last executing test programs: 1m1.553397652s ago: executing program 1 (id=2679): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080), 0x6) getsockname(r0, 0x0, &(0x7f00000000c0)) 1m1.323498232s ago: executing program 1 (id=2681): syz_emit_vhci(&(0x7f0000000f00)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xb}, @hci_ev_le_remote_conn_param_req={{}, {0xc9, 0x6, 0x6}}}}, 0xe) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x0, 0x0) 1m1.285772396s ago: executing program 1 (id=2682): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x0, 0x0, @prog_id}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r0, 0x2, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1, 0x0, &(0x7f00000014c0), 0x0, 0x0}, 0x40) 1m0.77358127s ago: executing program 1 (id=2685): r0 = syz_open_dev$vim2m(&(0x7f0000000180), 0x8, 0x2) writev(r0, &(0x7f0000000200)=[{&(0x7f0000000500)='@', 0x1}], 0x1) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc0f8565c, &(0x7f0000000000)={0x0, 0x0, 0x1, {0x2, @vbi}}) 1m0.299576384s ago: executing program 1 (id=2688): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$sr(0xffffff9c, &(0x7f0000000040), 0x42200, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @empty}, {0x16, 0x0, 0x0, @local}}}}}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x7a) sched_setscheduler(0x0, 0x0, &(0x7f0000000100)=0x5) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r5, 0x8040450a, &(0x7f0000000ac0)=""/110) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, 0x0, 0x4040) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000009c0), 0xd4ba0ff) unlink(&(0x7f0000000100)='./file0/file1\x00') mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)='binder\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0\x00') r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_REGS(r7, 0x8090ae81, &(0x7f0000000040)) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x20, r6, 0xb03, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) 58.231297465s ago: executing program 2 (id=2690): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x7) ioctl$TCFLSH(r0, 0x8924, 0x4000000000000) 57.210767369s ago: executing program 2 (id=2692): creat(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01060000000000000000090000003c0004801300010062726f6164636173742d6c696e6b000024000780080005000000000008000300ff"], 0x50}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) unshare(0x2000400) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$tipc(0x1e, 0x1, 0x0) bind$tipc(r3, &(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x40, 0x4}, 0x1}}, 0x10) listen(0xffffffffffffffff, 0x1) socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x1}}, 0x10, 0x0}, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r2, 0x5202) 56.940481635s ago: executing program 2 (id=2693): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x0, 0x0, @prog_id}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r0, 0x2, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1, 0x0, &(0x7f00000014c0), 0x0, 0x0}, 0x40) 56.604710984s ago: executing program 2 (id=2694): r0 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'team0\x00', &(0x7f0000000040)=@ethtool_rxfh_indir={0x1}}) 56.115480284s ago: executing program 2 (id=2695): r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$sock_cred(r0, 0x1, 0x38, 0x0, &(0x7f0000003b40)) 36.909118761s ago: executing program 3 (id=2724): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x88, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_TUPLE_MASTER={0x24, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1a}}]}]}, 0x88}}, 0x0) 36.587091916s ago: executing program 3 (id=2725): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/bus/input/devices\x00', 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x12) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000100)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r1, 0x5501) pread64(r0, &(0x7f0000000280)=""/4096, 0x1000, 0x0) 35.889925252s ago: executing program 3 (id=2726): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB=',msize=0x0000000080000001']) 35.521566585s ago: executing program 3 (id=2727): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x78, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0x14, 0x4, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0x8}]}]}, 0x78}}, 0x0) 35.28209239s ago: executing program 3 (id=2728): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f000001f680)='net/mcfilter6\x00') sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x40046629, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000005c0)={0x0, 0xfffffffffffffffc, 0x10b, 0x0, @buffer={0x0, 0x3e, &(0x7f0000000300)=""/62}, &(0x7f0000000340)="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", 0x0, 0x44, 0x10006, 0xffffffff, 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, &(0x7f0000000240)={@desc={0x1, 0x0, @desc2}}) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_uring_enter(r1, 0x2f5b, 0xdc1a, 0x5, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000180)=0x1) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_PIT(r3, 0xaea3, 0x0) socket$rds(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000001f40)=@raw={'raw\x00', 0x8, 0x3, 0x224, 0x0, 0x11, 0x148, 0xd8, 0x10, 0x190, 0x2a8, 0x2a8, 0x190, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x70, 0xd8, 0x1c, {0x6}}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'veth0_to_hsr\x00', 'pimreg\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00'}}}], {{'\x00', 0xc8, 0x70, 0x94}, {0x24}}}}, 0x280) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000001c) readv(r1, &(0x7f0000004880)=[{&(0x7f0000002680)=""/148, 0x94}], 0x1) read$FUSE(r1, &(0x7f0000006480)={0x2020}, 0xfffffd35) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000000)=0x10000, 0x4) 31.114585037s ago: executing program 3 (id=2731): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x4, 0x0, &(0x7f0000000900)="e02742e8", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r0 = open(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) getpgid(0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x3) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0) syz_clone3(&(0x7f0000000480)={0x20000000, &(0x7f0000000340), &(0x7f0000000380), 0x0, {}, &(0x7f0000000400)=""/55, 0x37, 0x0, 0x0, 0x0, {r0}}, 0x58) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='htcp\x00', 0x5) 24.626363249s ago: executing program 1 (id=2688): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$sr(0xffffff9c, &(0x7f0000000040), 0x42200, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @empty}, {0x16, 0x0, 0x0, @local}}}}}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x7a) sched_setscheduler(0x0, 0x0, &(0x7f0000000100)=0x5) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGMTSLOTS(r5, 0x8040450a, &(0x7f0000000ac0)=""/110) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, 0x0, 0x4040) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f00000009c0), 0xd4ba0ff) unlink(&(0x7f0000000100)='./file0/file1\x00') mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f00000002c0)='binder\x00', 0x0, 0x0) rmdir(&(0x7f0000000340)='./file0\x00') r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_REGS(r7, 0x8090ae81, &(0x7f0000000040)) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x20, r6, 0xb03, 0x0, 0x0, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}]}]}, 0x20}}, 0x0) 22.347194803s ago: executing program 2 (id=2695): r0 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$sock_cred(r0, 0x1, 0x38, 0x0, &(0x7f0000003b40)) 8.565223455s ago: executing program 0 (id=2745): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000200)="f4001100042b2c25fe8007000000007a000000339f426cfd8e2fa40000000000000000000000634b", 0x5dc}], 0x1}, 0x900) 8.41339295s ago: executing program 0 (id=2746): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6(0xa, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000500)={{{@in6=@mcast2, @in=@multicast2}}, {{@in6=@mcast2}, 0x0, @in6=@dev}}, &(0x7f0000000140)=0xe8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = io_uring_setup(0x177f, &(0x7f0000000340)={0x0, 0x5a27}) r3 = syz_open_dev$swradio(&(0x7f00000000c0), 0x0, 0x2) read$hiddev(r3, &(0x7f0000000740)=""/43, 0x2b) close_range(r2, 0xffffffffffffffff, 0x0) bind$bt_hci(r0, &(0x7f0000000080), 0x6) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000540)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r4, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f0000000240)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000200)=0x1, r5, 0x0, 0x1, 0x4}}, 0x20) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e6, &(0x7f0000000140)) socket(0x0, 0x2, 0x0) r6 = socket$kcm(0x2, 0x0, 0x84) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$inet(r6, 0x0, 0x0) 3.88739249s ago: executing program 0 (id=2747): listen(0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000000000000008000000000000000000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) readv(r1, &(0x7f0000000f00)=[{&(0x7f0000000a00)=""/114, 0x72}, {&(0x7f0000000a80)=""/146, 0x92}, {&(0x7f0000000b40)=""/213, 0xd5}, {&(0x7f0000000c40)=""/169, 0xa9}, {&(0x7f0000000d00)=""/92, 0x5c}, {&(0x7f0000000d80)=""/93, 0x5d}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f0000001b80)=""/4096, 0x1000}, {&(0x7f0000000e00)=""/212, 0xd4}], 0x9) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000200)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) sendmmsg$inet6(r3, &(0x7f0000000540)=[{{&(0x7f0000000100)={0xa, 0x4e23, 0x0, @private0}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=[@pktinfo={{0x24, 0x29, 0x32, {@remote, r5}}}], 0x28}}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000280)={r2, 0x0, 0x30}, &(0x7f0000000300)=0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, 0x0, 0x0) getsockopt$netlink(r7, 0x10e, 0x9, &(0x7f0000000040)=""/55, &(0x7f0000000080)=0x37) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, 0x0, 0x0) syz_80211_inject_frame(&(0x7f00000000c0)=@device_b, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x6bc) bind$netlink(r6, &(0x7f00000002c0), 0xc) r8 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r8, 0x119, 0x1, &(0x7f0000000000)=0x17e9541f, 0x4) close(r8) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r9, 0x0, 0x48b, &(0x7f0000000200)={0x1, 'bond0\x00'}, 0x18) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="2c0000001300050200", @ANYRES64=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\f'], 0x2c}, 0x1, 0x0, 0x0, 0x24040010}, 0x0) r11 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_STOPDAEMON(r11, 0x0, 0x48c, &(0x7f0000000000)={0x1, 'ip6gretap0\x00', 0x3}, 0x18) getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) 2.999361012s ago: executing program 0 (id=2748): r0 = socket$inet6(0xa, 0x2, 0x0) creat(0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt(r4, 0x0, 0x19, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x202, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) sendto$inet6(r0, &(0x7f0000000800)="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", 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x0, @mcast2}, 0x1c) recvmmsg(r0, &(0x7f0000001340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) r5 = socket$inet(0x2, 0x3, 0x8d) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000140)=0xc) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, r6}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, 0x0, 0x0) 429.8771ms ago: executing program 0 (id=2749): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) io_uring_setup(0x2887, &(0x7f0000000240)={0x0, 0xb8d2, 0x20, 0x0, 0x34e}) io_setup(0x9, &(0x7f0000000b80)) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f00000005c0)="553a45983c430093df0d6038ba2f78777934ebc21b7361cf1d42008663b05ea20100000000000080a102fbdcae896b5511a756a37294a995f2234868a12a46577459928d495ba172b4c4249298e37112f241144d277bfe1398604c9b02366ad2779847d7d129ba435463a404867c80ec945a9fa88ab1a45aaf43730f88f59c4533a51929f2befc394abea53c36ee10669d080db73c05eb199f5762cf6720db7c44607275d0b55233e73d6034f57fcededf751079", 0xb4}], 0x2}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000100), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000180)={0xc, @sliced}) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000a300)) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan1\x00', @random='\rh\x00 \x00'}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) socket$rds(0x15, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 0s ago: executing program 0 (id=2750): open(&(0x7f0000000380)='./file2\x00', 0x14507e, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000040)="580000001400192340834b", 0xb}, {&(0x7f00000002c0)="db6dfa07d8098bd2ced64ad5edc54382ee45da9203efd5732acfcc727b53d3079ed06ecae1342e4ec9c8283311dceddf89948d3ef84ff58ffb015760e03187c365999492cb07f544c5f8e72917b4af1e3e47b4655360c078947e62afae62d2ec31a3e0043a888d2096a4fe21b43cef30a6299fda9e752ea4ac9bd768a5a01356f8f5d1dae5c092d7f0fba15747b05104819751a787c6202cca9911ddff6f00ddc9997b", 0xa3}], 0x100000e0) r3 = socket$netlink(0x10, 0x3, 0x5) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_VALIDATION={0x5, 0xd, 0x3}]}}}]}, 0x3c}}, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e1f1b"], 0x22) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r4 = io_uring_setup(0x4011, &(0x7f0000000180)={0x0, 0x6e42, 0x2000, 0x3, 0x3d7}) r5 = syz_io_uring_setup(0x8a5, &(0x7f0000000080)={0x0, 0xc524, 0x4, 0x0, 0x0, 0x0, r4}, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000280)=@IORING_OP_SPLICE={0x1e, 0x0, 0x0, @fd_index}) r8 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001880), 0x400000, 0x0) dup(r8) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r9, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f00000001c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r9, 0x11a, 0x1, &(0x7f0000000140)=@ccm_128={{0x303}, "b82beb2ef307f290", "ffff1a6ceccd0ee6830000008000", '\x00', "93d64437ddb41edb"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r9, 0x11a, 0x2, &(0x7f0000000280)=@ccm_128={{0x304}, "3a997aae6644173f", "b9c0a8cd2707555d2fd4cc373ac51cf2", "1784fe44", "d3e69d47722a0439"}, 0x28) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000000240)=0x10000) r10 = socket$rxrpc(0x21, 0x2, 0xa) sendmmsg(r10, &(0x7f0000000900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x20}}], 0x1, 0x0) setsockopt$RXRPC_SECURITY_KEY(r10, 0x110, 0x1, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_req={{0x17, 0x6}, {@none}}}, 0x9) syz_emit_vhci(&(0x7f0000000380)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) io_uring_enter(r5, 0xa3d, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): ed mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 827.957560][T12584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 827.965391][T12584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 827.970150][T12584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 827.976088][T12584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 827.981565][T12584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 827.985666][T12584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 827.992123][T12584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 827.997247][T12584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 828.001460][T12584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 828.005210][T12584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 828.017887][T12584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 828.027700][T12584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 828.239630][T12584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 828.245463][T12584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 828.250399][T12584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 828.276294][T12584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 828.280448][T12584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 828.285455][T12584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 828.290642][T12584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 828.314810][T12584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 828.321584][T12584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 828.365793][T12584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 828.387500][T12584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 828.405978][T12584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 828.417184][T12584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 828.430451][T12584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 828.435583][T12774] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2291'. [ 828.442050][T12584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 828.447276][T12584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 828.451674][T12584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 828.455730][T12584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 828.460073][T12584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 828.466044][T12584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 828.476357][T12584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 828.489114][T12584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 