth1_vlan: left promiscuous mode [ 68.537160][ T76] veth0_vlan: left promiscuous mode [ 69.329790][ T76] team0 (unregistering): Port device team_slave_1 removed [ 69.436341][ T76] team0 (unregistering): Port device team_slave_0 removed [ 69.529928][ T5365] Bluetooth: hci1: command tx timeout [ 70.247688][ T5519] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.266481][ T5519] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.275170][ T5519] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.276084][ T5691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.117'. [ 70.298890][ T5519] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.453563][ T5519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.483815][ T5519] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.501617][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.505028][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.537298][ T1198] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.540583][ T1198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.809624][ T5519] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.877210][ T5519] veth0_vlan: entered promiscuous mode [ 70.908896][ T5519] veth1_vlan: entered promiscuous mode [ 70.939977][ T5519] veth0_macvtap: entered promiscuous mode [ 70.946387][ T5519] veth1_macvtap: entered promiscuous mode [ 70.971782][ T5519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.976180][ T5519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.981942][ T5519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.986353][ T5519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.994251][ T5519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.998749][ T5519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.005770][ T5519] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.027408][ T5519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.033790][ T5519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.037588][ T5519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.043235][ T5519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.047334][ T5519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.051630][ T5519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.056550][ T5519] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.062304][ T5725] bridge0: port 3(veth1) entered blocking state [ 71.066599][ T5725] bridge0: port 3(veth1) entered disabled state [ 71.072732][ T5725] veth1: entered allmulticast mode [ 71.076918][ T5725] veth1: entered promiscuous mode [ 71.080956][ T5725] bridge0: port 3(veth1) entered blocking state [ 71.084336][ T5725] bridge0: port 3(veth1) entered forwarding state [ 71.102052][ T5519] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.105649][ T5519] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.111653][ T5519] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.114903][ T5519] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.201340][ T1198] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.208876][ T1198] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.221666][ T1198] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.225366][ T1198] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.374268][ T1378] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.377392][ T1378] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.599985][ T5741] netlink: 132 bytes leftover after parsing attributes in process `syz.0.137'. [ 71.608060][ T5365] Bluetooth: hci1: command tx timeout [ 72.205984][ C3] vkms_vblank_simulate: vblank timer overrun [ 73.563056][ T5813] netlink: 32 bytes leftover after parsing attributes in process `syz.1.168'. [ 73.688083][ T5365] Bluetooth: hci1: command tx timeout [ 74.242416][ T5843] debugfs: Invalid uid '0x00000000ffffffff' [ 74.408607][ T5847] kvm: kvm [5844]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010000) = 0x7fffffe00000240 [ 75.910831][ T5885] netlink: 8 bytes leftover after parsing attributes in process `syz.3.200'. [ 78.033850][ T5952] netlink: 4 bytes leftover after parsing attributes in process `syz.1.229'. [ 78.299384][ T5960] fuse: Bad value for 'group_id' [ 78.301606][ T5960] fuse: Bad value for 'group_id' [ 78.872958][ T5976] netlink: 4 bytes leftover after parsing attributes in process `syz.1.240'. [ 79.052380][ T5984] netlink: 8 bytes leftover after parsing attributes in process `syz.1.243'. [ 80.398938][ T6019] input input6: cannot allocate more than FF_MAX_EFFECTS effects [ 80.524878][ T6024] netlink: 'syz.0.262': attribute type 10 has an invalid length. [ 80.653145][ T4779] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 80.668057][ T4779] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 80.672424][ T4779] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 80.677267][ T4779] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 80.681526][ T4779] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 80.686570][ T4779] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 81.049032][ T6031] chnl_net:caif_netlink_parms(): no params data found [ 81.183465][ T6059] netlink: 4 bytes leftover after parsing attributes in process `syz.1.276'. [ 81.207934][ T6057] netlink: 28 bytes leftover after parsing attributes in process `syz.3.274'. [ 81.248973][ T6057] Zero length message leads to an empty skb [ 81.273470][ T6066] mmap: syz.1.278 (6066) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 81.417142][ T6031] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.420718][ T6031] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.424107][ T6031] bridge_slave_0: entered allmulticast mode [ 81.428700][ T6031] bridge_slave_0: entered promiscuous mode [ 81.434536][ T6031] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.438780][ T6031] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.442273][ T6031] bridge_slave_1: entered allmulticast mode [ 81.446568][ T6031] bridge_slave_1: entered promiscuous mode [ 81.577430][ T6031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.585996][ T6031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.631077][ T985] cfg80211: failed to load regulatory.db [ 81.802016][ T6031] team0: Port device team_slave_0 added [ 81.808539][ T6031] team0: Port device team_slave_1 added [ 81.972804][ T6031] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.976158][ T6031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.996978][ T6031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.031248][ T6031] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.035126][ T6031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.051864][ T6031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.233412][ T6031] hsr_slave_0: entered promiscuous mode [ 82.239700][ T6031] hsr_slave_1: entered promiscuous mode [ 82.267104][ T6031] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.271995][ T6031] Cannot create hsr debugfs directory [ 82.593500][ T6113] loop0: detected capacity change from 0 to 7 [ 82.622035][ T6113] loop0: [CUMANA/ADFS] p1 [ADFS] p1 [ 82.627989][ T6113] loop0: partition table partially beyond EOD, truncated [ 82.643263][ T6113] loop0: p1 size 538856936 extends beyond EOD, truncated [ 82.740880][ T5365] Bluetooth: hci4: command tx timeout [ 82.767642][ T6031] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.815244][ T6118] warning: `syz.1.302' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 82.904913][ T6031] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.025992][ T6031] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.131478][ T6031] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.330791][ T6031] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.377863][ T6031] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.385937][ T6031] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.403434][ T6133] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.417953][ T6031] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.563719][ T6138] netlink: 312 bytes leftover after parsing attributes in process `syz.0.311'. [ 83.583390][ T6031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.609987][ T6031] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.635755][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.639203][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.656873][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.659755][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.960706][ T6031] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.997553][ T6031] veth0_vlan: entered promiscuous mode [ 84.024269][ T6031] veth1_vlan: entered promiscuous mode [ 84.082116][ T6031] veth0_macvtap: entered promiscuous mode [ 84.089722][ T6031] veth1_macvtap: entered promiscuous mode [ 84.106568][ T6031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.123483][ T6031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.128231][ T6031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.132747][ T6031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.138637][ T6031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.143776][ T6031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.148821][ T6031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.153408][ T6031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.160398][ T6031] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.166733][ T6031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.183916][ T6031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.196347][ T6031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.202238][ T6031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.206490][ T6031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.217817][ T6031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.222147][ T6031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.226540][ T6031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.244214][ T6031] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.271020][ T6031] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.274792][ T6031] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.286716][ T6031] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.291610][ T6031] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.381292][ T1101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.387823][ T1101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.450657][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.456653][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.786376][ T6184] can0: slcan on ptm0. [ 84.809498][ T5365] Bluetooth: hci4: command tx timeout [ 84.868771][ T6183] can0 (unregistered): slcan off ptm0. [ 86.846449][ T6275] vivid-000: disconnect [ 86.855468][ T6274] vivid-000: reconnect [ 86.888780][ T5365] Bluetooth: hci4: command tx timeout [ 87.854819][ T6294] syz.3.370 (6294) used greatest stack depth: 21072 bytes left [ 87.973124][ T6299] nbd: device at index 1 is going down [ 88.967904][ T4779] Bluetooth: hci4: command tx timeout [ 89.026729][ T6343] Bluetooth: MGMT ver 1.23 [ 89.906067][ T39] audit: type=1326 audit(1725400431.920:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6365 comm="syz.3.403" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73be579 code=0x7ffc0000 [ 89.917400][ T39] audit: type=1326 audit(1725400431.930:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6365 comm="syz.3.403" exe="/syz-executor" sig=0 arch=40000003 syscall=144 compat=1 ip=0xf73be579 code=0x7ffc0000 [ 89.946064][ T39] audit: type=1326 audit(1725400431.930:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6365 comm="syz.3.403" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73be579 code=0x7ffc0000 [ 89.964558][ T39] audit: type=1326 audit(1725400431.930:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6365 comm="syz.3.403" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73be579 code=0x7ffc0000 [ 90.825958][ T6404] dccp_invalid_packet: P.CsCov 3 exceeds packet length 256 [ 90.968001][ T4779] Bluetooth: hci5: command 0x1003 tx timeout [ 90.970144][ T5365] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 92.317847][ T5392] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 92.394662][ T6446] netlink: 8 bytes leftover after parsing attributes in process `syz.2.440'. [ 92.508131][ T5392] usb 8-1: Using ep0 maxpacket: 8 [ 92.511585][ T5392] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 92.515773][ T5392] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 92.520964][ T5392] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 92.524642][ T5392] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 92.530679][ T5392] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 92.534134][ T5392] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.777444][ T5392] usb 8-1: GET_CAPABILITIES returned 0 [ 92.781011][ T5392] usbtmc 8-1:16.0: can't read capabilities [ 92.995100][ T5392] usb 8-1: USB disconnect, device number 3 [ 93.253710][ T6470] No buffer was provided with the request [ 93.828200][ T5395] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 93.999290][ T6481] ubi0: attaching mtd0 [ 94.002154][ T6481] ubi0 error: ubi_attach_mtd_dev: bad VID header (8454144) or data offsets (8454208) [ 94.011783][ T5395] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 94.024951][ T5395] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 94.029728][ T5395] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 94.034670][ T5395] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 94.043621][ T5395] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 94.049424][ T5395] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.062889][ T5395] usb 8-1: config 0 descriptor?? [ 94.520688][ T5395] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 94.526264][ T5395] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 94.553151][ T5395] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 94.563637][ T6504] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 94.671406][ T6504] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 94.776504][ T5396] usb 8-1: USB disconnect, device number 4 [ 94.934638][ T39] audit: type=1326 audit(1725400436.950:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6517 comm="syz.0.471" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 94.959885][ T39] audit: type=1326 audit(1725400436.950:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6517 comm="syz.0.471" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 94.978080][ T39] audit: type=1326 audit(1725400436.960:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6517 comm="syz.0.471" exe="/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 94.998208][ T39] audit: type=1326 audit(1725400436.960:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6517 comm="syz.0.471" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 95.001678][ T1102] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.019594][ T39] audit: type=1326 audit(1725400436.960:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6517 comm="syz.0.471" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741e579 code=0x7ffc0000 [ 95.144093][ T1102] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.254691][ T1102] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.306055][ T4779] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 95.313113][ T4779] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 95.317360][ T4779] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 95.326649][ T4779] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 95.330771][ T4779] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 95.334318][ T4779] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 95.382075][ T1102] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.658006][ T5396] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 95.665328][ T1102] bridge_slave_1: left allmulticast mode [ 95.676362][ T1102] bridge_slave_1: left promiscuous mode [ 95.679552][ T1102] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.698654][ T1102] bridge_slave_0: left allmulticast mode [ 95.701159][ T1102] bridge_slave_0: left promiscuous mode [ 95.703785][ T1102] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.859815][ T5396] usb 8-1: config 0 has no interfaces? [ 95.866307][ T5396] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 95.871120][ T5396] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 95.874965][ T5396] usb 8-1: Product: syz [ 95.876909][ T5396] usb 8-1: Manufacturer: syz [ 95.881411][ T5396] usb 8-1: config 0 descriptor?? [ 96.481177][ T6536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.678885][ T6536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.873788][ T25] usb 8-1: USB disconnect, device number 5 [ 97.082727][ T1102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.092607][ T1102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.099353][ T1102] bond0 (unregistering): Released all slaves [ 97.271034][ T6520] chnl_net:caif_netlink_parms(): no params data found [ 97.367994][ T5365] Bluetooth: hci4: command tx timeout [ 97.560569][ T6520] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.564158][ T6520] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.573701][ T6520] bridge_slave_0: entered allmulticast mode [ 97.580226][ T6520] bridge_slave_0: entered promiscuous mode [ 97.587400][ T6520] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.597900][ T6520] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.601331][ T6520] bridge_slave_1: entered allmulticast mode [ 97.605746][ T6520] bridge_slave_1: entered promiscuous mode [ 97.622413][ T5365] Bluetooth: hci1: command 0x0406 tx timeout [ 97.791238][ T6520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.814310][ T6520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.914105][ T6520] team0: Port device team_slave_0 added [ 97.923192][ T1102] hsr_slave_0: left promiscuous mode [ 97.927309][ T1102] hsr_slave_1: left promiscuous mode [ 97.932166][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.935463][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.942669][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.946021][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.986647][ T1102] veth1_macvtap: left promiscuous mode [ 97.989453][ T1102] veth0_macvtap: left promiscuous mode [ 97.992077][ T1102] veth1_vlan: left promiscuous mode [ 97.994518][ T1102] veth0_vlan: left promiscuous mode [ 99.088816][ T1102] team0 (unregistering): Port device team_slave_1 removed [ 99.186584][ T1102] team0 (unregistering): Port device team_slave_0 removed [ 99.447905][ T4779] Bluetooth: hci4: command tx timeout [ 99.950455][ T6520] team0: Port device team_slave_1 added [ 100.101209][ T6520] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.104401][ T6520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.131410][ T6520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.145162][ T6520] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.157824][ T6520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.177874][ T6520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.384204][ T6520] hsr_slave_0: entered promiscuous mode [ 100.389310][ T6520] hsr_slave_1: entered promiscuous mode [ 100.406911][ T6520] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.414071][ T6520] Cannot create hsr debugfs directory [ 100.877879][ T5395] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 101.067967][ T5395] usb 8-1: Using ep0 maxpacket: 8 [ 101.074003][ T5395] usb 8-1: config 167 has too many interfaces: 202, using maximum allowed: 32 [ 101.078685][ T5395] usb 8-1: config 167 has 1 interface, different from the descriptor's value: 202 [ 101.085394][ T5395] usb 8-1: New USB device found, idVendor=1025, idProduct=005f, bcdDevice=fe.29 [ 101.090195][ T5395] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.100324][ T5395] usb 8-1: Product: syz [ 101.102229][ T5395] usb 8-1: Manufacturer: syz [ 101.104295][ T5395] usb 8-1: SerialNumber: syz [ 101.140339][ T5395] dvb-usb: found a 'Unknown USB1.1 DVB-T device ???? please report the name to the author' in warm state. [ 101.145716][ T5395] dvb-usb: bulk message failed: -22 (3/0) [ 101.231606][ T5395] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 101.248326][ T5395] dvbdev: DVB: registering new adapter (Unknown USB1.1 DVB-T device ???? please report the name to the author) [ 101.253661][ T5395] usb 8-1: media controller created [ 101.296094][ T5395] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 101.350981][ T5395] dvb-usb: bulk message failed: -22 (6/0) [ 101.353943][ T5395] dvb-usb: no frontend was attached by 'Unknown USB1.1 DVB-T device ???? please report the name to the author' [ 101.380689][ T5395] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb8/8-1/input/input7 [ 101.404572][ T5395] dvb-usb: schedule remote query interval to 150 msecs. [ 101.410031][ T5395] dvb-usb: bulk message failed: -22 (3/0) [ 101.441480][ T5395] dvb-usb: Unknown USB1.1 DVB-T device ???? please report the name to the author successfully initialized and connected. [ 101.529338][ T4779] Bluetooth: hci4: command tx timeout [ 101.573063][ T5395] dvb-usb: bulk message failed: -22 (1/0) [ 101.575854][ T5395] dvb-usb: error while querying for an remote control event. [ 101.708675][ T6520] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 101.757269][ T6520] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 101.758573][ T5395] dvb-usb: bulk message failed: -22 (1/0) [ 101.762962][ T5395] dvb-usb: error while querying for an remote control event. [ 101.788776][ T6520] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 101.819907][ T6520] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 101.884182][ T5394] usb 8-1: USB disconnect, device number 6 [ 101.969247][ T6520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.982250][ T5394] dvb-usb: Unknown USB1.1 DVB-T device ???? please successfully deinitialized and disconnected. [ 102.009108][ T6520] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.031732][ T1101] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.035636][ T1101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.063703][ T1198] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.067260][ T1198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.421033][ T6520] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.495905][ T6520] veth0_vlan: entered promiscuous mode [ 102.540537][ T6520] veth1_vlan: entered promiscuous mode [ 102.583912][ T6520] veth0_macvtap: entered promiscuous mode [ 102.602888][ T6520] veth1_macvtap: entered promiscuous mode [ 102.661698][ T6520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.666253][ T6520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.697835][ T6520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.703180][ T6520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.707437][ T6520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.729508][ T6520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.733987][ T6520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.747824][ T6520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.753859][ T6520] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.771176][ T6520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.775759][ T6520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.789206][ T6520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.793830][ T6520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.804398][ T6520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.809148][ T6520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.813562][ T6520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.818576][ T6520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.825086][ T6520] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.838654][ T6520] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.842567][ T6520] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.846507][ T6520] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.867863][ T6520] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.085632][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.092290][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.165921][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.170395][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.608119][ T4779] Bluetooth: hci4: command tx timeout [ 104.371561][ T6706] netlink: 'syz.2.523': attribute type 15 has an invalid length. [ 104.972648][ T6720] netlink: 224 bytes leftover after parsing attributes in process `syz.3.529'. [ 105.726537][ T5365] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 105.734557][ T5365] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 105.741190][ T5365] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 105.755906][ T5365] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 105.759694][ T5365] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 105.762938][ T5365] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 105.797861][ T5395] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 106.001950][ T5395] usb 8-1: Using ep0 maxpacket: 8 [ 106.015229][ T5395] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 106.027958][ T5395] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 106.032327][ T5395] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 106.037116][ T5395] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 106.056424][ T5395] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 106.067823][ T5395] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.152921][ T6758] chnl_net:caif_netlink_parms(): no params data found [ 106.286551][ T5395] usb 8-1: GET_CAPABILITIES returned 0 [ 106.292707][ T5395] usbtmc 8-1:16.0: can't read capabilities [ 106.404955][ T6758] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.418767][ T6758] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.422071][ T6758] bridge_slave_0: entered allmulticast mode [ 106.424406][ T6789] syz.2.559[6789] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.424491][ T6789] syz.2.559[6789] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 106.425066][ T6758] bridge_slave_0: entered promiscuous mode [ 106.452282][ T6758] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.457910][ T6758] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.460860][ T6758] bridge_slave_1: entered allmulticast mode [ 106.464123][ T6758] bridge_slave_1: entered promiscuous mode [ 106.490572][ T5395] usb 8-1: USB disconnect, device number 7 [ 106.580695][ T6758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.595299][ T6758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.651396][ T6758] team0: Port device team_slave_0 added [ 106.664360][ T6758] team0: Port device team_slave_1 added [ 106.779154][ T6758] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.782002][ T6758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.811289][ T6758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.816976][ T6758] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.825081][ T6758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.835569][ T6758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.923805][ T6758] hsr_slave_0: entered promiscuous mode [ 106.927441][ T6758] hsr_slave_1: entered promiscuous mode [ 106.933013][ T6758] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 106.936374][ T6758] Cannot create hsr debugfs directory [ 107.226612][ T6758] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.353362][ T6758] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.515318][ T6758] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.566573][ T6819] netlink: 'syz.2.572': attribute type 3 has an invalid length. [ 107.570894][ T6819] netlink: 4 bytes leftover after parsing attributes in process `syz.2.572'. [ 107.680608][ T6758] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.712821][ T6825] netlink: 'syz.2.574': attribute type 19 has an invalid length. [ 107.850599][ T4779] Bluetooth: hci5: command tx timeout [ 107.876601][ T6758] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 107.889783][ T6758] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 107.899636][ T6758] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 107.906367][ T6758] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 108.030673][ T6758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.096046][ T6758] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.122229][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.125208][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.138840][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.142297][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.435094][ T6758] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.523611][ T6758] veth0_vlan: entered promiscuous mode [ 108.545416][ T6758] veth1_vlan: entered promiscuous mode [ 108.567933][ T25] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 108.616848][ T6758] veth0_macvtap: entered promiscuous mode [ 108.624949][ T6758] veth1_macvtap: entered promiscuous mode [ 108.650663][ T6758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.662081][ T6758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.670917][ T6758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.674795][ T6758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.683109][ T6758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.687648][ T6758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.692259][ T6758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.696177][ T6758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.703572][ T6758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.707609][ T6758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.714085][ T6758] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.738708][ T6758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.748924][ T6758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.755922][ T6758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.764758][ T6758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.777983][ T25] usb 8-1: Using ep0 maxpacket: 16 [ 108.778011][ T6758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.784224][ T6758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.793117][ T25] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.795106][ T6758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.799399][ T25] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 108.802421][ T6758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.807734][ T25] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 108.810640][ T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.812819][ T6758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.823844][ T6758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.826412][ T25] usb 8-1: config 0 descriptor?? [ 108.829697][ T6758] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.851518][ T6758] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.854934][ T6758] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.858599][ T6758] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.862025][ T6758] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.929179][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.932331][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.956782][ T1102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.960160][ T1102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.263463][ T6838] raw-gadget.0 gadget.3: fail, usb_ep_set_halt returned -11 [ 109.274952][ T25] usbhid 8-1:0.0: can't add hid device: -71 [ 109.281632][ T25] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 109.296836][ T25] usb 8-1: USB disconnect, device number 8 [ 109.928330][ T4779] Bluetooth: hci5: command tx timeout [ 110.336616][ T5393] kernel write not supported for file /input/mouse0 (pid: 5393 comm: kworker/2:3) [ 110.899451][ T6932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.622'. [ 112.017968][ T4779] Bluetooth: hci5: command tx timeout [ 112.686539][ T6999] netlink: 'syz.2.652': attribute type 29 has an invalid length. [ 113.330987][ T7025] vxcan1: tx address claim with dest, not broadcast [ 113.505035][ T7027] netlink: 188 bytes leftover after parsing attributes in process `syz.3.665'. [ 113.510893][ T7027] netlink: 'syz.3.665': attribute type 1 has an invalid length. [ 113.532029][ T7029] netlink: 'syz.2.666': attribute type 8 has an invalid length. [ 114.100634][ T4779] Bluetooth: hci5: command tx timeout [ 114.802713][ T7077] loop2: detected capacity change from 0 to 16384 [ 114.949388][ T7085] netlink: 'syz.0.687': attribute type 8 has an invalid length. [ 114.954529][ T7085] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.687'. [ 115.517277][ T7098] unknown channel width for channel at 909000KHz? [ 115.838025][ T7106] Bluetooth: hci0: Opcode 0x0401 failed: -112 [ 116.985370][ T7141] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 117.004979][ T7141] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 117.849206][ T5365] Bluetooth: hci0: command 0x0401 tx timeout [ 117.852958][ T4779] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 118.173634][ T7192] tipc: Started in network mode [ 118.175795][ T7192] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 118.183671][ T7192] tipc: New replicast peer: fe80:0000:0000:ffff:ffe2:0000:0000:00bb [ 118.191021][ T7192] tipc: Enabled bearer , priority 10 [ 118.296469][ T7196] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 119.031477][ T7222] netlink: 'syz.2.747': attribute type 16 has an invalid length. [ 119.307903][ T5359] tipc: Node number set to 1 [ 119.415811][ T7239] batadv_slave_1: entered promiscuous mode [ 119.432363][ T7238] batadv_slave_1: left promiscuous mode [ 119.569056][ T7247] syzkaller1: entered promiscuous mode [ 119.571590][ T7247] syzkaller1: entered allmulticast mode [ 119.928249][ T4779] Bluetooth: hci0: command 0x0401 tx timeout [ 120.015320][ T4779] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 120.019807][ T4779] Bluetooth: hci4: Injecting HCI hardware error event [ 120.024491][ T5365] Bluetooth: hci4: hardware error 0x00 [ 120.337856][ T5416] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 120.527999][ T5416] usb 7-1: Using ep0 maxpacket: 8 [ 120.542418][ T5416] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 120.546831][ T5416] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 120.558335][ T5416] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 120.567920][ T5416] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 120.572200][ T5416] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 120.587846][ T5416] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 120.597847][ T5416] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.841300][ T7283] Process accounting resumed [ 120.878345][ T5416] usb 7-1: usb_control_msg returned -32 [ 120.882384][ T5416] usbtmc 7-1:16.0: can't read capabilities [ 120.942653][ T5749] kernel write not supported for file /snd/seq (pid: 5749 comm: kworker/3:4) [ 121.243795][ T7299] usbtmc 7-1:16.0: INITIATE_ABORT_BULK_OUT returned 0 [ 121.445620][ T9] usb 7-1: USB disconnect, device number 2 [ 122.099262][ T5365] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 122.257960][ T5393] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 122.335993][ T7335] netdevsim netdevsim2 ÿÿÿÿ: renamed from netdevsim0 (while UP) [ 122.468011][ T5393] usb 6-1: Using ep0 maxpacket: 32 [ 122.489689][ T5393] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 122.493899][ T5393] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 122.497731][ T5393] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 122.508844][ T5393] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 122.513101][ T5393] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 122.517352][ T5393] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 122.537865][ T5393] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 122.542167][ T5393] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 122.557866][ T5393] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 122.561992][ T5393] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.590318][ T5393] usb 6-1: config 0 descriptor?? [ 122.824222][ T5393] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 122.847943][ T5393] usb 6-1: USB disconnect, device number 3 [ 122.856658][ T5393] usblp0: removed [ 122.957973][ T5749] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 123.148597][ T5749] usb 7-1: Using ep0 maxpacket: 8 [ 123.161158][ T5749] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 123.188108][ T5749] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 123.193323][ T5749] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 123.201615][ T5749] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 123.207228][ T5749] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 123.222020][ T5749] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 123.226513][ T5749] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.389070][ T5393] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 123.476526][ T5749] usb 7-1: GET_CAPABILITIES returned 0 [ 123.480628][ T5749] usbtmc 7-1:16.0: can't read capabilities [ 123.589925][ T5393] usb 6-1: Using ep0 maxpacket: 32 [ 123.608618][ T5393] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 123.612960][ T5393] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 123.628904][ T5393] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 123.633352][ T5393] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 123.647891][ T5393] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 123.653114][ T5393] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 123.657707][ T5393] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 123.674507][ T5393] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 123.688031][ T5393] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 123.707964][ T5393] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.728761][ T5393] usb 6-1: config 0 descriptor?? [ 123.797437][ T7348] usbtmc 7-1:16.0: usb_control_msg returned -32 [ 123.810590][ T5416] usb 7-1: USB disconnect, device number 3 [ 123.975026][ T5393] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 124.182155][ T985] usb 6-1: USB disconnect, device number 4 [ 124.188027][ T985] usblp0: removed [ 124.563932][ T11] Bluetooth: hci6: Frame reassembly failed (-84) [ 124.952119][ T7424] Bluetooth: hci0: Opcode 0x0c20 failed: -112 [ 125.246557][ T7436] netlink: 16 bytes leftover after parsing attributes in process `syz.1.841'. [ 125.257845][ T7436] netlink: 52 bytes leftover after parsing attributes in process `syz.1.841'. [ 125.270804][ T7436] netlink: 12 bytes leftover after parsing attributes in process `syz.1.841'. [ 125.285119][ T7436] vlan0: entered allmulticast mode [ 125.287549][ T7436] veth0_vlan: entered allmulticast mode [ 125.686093][ T7458] netlink: 'syz.0.852': attribute type 9 has an invalid length. [ 125.694034][ T7458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.852'. [ 126.524840][ T7477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.860'. [ 126.530232][ T7477] bMtadv_lave_0: renamed from lo (while UP) [ 126.536437][ T7477] bMtadv_lave_0: entered allmulticast mode [ 126.572758][ T5356] Bluetooth: hci6: command 0x1003 tx timeout [ 126.576903][ T5365] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 126.686701][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 126.898064][ T5365] Bluetooth: hci0: command 0x0401 tx timeout [ 126.917890][ T4779] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 127.188388][ T7492] sg_write: data in/out 655360/1 bytes for SCSI command 0xf2-- guessing data in; [ 127.188388][ T7492] program syz.1.867 not setting