828.501433][T12584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 828.622321][T12584] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.663601][T12584] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.690386][T12584] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.694708][T12584] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 828.721928][T12660] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 829.516520][ T1152] hsr_slave_0: left promiscuous mode [ 829.575676][ T1152] hsr_slave_1: left promiscuous mode [ 829.595876][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 829.599372][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 829.603835][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 829.630285][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 829.708083][ T1152] veth1_macvtap: left promiscuous mode [ 829.710553][ T1152] veth0_macvtap: left promiscuous mode [ 829.724635][ T1152] veth1_vlan: left promiscuous mode [ 829.735931][ T1152] veth0_vlan: left promiscuous mode [ 831.966901][ C2] hpet: Lost 1 RTC interrupts [ 832.213286][ C2] hpet: Lost 1 RTC interrupts [ 832.431205][ C2] hpet: Lost 1 RTC interrupts [ 832.809174][ C2] hpet: Lost 1 RTC interrupts [ 833.771814][ T1152] team0 (unregistering): Port device team_slave_1 removed [ 834.191481][ T1152] team0 (unregistering): Port device team_slave_0 removed [ 834.463021][ C2] hpet: Lost 1 RTC interrupts [ 834.717489][ C2] hpet: Lost 2 RTC interrupts [ 836.073593][ T4775] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 836.081331][ T4775] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 836.092385][ T4775] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 836.110956][T12782] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 836.115783][T12782] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 836.120317][T12782] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 836.274966][ C2] hpet: Lost 1 RTC interrupts [ 837.587036][ C2] hpet: Lost 1 RTC interrupts [ 838.193535][ T66] Bluetooth: hci7: command tx timeout [ 838.270198][T12660] veth0_vlan: entered promiscuous mode [ 838.297009][T12660] veth1_vlan: entered promiscuous mode [ 838.650875][ C2] hpet: Lost 1 RTC interrupts [ 838.654573][T12726] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 838.705550][T12726] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 838.794160][T12726] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 838.811417][T12726] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 838.943092][T12660] veth0_macvtap: entered promiscuous mode [ 839.010540][T12660] veth1_macvtap: entered promiscuous mode [ 839.098583][T12660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 839.150667][T12660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.154880][T12660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 839.213777][T12660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.217912][T12660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 839.223001][T12660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.228197][T12660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 839.250605][T12660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.254789][T12660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 839.259861][T12660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.264062][T12660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 839.269807][T12660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.275331][T12660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 839.280397][T12660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.291163][T12660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 839.303943][T12660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.310861][T12660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 839.315164][T12660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.318823][T12660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 839.341007][T12660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.374871][T12660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 839.388645][T12660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.413743][T12660] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 839.551631][T12660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 839.557275][T12660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.581699][T12660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 839.587515][T12660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.630021][T12660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 839.638775][T12660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.643993][T12660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 839.649708][T12660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.660366][T12660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 839.665576][T12660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.670226][T12660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 839.681292][T12660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.730727][T12660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 839.735277][T12660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.771146][T12660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 839.775627][T12660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.800329][T12660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 839.805662][T12660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.830405][T12660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 839.835029][T12660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.842822][T12660] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 839.847106][T12660] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 839.893327][T12660] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 839.979463][ T1152] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 840.183726][ T1152] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 840.247099][T12660] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.250754][ T66] Bluetooth: hci7: command tx timeout [ 840.252444][T12660] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.257652][T12660] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.279643][T12660] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 840.294183][T12780] chnl_net:caif_netlink_parms(): no params data found [ 840.852384][ T1152] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.063285][ T1152] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 841.100091][T12780] bridge0: port 1(bridge_slave_0) entered blocking state [ 841.110680][T12780] bridge0: port 1(bridge_slave_0) entered disabled state [ 841.129963][T12780] bridge_slave_0: entered allmulticast mode [ 841.134969][T12780] bridge_slave_0: entered promiscuous mode [ 841.205043][T12780] bridge0: port 2(bridge_slave_1) entered blocking state [ 841.214786][T12780] bridge0: port 2(bridge_slave_1) entered disabled state [ 841.230737][T12780] bridge_slave_1: entered allmulticast mode [ 841.234852][T12780] bridge_slave_1: entered promiscuous mode [ 841.308274][T12726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 841.462998][T12780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 841.527402][T12780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 841.561895][T12726] 8021q: adding VLAN 0 to HW filter on device team0 [ 841.695995][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 841.709396][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 841.943772][T12780] team0: Port device team_slave_0 added [ 841.954195][T12780] team0: Port device team_slave_1 added [ 842.079244][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 842.082371][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 842.329964][ T66] Bluetooth: hci7: command tx timeout [ 842.392016][ T5394] bridge0: port 2(bridge_slave_1) entered blocking state [ 842.395531][ T5394] bridge0: port 2(bridge_slave_1) entered forwarding state [ 842.442806][ T1152] bridge_slave_1: left allmulticast mode [ 842.446454][ T1152] bridge_slave_1: left promiscuous mode [ 842.449929][ T1152] bridge0: port 2(bridge_slave_1) entered disabled state [ 842.473979][ T1152] bridge_slave_0: left allmulticast mode [ 842.477376][ T1152] bridge_slave_0: left promiscuous mode [ 842.529247][ T1152] bridge0: port 1(bridge_slave_0) entered disabled state [ 844.322720][ C2] hpet: Lost 1 RTC interrupts [ 844.402955][ T1152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 844.428344][ T66] Bluetooth: hci7: command tx timeout [ 844.504236][ T1152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 844.552183][ T1152] bond0 (unregistering): Released all slaves [ 844.811351][T12780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 844.815860][T12780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 844.895816][T12780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 844.909373][T12780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 844.917777][T12780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 844.959126][T12780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 845.105011][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 845.170705][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 845.658747][T12780] hsr_slave_0: entered promiscuous mode [ 845.675853][T12780] hsr_slave_1: entered promiscuous mode [ 845.698536][T12780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 845.702459][T12780] Cannot create hsr debugfs directory [ 845.734190][ T1152] hsr_slave_0: left promiscuous mode [ 845.740130][ T1152] hsr_slave_1: left promiscuous mode [ 845.751924][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 845.755131][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 845.768921][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 845.772226][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 845.932518][ T1152] veth1_macvtap: left promiscuous mode [ 845.935313][ T1152] veth0_macvtap: left promiscuous mode [ 845.947384][ T1152] veth1_vlan: left promiscuous mode [ 845.949938][ T1152] veth0_vlan: left promiscuous mode [ 847.233530][T12805] nbd2: detected capacity change from 0 to 12 [ 847.331049][T12794] block nbd2: Send control failed (result -89) [ 847.380731][T12794] block nbd2: Request send failed, requeueing [ 847.415230][T12806] block nbd2: NBD_DISCONNECT [ 847.426586][ T66] block nbd2: Receive control failed (result -32) [ 847.448976][T12794] block nbd2: Disconnected due to user request. [ 847.509579][ T1281] blk_print_req_error: 7 callbacks suppressed [ 847.509596][ T1281] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 847.516790][ T1281] buffer_io_error: 7 callbacks suppressed [ 847.516802][ T1281] Buffer I/O error on dev nbd2, logical block 0, async page read [ 847.527102][T12794] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 847.527377][T12806] block nbd2: Send disconnect failed -89 [ 847.571154][T12794] Buffer I/O error on dev nbd2, logical block 0, async page read [ 847.596477][T12794] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 847.626416][T12794] Buffer I/O error on dev nbd2, logical block 0, async page read [ 847.630055][T12794] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 847.634080][T12794] Buffer I/O error on dev nbd2, logical block 0, async page read [ 847.666868][T12794] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 847.686686][T12794] Buffer I/O error on dev nbd2, logical block 0, async page read [ 847.690358][T12794] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 847.695320][T12794] Buffer I/O error on dev nbd2, logical block 0, async page read [ 847.699792][T12794] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 847.703293][T12794] Buffer I/O error on dev nbd2, logical block 0, async page read [ 847.707190][T12794] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 847.711824][T12794] Buffer I/O error on dev nbd2, logical block 0, async page read [ 847.715151][T12794] ldm_validate_partition_table(): Disk read failed. [ 847.723685][T12794] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 847.745423][T12794] Buffer I/O error on dev nbd2, logical block 0, async page read [ 847.756418][T12794] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 847.760296][T12794] Buffer I/O error on dev nbd2, logical block 0, async page read [ 847.764200][T12794] Dev nbd2: unable to read RDB block 0 [ 847.768424][T12794] nbd2: unable to read partition table [ 847.771207][T12794] nbd2: partition table beyond EOD, truncated [ 847.791276][T12794] ldm_validate_partition_table(): Disk read failed. [ 847.794258][T12794] Dev nbd2: unable to read RDB block 0 [ 847.825512][T12794] nbd2: unable to read partition table [ 847.833400][T12794] nbd2: partition table beyond EOD, truncated [ 848.165753][ C2] hpet: Lost 1 RTC interrupts [ 848.721950][T12812] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2298'. [ 848.867092][T12782] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 848.873391][T12782] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 848.887854][T12782] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 848.910618][T12782] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 848.916130][T12782] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 848.919726][T12782] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 849.836588][ C2] hpet: Lost 1 RTC interrupts [ 850.134654][ C2] hpet: Lost 1 RTC interrupts [ 850.949156][ T1152] team0 (unregistering): Port device team_slave_1 removed [ 850.970561][ T66] Bluetooth: hci9: command tx timeout [ 851.358734][ C2] hpet: Lost 1 RTC interrupts [ 851.430821][ C2] hpet: Lost 1 RTC interrupts [ 851.725994][ T1152] team0 (unregistering): Port device team_slave_0 removed [ 851.789772][ C2] hpet: Lost 2 RTC interrupts [ 851.884671][ C2] hpet: Lost 1 RTC interrupts [ 852.930372][ C2] hpet: Lost 1 RTC interrupts [ 853.053744][ T66] Bluetooth: hci9: command tx timeout [ 853.758913][ C2] hpet: Lost 1 RTC interrupts [ 855.122713][ T66] Bluetooth: hci9: command tx timeout [ 855.333049][T12810] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2298'. [ 855.337029][T12810] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 855.339712][T12810] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 855.377188][T12810] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 855.380706][T12810] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 856.181576][T12726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 856.422850][ C2] hpet: Lost 1 RTC interrupts [ 856.688251][T12726] veth0_vlan: entered promiscuous mode [ 856.708472][T12813] chnl_net:caif_netlink_parms(): no params data found [ 856.919714][T12726] veth1_vlan: entered promiscuous mode [ 857.059614][ T1152] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.201973][ T66] Bluetooth: hci9: command tx timeout [ 857.350119][ T1152] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.596940][ T1152] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.765404][T12813] bridge0: port 1(bridge_slave_0) entered blocking state [ 857.791577][T12813] bridge0: port 1(bridge_slave_0) entered disabled state [ 857.811626][T12813] bridge_slave_0: entered allmulticast mode [ 857.822758][T12813] bridge_slave_0: entered promiscuous mode [ 857.847808][T12813] bridge0: port 2(bridge_slave_1) entered blocking state [ 857.850698][T12813] bridge0: port 2(bridge_slave_1) entered disabled state [ 857.881464][T12813] bridge_slave_1: entered allmulticast mode [ 857.886721][T12813] bridge_slave_1: entered promiscuous mode [ 857.973820][ T1152] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 858.004684][T12726] veth0_macvtap: entered promiscuous mode [ 858.205483][T12726] veth1_macvtap: entered promiscuous mode [ 858.216599][T12813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 858.243387][T12813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 858.258681][ C2] hpet: Lost 1 RTC interrupts [ 858.394842][T12726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 858.430994][T12726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 858.436629][T12726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 858.448861][T12726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 858.469285][T12726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 858.474420][T12726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 858.479040][T12726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 858.489574][T12726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 858.499714][T12726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 858.504720][T12726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 858.550690][T12726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 858.556507][T12726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 858.562119][T12726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 858.566135][T12726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 858.571252][T12726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 858.590937][T12726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 858.603329][T12726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 858.609145][T12726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 858.620984][T12726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 858.642035][T12726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 858.649116][T12726] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 858.674269][T12726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 858.685286][T12726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 858.689506][T12726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 858.710841][T12726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 858.721993][T12726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 858.726738][T12726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 858.730486][T12726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 858.740616][T12726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 858.750843][T12726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 858.755869][T12726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 858.760144][T12726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 858.781512][T12726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 858.786594][T12726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 858.820861][T12726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 858.825134][T12726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 858.831813][T12726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 858.836909][T12726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 858.868669][T12726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 858.881170][T12726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 858.885977][T12726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 858.914664][T12726] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 859.021976][T12726] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.026441][T12726] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.052188][T12726] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.110623][T12726] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.263942][T12813] team0: Port device team_slave_0 added [ 859.351383][T12813] team0: Port device team_slave_1 added [ 859.511011][T12780] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 859.517850][T12780] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 859.560776][ C2] hpet: Lost 1 RTC interrupts [ 859.767003][T12780] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 859.807666][T12780] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 859.818301][T12813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 859.840616][T12813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 859.882188][T12813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 859.901234][ T1152] bridge_slave_1: left allmulticast mode [ 859.903798][ T1152] bridge_slave_1: left promiscuous mode [ 859.906095][ T1152] bridge0: port 2(bridge_slave_1) entered disabled state [ 859.919917][ T1152] bridge_slave_0: left allmulticast mode [ 859.930249][ T1152] bridge_slave_0: left promiscuous mode [ 859.940834][ T1152] bridge0: port 1(bridge_slave_0) entered disabled state [ 861.213778][ T1152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 861.260437][ T1152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 861.312914][ T1152] bond0 (unregistering): Released all slaves [ 861.401972][T12855] program syz.2.2306 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 861.422120][T12813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 861.469562][T12813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 861.519430][T12813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 862.043873][ C2] hpet: Lost 1 RTC interrupts [ 862.074490][T10840] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 862.078566][T10840] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 862.422902][T12813] hsr_slave_0: entered promiscuous mode [ 862.425755][T12813] hsr_slave_1: entered promiscuous mode [ 862.459655][T12813] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 862.464430][T12813] Cannot create hsr debugfs directory [ 862.621356][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 862.624996][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 863.001151][T12859] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2307'. [ 863.150593][ C2] hpet: Lost 1 RTC interrupts [ 863.748556][ T1152] hsr_slave_0: left promiscuous mode [ 863.818798][ T1152] hsr_slave_1: left promiscuous mode [ 863.828483][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 863.831812][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 863.889693][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 863.893101][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 864.051712][ T1152] veth1_macvtap: left promiscuous mode [ 864.054277][ T1152] veth0_macvtap: left promiscuous mode [ 864.056894][ T1152] veth1_vlan: left promiscuous mode [ 864.068768][ T1152] veth0_vlan: left promiscuous mode [ 865.560333][T12874] program syz.2.2312 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 867.716556][T12882] usb usb8: usbfs: process 12882 (syz.2.2313) did not claim interface 0 before use [ 868.914698][ C2] hpet: Lost 1 RTC interrupts [ 869.115667][ T25] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 869.286690][ T1152] team0 (unregistering): Port device team_slave_1 removed [ 869.345559][ T25] usb 7-1: Using ep0 maxpacket: 8 [ 869.374243][ T25] usb 7-1: config 1 interface 0 altsetting 119 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 869.379191][ T25] usb 7-1: config 1 interface 0 altsetting 119 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 869.385245][ T25] usb 7-1: config 1 interface 0 has no altsetting 0 [ 869.416998][ T25] usb 7-1: New USB device found, idVendor=046d, idProduct=c091, bcdDevice= 0.40 [ 869.421006][ T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 869.424540][ T25] usb 7-1: Product: 《 [ 869.455569][ T25] usb 7-1: Manufacturer: ఌ [ 869.458271][ T25] usb 7-1: SerialNumber: syz [ 869.873254][ T25] usbhid 7-1:1.0: can't add hid device: -71 [ 869.879153][ T25] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 869.896416][ T25] usb 7-1: USB disconnect, device number 18 [ 869.932605][ T1152] team0 (unregistering): Port device team_slave_0 removed [ 870.542435][ C2] hpet: Lost 1 RTC interrupts [ 873.502001][T12780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 873.734093][T12780] 8021q: adding VLAN 0 to HW filter on device team0 [ 873.804211][ T5393] bridge0: port 1(bridge_slave_0) entered blocking state [ 873.807553][ T5393] bridge0: port 1(bridge_slave_0) entered forwarding state [ 873.811947][ T5393] bridge0: port 2(bridge_slave_1) entered blocking state [ 873.815007][ T5393] bridge0: port 2(bridge_slave_1) entered forwarding state [ 873.946366][T12780] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 874.737754][T12780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 874.866486][T12780] veth0_vlan: entered promiscuous mode [ 874.940861][T12780] veth1_vlan: entered promiscuous mode [ 875.123527][ T1378] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.126593][ T1378] ieee802154 phy1 wpan1: encryption failed: -22 [ 875.129942][T12780] veth0_macvtap: entered promiscuous mode [ 875.163099][T12780] veth1_macvtap: entered promiscuous mode [ 875.203244][T12813] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 875.255971][T12813] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 875.393026][T12813] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 875.407911][T12780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 875.432966][T12780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 875.437272][T12780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 875.441812][T12780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 875.470967][T12780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 875.500929][T12780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 875.523733][T12780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 875.528234][T12780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 875.532331][T12780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 875.540350][ C2] hpet: Lost 1 RTC interrupts [ 875.542530][T12780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 875.542549][T12780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 875.552303][T12780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 875.562438][T12780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 875.572471][T12780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 875.576779][T12780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 875.618116][T12780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 875.622890][T12929] usb usb9: usbfs: interface 0 claimed by hub while 'syz.0.2327' resets device [ 875.632121][T12780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 875.638408][T12780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 875.662886][T12780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 875.668129][T12780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 875.684804][T12780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 875.691681][T12780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 875.722850][T12780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 875.763621][T12780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 875.767974][T12780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 875.792523][ C2] hpet: Lost 1 RTC interrupts [ 875.796299][T12780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 875.800750][T12780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 875.812330][T12780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 875.817076][T12780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 875.832506][T12780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 875.839906][T12780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 875.884048][T12780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 875.912265][T12780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 875.959651][T12780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 875.964819][T12780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 875.968913][T12780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 875.973378][T12780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 875.995291][ C2] hpet: Lost 1 RTC interrupts [ 876.001197][T12780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 876.006337][T12780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 876.011826][T12780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 876.032307][T12780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 876.038786][T12780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 876.132909][T12813] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 876.134652][ C2] hpet: Lost 2 RTC interrupts [ 876.264987][T12780] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.354423][T12780] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.359368][T12780] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.418796][T12780] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 876.675032][T12938] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2328'. [ 876.948684][T12813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 877.120303][T12813] 8021q: adding VLAN 0 to HW filter on device team0 [ 877.216114][ T5387] bridge0: port 1(bridge_slave_0) entered blocking state [ 877.220364][ T5387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 877.294899][ T5387] bridge0: port 2(bridge_slave_1) entered blocking state [ 877.298107][ T5387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 877.344281][ T782] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 877.347168][ T782] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 877.450788][T10840] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 877.457575][T10840] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 877.763798][T12947] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2332'. [ 877.841638][T12947] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 877.844647][T12947] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 877.868590][T12947] vhci_hcd vhci_hcd.0: Device attached [ 877.948286][T12813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 878.094750][T12813] veth0_vlan: entered promiscuous mode [ 878.151253][ T1283] usb 17-1: new high-speed USB device number 2 using vhci_hcd [ 878.186818][T12813] veth1_vlan: entered promiscuous mode [ 878.206105][T12949] vhci_hcd: connection reset by peer [ 878.224468][T10840] vhci_hcd: stop threads [ 878.227167][T10840] vhci_hcd: release socket [ 878.231911][T10840] vhci_hcd: disconnect device [ 878.327145][T12813] veth0_macvtap: entered promiscuous mode [ 878.355067][T12813] veth1_macvtap: entered promiscuous mode [ 878.389414][T12813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 878.414575][ C2] hpet: Lost 1 RTC interrupts [ 878.417913][T12813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 878.424833][T12813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 878.429080][T12813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 878.446238][T12813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 878.451626][T12813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 878.465931][T12813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 878.469981][T12813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 878.481007][T12813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 878.485630][T12813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 878.490257][T12813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 878.510993][T12813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 878.516191][T12813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 878.520765][T12813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 878.533554][T12813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 878.538117][T12813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 878.551009][T12813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 878.556542][T12813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 878.560486][T12813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 878.580915][T12813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 878.590960][T12813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 878.595313][T12813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 878.613195][T12813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 878.625671][T12813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 878.632599][T12813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 878.638408][T12813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 878.670873][T12813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 878.678608][T12813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 878.717565][T12813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 878.735629][T12813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 878.761870][T12813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 878.775587][T12813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 878.780049][T12813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 878.791676][T12813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 878.795986][T12813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 878.803321][T12813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 878.848801][T12813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 878.891031][T12813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 878.899316][T12813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 878.907137][T12813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 878.912909][T12813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 878.918130][T12813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 878.923074][T12813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 878.927365][T12813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 878.932880][T12813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 878.939988][T12813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 878.947657][T12813] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.952426][T12813] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.956793][T12813] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 878.962048][T12813] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.217887][ T1152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 879.234754][T12966] usb usb9: usbfs: interface 0 claimed by hub while 'syz.2.2335' resets device [ 879.238974][ T1152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 879.412467][ T782] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 879.475963][ T782] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 879.918332][ C2] hpet: Lost 1 RTC interrupts [ 879.962534][ C2] hpet: Lost 1 RTC interrupts [ 879.967177][T12988] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2342'. [ 880.011370][T12988] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 880.014339][T12988] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 880.030299][T12988] vhci_hcd vhci_hcd.0: Device attached [ 880.060400][T12989] vhci_hcd: cannot find the pending unlink 