count and/or reply_len properly [ 127.542669][ T7506] netlink: 184 bytes leftover after parsing attributes in process `syz.1.874'. [ 127.546780][ T7506] netlink: 'syz.1.874': attribute type 1 has an invalid length. [ 127.550570][ T8] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 127.756487][ T8] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.761495][ T8] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.765904][ T8] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 127.778370][ T8] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 127.786082][ T8] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.792937][ T8] usb 8-1: config 0 descriptor?? [ 128.243694][ T8] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 128.249521][ T8] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 128.252742][ T8] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 128.255850][ T8] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 128.262006][ T8] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 128.265149][ T8] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 128.268934][ T8] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 128.271946][ T8] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 128.274849][ T8] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 128.278474][ T8] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 128.281738][ T8] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 128.284647][ T8] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 128.288289][ T8] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 128.291592][ T8] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 128.294872][ T8] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 128.300389][ T8] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 128.318763][ T8] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 128.513115][ T5359] usb 8-1: USB disconnect, device number 9 [ 128.968747][ T4779] Bluetooth: hci0: command 0x0401 tx timeout [ 131.279642][ T1198] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.401360][ T1198] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.563299][ T1198] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.692527][ T1198] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.766967][ T5365] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 131.790532][ T5365] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 131.801713][ T5365] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 131.807315][ T5365] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 131.815111][ T5365] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 131.828388][ T5365] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 131.918943][ T7600] syz.0.916 (7600) used greatest stack depth: 21024 bytes left [ 132.031180][ T1198] bridge_slave_1: left allmulticast mode [ 132.033753][ T1198] bridge_slave_1: left promiscuous mode [ 132.036388][ T1198] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.063142][ T1198] bridge_slave_0: left allmulticast mode [ 132.065733][ T1198] bridge_slave_0: left promiscuous mode [ 132.073784][ T1198] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.822252][ T1378] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.830282][ T1378] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.903610][ T1198] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 132.912607][ T1198] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 132.921851][ T1198] bond0 (unregistering): Released all slaves [ 133.773590][ T1198] hsr_slave_0: left promiscuous mode [ 133.827863][ T1198] hsr_slave_1: left promiscuous mode [ 133.934040][ T4779] Bluetooth: hci5: command tx timeout [ 133.946069][ T1198] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.949146][ T1198] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.970417][ T1198] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.973435][ T1198] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.107588][ T1198] veth1_macvtap: left promiscuous mode [ 134.139049][ T1198] veth0_macvtap: left promiscuous mode [ 134.153805][ T1198] veth1_vlan: left promiscuous mode [ 134.156215][ T1198] veth0_vlan: left allmulticast mode [ 134.167031][ T1198] veth0_vlan: left promiscuous mode [ 136.008719][ T4779] Bluetooth: hci5: command tx timeout [ 136.188747][ T1198] team0 (unregistering): Port device team_slave_1 removed [ 136.302389][ T1198] team0 (unregistering): Port device team_slave_0 removed [ 137.277133][ T7719] syzkaller1: entered promiscuous mode [ 137.279673][ T7719] syzkaller1: entered allmulticast mode [ 137.388222][ T7612] chnl_net:caif_netlink_parms(): no params data found [ 137.850798][ T7612] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.863257][ T7612] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.884468][ T7612] bridge_slave_0: entered allmulticast mode [ 137.903119][ T7612] bridge_slave_0: entered promiscuous mode [ 137.910211][ T7612] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.913846][ T7612] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.917071][ T7612] bridge_slave_1: entered allmulticast mode [ 137.929794][ T7612] bridge_slave_1: entered promiscuous mode [ 138.078794][ T7612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.098021][ T5365] Bluetooth: hci5: command tx timeout [ 138.120908][ T7612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.240591][ T7612] team0: Port device team_slave_0 added [ 138.248973][ T5749] psmouse serio3: Failed to reset mouse on : -5 [ 138.255962][ T7612] team0: Port device team_slave_1 added [ 138.322235][ T7612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.326107][ T7612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.344446][ T7612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 138.353538][ T7612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 138.356679][ T7612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.369663][ T7612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.528305][ T7612] hsr_slave_0: entered promiscuous mode [ 138.535878][ T7612] hsr_slave_1: entered promiscuous mode [ 138.540045][ T7612] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 138.544693][ T7612] Cannot create hsr debugfs directory [ 139.318737][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 139.704128][ T7612] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 139.711898][ T7612] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 139.721416][ T7612] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 139.735425][ T7612] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 139.896175][ T7612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 139.961430][ T7612] 8021q: adding VLAN 0 to HW filter on device team0 [ 139.989187][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.992681][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.003970][ T1102] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.007086][ T1102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.168051][ T5365] Bluetooth: hci5: command tx timeout [ 140.431602][ T7816] syzkaller1: entered promiscuous mode [ 140.434207][ T7816] syzkaller1: entered allmulticast mode [ 140.452542][ T7612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.998082][ T7612] veth0_vlan: entered promiscuous mode [ 141.016713][ T7612] veth1_vlan: entered promiscuous mode [ 141.068787][ T7612] veth0_macvtap: entered promiscuous mode [ 141.075161][ T7612] veth1_macvtap: entered promiscuous mode [ 141.090906][ T7612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.095061][ T7612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.102680][ T7612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.107608][ T7612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.127913][ T7612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.132217][ T7612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.136145][ T7612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.158873][ T7612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.165823][ T7612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.180511][ T7612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.187094][ T7612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.213047][ T7612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.227884][ T7612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.232436][ T7612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.237273][ T7612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.258196][ T7612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.266659][ T7612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.288082][ T7612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.292520][ T7612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.296731][ T7612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.329378][ T7612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.335611][ T7612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.360797][ T7612] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.364291][ T7612] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.368507][ T7612] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.372109][ T7612] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.507526][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.512080][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.545022][ T1198] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.552150][ T1198] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.059002][ T5749] misc userio: Buffer overflowed, userio client isn't keeping up [ 142.645986][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 143.124451][ T5749] input: PS/2 Generic Mouse as /devices/serio3/input/input8 [ 143.339566][ T5749] psmouse serio3: Failed to enable mouse on [ 144.527495][ T39] audit: type=1326 audit(1725400486.540:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7888 comm="syz.3.1000" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73be579 code=0x7fc00000 [ 144.970609][ T7906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1007'. [ 145.188146][ T39] audit: type=1326 audit(1725400487.200:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7888 comm="syz.3.1000" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf73be579 code=0x7fc00000 [ 145.682123][ T7937] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1016'. [ 145.946562][ T7946] input: syz0 as /devices/virtual/input/input9 [ 146.298496][ T5416] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 146.500256][ T5416] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 146.512397][ T5416] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 146.516159][ T5416] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 146.530712][ T5416] usb 6-1: SerialNumber: syz [ 147.195726][ T5416] cdc_ether 6-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 147.587496][ T5416] usb 6-1: USB disconnect, device number 5 [ 147.591477][ T5416] cdc_ether 6-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 148.487161][ T8032] 9pnet_fd: Insufficient options for proto=fd [ 148.658604][ T8038] bridge: RTM_NEWNEIGH with invalid ether address [ 149.008737][ T8046] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1055'. [ 149.358931][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 149.396697][ T8063] tipc: Started in network mode [ 149.407976][ T8063] tipc: Node identity 9ca6, cluster identity 4711 [ 149.452266][ T8063] tipc: Node number set to 40102 [ 149.998512][ T8090] loop0: detected capacity change from 0 to 128 [ 150.011593][ T8090] loop0: [CUMANA/ADFS] p1 [ADFS] p1 [ 150.013798][ T8090] loop0: partition table partially beyond EOD, truncated [ 150.016944][ T8090] loop0: p1 size 348879409 extends beyond EOD, truncated [ 150.957219][ T8135] input: syz0 as /devices/virtual/input/input11 [ 152.367903][ T5416] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 152.531659][ T8178] block nbd3: server does not support multiple connections per device. [ 152.544687][ T8174] block nbd3: shutting down sockets [ 152.568554][ T5416] usb 7-1: Using ep0 maxpacket: 32 [ 152.580659][ T5416] usb 7-1: config 0 has no interfaces? [ 152.582726][ T5416] usb 7-1: New USB device found, idVendor=1b96, idProduct=9f0a, bcdDevice= 0.15 [ 152.586898][ T5416] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.614802][ T5416] usb 7-1: config 0 descriptor?? [ 152.630319][ T8183] netlink: 'syz.0.1109': attribute type 3 has an invalid length. [ 152.646044][ T8184] input: syz1 as /devices/virtual/input/input12 [ 152.882861][ T8192] ======================================================= [ 152.882861][ T8192] WARNING: The mand mount option has been deprecated and [ 152.882861][ T8192] and is ignored by this kernel. Remove the mand [ 152.882861][ T8192] option from the mount to silence this warning. [ 152.882861][ T8192] ======================================================= usb_generic_handle_packet: ctrl buffer too small (16384 > 4096) [ 154.764576][ T8242] input: syz0 as /devices/virtual/input/input13 [ 154.996421][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888071cecc00: rx timeout, send abort [ 155.003494][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888071cecc00: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session. [ 155.118091][ T5749] usb 7-1: USB disconnect, device number 4 [ 155.642751][ T45] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.821447][ T45] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.980203][ T45] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.031537][ T8268] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 156.103209][ T45] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.138678][ T5365] block nbd3: Receive control failed (result -32) [ 156.145880][ T8265] block nbd3: shutting down sockets [ 156.346574][ T45] bridge_slave_1: left allmulticast mode [ 156.352433][ T45] bridge_slave_1: left promiscuous mode [ 156.355043][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.369950][ T45] bridge_slave_0: left allmulticast mode [ 156.372413][ T45] bridge_slave_0: left promiscuous mode [ 156.375002][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.483333][ T4779] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 156.489763][ T4779] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 156.494206][ T4779] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 156.499816][ T4779] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 156.503795][ T4779] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 156.508178][ T4779] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 157.213753][ T8290] input: syz1 as /devices/virtual/input/input14 [ 157.268622][ T45] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.298417][ T45] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.331838][ T45] bond0 (unregistering): Released all slaves [ 157.491425][ T45] tipc: Disabling bearer [ 157.496290][ T45] tipc: Left network mode [ 157.657932][ T5395] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 157.858835][ T5395] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 157.860005][ T8279] chnl_net:caif_netlink_parms(): no params data found [ 157.893829][ T5395] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 157.917828][ T5395] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 157.922242][ T5395] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 157.931800][ T5395] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 157.939632][ T5395] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 157.944620][ T5395] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 157.948609][ T5395] usb 8-1: Product: syz [ 157.950636][ T5395] usb 8-1: Manufacturer: syz [ 157.959078][ T5395] cdc_wdm 8-1:1.0: skipping garbage [ 157.961295][ T5395] cdc_wdm 8-1:1.0: skipping garbage [ 157.965440][ T5395] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 157.969566][ T5395] cdc_wdm 8-1:1.0: Unknown control protocol [ 158.191564][ T45] hsr_slave_0: left promiscuous mode [ 158.195068][ T45] hsr_slave_1: left promiscuous mode [ 158.198437][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.202620][ T45] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.211636][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.215034][ T45] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.267581][ T8] usb 8-1: USB disconnect, device number 10 [ 158.333750][ T45] veth1_macvtap: left promiscuous mode [ 158.336299][ T45] veth0_macvtap: left promiscuous mode [ 158.340898][ T45] veth1_vlan: left promiscuous mode [ 158.343587][ T45] veth0_vlan: left promiscuous mode [ 158.570255][ T4779] Bluetooth: hci1: command tx timeout [ 159.017884][ T5394] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 159.217917][ T5394] usb 6-1: Using ep0 maxpacket: 8 [ 159.229471][ T5394] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 159.233161][ T5394] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 159.236891][ T5394] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 159.249651][ T5394] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 159.261699][ T5394] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 159.268143][ T5394] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 159.272188][ T5394] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.537900][ T5394] usb 6-1: usb_control_msg returned -32 [ 159.540362][ T5394] usbtmc 6-1:16.0: can't read capabilities [ 160.314876][ T5394] usb 6-1: USB disconnect, device number 6 [ 160.651108][ T4779] Bluetooth: hci1: command tx timeout [ 160.786222][ T45] team0 (unregistering): Port device team_slave_1 removed [ 161.058541][ T45] team0 (unregistering): Port device team_slave_0 removed [ 161.067870][ T8367] input: syz1 as /devices/virtual/input/input15 [ 161.627860][ T5394] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 161.825720][ T5394] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 161.846455][ T5394] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 161.852066][ T5394] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 161.857341][ T5394] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.878380][ T8372] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 161.890350][ T5394] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 162.141326][ T5394] usb 6-1: USB disconnect, device number 7 [ 162.737911][ T4779] Bluetooth: hci1: command tx timeout [ 162.961348][ T8382] sp0: Synchronizing with TNC [ 162.964197][ T8279] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.967597][ T8279] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.978029][ T8279] bridge_slave_0: entered allmulticast mode [ 162.981798][ T8279] bridge_slave_0: entered promiscuous mode [ 162.988952][ T8279] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.991171][ T8279] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.993526][ T8279] bridge_slave_1: entered allmulticast mode [ 162.997198][ T8279] bridge_slave_1: entered promiscuous mode [ 163.129717][ T8279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.182501][ T8279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.294742][ T8279] team0: Port device team_slave_0 added [ 163.323491][ T8279] team0: Port device team_slave_1 added [ 163.445660][ T8279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.458018][ T8279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.477496][ T8279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.500992][ T8279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.503767][ T8279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.526182][ T8279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.667278][ T8279] hsr_slave_0: entered promiscuous mode [ 163.678250][ T8279] hsr_slave_1: entered promiscuous mode [ 163.708238][ T8279] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 163.713182][ T8279] Cannot create hsr debugfs directory [ 163.749206][ T8406] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 164.017132][ T45] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.152948][ T45] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.268992][ T8420] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1198'. [ 164.270789][ T45] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.455993][ T45] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.779104][ T45] bridge_slave_1: left allmulticast mode [ 164.782283][ T45] bridge_slave_1: left promiscuous mode [ 164.786137][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.803971][ T45] bridge_slave_0: left allmulticast mode [ 164.806023][ T45] bridge_slave_0: left promiscuous mode [ 164.809156][ T4779] Bluetooth: hci1: command tx timeout [ 164.820583][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.028427][ T8454] loop0: detected capacity change from 0 to 7 [ 165.037411][ T8454] Dev loop0: unable to read RDB block 7 [ 165.040559][ T8454] loop0: AHDI p2 [ 165.042791][ T8454] loop0: partition table partially beyond EOD, truncated [ 165.127998][ T4779] Bluetooth: hci2: command 0x0c1a tx timeout [ 165.128398][ T5749] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 165.135461][ T5749] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 165.636374][ T45] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.643939][ T45] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.653130][ T45] bond0 (unregistering): Released all slaves [ 165.728096][ T7869] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 165.792816][ T45] tipc: Disabling bearer [ 165.804005][ T45] tipc: Left network mode [ 165.804065][ T8279] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 165.836362][ T8279] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 165.856124][ T8279] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 165.868020][ T8279] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 165.920025][ T7869] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 165.924456][ T7869] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 165.937845][ T7869] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 165.941856][ T7869] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.976459][ T8465] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 165.990486][ T7869] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 166.124987][ T8279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.148737][ T8279] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.169948][ T104] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.173090][ T104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.177676][ T104] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.180549][ T104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.273230][ T35] usb 6-1: USB disconnect, device number 8 [ 166.447012][ T8279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.543985][ T8279] veth0_vlan: entered promiscuous mode [ 166.567514][ T8279] veth1_vlan: entered promiscuous mode [ 166.632780][ T8279] veth0_macvtap: entered promiscuous mode [ 166.652393][ T8279] veth1_macvtap: entered promiscuous mode [ 166.689221][ T8279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.693991][ T8279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.707833][ T8279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.712380][ T8279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.716931][ T8279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.740408][ T8279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.745520][ T8279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.750438][ T8279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.754696][ T8279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.759325][ T8279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.767601][ T8279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.776176][ T8279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.782418][ T8279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.787204][ T8279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.797824][ T8279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.802520][ T8279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.816933][ T8279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.822546][ T8279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.828620][ T8279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.834024][ T8279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.839069][ T8279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.845329][ T8279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.856087][ T8279] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.867861][ T8279] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.871859][ T8279] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.875649][ T8279] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.071412][ T8498] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1215'. [ 167.207896][ T4779] Bluetooth: hci3: command 0x0c1a tx timeout [ 167.208110][ T5749] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 167.214026][ T5749] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 167.260422][ T8512] binder: 8510:8512 ioctl c0306201 0 returned -14 [ 167.732436][ T8530] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 169.527874][ T4779] Bluetooth: hci5: command 0x0c1a tx timeout [ 169.539850][ T5749] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 169.542539][ T5749] Bluetooth: hci5: Error when powering off device on rfkill (-110) [ 170.050884][ T8558] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1228'. [ 170.074727][ T8558] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.455405][ T8579] netlink: 'syz.1.1231': attribute type 3 has an invalid length. [ 170.477816][ T8579] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1231'. [ 170.739723][ T8596] team_slave_0: entered promiscuous mode [ 170.742577][ T8596] team_slave_1: entered promiscuous mode [ 170.746521][ T8596] team_slave_0: left promiscuous mode [ 170.748877][ T8596] team_slave_1: left promiscuous mode [ 170.839843][ T8602] ptrace attach of "/syz-executor exec"[6520] was attempted by " [ 170.940540][ T8606] openvswitch: netlink: Flow key attr not present in new flow. [ 171.319777][ T8620] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1242'. [ 171.609784][ T4779] Bluetooth: hci1: command 0x0c1a tx timeout [ 171.615535][ T5749] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 171.624696][ T5749] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 171.666815][ T5365] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 171.680869][ T5365] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 