5 [ 880.183285][T12995] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2343'. [ 880.290847][T12995] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2343'. [ 880.317094][T12989] vhci_hcd: connection closed [ 880.330282][ T1191] vhci_hcd: stop threads [ 880.333820][ T1191] vhci_hcd: release socket [ 880.335692][ T1191] vhci_hcd: disconnect device [ 880.751476][T12996] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2297'. [ 881.650508][ C2] hpet: Lost 1 RTC interrupts [ 882.235232][T13020] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2352'. [ 882.309800][T13022] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2352'. [ 882.553988][T13032] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2355'. [ 882.630133][T13032] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 882.634759][T13032] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 882.664000][T13032] vhci_hcd vhci_hcd.0: Device attached [ 882.914496][ C2] hpet: Lost 1 RTC interrupts [ 882.932911][ T5394] usb 15-1: new high-speed USB device number 4 using vhci_hcd [ 883.244069][T13033] vhci_hcd: connection reset by peer [ 883.252900][T10840] vhci_hcd: stop threads [ 883.254820][T10840] vhci_hcd: release socket [ 883.271348][ T1283] vhci_hcd: vhci_device speed not set [ 883.299211][T10840] vhci_hcd: disconnect device [ 883.421881][T13057] dccp_close: ABORT with 120 bytes unread [ 883.634499][ C2] hpet: Lost 1 RTC interrupts [ 883.728376][ T5393] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 883.908779][ T5393] usb 7-1: Using ep0 maxpacket: 8 [ 883.918574][ T5393] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 883.924345][ T5393] usb 7-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 883.930165][ T5393] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 883.947751][ T5393] usb 7-1: config 0 descriptor?? [ 883.954260][ C2] hpet: Lost 1 RTC interrupts [ 883.960363][ T5393] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 884.049783][T13070] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2367'. [ 884.213850][ T1283] usb 7-1: USB disconnect, device number 19 [ 885.843385][T13100] program syz.1.2380 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 886.854276][ C2] hpet: Lost 1 RTC interrupts [ 887.313409][T13112] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2382'. [ 887.578590][ C2] hpet: Lost 1 RTC interrupts [ 887.726382][ T10] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 887.946355][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 887.964141][ T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 887.976326][ T10] usb 6-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 887.989100][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.007160][ T10] usb 6-1: config 0 descriptor?? [ 888.034850][ T10] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 888.089706][ T5394] vhci_hcd: vhci_device speed not set [ 888.310274][ C2] hpet: Lost 1 RTC interrupts [ 888.329931][ T10] usb 6-1: USB disconnect, device number 16 [ 889.274565][ C2] hpet: Lost 1 RTC interrupts [ 889.634240][ C2] hpet: Lost 1 RTC interrupts [ 890.174486][ C2] hpet: Lost 1 RTC interrupts [ 890.584963][T10659] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 890.659147][T13149] hub 9-0:1.0: USB hub found [ 890.685189][T13149] hub 9-0:1.0: 1 port detected [ 890.786593][T10659] usb 5-1: Using ep0 maxpacket: 8 [ 890.795437][T10659] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 890.817509][T10659] usb 5-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 890.834824][T10659] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 890.846341][T10659] usb 5-1: config 0 descriptor?? [ 890.851662][T10659] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 891.120118][ T5393] usb 5-1: USB disconnect, device number 15 [ 891.166354][ C2] hpet: Lost 1 RTC interrupts [ 891.392763][T13163] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2401'. [ 891.415419][ T66] Bluetooth: hci9: ACL packet for unknown connection handle 0 [ 891.688455][T13167] bridge0: port 3(gretap1) entered blocking state [ 891.694882][T13167] bridge0: port 3(gretap1) entered disabled state [ 891.698568][T13167] gretap1: entered allmulticast mode [ 891.706643][T13167] gretap1: entered promiscuous mode [ 891.724419][ T1283] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 891.737311][T13167] bridge0: port 3(gretap1) entered blocking state [ 891.741466][T13167] bridge0: port 3(gretap1) entered forwarding state [ 891.969588][ T1283] usb 6-1: config index 0 descriptor too short (expected 106, got 36) [ 891.973946][ T1283] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 892.024185][ T1283] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 892.079491][ T1283] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 892.083514][ T1283] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.114794][ T1283] usb 6-1: config 0 descriptor?? [ 892.533422][ C2] hpet: Lost 1 RTC interrupts [ 892.651366][ T1283] corsair 0003:1B1C:1B3E.0009: unknown main item tag 0x0 [ 892.663943][ T1283] corsair 0003:1B1C:1B3E.0009: unknown main item tag 0x0 [ 892.667197][ T1283] corsair 0003:1B1C:1B3E.0009: unknown main item tag 0x0 [ 892.671295][ T1283] corsair 0003:1B1C:1B3E.0009: unknown main item tag 0x0 [ 892.682690][ T1283] corsair 0003:1B1C:1B3E.0009: unknown main item tag 0x0 [ 892.695216][ T1283] corsair 0003:1B1C:1B3E.0009: failed to start in urb: -90 [ 892.717596][ T1283] corsair 0003:1B1C:1B3E.0009: hidraw1: USB HID v0.00 Device [HID 1b1c:1b3e] on usb-dummy_hcd.1-1/input0 [ 892.949310][ C2] hpet: Lost 1 RTC interrupts [ 893.016765][ T1283] usb 6-1: USB disconnect, device number 17 [ 893.214114][ C2] hpet: Lost 1 RTC interrupts [ 894.618921][T13196] veth0_vlan: entered allmulticast mode [ 896.174910][T13211] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2420'. [ 896.233375][ T66] Bluetooth: hci12: ACL packet for unknown connection handle 0 [ 896.497730][T13221] xfrm0: entered promiscuous mode [ 896.500075][T13221] xfrm0: entered allmulticast mode [ 896.521986][ T1283] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 896.728670][ T1283] usb 5-1: config index 0 descriptor too short (expected 106, got 36) [ 896.732522][ T1283] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 896.743043][ T1283] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 896.752053][ T1283] usb 5-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 896.755864][ T1283] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 896.771573][ T1283] usb 5-1: config 0 descriptor?? [ 897.335737][ T1283] corsair 0003:1B1C:1B3E.000A: unknown main item tag 0x0 [ 897.339400][ T1283] corsair 0003:1B1C:1B3E.000A: unknown main item tag 0x0 [ 897.361267][ T1283] corsair 0003:1B1C:1B3E.000A: unknown main item tag 0x0 [ 897.365733][ T1283] corsair 0003:1B1C:1B3E.000A: unknown main item tag 0x0 [ 897.369509][ T1283] corsair 0003:1B1C:1B3E.000A: unknown main item tag 0x0 [ 897.385194][ T1283] corsair 0003:1B1C:1B3E.000A: failed to start in urb: -90 [ 897.392425][ T1283] corsair 0003:1B1C:1B3E.000A: hidraw1: USB HID v0.00 Device [HID 1b1c:1b3e] on usb-dummy_hcd.0-1/input0 [ 897.648542][ T5393] usb 5-1: USB disconnect, device number 16 [ 899.448248][T13257] geneve0: entered promiscuous mode [ 899.493991][T13257] geneve0: entered allmulticast mode [ 899.819407][T13261] sctp: [Deprecated]: syz.2.2436 (pid 13261) Use of int in max_burst socket option deprecated. [ 899.819407][T13261] Use struct sctp_assoc_value instead [ 901.602102][ C2] hpet: Lost 1 RTC interrupts [ 902.181427][ T39] audit: type=1326 audit(2000000540.530:2395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13291 comm="syz.0.2446" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fd4579 code=0x0 [ 903.841662][T11877] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 904.018275][T11877] usb 7-1: Using ep0 maxpacket: 8 [ 904.022942][T11877] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 904.026790][T11877] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 904.030970][T11877] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 904.038333][T11877] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 904.044222][T11877] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 904.058573][T11877] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.288398][T11877] usb 7-1: usb_control_msg returned -32 [ 904.291608][T11877] usbtmc 7-1:16.0: can't read capabilities [ 904.742235][T11877] usb 7-1: USB disconnect, device number 20 [ 904.775793][ T39] audit: type=1326 audit(2000000543.121:2396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13330 comm="syz.0.2462" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fd4579 code=0x0 [ 905.735492][T13340] sctp: [Deprecated]: syz.3.2465 (pid 13340) Use of int in max_burst socket option deprecated. [ 905.735492][T13340] Use struct sctp_assoc_value instead [ 905.777514][T10659] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 905.979404][T10659] usb 7-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 905.984390][T10659] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 906.000679][T10659] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 906.004712][T10659] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 906.037834][T10659] usb 7-1: SerialNumber: syz [ 906.618097][T10659] usb 7-1: 0:2 : does not exist [ 906.620392][T10659] usb 7-1: unit 255 not found! [ 906.663580][T10659] usb 7-1: USB disconnect, device number 21 [ 906.967444][T13356] udevd[13356]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 907.189993][T13361] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2470'. [ 908.203210][ T39] audit: type=1326 audit(2000000546.553:2397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13373 comm="syz.2.2475" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f17579 code=0x0 [ 910.400413][T13391] syzkaller0: entered promiscuous mode [ 910.406770][T13391] syzkaller0: entered allmulticast mode [ 911.476299][T13398] SET target dimension over the limit! [ 912.093607][T13403] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2483'. [ 913.290287][ C2] hpet: Lost 1 RTC interrupts [ 913.419287][ T39] audit: type=1326 audit(2000000551.776:2398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13424 comm="syz.2.2489" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f17579 code=0x0 [ 913.733141][ C2] hpet: Lost 1 RTC interrupts [ 917.450302][T13463] Cannot find add_set index 0 as target [ 918.074651][T13473] capability: warning: `syz.2.2503' uses 32-bit capabilities (legacy support in use) [ 918.109173][ T39] audit: type=1326 audit(2000000556.458:2399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13469 comm="syz.1.2502" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x0 [ 918.142126][T12782] Bluetooth: hci8: command 0x0406 tx timeout [ 918.821901][ C2] hpet: Lost 1 RTC interrupts [ 919.426208][T13488] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2508'. [ 920.047457][T13488] syz.2.2508 (13488): drop_caches: 1 [ 920.324487][T13497] Cannot find add_set index 0 as target [ 921.440215][T13518] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2518'. [ 921.581381][T13518] syzkaller0: entered promiscuous mode [ 921.585281][T13515] syzkaller0: left promiscuous mode [ 922.532123][T13536] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2522'. [ 922.783443][T13538] Cannot find add_set index 0 as target [ 924.455957][T13552] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2528'. [ 924.671054][T13552] syzkaller0: entered promiscuous mode [ 924.887187][T13551] syzkaller0: left promiscuous mode [ 926.078015][T13567] syz.2.2532[13567] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 926.078164][T13567] syz.2.2532[13567] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 926.164600][T13567] sch_fq: defrate 9 ignored. [ 926.234530][T13567] syz.2.2532[13567] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 926.234659][T13567] syz.2.2532[13567] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 927.376638][ T1165] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 927.583697][ T1165] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 927.590190][ T1165] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 927.606409][ T1165] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 927.610917][ T1165] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 927.647037][ T1165] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 927.651029][ T1165] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.662663][ T1165] usb 5-1: config 0 descriptor?? [ 928.170724][ T1165] plantronics 0003:047F:FFFF.000B: ignoring exceeding usage max [ 928.175646][ T1165] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 928.216895][ T1165] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 928.386382][T13584] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2537'. [ 928.453984][T13586] netlink: 'syz.2.2538': attribute type 21 has an invalid length. [ 928.468223][T13586] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2538'. [ 928.907843][T13592] Cannot find add_set index 0 as target [ 929.054365][T13594] autofs4:pid:13594:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(4294967071.1), cmd(0xc018937e) [ 929.130710][T13594] autofs4:pid:13594:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937e) [ 930.114290][ T1283] usb 5-1: USB disconnect, device number 17 [ 930.286582][T13606] syz.3.2543[13606] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 930.286721][T13606] syz.3.2543[13606] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 930.374453][T13606] sch_fq: defrate 9 ignored. [ 930.441276][T13609] syz.3.2543[13609] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 930.441411][T13609] syz.3.2543[13609] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 931.522265][T13627] netlink: 'syz.1.2549': attribute type 21 has an invalid length. [ 931.552761][T13627] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2549'. [ 933.429968][ C2] hpet: Lost 1 RTC interrupts [ 933.947378][ T66] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 933.961970][ T66] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 933.974112][ T66] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 933.980304][ T66] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 933.985763][ T66] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 933.989906][ T66] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 934.868827][ T1152] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.008007][ T1152] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.069253][T13644] chnl_net:caif_netlink_parms(): no params data found [ 935.346997][ T1152] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.701245][ T1152] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.046681][T13654] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2558'. [ 936.059382][T12782] Bluetooth: hci13: command tx timeout [ 936.200797][T13644] bridge0: port 1(bridge_slave_0) entered blocking state [ 936.205414][T13644] bridge0: port 1(bridge_slave_0) entered disabled state [ 936.208675][T13644] bridge_slave_0: entered allmulticast mode [ 936.229675][T13644] bridge_slave_0: entered promiscuous mode [ 936.235153][T13644] bridge0: port 2(bridge_slave_1) entered blocking state [ 936.238031][T13644] bridge0: port 2(bridge_slave_1) entered disabled state [ 936.241106][T13644] bridge_slave_1: entered allmulticast mode [ 936.253492][T13644] bridge_slave_1: entered promiscuous mode [ 936.433812][T13662] syz.1.2560[13662] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 936.433958][T13662] syz.1.2560[13662] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 936.463733][T13644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 936.496985][T13644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 936.513810][T13669] netlink: 'syz.3.2563': attribute type 1 has an invalid length. [ 936.525089][ T1378] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.527545][ T1378] ieee802154 phy1 wpan1: encryption failed: -22 [ 936.529737][T13669] netlink: 9316 bytes leftover after parsing attributes in process `syz.3.2563'. [ 936.553180][T13669] netlink: 'syz.3.2563': attribute type 1 has an invalid length. [ 936.592658][T13670] syz.1.2560[13670] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 936.592847][T13670] syz.1.2560[13670] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 936.649315][T13662] sch_fq: defrate 9 ignored. [ 936.877399][ T1152] bridge_slave_1: left allmulticast mode [ 936.888807][ T1152] bridge_slave_1: left promiscuous mode [ 936.893901][ T1152] bridge0: port 2(bridge_slave_1) entered disabled state [ 936.899765][ T1152] bridge_slave_0: left allmulticast mode [ 936.914804][ T1152] bridge_slave_0: left promiscuous mode [ 936.917529][ T1152] bridge0: port 1(bridge_slave_0) entered disabled state [ 937.929975][ C2] hpet: Lost 1 RTC interrupts [ 938.061359][ T5387] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 938.131774][T12782] Bluetooth: hci13: command tx timeout [ 938.272673][ T5387] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 938.277405][ T5387] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 938.311098][ T5387] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 938.315071][ T5387] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 938.320430][ T5387] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 938.329693][ C2] hpet: Lost 1 RTC interrupts [ 938.345294][ T5387] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 938.366329][ T5387] usb 6-1: config 0 descriptor?? [ 938.629003][ T1152] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 938.668694][ T1152] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 938.753080][ T1152] bond0 (unregistering): Released all slaves [ 938.863390][ T5387] plantronics 0003:047F:FFFF.000C: ignoring exceeding usage max [ 938.882573][ T5387] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 938.917033][ T5387] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 939.119450][T13644] team0: Port device team_slave_0 added [ 939.308910][T13644] team0: Port device team_slave_1 added [ 939.466932][T13644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 939.472907][T13644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 939.492536][T13644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 939.599480][T13644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 939.602845][T13644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 939.621739][T13644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 939.987174][T13644] hsr_slave_0: entered promiscuous mode [ 940.000041][T13644] hsr_slave_1: entered promiscuous mode [ 940.011517][T13644] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 940.015824][T13644] Cannot create hsr debugfs directory [ 940.049264][ T1152] hsr_slave_0: left promiscuous mode [ 940.054135][ T1152] hsr_slave_1: left promiscuous mode [ 940.084158][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 940.087549][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 940.099511][ T1152] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 940.114386][ T1152] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 940.200424][T12782] Bluetooth: hci13: command tx timeout [ 940.316128][ T1152] veth1_macvtap: left promiscuous mode [ 940.318808][ T1152] veth0_macvtap: left promiscuous mode [ 940.330247][ T1152] veth1_vlan: left promiscuous mode [ 940.333034][ T1152] veth0_vlan: left promiscuous mode [ 940.785044][T12680] usb 6-1: USB disconnect, device number 18 [ 941.347976][T13695] netlink: 'syz.1.2571': attribute type 1 has an invalid length. [ 941.369616][T13695] netlink: 9316 bytes leftover after parsing attributes in process `syz.1.2571'. [ 941.373219][T13695] netlink: 'syz.1.2571': attribute type 1 has an invalid length. [ 942.279562][T12782] Bluetooth: hci13: command tx timeout [ 942.808945][ T5393] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 943.039530][ T5393] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 943.044605][ T5393] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 943.050335][ T5393] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 943.056875][ T5393] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 943.063036][ T5393] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 943.067282][ T5393] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 943.085672][ T5393] usb 7-1: config 0 descriptor?? [ 943.699295][ T5393] plantronics 0003:047F:FFFF.000D: ignoring exceeding usage max [ 943.752838][ T5393] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 943.802189][ T5393] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 944.266058][ C2] hpet: Lost 1 RTC interrupts [ 945.534125][ T7082] usb 7-1: USB disconnect, device number 22 [ 946.145785][ T1152] team0 (unregistering): Port device team_slave_1 removed [ 946.798580][ T1152] team0 (unregistering): Port device team_slave_0 removed [ 950.617545][ C2] hpet: Lost 1 RTC interrupts [ 951.332389][T13767] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2597'. [ 951.767064][T13644] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 951.790944][T13644] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 951.794587][T13644] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 951.798080][T13644] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 952.112611][T13644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 952.187505][T13776] syz_tun: entered allmulticast mode [ 952.192048][T13644] 8021q: adding VLAN 0 to HW filter on device team0 [ 952.226742][T12680] bridge0: port 1(bridge_slave_0) entered blocking state [ 952.226845][T12680] bridge0: port 1(bridge_slave_0) entered forwarding state [ 952.235833][T12680] bridge0: port 2(bridge_slave_1) entered blocking state [ 952.235928][T12680] bridge0: port 2(bridge_slave_1) entered forwarding state [ 952.633548][ C2] hpet: Lost 1 RTC interrupts [ 952.775797][T13644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 952.893154][T13644] veth0_vlan: entered promiscuous mode [ 952.932503][T13644] veth1_vlan: entered promiscuous mode [ 953.018039][T13644] veth0_macvtap: entered promiscuous mode [ 953.021257][T13644] veth1_macvtap: entered promiscuous mode [ 953.079473][T13644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 953.096331][T13644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.101240][T13644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 953.106319][T13644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.118332][T13644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 953.128519][T13644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.140881][T13644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 953.154156][T13644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.158939][T13644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 953.169719][ C2] hpet: Lost 1 RTC interrupts [ 953.170053][T13644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.199490][T13644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 953.223657][T13644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.233650][T13644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 953.238581][T13644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.249002][T13644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 953.253950][T13644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.258482][T13644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 953.263244][T13644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.295929][T13644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 953.313652][T13644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.322072][T13644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 953.329949][T13644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.365468][T13644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 953.377764][T13644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 953.390706][T13644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.409338][T13644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 953.419596][T13644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.423246][T13644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 953.457667][T13644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.473947][T13644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 953.478715][T13644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.484078][T13644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 953.490407][T13644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.496224][T13644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 953.501632][T13644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.506703][T13644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 953.512243][T13644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.518216][T13644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 953.522962][T13644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.528197][T13644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 953.533096][T13644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.538557][T13644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 953.544567][T13644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.549428][T13644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 953.592272][T13644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 953.609758][T13644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 953.642841][T13644] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 953.650332][T13644] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 953.660347][T13644] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 953.670671][T13644] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 953.911419][ T1152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 953.953575][ T1152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 954.102425][T10838] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 954.106169][T10838] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 954.438113][T12782] Bluetooth: to_multiplier 0 < 10 [ 955.203573][T13815] syz_tun: entered allmulticast mode [ 956.318826][T13831] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2621'. [ 956.522554][T12782] Bluetooth: hci13: command tx timeout [ 957.545387][ C0] vkms_vblank_simulate: vblank timer overrun [ 958.341482][ C2] hpet: Lost 1 RTC interrupts [ 958.974756][T13866] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2636'. [ 959.078705][ T66] Bluetooth: hci7: command 0x0406 tx timeout [ 959.982157][ C2] hpet: Lost 1 RTC interrupts [ 962.351813][ C2] hpet: Lost 1 RTC interrupts [ 962.532450][T13925] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2653'. [ 963.375536][T13939] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2663'. [ 963.413571][ C2] hpet: Lost 1 RTC interrupts [ 965.276872][T12782] Bluetooth: to_multiplier 0 < 10 [ 967.307092][T12782] Bluetooth: hci13: command tx timeout [ 967.554032][T12782] Bluetooth: to_multiplier 0 < 10 [ 967.868341][ T39] audit: type=1326 audit(2000000606.253:2400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13990 comm="syz.2.2680" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f17579 code=0x0 [ 968.582232][ T1217] Bluetooth: hci9: Frame reassembly failed (-84) [ 968.586228][ T1191] Bluetooth: hci9: Frame reassembly failed (-84) [ 968.898607][ T782] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 969.133436][ C2] hpet: Lost 1 RTC interrupts [ 969.180250][ T782] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 969.268222][ T5355] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 969.281304][ T5355] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 969.286383][ T5355] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 969.323453][ T5355] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 969.354142][ T782] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 969.357088][ T5355] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 969.362951][ T5355] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 969.622122][ T782] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 969.955313][ T5387] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 970.017953][ T782] bridge_slave_1: left allmulticast mode [ 970.025618][ T782] bridge_slave_1: left promiscuous mode [ 970.036433][ T782] bridge0: port 2(bridge_slave_1) entered disabled state [ 970.071485][ T782] bridge_slave_0: left allmulticast mode [ 970.073522][ T782] bridge_slave_0: left promiscuous mode [ 970.088546][ T782] bridge0: port 1(bridge_slave_0) entered disabled state [ 970.187408][ T5387] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 970.191884][ T5387] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 970.217126][ T5387] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 970.237182][ T5387] usb 5-1: config 0 descriptor?? [ 970.585004][T12782] Bluetooth: hci9: Opcode 0x1003 failed: -110 [ 970.585992][ T5355] Bluetooth: hci9: command 0x1003 tx timeout [ 971.466536][T12782] Bluetooth: hci12: command tx timeout [ 971.572490][T14019] Falling back ldisc for ptm0. [ 971.699956][T14027] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2692'. [ 971.734957][ T782] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 971.765242][ T782] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 971.798377][ T782] bond0 (unregistering): Released all slaves [ 972.249059][T14009] chnl_net:caif_netlink_parms(): no params data found [ 972.519304][T12660] syz_tun (unregistering): left allmulticast mode [ 972.659108][ C2] hpet: Lost 1 RTC interrupts [ 973.077370][ C2] hpet: Lost 1 RTC interrupts [ 973.227558][T14009] bridge0: port 1(bridge_slave_0) entered blocking state [ 973.230793][T14009] bridge0: port 1(bridge_slave_0) entered disabled state [ 973.243980][T14009] bridge_slave_0: entered allmulticast mode [ 973.248090][T14009] bridge_slave_0: entered promiscuous mode [ 973.253974][T14009] bridge0: port 2(bridge_slave_1) entered blocking state [ 973.257147][T14009] bridge0: port 2(bridge_slave_1) entered disabled state [ 973.260438][T14009] bridge_slave_1: entered allmulticast mode [ 973.284556][T14009] bridge_slave_1: entered promiscuous mode [ 973.392543][T12782] Bluetooth: hci13: command tx timeout [ 973.409841][ T782] hsr_slave_0: left promiscuous mode [ 973.413227][ T782] hsr_slave_1: left promiscuous mode [ 973.463818][ T782] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 973.467589][ T782] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 973.492160][ T782] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 973.503493][ T782] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 973.543548][T12782] Bluetooth: hci12: command tx timeout [ 973.631476][ T782] veth1_macvtap: left promiscuous mode [ 973.643451][ T782] veth0_macvtap: left promiscuous mode [ 973.645945][ T782] veth1_vlan: left promiscuous mode [ 973.648410][ T782] veth0_vlan: left promiscuous mode [ 973.990072][ T66] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 974.019108][ T66] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 974.037201][ T66] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 974.061516][ T66] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 974.065643][ T66] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 974.071764][ T66] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 975.652603][T12782] Bluetooth: hci12: command tx timeout [ 975.708737][ T25] usb 5-1: USB disconnect, device number 18 [ 976.198678][ C2] hpet: Lost 1 RTC interrupts [ 976.202618][T12782] Bluetooth: hci8: command tx timeout [ 976.578149][ C2] hpet: Lost 1 RTC interrupts [ 977.020081][T14054] usb usb8: usbfs: process 14054 (syz.0.2700) did not claim interface 0 before use [ 977.368130][T14056] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2701'. [ 977.721559][T12782] Bluetooth: hci12: command tx timeout [ 978.262228][T12782] Bluetooth: hci8: command tx timeout [ 978.277345][ C2] hpet: Lost 1 RTC interrupts [ 978.806527][ T782] team0 (unregistering): Port device team_slave_1 removed [ 979.601089][ T782] team0 (unregistering): Port device team_slave_0 removed [ 980.340298][T12782] Bluetooth: hci8: command tx timeout [ 981.673296][ C2] hpet: Lost 1 RTC interrupts [ 982.420601][T12782] Bluetooth: hci8: command tx timeout [ 983.120676][T14009] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 983.140571][T14009] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 983.537389][T14009] team0: Port device team_slave_0 added [ 983.562205][T14009] team0: Port device team_slave_1 added [ 983.855700][T14009] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 983.860595][T14009] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 983.873627][T14009] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 983.962329][T14009] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 983.965657][T14009] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 983.994233][T14009] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 984.221700][T14009] hsr_slave_0: entered promiscuous mode [ 984.238483][T14009] hsr_slave_1: entered promiscuous mode [ 984.244099][T14009] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 984.247447][T14009] Cannot create hsr debugfs directory [ 984.548013][ T5392] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 984.767066][ T5392] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 984.776134][ T5392] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 984.785780][ T5392] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.803592][ T5392] usb 5-1: config 0 descriptor?? [ 984.945382][ C2] hpet: Lost 1 RTC interrupts [ 985.033111][ T782] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 985.095815][T14036] chnl_net:caif_netlink_parms(): no params data found [ 985.372279][ T782] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 985.620507][ T782] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 986.068282][ T782] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 986.096786][T14036] bridge0: port 1(bridge_slave_0) entered blocking state [ 986.114074][T14036] bridge0: port 1(bridge_slave_0) entered disabled state [ 986.124525][T14036] bridge_slave_0: entered allmulticast mode [ 986.129022][T14036] bridge_slave_0: entered promiscuous mode [ 986.145482][T14036] bridge0: port 2(bridge_slave_1) entered blocking state [ 986.152710][T14036] bridge0: port 2(bridge_slave_1) entered disabled state [ 986.155846][T14036] bridge_slave_1: entered allmulticast mode [ 986.163307][T14036] bridge_slave_1: entered promiscuous mode [ 986.290203][T14036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 986.308261][T14036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 986.556687][T14036] team0: Port device team_slave_0 added [ 986.580936][T14036] team0: Port device team_slave_1 added [ 986.915110][T14036] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 986.926897][T14036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 986.949180][T14036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 986.956021][T14036] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 986.960955][T14036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 986.980970][T14036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 986.986333][ T782] bridge0: port 3(gretap1) entered disabled state [ 987.197737][ T782] bridge_slave_1: left allmulticast mode [ 987.200313][ T782] bridge_slave_1: left promiscuous mode [ 987.201432][ T25] usb 5-1: USB disconnect, device number 19 [ 987.202782][ T782] bridge0: port 2(bridge_slave_1) entered disabled state [ 987.322439][ T782] bridge_slave_0: left allmulticast mode [ 987.324935][ T782] bridge_slave_0: left promiscuous mode [ 987.333563][ T782] bridge0: port 1(bridge_slave_0) entered disabled state [ 987.887473][T14110] input: syz0 as /devices/virtual/input/input28 [ 987.929407][ C2] hpet: Lost 1 RTC interrupts [ 988.021700][T12782] Bluetooth: hci13: command tx timeout [ 988.506283][ T7082] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 988.715244][ T7082] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 988.720290][ T7082] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 988.737344][ T7082] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 988.742254][ T7082] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 988.761622][ T7082] usb 5-1: SerialNumber: syz [ 988.766595][T14117] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 988.820468][ T782] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 988.840049][ T782] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 988.850919][ T782] bond0 (unregistering): Released all slaves [ 989.045714][T14009] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 989.095199][T14009] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 989.229516][T14121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2719'. [ 989.293283][ T13] Bluetooth: hci9: Frame reassembly failed (-84) [ 989.303065][T14036] hsr_slave_0: entered promiscuous mode [ 989.437203][T14036] hsr_slave_1: entered promiscuous mode [ 989.440316][T14036] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 989.443280][T14036] Cannot create hsr debugfs directory [ 989.461569][ T7082] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 989.474395][ T7082] usb 5-1: USB disconnect, device number 20 [ 989.612891][T14009] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 989.626743][T14009] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 990.009405][ T782] hsr_slave_0: left promiscuous mode [ 990.035746][ T782] hsr_slave_1: left promiscuous mode [ 990.114199][T14128] ata1.00: invalid cdb length 6 [ 990.265235][ T782] veth1_macvtap: left promiscuous mode [ 990.267571][ T782] veth0_macvtap: left promiscuous mode [ 990.275328][ T782] veth1_vlan: left promiscuous mode [ 990.277874][ T782] veth0_vlan: left promiscuous mode [ 991.294922][ T66] Bluetooth: hci9: command 0x1003 tx timeout [ 991.294983][T12782] Bluetooth: hci9: Opcode 0x1003 failed: -110 [ 992.576756][T14138] input: syz0 as /devices/virtual/input/input29 [ 992.749348][ T1165] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 992.970274][ T1165] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 992.987073][ T1165] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 992.991771][ T1165] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 993.011121][ T1165] usb 5-1: config 0 descriptor?? [ 993.925596][T14145] xt_CT: You must specify a L4 protocol and not use inversions on it [ 994.222016][ T782] team0 (unregistering): Port device team_slave_1 removed [ 994.744817][ T782] team0 (unregistering): Port device team_slave_0 removed [ 994.913403][ C2] hpet: Lost 1 RTC interrupts [ 995.085315][ C2] hpet: Lost 1 RTC interrupts [ 995.468278][ T1283] usb 5-1: USB disconnect, device number 21 [ 995.757347][ C2] hpet: Lost 1 RTC interrupts [ 996.016985][ C2] hpet: Lost 1 RTC interrupts [ 996.746046][ T25] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 996.953413][ T25] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 996.958278][ T25] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 996.969801][ T25] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 996.990646][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 996.994763][ T25] usb 5-1: SerialNumber: syz [ 997.001510][T14151] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 997.321087][ C2] hpet: Lost 1 RTC interrupts [ 997.671697][T14153] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2730'. [ 997.781993][ T25] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 997.793919][ T25] usb 5-1: USB disconnect, device number 22 [ 997.935157][ T1378] ieee802154 phy0 wpan0: encryption failed: -22 [ 997.938076][ T1378] ieee802154 phy1 wpan1: encryption failed: -22 [ 998.753392][ T39] audit: type=1400 audit(2000000637.138:2401): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=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 [ 1000.007806][T14009] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1000.225374][T14009] 8021q: adding VLAN 0 to HW filter on device team0 [ 1000.247962][T14178] input: syz0 as /devices/virtual/input/input31 [ 1000.380045][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 1000.383348][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1000.418766][ T7082] bridge0: port 2(bridge_slave_1) entered blocking state [ 1000.422061][ T7082] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1000.940807][T14036] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1000.982934][T14036] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1001.021388][T14036] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1001.066009][T14036] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1001.311561][T14036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1001.348235][T14036] 8021q: adding VLAN 0 to HW filter on device team0 [ 1001.381857][ T5399] bridge0: port 1(bridge_slave_0) entered blocking state [ 1001.385016][ T5399] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1001.392426][ T5399] bridge0: port 2(bridge_slave_1) entered blocking state [ 1001.395694][ T5399] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1001.447722][T14036] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1001.463595][T14036] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1001.475391][T14009] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1001.526092][T14009] veth0_vlan: entered promiscuous mode [ 1001.537928][T14009] veth1_vlan: entered promiscuous mode [ 1001.576805][T14009] veth0_macvtap: entered promiscuous mode [ 1001.584246][T14009] veth1_macvtap: entered promiscuous mode [ 1001.611295][T14009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1001.615728][T14009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.629951][T14009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1001.634063][T14009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.637188][T14009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1001.641538][T14009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.645871][T14009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1001.659957][T14009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.664249][T14009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1001.668751][T14009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.679947][T14009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1001.685660][T14009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.699350][T14009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1001.703927][T14009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.708070][T14009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1001.726779][T14009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.731416][T14009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1001.735968][T14009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.749320][T14009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1001.754403][T14009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.769869][T14009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1001.774399][T14009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.781258][T14009] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1001.811553][T14009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1001.816977][T14009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.839384][T14009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1001.844132][T14009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.848455][T14009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1001.869341][T14009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.873293][T14009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1001.877255][T14009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.889285][T14009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1001.894038][T14009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.909246][T14009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1001.927846][T14009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.934989][T14009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1001.939892][T14009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.944465][T14009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1001.948625][T14009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.953286][T14009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1001.958380][T14009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.963532][T14009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1001.968481][T14009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.974809][T14009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1001.980026][T14009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.986351][T14009] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1001.993593][T14009] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.997671][T14009] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.003972][T14009] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.008273][T14009] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.125041][T14036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1002.222234][ T1217] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1002.226085][ T1217] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1002.275176][T14036] veth0_vlan: entered promiscuous mode [ 1002.286803][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1002.319144][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1002.326297][T14036] veth1_vlan: entered promiscuous mode [ 1002.401136][T14036] veth0_macvtap: entered promiscuous mode [ 1002.422050][T14036] veth1_macvtap: entered promiscuous mode [ 1002.451353][T14036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1002.455985][T14036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.460512][T14036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1002.465120][T14036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.471378][T14036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1002.476059][T14036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.490671][T14036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1002.499839][T14036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.504150][T14036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1002.510162][T14036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.516234][T14036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1002.530720][T14036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.536603][T14036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1002.548923][T14036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.554167][T14036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1002.561273][T14036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.565551][T14036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1002.578883][T14036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.584976][T14036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1002.598880][T14036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.605072][T14036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1002.619072][T14036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.623684][T14036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1002.629703][T14036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.636721][T14036] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1002.656474][T14036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1002.668833][T14036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.672143][T14036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1002.676524][T14036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.708827][T14036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1002.713337][T14036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.717898][T14036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1002.729027][T14036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.733090][T14036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1002.760031][T14036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.765193][T14036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1002.778803][T14036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.783076][T14036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1002.787469][T14036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.809051][T14036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1002.814392][T14036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.834698][T14036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1002.839570][T14036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.845248][T14036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1002.853329][T14036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.857495][T14036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1002.862112][T14036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.866984][T14036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1002.872186][T14036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1002.880524][T14036] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1002.904158][T14036] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.907655][T14036] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.912633][T14036] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.917221][T14036] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1003.389734][ T1217] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1003.393343][ T1217] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1003.473191][T10838] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1003.490196][T10838] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1003.877045][ C2] hpet: Lost 1 RTC interrupts [ 1004.403793][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1005.042226][ T66] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1005.048120][ T66] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1005.078738][ T66] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1005.099224][ T66] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1005.107746][ T66] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1005.111267][ T66] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1005.535188][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.076304][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.114492][T14196] chnl_net:caif_netlink_parms(): no params data found [ 1006.318518][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.667945][T14196] bridge0: port 1(bridge_slave_0) entered blocking state [ 1006.671207][T14196] bridge0: port 1(bridge_slave_0) entered disabled state [ 1006.707157][T14196] bridge_slave_0: entered allmulticast mode [ 1006.712145][T14196] bridge_slave_0: entered promiscuous mode [ 1006.729140][T14196] bridge0: port 2(bridge_slave_1) entered blocking state [ 1006.732184][T14196] bridge0: port 2(bridge_slave_1) entered disabled state [ 1006.735346][T14196] bridge_slave_1: entered allmulticast mode [ 1006.741747][T14196] bridge_slave_1: entered promiscuous mode [ 1006.864897][T14196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1006.880474][T14196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1007.033491][T14196] team0: Port device team_slave_0 added [ 1007.174884][T14196] team0: Port device team_slave_1 added [ 1007.217379][T12782] Bluetooth: hci8: command tx timeout [ 1007.405684][ T13] bridge_slave_1: left allmulticast mode [ 1007.415947][ T66] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1007.419159][ T13] bridge_slave_1: left promiscuous mode [ 1007.423334][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1007.423905][ T66] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1007.434390][ T66] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1007.438276][ T66] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1007.463431][ T13] bridge_slave_0: left allmulticast mode [ 1007.466561][ T66] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 1007.467441][ T13] bridge_slave_0: left promiscuous mode [ 1007.472858][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1007.475872][ T66] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1008.476519][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1008.484439][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1008.518303][ T13] bond0 (unregistering): Released all slaves [ 1008.576769][T14196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1008.585920][T14196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1008.616455][T14196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1008.621490][T14213] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2739'. [ 1008.625185][T14213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1008.629375][T14213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1008.633186][T14213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1008.648095][T14213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1008.652349][T14213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1008.685921][T14213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1008.691098][T14213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1008.705912][T14213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1008.710818][T14213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1008.755941][T14213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1008.761296][T14213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1008.786681][T14213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1008.791824][T14213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1008.835848][T14213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1008.854811][T14213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1008.855951][T12782] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1008.867659][T12782] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1008.883731][T12782] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1008.889711][T12782] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1008.894654][T12782] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 1008.899578][T12782] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1008.995805][T14213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1009.000187][T14213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1009.004678][T14213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1009.055842][T14213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1009.060659][T14213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1009.070958][T14213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1009.075212][T14213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1009.095715][T14213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1009.099390][T14213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1009.127340][T14213] batadv_slave_1: entered promiscuous mode [ 1009.295859][ T66] Bluetooth: hci8: command tx timeout [ 1009.340302][T14196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1009.343564][T14196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1009.395512][T14196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1009.525707][ T66] Bluetooth: hci9: command tx timeout [ 1010.289754][T14196] hsr_slave_0: entered promiscuous mode [ 1010.310978][T14196] hsr_slave_1: entered promiscuous mode [ 1010.314279][T14196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1010.325026][T14196] Cannot create hsr debugfs directory [ 1010.429181][ C2] hpet: Lost 1 RTC interrupts [ 1010.709906][ T13] hsr_slave_0: left promiscuous mode [ 1010.713219][ T13] hsr_slave_1: left promiscuous mode [ 1010.718557][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1010.722070][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1010.746027][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1010.749433][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1010.913887][ T13] veth1_macvtap: left promiscuous mode [ 1010.934804][ T13] veth0_macvtap: left promiscuous mode [ 1010.945807][ T13] veth1_vlan: left promiscuous mode [ 1010.948117][ T13] veth0_vlan: left promiscuous mode [ 1010.964936][ T66] Bluetooth: hci12: command tx timeout [ 1011.366784][ T66] Bluetooth: hci8: command tx timeout [ 1011.615412][ T66] Bluetooth: hci9: command tx timeout [ 1013.044346][ T66] Bluetooth: hci12: command tx timeout [ 1013.453905][ T66] Bluetooth: hci8: command tx timeout [ 1013.684100][ T66] Bluetooth: hci9: command tx timeout [ 1014.851781][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1015.124888][ T66] Bluetooth: hci12: command tx timeout [ 1015.317955][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1015.763246][ T66] Bluetooth: hci9: command tx timeout [ 1016.957528][T14223] 9pnet_fd: Insufficient options for proto=fd [ 1017.211761][ T66] Bluetooth: hci12: command tx timeout [ 1019.282042][T14158] syz_tun (unregistering): left allmulticast mode [ 1020.078254][T14216] chnl_net:caif_netlink_parms(): no params data found [ 1020.131070][T14210] chnl_net:caif_netlink_parms(): no params data found [ 1020.637903][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1021.074536][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1021.330478][T14216] bridge0: port 1(bridge_slave_0) entered blocking state [ 1021.333932][T14216] bridge0: port 1(bridge_slave_0) entered disabled state [ 1021.337303][T14216] bridge_slave_0: entered allmulticast mode [ 1021.360952][T14216] bridge_slave_0: entered promiscuous mode [ 1021.441968][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1021.573362][T14216] bridge0: port 2(bridge_slave_1) entered blocking state [ 1021.576624][T14216] bridge0: port 2(bridge_slave_1) entered disabled state [ 1021.580891][T14216] bridge_slave_1: entered allmulticast mode [ 1021.585076][T14216] bridge_slave_1: entered promiscuous mode [ 1021.750544][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1021.840119][T14210] bridge0: port 1(bridge_slave_0) entered blocking state [ 1021.856906][T14210] bridge0: port 1(bridge_slave_0) entered disabled state [ 1021.861147][T14210] bridge_slave_0: entered allmulticast mode [ 1021.865355][T14210] bridge_slave_0: entered promiscuous mode [ 1021.916807][T14216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1021.961447][T14210] bridge0: port 2(bridge_slave_1) entered blocking state [ 1021.964541][T14210] bridge0: port 2(bridge_slave_1) entered disabled state [ 1021.967415][T14210] bridge_slave_1: entered allmulticast mode [ 1021.990613][T14210] bridge_slave_1: entered promiscuous mode [ 1022.221691][T14216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1022.377473][T14210] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1022.403185][T14210] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1022.491339][T14216] team0: Port device team_slave_0 added [ 1022.497597][T14216] team0: Port device team_slave_1 added [ 1022.904893][T14216] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1022.907570][T14216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1022.938908][T14216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1022.968348][T14210] team0: Port device team_slave_0 added [ 1022.982598][T14196] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1023.029560][T14216] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1023.058678][T14216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1023.078657][T14216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1023.087255][T14210] team0: Port device team_slave_1 added [ 1023.093225][T14196] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1023.121508][T14196] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1023.272178][T14196] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1023.487190][T14210] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1023.515739][T14210] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1023.539689][T14210] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1023.556868][T14210] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1023.566584][T14210] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1023.622691][T14210] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1023.758179][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.091325][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.132860][T14216] hsr_slave_0: entered promiscuous mode [ 1024.136476][T14216] hsr_slave_1: entered promiscuous mode [ 1024.228358][T14216] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1024.231576][T14216] Cannot create hsr debugfs directory [ 1024.281166][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.451160][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1024.766432][T14210] hsr_slave_0: entered promiscuous mode [ 1024.803607][T14210] hsr_slave_1: entered promiscuous mode [ 1024.807168][T14210] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1024.812213][T14210] Cannot create hsr debugfs directory [ 1025.091258][T14259] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1025.188751][T14260] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2747'. [ 1025.308571][T14261] IPVS: sync thread started: state = MASTER, mcast_ifn = bond0, syncid = 0, id = 0 [ 1025.531310][T14196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1025.738862][ T13] bridge_slave_1: left allmulticast mode [ 1025.741856][ T13] bridge_slave_1: left promiscuous mode [ 1025.744269][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1025.769511][ T13] bridge_slave_0: left allmulticast mode [ 1025.771626][ T13] bridge_slave_0: left promiscuous mode [ 1025.773901][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1025.799286][ T13] bridge_slave_1: left allmulticast mode [ 1025.801736][ T13] bridge_slave_1: left promiscuous mode [ 1025.804148][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1025.830520][ T13] bridge_slave_0: left allmulticast mode [ 1025.833504][ T13] bridge_slave_0: left promiscuous mode [ 1025.835725][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1027.946840][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1027.997607][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1028.062137][ T13] bond0 (unregistering): Released all slaves [ 1028.480427][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1028.500541][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1028.536079][ T13] bond0 (unregistering): Released all slaves [ 1028.652896][T14196] 8021q: adding VLAN 0 to HW filter on device team0 [ 1028.770905][ T5393] bridge0: port 1(bridge_slave_0) entered blocking state [ 1028.774612][ T5393] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1028.888299][ T5393] bridge0: port 2(bridge_slave_1) entered blocking state [ 1028.891432][ T5393] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1029.072282][ T66] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:585 [ 1029.078150][ T66] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 66, name: kworker/u33:0 [ 1029.111115][ T66] preempt_count: 0, expected: 0 [ 1029.128775][ T66] RCU nest depth: 1, expected: 0 [ 1029.130884][ T66] 4 locks held by kworker/u33:0/66: [ 1029.133237][ T66] #0: ffff88802a65c148 ((wq_completion)hci13#2){+.+.}-{0:0}, at: process_one_work+0x11f0/0x1ad0 [ 1029.154551][ T66] #1: ffffc90000a1fd80 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x8bb/0x1ad0 [ 1029.160037][ T66] #2: ffff88806b430078 (&hdev->lock){+.+.}-{3:3}, at: hci_le_create_big_complete_evt+0xde/0xb30 [ 1029.165692][ T66] #3: ffffffff8ddb8b20 (rcu_read_lock){....}-{1:2}, at: hci_le_create_big_complete_evt+0x100/0xb30 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1029.175610][ T66] CPU: 1 UID: 0 PID: 66 Comm: kworker/u33:0 Not tainted 6.11.0-rc1-syzkaller-00043-g94ede2a3e913 #0 [ 1029.181059][ T66] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1029.185946][ T66] Workqueue: hci13 hci_rx_work [ 1029.187945][ T66] Call Trace: [ 1029.189342][ T66] [ 1029.190553][ T66] dump_stack_lvl+0x16c/0x1f0 [ 1029.192847][ T66] __might_resched+0x3c0/0x5e0 [ 1029.195344][ T66] ? __pfx___might_resched+0x10/0x10 [ 1029.211115][ T66] ? rcu_is_watching+0x12/0xc0 [ 1029.213312][ T66] __mutex_lock+0xe2/0x9c0 [ 1029.215325][ T66] ? hci_le_create_big_complete_evt+0x387/0xb30 [ 1029.226591][ T66] ? __pfx___mutex_lock+0x10/0x10 [ 1029.228731][ T66] ? __pfx_lock_acquire+0x10/0x10 [ 1029.230603][ T66] ? find_held_lock+0x2d/0x110 [ 1029.233226][ T66] ? hci_event_packet+0x438/0x1190 [ 1029.235748][ T66] ? __pfx_lock_release+0x10/0x10 [ 1029.237794][ T66] ? hci_le_create_big_complete_evt+0x387/0xb30 [ 1029.240405][ T66] hci_le_create_big_complete_evt+0x387/0xb30 [ 1029.243157][ T66] ? __mutex_unlock_slowpath+0x164/0x650 [ 1029.245582][ T66] ? __pfx_hci_le_create_big_complete_evt+0x10/0x10 [ 1029.248856][ T66] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1029.252099][ T66] ? skb_pull_data+0x166/0x210 [ 1029.254973][ T66] hci_le_meta_evt+0x2e2/0x5d0 [ 1029.258652][ T66] ? __pfx_hci_le_create_big_complete_evt+0x10/0x10 [ 1029.262393][ T66] hci_event_packet+0x666/0x1190 [ 1029.265623][ T66] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1029.268186][ T66] ? __pfx_hci_event_packet+0x10/0x10 [ 1029.271165][ T66] ? mark_held_locks+0x9f/0xe0 [ 1029.273892][ T66] ? kcov_remote_start+0x3d1/0x6e0 [ 1029.276730][ T66] ? lockdep_hardirqs_on+0x7c/0x110 [ 1029.279224][ T66] hci_rx_work+0x2c6/0x1610 [ 1029.281270][ T66] process_one_work+0x958/0x1ad0 [ 1029.283430][ T66] ? __pfx_lock_acquire+0x10/0x10 [ 1029.285613][ T66] ? __pfx_process_one_work+0x10/0x10 [ 1029.288020][ T66] ? assign_work+0x1a0/0x250 [ 1029.289689][ T66] worker_thread+0x6c8/0xf20 [ 1029.291553][ T66] ? __pfx_worker_thread+0x10/0x10 [ 1029.293758][ T66] kthread+0x2c1/0x3a0 [ 1029.295629][ T66] ? _raw_spin_unlock_irq+0x23/0x50 [ 1029.298810][ T66] ? __pfx_kthread+0x10/0x10 [ 1029.301772][ T66] ret_from_fork+0x45/0x80 [ 1029.304375][ T66] ? __pfx_kthread+0x10/0x10 [ 1029.307151][ T66] ret_from_fork_asm+0x1a/0x30 [ 1029.309424][ T66] [ 1029.311725][ T66] [ 1029.312858][ T66] ============================= [ 1029.314937][ T66] [ BUG: Invalid wait context ] [ 1029.316927][ T66] 6.11.0-rc1-syzkaller-00043-g94ede2a3e913 #0 Tainted: G W [ 1029.321126][ T66] ----------------------------- [ 1029.323203][ T66] kworker/u33:0/66 is trying to lock: [ 1029.325579][ T66] ffffffff8fc6d808 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_le_create_big_complete_evt+0x387/0xb30 [ 1029.329756][ T66] other info that might help us debug this: [ 1029.332043][ T66] context-{4:4} [ 1029.333405][ T66] 4 locks held by kworker/u33:0/66: [ 1029.335832][ T66] #0: ffff88802a65c148 ((wq_completion)hci13#2){+.+.}-{0:0}, at: process_one_work+0x11f0/0x1ad0 [ 1029.340939][ T66] #1: ffffc90000a1fd80 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x8bb/0x1ad0 [ 1029.346324][ T66] #2: ffff88806b430078 (&hdev->lock){+.+.}-{3:3}, at: hci_le_create_big_complete_evt+0xde/0xb30 [ 1029.351183][ T66] #3: ffffffff8ddb8b20 (rcu_read_lock){....