171.685669][ T5365] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 171.690231][ T5365] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 171.694563][ T5365] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 171.697837][ T5365] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 171.806801][ T1198] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.829680][ T1198] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.843586][ T8638] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1244'. [ 171.891614][ T45] hsr_slave_0: left promiscuous mode [ 171.894577][ T45] hsr_slave_1: left promiscuous mode [ 171.900269][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.903825][ T45] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.909378][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.912575][ T45] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.970628][ T45] veth1_macvtap: left promiscuous mode [ 171.973216][ T45] veth0_macvtap: left promiscuous mode [ 171.975828][ T45] veth1_vlan: left promiscuous mode [ 171.982594][ T45] veth0_vlan: left promiscuous mode [ 172.577903][ T5749] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 172.771877][ T5749] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 172.776766][ T5749] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.807724][ T5749] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 172.811905][ T5749] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 172.815033][ T5749] usb 7-1: Manufacturer: syz [ 172.823880][ T5749] usb 7-1: config 0 descriptor?? [ 172.967872][ T5749] rc_core: IR keymap rc-hauppauge not found [ 172.970608][ T5749] Registered IR keymap rc-empty [ 172.978467][ T5749] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 172.997743][ T5749] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input16 [ 173.149489][ T5749] usb 7-1: USB disconnect, device number 5 [ 173.458749][ T45] team0 (unregistering): Port device team_slave_1 removed [ 173.607004][ T45] team0 (unregistering): Port device team_slave_0 removed [ 173.768936][ T4779] Bluetooth: hci0: command tx timeout [ 174.428823][ T8666] binder: 8665:8666 ioctl c0306201 20000140 returned -14 [ 174.659523][ T8651] netlink: 'syz.1.1248': attribute type 10 has an invalid length. [ 174.665071][ T8651] macvlan0: entered promiscuous mode [ 174.670024][ T8651] macvlan0: entered allmulticast mode [ 174.681359][ T8651] veth1_vlan: entered allmulticast mode [ 174.685988][ T8651] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 174.717983][ T8669] netlink: 'syz.2.1254': attribute type 10 has an invalid length. [ 174.730146][ T8669] bond0: (slave bond_slave_0): Releasing backup interface [ 174.806779][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.815097][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.897192][ T39] audit: type=1804 audit(1725400516.910:20): pid=8675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1255" name="/" dev="pidfs" ino=8972 res=1 errno=0 [ 175.127709][ T8400] chnl_net:caif_netlink_parms(): no params data found [ 175.360640][ T1109] Bluetooth: hci6: Frame reassembly failed (-84) [ 175.373097][ T8691] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 175.464237][ T45] IPVS: stop unused estimator thread 0... [ 175.565141][ T8400] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.569572][ T8400] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.574311][ T8400] bridge_slave_0: entered allmulticast mode [ 175.581526][ T8400] bridge_slave_0: entered promiscuous mode [ 175.587152][ T8400] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.593079][ T8400] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.596890][ T8400] bridge_slave_1: entered allmulticast mode [ 175.602484][ T8400] bridge_slave_1: entered promiscuous mode [ 175.690580][ T8400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.708470][ T8400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.848016][ T5365] Bluetooth: hci0: command tx timeout [ 175.857493][ T8400] team0: Port device team_slave_0 added [ 175.908342][ T8400] team0: Port device team_slave_1 added [ 176.047492][ T8400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.055391][ T8400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.070231][ T8400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.079486][ T8400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.082768][ T8400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.117897][ T8400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.260558][ T8713] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 176.262063][ T8400] hsr_slave_0: entered promiscuous mode [ 176.265959][ T8713] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received [ 176.312064][ T8400] hsr_slave_1: entered promiscuous mode [ 176.318141][ T8400] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 176.326197][ T8400] Cannot create hsr debugfs directory [ 176.454259][ T8721] [U] [ 176.455879][ T8721] [U] [ 176.457201][ T8721] [U] [ 176.458450][ T8721] [U] [ 176.462227][ T8721] [U] [ 176.463504][ T8721] [U] [ 176.464730][ T8721] [U] [ 176.465961][ T8721] [U] [ 176.467409][ T8721] [U] [ 176.468703][ T8721] [U] [ 176.469945][ T8721] [U] [ 176.471175][ T8721] [U] [ 176.474093][ T8721] [U] [ 176.475361][ T8721] [U] [ 176.476626][ T8721] [U] [ 176.477876][ T8721] [U] [ 176.479874][ T8721] [U] [ 176.481248][ T8721] [U] [ 176.482483][ T8721] [U] [ 176.483707][ T8721] [U] [ 176.485031][ T8721] [U] [ 176.486271][ T8721] [U] [ 176.487516][ T8721] [U] [ 176.488780][ T8721] [U] [ 176.497975][ T8721] [U] [ 176.499396][ T8721] [U] [ 176.501166][ T8721] [U] [ 176.502644][ T8721] [U] [ 176.504048][ T8721] [U] [ 176.505293][ T8721] [U] [ 176.506505][ T8721] [U] [ 176.507704][ T8721] [U] [ 176.512976][ T8721] [U] [ 176.514299][ T8721] [U] [ 176.515628][ T8721] [U] [ 176.516919][ T8721] [U] [ 176.521219][ T8721] [U] [ 176.522446][ T8721] [U] [ 176.523572][ T8721] [U] [ 176.524861][ T8721] [U] [ 176.526155][ T8721] [U] [ 176.527377][ T8721] [U] [ 176.528515][ T8721] [U] [ 176.529723][ T8721] [U] [ 176.545189][ T8721] [U] [ 176.546761][ T8721] [U] [ 176.548176][ T8721] [U] [ 176.549808][ T8721] [U] [ 176.565463][ T8721] [U] [ 176.566793][ T8721] [U] [ 176.568031][ T8721] [U] [ 176.569330][ T8721] [U] [ 176.579399][ T8721] [U] [ 176.580697][ T8721] [U] [ 176.581971][ T8721] [U] [ 176.583251][ T8721] [U] [ 176.595715][ T8721] [U] [ 176.597087][ T8721] [U] [ 176.598324][ T8721] [U] [ 176.599551][ T8721] [U] [ 176.602682][ T8721] [U] [ 176.604168][ T8721] [U] [ 176.605582][ T8721] [U] [ 176.607096][ T8721] [U] [ 176.609624][ T8721] [U] [ 176.611440][ T8721] [U] [ 176.612953][ T8721] [U] [ 176.614185][ T8721] [U] [ 176.615475][ T8721] [U] [ 176.616589][ T8721] [U] [ 176.617967][ T8721] [U] [ 176.619200][ T8721] [U] [ 176.622921][ T8721] [U] [ 176.624384][ T8721] [U] [ 176.625702][ T8721] [U] [ 176.626791][ T8721] [U] [ 176.630402][ T8721] [U] [ 176.631745][ T8721] [U] [ 176.632975][ T8721] [U] [ 176.634203][ T8721] [U] [ 176.636597][ T8721] [U] [ 176.638136][ T8721] [U] [ 176.639550][ T8721] [U] [ 176.640779][ T8721] [U] [ 176.643917][ T8721] [U] [ 176.645723][ T8721] [U] [ 176.646950][ T8721] [U] [ 176.648225][ T8721] [U] [ 176.650728][ T8721] [U] [ 176.652160][ T8721] [U] [ 176.653678][ T8721] [U] [ 176.655091][ T8721] [U] [ 176.656679][ T8721] [U] [ 176.658079][ T8721] [U] [ 176.659320][ T8721] [U] [ 176.660608][ T8721] [U] [ 176.667457][ T8721] [U] [ 176.668752][ T8721] [U] [ 176.669972][ T8721] [U] [ 176.671198][ T8721] [U] [ 176.673309][ T8721] [U] [ 176.674510][ T8721] [U] [ 176.675727][ T8721] [U] [ 176.676945][ T8721] [U] [ 176.678938][ T8721] [U] [ 176.680068][ T8721] [U] [ 176.681143][ T8721] [U] [ 176.682237][ T8721] [U] [ 176.683578][ T8721] [U] [ 176.684651][ T8721] [U] [ 176.685735][ T8721] [U] [ 176.686801][ T8721] [U] [ 176.706026][ T8721] [U] [ 176.707564][ T8721] [U] [ 176.708936][ T8721] [U] [ 176.710716][ T8721] [U] [ 176.714658][ T8721] [U] [ 176.716151][ T8721] [U] [ 176.717557][ T8721] [U] [ 176.718749][ T8721] [U] [ 176.720765][ T8721] [U] [ 176.722097][ T8721] [U] [ 176.723479][ T8721] [U] [ 176.725010][ T8721] [U] [ 176.726604][ T8721] [U] [ 176.727870][ T8721] [U] [ 176.729248][ T8721] [U] [ 176.750516][ T8720] [U] [ 177.369111][ T5365] Bluetooth: hci6: command 0x1003 tx timeout [ 177.374868][ T4779] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 177.664494][ T8400] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 177.681297][ T8400] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 177.694747][ T8400] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 177.703957][ T8400] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 177.843632][ T8400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.872538][ T8400] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.899880][ T104] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.903943][ T104] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.919799][ T104] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.923968][ T104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.937837][ T4779] Bluetooth: hci0: command tx timeout [ 178.133206][ T5394] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 178.136111][ T5394] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 178.137934][ T25] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 178.164299][ T5394] hid-generic 0000:0000:0000.0004: hidraw1: HID v0.00 Device [syz0] on syz1 [ 178.344319][ T25] usb 7-1: Using ep0 maxpacket: 8 [ 178.349361][ T25] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 178.354123][ T25] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 178.372424][ T8400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.374388][ T25] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 178.387826][ T25] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 178.393866][ T25] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 178.417829][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.469096][ T8400] veth0_vlan: entered promiscuous mode [ 178.491434][ T8400] veth1_vlan: entered promiscuous mode [ 178.551613][ T8400] veth0_macvtap: entered promiscuous mode [ 178.569492][ T8400] veth1_macvtap: entered promiscuous mode [ 178.605519][ T8400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.610676][ T8400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.615030][ T8400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.628238][ T8400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.632424][ T8400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.636898][ T8400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.658178][ T8400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.662510][ T8400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.666735][ T8400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.677827][ T8400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.683365][ T8400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.686596][ T25] usb 7-1: usb_control_msg returned -32 [ 178.689953][ T25] usbtmc 7-1:16.0: can't read capabilities [ 178.713765][ T8400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.718147][ T8400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.724248][ T8400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.737910][ T8400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.742467][ T8400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.746886][ T8400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.758257][ T8400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.762619][ T8400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.766573][ T8400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.777842][ T8400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.789662][ T8400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.795737][ T8400] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.808262][ T8400] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.811942][ T8400] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.815503][ T8400] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.025514][ T104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.038017][ T104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.068549][ T104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.073193][ T104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.443708][ T8811] Bluetooth: MGMT ver 1.23 [ 180.007915][ T4779] Bluetooth: hci0: command tx timeout [ 180.070258][ T5394] usb 7-1: USB disconnect, device number 6 [ 182.473758][ T5359] kernel write not supported for file [eventfd] (pid: 5359 comm: kworker/1:2) [ 182.688989][ T39] audit: type=1326 audit(1725400524.710:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8872 comm="syz.1.1310" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f87579 code=0x0 [ 184.092427][ T8922] netlink: 'syz.3.1328': attribute type 4 has an invalid length. [ 184.157874][ T5393] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 184.187288][ T8922] netlink: 'syz.3.1328': attribute type 4 has an invalid length. [ 184.388233][ T5393] usb 7-1: Using ep0 maxpacket: 16 [ 184.400686][ T5393] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.411104][ T5393] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.416357][ T5393] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 184.448440][ T5393] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 184.459061][ T5393] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.465356][ T5393] usb 7-1: config 0 descriptor?? [ 184.522174][ T8935] overlayfs: failed to clone upperpath [ 184.718249][ T5384] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 184.919882][ T5384] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.924559][ T5384] usb 6-1: config 0 has no interfaces? [ 184.941869][ T5384] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 184.947732][ T5384] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.960671][ T5384] usb 6-1: config 0 descriptor?? [ 185.001130][ T5393] HID 045e:07da: Invalid code 65791 type 1 [ 185.017985][ T5393] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:045E:07DA.0005/input/input17 [ 185.058354][ T5393] microsoft 0003:045E:07DA.0005: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 185.207708][ T57] usb 7-1: USB disconnect, device number 7 [ 185.269959][ T8931] : entered promiscuous mode [ 186.008367][ T982] infiniband syz1: ib_query_port failed (-19) [ 186.012855][ T8970] infiniband syz1: set down [ 186.015873][ T8970] infiniband syz1: added syzkaller0 [ 186.086848][ T8970] RDS/IB: syz1: added [ 186.090075][ T8970] smc: adding ib device syz1 with port count 1 [ 186.093413][ T8970] smc: ib device syz1 port 1 has pnetid [ 186.110233][ T8970] smc: removing ib device syz1 [ 186.414327][ T8970] rdma_rxe: rxe_newlink: failed to add syzkaller0 [ 186.818677][ T8993] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1354'. [ 186.869387][ T8995] netlink: 'syz.0.1355': attribute type 1 has an invalid length. [ 186.877194][ T8995] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.1355'. [ 186.884783][ T8995] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1355'. [ 186.976169][ T57] libceph: connect (1)[c::]:6789 error -101 [ 186.995322][ T57] libceph: mon0 (1)[c::]:6789 connect error [ 187.014871][ T57] libceph: connect (1)[c::]:6789 error -101 [ 187.019162][ T57] libceph: mon0 (1)[c::]:6789 connect error [ 187.290779][ T57] libceph: connect (1)[c::]:6789 error -101 [ 187.293643][ T57] libceph: mon0 (1)[c::]:6789 connect error [ 187.416698][ T5359] usb 6-1: USB disconnect, device number 9 [ 187.764673][ T8999] ceph: No mds server is up or the cluster is laggy [ 187.808307][ T5749] libceph: connect (1)[c::]:6789 error -101 [ 187.811132][ T5749] libceph: mon0 (1)[c::]:6789 connect error [ 188.302358][ T9047] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 188.911248][ T9071] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 189.977525][ T9098] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1397'. [ 189.983577][ T9098] netlink: 'syz.0.1397': attribute type 7 has an invalid length. [ 189.987062][ T9098] netlink: 'syz.0.1397': attribute type 8 has an invalid length. [ 189.992153][ T9098] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1397'. [ 190.001445][ T9098] erspan0: entered promiscuous mode [ 190.008634][ T9098] batadv_slave_1: entered promiscuous mode [ 190.027956][ T9098] gretap0: entered promiscuous mode [ 190.045204][ T9106] 9p: Unknown uid 00000000004294967295 [ 190.120241][ T9108] netlink: 'syz.2.1402': attribute type 1 has an invalid length. [ 190.365953][ T9113] netlink: 134716 bytes leftover after parsing attributes in process `syz.2.1405'. [ 190.375688][ T9113] openvswitch: netlink: Message has 5 unknown bytes. [ 191.648477][ T9161] kernel read not supported for file /eth0 (pid: 9161 comm: syz.3.1426) [ 191.663928][ T39] audit: type=1800 audit(1725400533.670:22): pid=9161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1426" name="eth0" dev="mqueue" ino=27637 res=0 errno=0 [ 192.243989][ T9187] 9pnet_fd: Insufficient options for proto=fd [ 193.417416][ T9237] input: syz0 as /devices/virtual/input/input18 [ 194.251211][ T1378] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.255242][ T1378] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.200435][ T9270] infiniband syz1: set down [ 195.202538][ T985] infiniband syz1: ib_query_port failed (-19) [ 195.217398][ T9270] infiniband syz1: added syzkaller0 [ 195.315176][ T9270] RDS/IB: syz1: added [ 195.317651][ T9270] smc: adding ib device syz1 with port count 1 [ 195.327656][ T9270] smc: ib device syz1 port 1 has pnetid [ 195.334987][ T9270] smc: removing ib device syz1 [ 195.365142][ T9286] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1477'. [ 195.636354][ T9270] rdma_rxe: rxe_newlink: failed to add syzkaller0 [ 197.531425][ T5394] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 197.540324][ T5394] hid-generic 0000:0000:0000.0006: hidraw1: HID v0.00 Device [syz0] on syz0 [ 197.706227][ T5365] Bluetooth: hci6: sending frame failed (-49) [ 197.710936][ T4779] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 198.957911][ T5416] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 199.140858][ T5416] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 199.153478][ T5416] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 199.161199][ T5416] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 199.165927][ T5416] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 199.192862][ T5416] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 199.198189][ T5416] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.204943][ T5416] usb 6-1: config 0 descriptor?? [ 199.219117][ T9340] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 199.388632][ T9358] netlink: 'syz.3.1508': attribute type 4 has an invalid length. [ 199.490337][ T9360] input: syz0 as /devices/virtual/input/input19 [ 199.631109][ T9349] syz.0.1504 (9349): drop_caches: 2 [ 199.634133][ T9349] syz.0.1504 (9349): drop_caches: 2 [ 199.681900][ T9366] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1511'. [ 199.688152][ T9366] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1511'. [ 199.707437][ T5416] plantronics 0003:047F:FFFF.0007: unknown main item tag 0xd [ 199.711152][ T9366] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1511'. [ 199.718368][ T5416] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 199.731136][ T5416] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 199.997504][ T5416] usb 6-1: USB disconnect, device number 10 [ 200.107966][ T5396] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 200.318438][ T5396] usb 8-1: Using ep0 maxpacket: 8 [ 200.323397][ T5396] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 200.329860][ T5396] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 200.335003][ T5396] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 200.341982][ T5396] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 200.348218][ T5396] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 200.352165][ T5396] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.579820][ T5396] usb 8-1: usb_control_msg returned -32 [ 200.585601][ T5396] usbtmc 8-1:16.0: can't read capabilities [ 201.206585][ T5396] usb 8-1: USB disconnect, device number 11 [ 201.777280][ T9410] pim6reg1: entered promiscuous mode [ 201.780571][ T9410] pim6reg1: entered allmulticast mode [ 202.407935][ T4779] Bluetooth: hci0: command tx timeout [ 202.715264][ T39] audit: type=1326 audit(1725400544.730:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9446 comm="syz.0.1544" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05579 code=0x7ffc0000 [ 202.729858][ T39] audit: type=1326 audit(1725400544.750:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9446 comm="syz.0.1544" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05579 code=0x7ffc0000 [ 202.748330][ T39] audit: type=1326 audit(1725400544.760:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9446 comm="syz.0.1544" exe="/syz-executor" sig=0 arch=40000003 syscall=122 compat=1 ip=0xf7f05579 code=0x7ffc0000 [ 202.757416][ T39] audit: type=1326 audit(1725400544.760:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9446 comm="syz.0.1544" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05579 code=0x7ffc0000 [ 202.777884][ T39] audit: type=1326 audit(1725400544.760:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9446 comm="syz.0.1544" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f05579 code=0x7ffc0000 [ 202.896931][ T9459] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 202.924899][ T9460] kernel read not supported for file /blkio.throttle.io_service_bytes_recursive (pid: 9460 comm: syz.1.1548) [ 202.934386][ T39] audit: type=1800 audit(1725400544.950:28): pid=9460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1548" name="blkio.throttle.io_service_bytes_recursive" dev="mqueue" ino=32788 res=0 errno=0 [ 203.221222][ T9475] netlink: 'syz.0.1556': attribute type 1 has an invalid length. [ 203.488004][ T5396] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 203.720943][ T5396] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 203.726536][ T5396] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 203.736558][ T5396] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 203.746685][ T5396] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 203.756834][ T5396] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 203.766949][ T5396] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.791349][ T5396] usb 6-1: config 0 descriptor?? [ 203.795038][ T9476] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 204.285224][ T5396] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 204.299896][ T5396] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 206.397040][ T985] usb 6-1: USB disconnect, device number 11 [ 206.626247][ T9572] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1595'. [ 207.246091][ T9593] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1604'. [ 207.255808][ T9593] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1604'. [ 207.268273][ T9593] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1604'. [ 207.423039][ T985] kernel read not supported for file /admmidi2 (pid: 985 comm: kworker/3:2) [ 207.528124][ T9601] Process accounting resumed [ 207.669368][ T9607] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1610'. [ 208.157472][ T39] audit: type=1326 audit(1725400550.170:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9637 comm="syz.3.1623" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x0 [ 208.212975][ T9632] syz.1.1622[9632] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 208.213128][ T9632] syz.1.1622[9632] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 208.270108][ T9641] could not open pipe file descriptor [ 208.291214][ T9640] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1624'. [ 208.859016][ T39] audit: type=1326 audit(1725400550.880:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9658 comm="syz.0.1632" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f05579 code=0x0 [ 208.912491][ T9656] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 209.095522][ T9662] Invalid ELF header type: 0 != 1 [ 209.204906][ T9668] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1635'. [ 209.882728][ T9679] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.112542][ T9679] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.295151][ T9679] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.486207][ T5384] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 210.489383][ T9679] netdevsim netdevsim2 ÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.650307][ T9679] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.662417][ T9679] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.674203][ T9679] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.693539][ T5384] usb 8-1: config 0 has no interfaces? [ 210.694005][ T9679] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.696332][ T5384] usb 8-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 210.696354][ T5384] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.719913][ T5384] usb 8-1: config 0 descriptor?? [ 210.762489][ T9706] pim6reg1: entered promiscuous mode [ 210.766126][ T9706] pim6reg1: entered allmulticast mode [ 211.039375][ T9712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.057443][ T9712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.071730][ T25] usb 8-1: USB disconnect, device number 12 [ 211.142004][ T39] audit: type=1326 audit(1725400553.160:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9713 comm="syz.2.1656" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f8f579 code=0x7fc00000 [ 211.416303][ C1] ------------[ cut here ]------------ [ 211.418853][ C1] WARNING: CPU: 1 PID: 9723 at net/hsr/hsr_forward.c:602 handle_std_frame+0x247/0x2c0 [ 211.422970][ C1] Modules linked in: [ 211.424556][ C1] CPU: 1 UID: 0 PID: 9723 Comm: syz.0.1657 Not tainted 6.11.0-rc6-syzkaller-00026-g88fac17500f4 #0 [ 211.431391][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 211.435562][ C1] RIP: 0010:handle_std_frame+0x247/0x2c0 [ 211.437588][ C1] Code: 49 8d bd b0 01 00 00 be ff ff ff ff e8 e2 58 25 00 31 ff 89 c5 89 c6 e8 47 53 a8 f6 85 ed 0f 85 5a ff ff ff e8 fa 50 a8 f6 90 <0f> 0b 90 e9 4c ff ff ff e8 cc e7 06 f7 e9 8f fe ff ff e8 52 e8 06 [ 211.445934][ C1] RSP: 0018:ffffc90000598598 EFLAGS: 00010246 [ 211.449526][ C1] RAX: 0000000000000000 RBX: ffffc90000598670 RCX: ffffffff8ae2c919 [ 211.452705][ C1] RDX: ffff888024e94880 RSI: ffffffff8ae2c926 RDI: 0000000000000005 [ 211.455948][ C1] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 211.459024][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000003 [ 211.462344][ C1] R13: ffff8880627a8cc0 R14: 0000000000000000 R15: ffff888012b03c3a [ 211.465448][ C1] FS: 0000000000000000(0000) GS:ffff88802b700000(0063) knlGS:00000000f5696b40 [ 211.469380][ C1] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 211.472273][ C1] CR2: 0000000020010000 CR3: 00000000768b4000 CR4: 0000000000350ef0 [ 211.475616][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 211.479008][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 211.481751][ C1] Call Trace: [ 211.483137][ C1] [ 211.484169][ C1] ? show_regs+0x8c/0xa0 [ 211.485659][ C1] ? __warn+0xe5/0x3c0 [ 211.487069][ C1] ? handle_std_frame+0x247/0x2c0 [ 211.488901][ C1] ? report_bug+0x3c0/0x580 [ 211.490520][ C1] ? handle_bug+0x3d/0x70 [ 211.492004][ C1] ? exc_invalid_op+0x17/0x50 [ 211.493741][ C1] ? asm_exc_invalid_op+0x1a/0x20 [ 211.495721][ C1] ? handle_std_frame+0x239/0x2c0 [ 211.497680][ C1] ? handle_std_frame+0x246/0x2c0 [ 211.499667][ C1] ? handle_std_frame+0x247/0x2c0 [ 211.501698][ C1] ? handle_std_frame+0x246/0x2c0 [ 211.503665][ C1] hsr_fill_frame_info+0x2c8/0x360 [ 211.505641][ C1] hsr_forward_skb+0x7df/0x25c0 [ 211.507497][ C1] ? hsr_addr_is_self+0x240/0x470 [ 211.509492][ C1] ? __pfx_hsr_forward_skb+0x10/0x10 [ 211.511558][ C1] ? __lock_acquire+0xbdd/0x3cb0 [ 211.513423][ C1] hsr_handle_frame+0x603/0x850 [ 211.515403][ C1] ? __pfx_hsr_handle_frame+0x10/0x10 [ 211.517534][ C1] __netif_receive_skb_core.constprop.0+0xa3d/0x4330 [ 211.520357][ C1] ? bpf_ksym_find+0x124/0x1c0 [ 211.522155][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 211.524527][ C1] ? kernel_text_address+0x8d/0x100 [ 211.526592][ C1] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 211.529410][ C1] ? mark_lock+0xb5/0xc60 [ 211.531258][ C1] ? arch_stack_walk+0x118/0x170 [ 211.533480][ C1] ? hlock_class+0x4e/0x130 [ 211.535695][ C1] ? __lock_acquire+0xbdd/0x3cb0 [ 211.538053][ C1] ? stack_depot_save_flags+0x28/0x900 [ 211.540306][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 211.542644][ C1] __netif_receive_skb_list_core+0x357/0x950 [ 211.545013][ C1] ? lock_acquire+0x1b1/0x560 [ 211.546964][ C1] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 211.549574][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 211.551714][ C1] ? d_alloc_parallel+0xe9/0x12b0 [ 211.553913][ C1] ? __lookup_slow+0x194/0x460 [ 211.555871][ C1] ? walk_component+0x350/0x5b0 [ 211.557921][ C1] ? filename_lookup+0x1e5/0x5b0 [ 211.559939][ C1] ? vfs_statx+0x11e/0x1e0 [ 211.561817][ C1] ? vfs_fstatat+0x9f/0x160 [ 211.563690][ C1] netif_receive_skb_list_internal+0x753/0xda0 [ 211.566193][ C1] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 211.568959][ C1] ? dev_gro_receive+0x28a/0x2bc0 [ 211.570966][ C1] napi_complete_done+0x23f/0x9a0 [ 211.572781][ C1] ? __pfx_napi_complete_done+0x10/0x10 [ 211.575074][ C1] ? rcu_is_watching+0x12/0xc0 [ 211.577169][ C1] ? napi_gro_receive+0x51d/0xbf0 [ 211.579299][ C1] gro_cell_poll+0x162/0x210 [ 211.581194][ C1] __napi_poll.constprop.0+0xb7/0x550 [ 211.583225][ C1] net_rx_action+0xa92/0x1010 [ 211.584965][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 211.586794][ C1] ? __pfx_mark_lock+0x10/0x10 [ 211.588591][ C1] ? run_timer_base+0x119/0x190 [ 211.590499][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 211.592429][ C1] ? sched_clock+0x38/0x60 [ 211.594255][ C1] ? sched_clock_cpu+0x6d/0x4d0 [ 211.596193][ C1] ? mark_held_locks+0x9f/0xe0 [ 211.598359][ C1] handle_softirqs+0x216/0x8f0 [ 211.601012][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 211.603385][ C1] ? tun_get_user+0x2be9/0x3c20 [ 211.605315][ C1] ? tun_get_user+0x2be9/0x3c20 [ 211.607344][ C1] do_softirq+0xb2/0xf0 [ 211.609160][ C1] [ 211.610435][ C1] [ 211.611454][ C1] __local_bh_enable_ip+0x100/0x120 [ 211.613359][ C1] tun_get_user+0x2c10/0x3c20 [ 211.615067][ C1] ? __pfx_tun_get_user+0x10/0x10 [ 211.616937][ C1] ? find_held_lock+0x2d/0x110 [ 211.618597][ C1] ? __pfx_lock_release+0x10/0x10 [ 211.620332][ C1] tun_chr_write_iter+0xe8/0x210 [ 211.622121][ C1] vfs_write+0x6b6/0x1140 [ 211.623658][ C1] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 211.625765][ C1] ? __pfx_vfs_write+0x10/0x10 [ 211.627743][ C1] ? do_futex+0x123/0x350 [ 211.629444][ C1] ? __fget_files+0x256/0x400 [ 211.631137][ C1] ? __fget_light+0x173/0x210 [ 211.632796][ C1] ksys_write+0x12f/0x260 [ 211.634179][ C1] ? __pfx_ksys_write+0x10/0x10 [ 211.636032][ C1] __do_fast_syscall_32+0x73/0x120 [ 211.638147][ C1] do_fast_syscall_32+0x32/0x80 [ 211.640014][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 211.642068][ C1] RIP: 0023:0xf7f05579 [ 211.643620][ C1] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 211.650548][ C1] RSP: 002b:00000000f569656c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 211.653677][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000440 [ 211.656882][ C1] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000000 [ 211.660214][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 211.663263][ C1] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 211.666323][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 211.669042][ C1] [ 211.670249][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 211.673262][ C1] CPU: 1 UID: 0 PID: 9723 Comm: syz.0.1657 Not tainted 6.11.0-rc6-syzkaller-00026-g88fac17500f4 #0 [ 211.677259][ C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 211.681655][ C1] Call Trace: [ 211.682968][ C1] [ 211.684269][ C1] dump_stack_lvl+0x3d/0x1f0 [ 211.686030][ C1] panic+0x6dc/0x7c0 [ 211.687654][ C1] ? __pfx_panic+0x10/0x10 [ 211.689530][ C1] ? show_trace_log_lvl+0x363/0x500 [ 211.691683][ C1] ? check_panic_on_warn+0x1f/0xb0 [ 211.694200][ C1] ? handle_std_frame+0x247/0x2c0 [ 211.696350][ C1] check_panic_on_warn+0xab/0xb0 [ 211.698341][ C1] __warn+0xf1/0x3c0 [ 211.700216][ C1] ? handle_std_frame+0x247/0x2c0 [ 211.702232][ C1] report_bug+0x3c0/0x580 [ 211.703910][ C1] handle_bug+0x3d/0x70 [ 211.705492][ C1] exc_invalid_op+0x17/0x50 [ 211.706838][ C1] asm_exc_invalid_op+0x1a/0x20 [ 211.708471][ C1] RIP: 0010:handle_std_frame+0x247/0x2c0 [ 211.710413][ C1] Code: 49 8d bd b0 01 00 00 be ff ff ff ff e8 e2 58 25 00 31 ff 89 c5 89 c6 e8 47 53 a8 f6 85 ed 0f 85 5a ff ff ff e8 fa 50 a8 f6 90 <0f> 0b 90 e9 4c ff ff ff e8 cc e7 06 f7 e9 8f fe ff ff e8 52 e8 06 [ 211.717205][ C1] RSP: 0018:ffffc90000598598 EFLAGS: 00010246 [ 211.719761][ C1] RAX: 0000000000000000 RBX: ffffc90000598670 RCX: ffffffff8ae2c919 [ 211.723193][ C1] RDX: ffff888024e94880 RSI: ffffffff8ae2c926 RDI: 0000000000000005 [ 211.726502][ C1] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 211.729462][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000003 [ 211.732381][ C1] R13: ffff8880627a8cc0 R14: 0000000000000000 R15: ffff888012b03c3a [ 211.735264][ C1] ? handle_std_frame+0x239/0x2c0 [ 211.736913][ C1] ? handle_std_frame+0x246/0x2c0 [ 211.738941][ C1] ? handle_std_frame+0x246/0x2c0 [ 211.740980][ C1] hsr_fill_frame_info+0x2c8/0x360 [ 211.742837][ C1] hsr_forward_skb+0x7df/0x25c0 [ 211.744973][ C1] ? hsr_addr_is_self+0x240/0x470 [ 211.746918][ C1] ? __pfx_hsr_forward_skb+0x10/0x10 [ 211.748909][ C1] ? __lock_acquire+0xbdd/0x3cb0 [ 211.750719][ C1] hsr_handle_frame+0x603/0x850 [ 211.752184][ C1] ? __pfx_hsr_handle_frame+0x10/0x10 [ 211.754444][ C1] __netif_receive_skb_core.constprop.0+0xa3d/0x4330 [ 211.757221][ C1] ? bpf_ksym_find+0x124/0x1c0 [ 211.759178][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 211.761813][ C1] ? kernel_text_address+0x8d/0x100 [ 211.764040][ C1] ? __pfx___netif_receive_skb_core.constprop.0+0x10/0x10 [ 211.767057][ C1] ? mark_lock+0xb5/0xc60 [ 211.768872][ C1] ? arch_stack_walk+0x118/0x170 [ 211.770676][ C1] ? hlock_class+0x4e/0x130 [ 211.772316][ C1] ? __lock_acquire+0xbdd/0x3cb0 [ 211.774251][ C1] ? stack_depot_save_flags+0x28/0x900 [ 211.776215][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 211.778071][ C1] __netif_receive_skb_list_core+0x357/0x950 [ 211.780455][ C1] ? lock_acquire+0x1b1/0x560 [ 211.782261][ C1] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 211.784838][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 211.786849][ C1] ? d_alloc_parallel+0xe9/0x12b0 [ 211.789042][ C1] ? __lookup_slow+0x194/0x460 [ 211.790925][ C1] ? walk_component+0x350/0x5b0 [ 211.793155][ C1] ? filename_lookup+0x1e5/0x5b0 [ 211.795193][ C1] ? vfs_statx+0x11e/0x1e0 [ 211.797072][ C1] ? vfs_fstatat+0x9f/0x160 [ 211.799021][ C1] netif_receive_skb_list_internal+0x753/0xda0 [ 211.801738][ C1] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 211.804550][ C1] ? dev_gro_receive+0x28a/0x2bc0 [ 211.808693][ C1] napi_complete_done+0x23f/0x9a0 [ 211.810838][ C1] ? __pfx_napi_complete_done+0x10/0x10 [ 211.813175][ C1] ? rcu_is_watching+0x12/0xc0 [ 211.815301][ C1] ? napi_gro_receive+0x51d/0xbf0 [ 211.817336][ C1] gro_cell_poll+0x162/0x210 [ 211.819317][ C1] __napi_poll.constprop.0+0xb7/0x550 [ 211.821595][ C1] net_rx_action+0xa92/0x1010 [ 211.823658][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 211.825885][ C1] ? __pfx_mark_lock+0x10/0x10 [ 211.827672][ C1] ? run_timer_base+0x119/0x190 [ 211.829551][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 211.831758][ C1] ? sched_clock+0x38/0x60 [ 211.833850][ C1] ? sched_clock_cpu+0x6d/0x4d0 [ 211.835938][ C1] ? mark_held_locks+0x9f/0xe0 [ 211.838323][ C1] handle_softirqs+0x216/0x8f0 [ 211.840543][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 211.843080][ C1] ? tun_get_user+0x2be9/0x3c20 [ 211.845537][ C1] ? tun_get_user+0x2be9/0x3c20 [ 211.847733][ C1] do_softirq+0xb2/0xf0 [ 211.849504][ C1] [ 211.850881][ C1] [ 211.852046][ C1] __local_bh_enable_ip+0x100/0x120 [ 211.854203][ C1] tun_get_user+0x2c10/0x3c20 [ 211.856177][ C1] ? __pfx_tun_get_user+0x10/0x10 [ 211.858248][ C1] ? find_held_lock+0x2d/0x110 [ 211.860212][ C1] ? __pfx_lock_release+0x10/0x10 [ 211.862311][ C1] tun_chr_write_iter+0xe8/0x210 [ 211.864970][ C1] vfs_write+0x6b6/0x1140 [ 211.866866][ C1] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 211.869314][ C1] ? __pfx_vfs_write+0x10/0x10 [ 211.871681][ C1] ? do_futex+0x123/0x350 [ 211.873616][ C1] ? __fget_files+0x256/0x400 [ 211.875708][ C1] ? __fget_light+0x173/0x210 [ 211.877867][ C1] ksys_write+0x12f/0x260 [ 211.879903][ C1] ? __pfx_ksys_write+0x10/0x10 [ 211.882294][ C1] __do_fast_syscall_32+0x73/0x120 [ 211.884799][ C1] do_fast_syscall_32+0x32/0x80 [ 211.886961][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 211.890245][ C1] RIP: 0023:0xf7f05579 [ 211.892048][ C1] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 211.900279][ C1] RSP: 002b:00000000f569656c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 211.903920][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000440 [ 211.907286][ C1] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000000 [ 211.910808][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 211.914133][ C1] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 211.917529][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 211.920837][ C1] [ 211.923007][ C1] Kernel Offset: disabled [ 211.924945][ C1] Rebooting in 86400 seconds.. VM DIAGNOSIS: 21:51:37 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffffea000154fd80 RCX=ffffffff81d8eaf1 RDX=ffff8880129f8000 RSI=ffffffff81d8eb03 RDI=0000000000000005 RBP=ffffea000154fd80 RSP=ffffc9000381f600 R8 =0000000000000005 R9 =0000000080000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000001 R14=0000000000000000 R15=ffffc9000381fa98 RIP=ffffffff81d8eb03 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002f5f9ff8 CR3=000000000db7c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000032 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff84fc1325 RDI=ffffffff9a514600 RBP=ffffffff9a5145c0 RSP=ffffc90000597f70 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000032 R14=ffffffff84fc12c0 R15=0000000000000000 RIP=ffffffff84fc134f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b700000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000020010000 CR3=00000000768b4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000a000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000000 RDX=ffff8880209fa440 RSI=ffffffff8133c23c RDI=ffffffff8176d460 RBP=ffffc900005408d0 RSP=ffffc90000540838 R8 =0000000000001000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=ffffc90000540840 R13=ffffffff8176d460 R14=ffffc90000540900 R15=ffff8880209fa440 RIP=ffffffff8133c23c RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055d802915000 CR3=000000007244c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000007 RBX=1ffff920045eff5c RCX=0000000000000000 RDX=0000000000000000 RSI=ffffffff8bb07da0 RDI=ffff888025a9d35c RBP=0000000000000046 RSP=ffffc90022f7fad0 R8 =0000000000000000 R9 =fffffbfff2023bc3 R10=ffffffff9011de1f R11=0000000000000000 R12=0000000000000001 R13=0000000000000000 R14=ffff888024e402f0 R15=0000000000000000 RIP=ffffffff816953c6 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b900000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fb661067440 CR3=000000006182a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000