}-{1:2}, at: hci_le_create_big_complete_evt+0x100/0xb30 [ 1029.356182][ T66] stack backtrace: [ 1029.358154][ T66] CPU: 1 UID: 0 PID: 66 Comm: kworker/u33:0 Tainted: G W 6.11.0-rc1-syzkaller-00043-g94ede2a3e913 #0 [ 1029.364449][ T66] Tainted: [W]=WARN [ 1029.366587][ T66] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1029.371403][ T66] Workqueue: hci13 hci_rx_work [ 1029.373513][ T66] Call Trace: [ 1029.375032][ T66] [ 1029.376235][ T66] dump_stack_lvl+0x116/0x1f0 [ 1029.378107][ T66] __lock_acquire+0x13cc/0x3cb0 [ 1029.380126][ T66] ? __pfx___lock_acquire+0x10/0x10 [ 1029.382049][ T66] ? irqentry_exit+0x3b/0x90 [ 1029.383862][ T66] ? lockdep_hardirqs_on+0x7c/0x110 [ 1029.385892][ T66] lock_acquire+0x1b1/0x560 [ 1029.387670][ T66] ? hci_le_create_big_complete_evt+0x387/0xb30 [ 1029.390359][ T66] ? __pfx_lock_acquire+0x10/0x10 [ 1029.392541][ T66] ? dump_stack_lvl+0x1a3/0x1f0 [ 1029.394706][ T66] ? add_taint+0x5f/0xd0 [ 1029.396634][ T66] ? __might_resched+0x3cc/0x5e0 [ 1029.398973][ T66] ? __pfx___might_resched+0x10/0x10 [ 1029.401686][ T66] __mutex_lock+0x175/0x9c0 [ 1029.403716][ T66] ? hci_le_create_big_complete_evt+0x387/0xb30 [ 1029.406497][ T66] ? hci_le_create_big_complete_evt+0x387/0xb30 [ 1029.409627][ T66] ? __pfx___mutex_lock+0x10/0x10 [ 1029.412058][ T66] ? __pfx_lock_acquire+0x10/0x10 [ 1029.414326][ T66] ? find_held_lock+0x2d/0x110 [ 1029.416652][ T66] ? hci_event_packet+0x438/0x1190 [ 1029.419341][ T66] ? __pfx_lock_release+0x10/0x10 [ 1029.421673][ T66] ? hci_le_create_big_complete_evt+0x387/0xb30 [ 1029.425062][ T66] hci_le_create_big_complete_evt+0x387/0xb30 [ 1029.427572][ T66] ? __mutex_unlock_slowpath+0x164/0x650 [ 1029.430008][ T66] ? __pfx_hci_le_create_big_complete_evt+0x10/0x10 [ 1029.432868][ T66] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1029.435410][ T66] ? skb_pull_data+0x166/0x210 [ 1029.437607][ T66] hci_le_meta_evt+0x2e2/0x5d0 [ 1029.439863][ T66] ? __pfx_hci_le_create_big_complete_evt+0x10/0x10 [ 1029.443015][ T66] hci_event_packet+0x666/0x1190 [ 1029.445451][ T66] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1029.447249][ T66] ? __pfx_hci_event_packet+0x10/0x10 [ 1029.449648][ T66] ? mark_held_locks+0x9f/0xe0 [ 1029.452033][ T66] ? kcov_remote_start+0x3d1/0x6e0 [ 1029.454708][ T66] ? lockdep_hardirqs_on+0x7c/0x110 [ 1029.457412][ T66] hci_rx_work+0x2c6/0x1610 [ 1029.459857][ T66] process_one_work+0x958/0x1ad0 [ 1029.462300][ T66] ? __pfx_lock_acquire+0x10/0x10 [ 1029.464744][ T66] ? __pfx_process_one_work+0x10/0x10 [ 1029.467119][ T66] ? assign_work+0x1a0/0x250 [ 1029.469477][ T66] worker_thread+0x6c8/0xf20 [ 1029.472382][ T66] ? __pfx_worker_thread+0x10/0x10 [ 1029.475181][ T66] kthread+0x2c1/0x3a0 [ 1029.477044][ T66] ? _raw_spin_unlock_irq+0x23/0x50 [ 1029.479315][ T66] ? __pfx_kthread+0x10/0x10 [ 1029.481257][ T66] ret_from_fork+0x45/0x80 [ 1029.483392][ T66] ? __pfx_kthread+0x10/0x10 [ 1029.485409][ T66] ret_from_fork_asm+0x1a/0x30 [ 1029.487422][ T66] [ 1029.506593][ C2] hpet: Lost 1 RTC interrupts [ 1029.605443][ T66] ================================================================== [ 1029.609484][ T66] BUG: KASAN: slab-use-after-free in hci_le_create_big_complete_evt+0xa62/0xb30 [ 1029.613439][ T66] Read of size 8 at addr ffff888029798000 by task kworker/u33:0/66 [ 1029.616938][ T66] [ 1029.617921][ T66] CPU: 1 UID: 0 PID: 66 Comm: kworker/u33:0 Tainted: G W 6.11.0-rc1-syzkaller-00043-g94ede2a3e913 #0 [ 1029.624332][ T66] Tainted: [W]=WARN [ 1029.626367][ T66] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1029.632076][ T66] Workqueue: hci13 hci_rx_work [ 1029.634649][ T66] Call Trace: [ 1029.636676][ T66] [ 1029.638386][ T66] dump_stack_lvl+0x116/0x1f0 [ 1029.640708][ T66] print_report+0xc3/0x620 [ 1029.642990][ T66] ? __virt_addr_valid+0x5e/0x590 [ 1029.645190][ T66] ? __phys_addr+0xc6/0x150 [ 1029.647365][ T66] kasan_report+0xd9/0x110 [ 1029.649425][ T66] ? hci_le_create_big_complete_evt+0xa62/0xb30 [ 1029.652145][ T66] ? hci_le_create_big_complete_evt+0xa62/0xb30 [ 1029.655170][ T66] hci_le_create_big_complete_evt+0xa62/0xb30 [ 1029.657555][ T66] ? __pfx_hci_le_create_big_complete_evt+0x10/0x10 [ 1029.660337][ T66] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1029.663421][ T66] ? skb_pull_data+0x166/0x210 [ 1029.666033][ T66] hci_le_meta_evt+0x2e2/0x5d0 [ 1029.668798][ T66] ? __pfx_hci_le_create_big_complete_evt+0x10/0x10 [ 1029.672219][ T66] hci_event_packet+0x666/0x1190 [ 1029.674772][ T66] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1029.678218][ T66] ? __pfx_hci_event_packet+0x10/0x10 [ 1029.686957][ T66] ? mark_held_locks+0x9f/0xe0 [ 1029.689099][ T66] ? kcov_remote_start+0x3d1/0x6e0 [ 1029.692934][ T66] ? lockdep_hardirqs_on+0x7c/0x110 [ 1029.695807][ T66] hci_rx_work+0x2c6/0x1610 [ 1029.697854][ T66] process_one_work+0x958/0x1ad0 [ 1029.699975][ T66] ? __pfx_lock_acquire+0x10/0x10 [ 1029.702310][ T66] ? __pfx_process_one_work+0x10/0x10 [ 1029.704449][ T66] ? assign_work+0x1a0/0x250 [ 1029.706647][ T66] worker_thread+0x6c8/0xf20 [ 1029.708763][ T66] ? __pfx_worker_thread+0x10/0x10 [ 1029.710774][ T66] kthread+0x2c1/0x3a0 [ 1029.712503][ T66] ? _raw_spin_unlock_irq+0x23/0x50 [ 1029.714699][ T66] ? __pfx_kthread+0x10/0x10 [ 1029.716539][ T66] ret_from_fork+0x45/0x80 [ 1029.718344][ T66] ? __pfx_kthread+0x10/0x10 [ 1029.720166][ T66] ret_from_fork_asm+0x1a/0x30 [ 1029.722327][ T66] [ 1029.723663][ T66] [ 1029.724733][ T66] Allocated by task 12782: [ 1029.726737][ T66] kasan_save_stack+0x33/0x60 [ 1029.728825][ T66] kasan_save_track+0x14/0x30 [ 1029.730880][ T66] __kasan_kmalloc+0xaa/0xb0 [ 1029.732903][ T66] __hci_conn_add+0x131/0x1a60 [ 1029.735052][ T66] hci_conn_add+0x56/0x70 [ 1029.737079][ T66] hci_le_big_sync_established_evt+0xbe6/0x1110 [ 1029.740090][ T66] hci_le_meta_evt+0x2e2/0x5d0 [ 1029.742254][ T66] hci_event_packet+0x666/0x1190 [ 1029.744005][ T66] hci_rx_work+0x2c6/0x1610 [ 1029.745642][ T66] process_one_work+0x958/0x1ad0 [ 1029.747376][ T66] worker_thread+0x6c8/0xf20 [ 1029.749033][ T66] kthread+0x2c1/0x3a0 [ 1029.750559][ T66] ret_from_fork+0x45/0x80 [ 1029.752477][ T66] ret_from_fork_asm+0x1a/0x30 [ 1029.755082][ T66] [ 1029.756139][ T66] Freed by task 66: [ 1029.757870][ T66] kasan_save_stack+0x33/0x60 [ 1029.760437][ T66] kasan_save_track+0x14/0x30 [ 1029.765065][ T66] kasan_save_free_info+0x3b/0x60 [ 1029.766973][ T66] poison_slab_object+0xf7/0x160 [ 1029.768881][ T66] __kasan_slab_free+0x32/0x50 [ 1029.770944][ T66] kfree+0x12a/0x3b0 [ 1029.772591][ T66] device_release+0xa1/0x240 [ 1029.774551][ T66] kobject_put+0x1fa/0x5b0 [ 1029.776300][ T66] put_device+0x1f/0x30 [ 1029.777763][ T66] hci_conn_del_sysfs+0x151/0x180 [ 1029.779544][ T66] hci_conn_del+0x54e/0xdb0 [ 1029.781139][ T66] hci_le_create_big_complete_evt+0x4ba/0xb30 [ 1029.783396][ T66] hci_le_meta_evt+0x2e2/0x5d0 [ 1029.785272][ T66] hci_event_packet+0x666/0x1190 [ 1029.787427][ T66] hci_rx_work+0x2c6/0x1610 [ 1029.789496][ T66] process_one_work+0x958/0x1ad0 [ 1029.791695][ T66] worker_thread+0x6c8/0xf20 [ 1029.793684][ T66] kthread+0x2c1/0x3a0 [ 1029.795480][ T66] ret_from_fork+0x45/0x80 [ 1029.797312][ T66] ret_from_fork_asm+0x1a/0x30 [ 1029.799216][ T66] [ 1029.800176][ T66] The buggy address belongs to the object at ffff888029798000 [ 1029.800176][ T66] which belongs to the cache kmalloc-8k of size 8192 [ 1029.805760][ T66] The buggy address is located 0 bytes inside of [ 1029.805760][ T66] freed 8192-byte region [ffff888029798000, ffff88802979a000) [ 1029.812938][ T66] [ 1029.814334][ T66] The buggy address belongs to the physical page: [ 1029.817392][ T66] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x29798 [ 1029.821151][ T66] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1029.824834][ T66] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1029.827949][ T66] page_type: 0xfdffffff(slab) [ 1029.830003][ T66] raw: 00fff00000000040 ffff888015843180 ffffea00004a5c00 dead000000000003 [ 1029.833695][ T66] raw: 0000000000000000 0000000000020002 00000001fdffffff 0000000000000000 [ 1029.837324][ T66] head: 00fff00000000040 ffff888015843180 ffffea00004a5c00 dead000000000003 [ 1029.840937][ T66] head: 0000000000000000 0000000000020002 00000001fdffffff 0000000000000000 [ 1029.844293][ T66] head: 00fff00000000003 ffffea0000a5e601 ffffffffffffffff 0000000000000000 [ 1029.847666][ T66] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 1029.851089][ T66] page dumped because: kasan: bad access detected [ 1029.853600][ T66] page_owner tracks the page as allocated [ 1029.855831][ T66] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5056, tgid 5056 (dhcpcd), ts 34624311292, free_ts 34597716870 [ 1029.864346][ T66] post_alloc_hook+0x2d1/0x350 [ 1029.866365][ T66] get_page_from_freelist+0x1351/0x2e50 [ 1029.868538][ T66] __alloc_pages_noprof+0x22b/0x2460 [ 1029.870778][ T66] alloc_slab_page+0x4e/0xf0 [ 1029.872856][ T66] new_slab+0x84/0x260 [ 1029.874747][ T66] ___slab_alloc+0xdac/0x1870 [ 1029.877457][ T66] __slab_alloc.constprop.0+0x56/0xb0 [ 1029.880307][ T66] __kmalloc_node_track_caller_noprof+0x365/0x440 [ 1029.881711][ T5301] sshd (5301) used greatest stack depth: 21184 bytes left [ 1029.884179][ T66] kmalloc_reserve+0xef/0x2c0 [ 1029.889991][ T66] __alloc_skb+0x164/0x380 [ 1029.892224][ T66] netlink_dump+0x2c1/0xcc0 [ 1029.895382][ T66] netlink_recvmsg+0xa0d/0xf30 [ 1029.898030][ T66] sock_recvmsg+0x1f6/0x250 [ 1029.900236][ T66] ____sys_recvmsg+0x21f/0x6b0 [ 1029.902433][ T66] ___sys_recvmsg+0x115/0x1a0 [ 1029.904818][ T66] __sys_recvmsg+0x114/0x1e0 [ 1029.907179][ T66] page last free pid 5137 tgid 5137 stack trace: [ 1029.910583][ T66] free_unref_page+0x64a/0xe40 [ 1029.912986][ T66] __put_partials+0x14c/0x170 [ 1029.915108][ T66] qlist_free_all+0x4e/0x140 [ 1029.917157][ T66] kasan_quarantine_reduce+0x192/0x1e0 [ 1029.919775][ T66] __kasan_slab_alloc+0x69/0x90 [ 1029.922123][ T66] __kmalloc_node_noprof+0x1c3/0x440 [ 1029.924368][ T66] __kvmalloc_node_noprof+0x9d/0x1a0 [ 1029.927210][ T66] seq_read_iter+0x830/0x12c0 [ 1029.929659][ T66] kernfs_fop_read_iter+0x41a/0x590 [ 1029.932395][ T66] vfs_read+0x869/0xbd0 [ 1029.934485][ T66] ksys_read+0x12f/0x260 [ 1029.940588][ T66] do_syscall_64+0xcd/0x250 [ 1029.944160][ T66] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1029.946637][ T66] [ 1029.948082][ T66] Memory state around the buggy address: [ 1029.950493][ T66] ffff888029797f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1029.953838][ T66] ffff888029797f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1029.957633][ T66] >ffff888029798000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1029.961508][ T66] ^ [ 1029.963742][ T66] ffff888029798080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1029.967455][ T66] ffff888029798100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1029.970840][ T66] ================================================================== [ 1029.974952][ T66] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1029.978566][ T66] CPU: 1 UID: 0 PID: 66 Comm: kworker/u33:0 Tainted: G W 6.11.0-rc1-syzkaller-00043-g94ede2a3e913 #0 [ 1029.984783][ T66] Tainted: [W]=WARN [ 1029.986469][ T66] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1029.991575][ T66] Workqueue: hci13 hci_rx_work [ 1029.993670][ T66] Call Trace: [ 1029.995243][ T66] [ 1029.996824][ T66] dump_stack_lvl+0x3d/0x1f0 [ 1029.999257][ T66] panic+0x6f5/0x7a0 [ 1030.001359][ T66] ? __pfx_panic+0x10/0x10 [ 1030.003512][ T66] ? rcu_is_watching+0x12/0xc0 [ 1030.005666][ T66] ? preempt_schedule_thunk+0x1a/0x30 [ 1030.008059][ T66] ? preempt_schedule_common+0x44/0xc0 [ 1030.010991][ T66] check_panic_on_warn+0xab/0xb0 [ 1030.013150][ T66] end_report+0x117/0x180 [ 1030.015219][ T66] kasan_report+0xe9/0x110 [ 1030.017220][ T66] ? hci_le_create_big_complete_evt+0xa62/0xb30 [ 1030.020037][ T66] ? hci_le_create_big_complete_evt+0xa62/0xb30 [ 1030.023239][ T66] hci_le_create_big_complete_evt+0xa62/0xb30 [ 1030.028883][ T66] ? __pfx_hci_le_create_big_complete_evt+0x10/0x10 [ 1030.031555][ T66] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1030.034112][ T66] ? skb_pull_data+0x166/0x210 [ 1030.036281][ T66] hci_le_meta_evt+0x2e2/0x5d0 [ 1030.038582][ T66] ? __pfx_hci_le_create_big_complete_evt+0x10/0x10 [ 1030.041569][ T66] hci_event_packet+0x666/0x1190 [ 1030.043771][ T66] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1030.046257][ T66] ? __pfx_hci_event_packet+0x10/0x10 [ 1030.048456][ T66] ? mark_held_locks+0x9f/0xe0 [ 1030.050461][ T66] ? kcov_remote_start+0x3d1/0x6e0 [ 1030.052485][ T66] ? lockdep_hardirqs_on+0x7c/0x110 [ 1030.054889][ T66] hci_rx_work+0x2c6/0x1610 [ 1030.056832][ T66] process_one_work+0x958/0x1ad0 [ 1030.059003][ T66] ? __pfx_lock_acquire+0x10/0x10 [ 1030.062656][ T66] ? __pfx_process_one_work+0x10/0x10 [ 1030.065396][ T66] ? assign_work+0x1a0/0x250 [ 1030.067818][ T66] worker_thread+0x6c8/0xf20 [ 1030.070225][ T66] ? __pfx_worker_thread+0x10/0x10 [ 1030.073154][ T66] kthread+0x2c1/0x3a0 [ 1030.075421][ T66] ? _raw_spin_unlock_irq+0x23/0x50 [ 1030.078300][ T66] ? __pfx_kthread+0x10/0x10 [ 1030.081234][ T66] ret_from_fork+0x45/0x80 [ 1030.083576][ T66] ? __pfx_kthread+0x10/0x10 [ 1030.086153][ T66] ret_from_fork_asm+0x1a/0x30 [ 1030.088776][ T66] [ 1030.091073][ T66] Kernel Offset: disabled [ 1030.093113][ T66] Rebooting in 86400 seconds.. VM DIAGNOSIS: 15:25:50 Registers: info registers vcpu 0 CPU#0 RAX=ffffffff94623090 RBX=ffff8880204b0ae0 RCX=1ffffffff28c461e RDX=dffffc0000000000 RSI=0000000000000008 RDI=ffffffff946230f0 RBP=ffffc90003d17900 RSP=ffffc90003d177c0 R8 =0000000000000000 R9 =fffffbfff28b60fc R10=ffffffff945b07e7 R11=0000000000000000 R12=ffff8880204b0000 R13=0000000000000040 R14=0000000000000006 R15=1ffff920007a2efe RIP=ffffffff8168e2de RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802c000000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000030b14ff8 CR3=000000002961c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000004080 Opmask01=0000000000000000 Opmask02=000000000fffffff Opmask03=2040000404420020 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005586251c38a0 00005586251d5660 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000ff000000ff00 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffff0000 ffffffffffffffff ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0daf7ea4f1887ab6 737326f00e0dcb1b ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737373737142 7373737373737373 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000031 0000000000000000 44455a494c414954 494e495f43455355 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6f742033687465 2f74656e2f336d69 7376656474656e2f 736563697665642f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a4a51055c445757 440540495057055c 5744574a55484051 000f1a005b1a0f00 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7edc0dd782fb09c5 00000005586251ca 0000000000000171 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7edc0dd782fb09c5 000055837d7f7ad0 0000000000000121 0000003136316c6c ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005586251c5fd0 00005586251ceff0 0000000000000021 0000003177617264 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffee7bffffebff 6b2c75e77d7fbff7 7fdf7ffef77ffffd 02007ffffffffdff ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 49383a3a2648383a 3a2633383a3a2632 383a3a263d383a3a 263c383a3a263f38 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000210 0000000000000030 2f320d68702f0931 00004e4f53414552 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000210 0000000000000030 00000d68251c0931 00004e4f53414531 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000064 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff84fa18d5 RDI=ffffffff951173c0 RBP=ffffffff95117380 RSP=ffffc90000a1f428 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000064 R14=ffffffff84fa1870 R15=0000000000000000 RIP=ffffffff84fa18ff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c100000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f742e3e0 CR3=000000006c582000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000005000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=ffffc90000013000 RBX=00000000eb6aba20 RCX=ffffffff813b9a71 RDX=ffff88801e618000 RSI=ffffffff813b9ab7 RDI=0000000000000007 RBP=ffffffff813b99a0 RSP=ffffc90000540e00 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=00000000ffffffff R13=000000000017d784 R14=1ffff920000a81c0 R15=ffff888021db3000 RIP=ffffffff813b9acd RFL=00000092 [--S-A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fd97bdf8d00 ffffffff 00c00000 GS =0000 ffff88802c200000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055c053bc4000 CR3=0000000012aa6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=ff18ae78ff18ae78 ff18ae78ff18ae78 ff18ae78ff18ae78 ff18ae78ff18ae78 ff18ae78ff18ae78 ff18ae78ff18ae78 ff18ae78ff18ae78 ff18ae78ff18ae78 ZMM22=b44c08e6b44c08e6 b44c08e6b44c08e6 b44c08e6b44c08e6 b44c08e6b44c08e6 b44c08e6b44c08e6 b44c08e6b44c08e6 b44c08e6b44c08e6 b44c08e6b44c08e6 ZMM23=33070f4f33070f4f 33070f4f33070f4f 33070f4f33070f4f 33070f4f33070f4f 33070f4f33070f4f 33070f4f33070f4f 33070f4f33070f4f 33070f4f33070f4f ZMM24=10d1797210d17972 10d1797210d17972 10d1797210d17972 10d1797210d17972 10d1797210d17972 10d1797210d17972 10d1797210d17972 10d1797210d17972 ZMM25=4c50ef0a4c50ef0a 4c50ef0a4c50ef0a 4c50ef0a4c50ef0a 4c50ef0a4c50ef0a 4c50ef0a4c50ef0a 4c50ef0a4c50ef0a 4c50ef0a4c50ef0a 4c50ef0a4c50ef0a ZMM26=bbde767cbbde767c bbde767cbbde767c bbde767cbbde767c bbde767cbbde767c bbde767cbbde767c bbde767cbbde767c bbde767cbbde767c bbde767cbbde767c ZMM27=249fbd80249fbd80 249fbd80249fbd80 249fbd80249fbd80 249fbd80249fbd80 249fbd80249fbd80 249fbd80249fbd80 249fbd80249fbd80 249fbd80249fbd80 ZMM28=000000300000002f 0000002e0000002d 0000002c0000002b 0000002a00000029 0000002800000027 0000002600000025 0000002400000023 0000002200000021 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=6319000063190000 6319000063190000 6319000063190000 6319000063190000 6319000063190000 6319000063190000 6319000063190000 6319000063190000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000003 RCX=ffffffff8af2f910 RDX=ffff8880223b0000 RSI=0000000000000003 RDI=0000000000000005 RBP=ffffffff8ca91280 RSP=ffffc90002dff928 R8 =0000000000000005 R9 =0000000000000003 R10=0000000000000001 R11=0000000000000000 R12=0000000000000001 R13=0000000000000005 R14=0000000000000003 R15=0000000000000001 RIP=ffffffff818b0b7d RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c300000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f561afaa440 CR3=00000000464c2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000084000 Opmask01=0000000000000001 Opmask02=00000000ffff3f01 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffed434d8b0 0000003000000008 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffed434d8b0 0000003000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6565656565656565 6565656565656565 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffff0000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6533613265646534 39672d3334303030 2d72656c6c616b7a 79732d3163722d30 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 20726f20656c6966 2068637573206f4e ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0079726f74636572 696420726f20656c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000