last executing test programs: 5.209778092s ago: executing program 1 (id=2536): close(0xffffffffffffffff) syz_emit_ethernet(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/15], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 5.209585139s ago: executing program 0 (id=2537): socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x400, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e020022003505d25a806f8c6394f90435fc60040011000a740100053582c137153e3702", 0x25}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x92c0199, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) 5.109097921s ago: executing program 1 (id=2538): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"]) chdir(&(0x7f0000000280)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$FUSE_LK(r0, &(0x7f00000002c0)={0x28, 0xfffffffffffffffe, 0x0, {{0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x28) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x7}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 5.019476937s ago: executing program 0 (id=2539): write$binfmt_script(0xffffffffffffffff, &(0x7f0000000480)={'#! ', './file0', [], 0xa, "2e46a7dc822f042efe7fdb501f56bdfd5d06659fef78f1c6f7e387978fb83168588bffeb2e29ee84e7655fd8f3d08131c82a127210dceec996100e0b9f0584cae4a04f87ac5a10c5cad3cd21c488a19a514121813a3d9d409c3077f78264ce"}, 0x6a) socket$inet(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="30000000190001000000000000000000021800000000ff000000000008000100ac1414000c000900"], 0x30}, 0x1, 0x0, 0x0, 0x8084}, 0x44004) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 4.970389803s ago: executing program 1 (id=2540): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000011c0)=@newlink={0x38, 0x10, 0x801, 0x0, 0x25dfdbff, {}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5}]}]}]}, 0x38}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) pipe2$9p(&(0x7f0000000500), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec85"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4400000010000104004000"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800040000000000050017"], 0x44}}, 0x0) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x12, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000040000000000000009500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f0002000000"], 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000400), 0x887dab077f141882, 0x0) socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'ipvlan0\x00', 0x0}) syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "76b2af", 0x48, 0x2f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], {0x0, 0x883e, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "e655c644a71ceeb76c17ecd115d19906c08878d04483b8e7", "db9a3292cfce3361000c5ca17afa1529fa1c07580bfa70072e2222607dcfa9f4"}}}}}}}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(0xffffffffffffffff, &(0x7f0000000080)="0f5190fa0fb05f125f0f7dc4383c3ef05c9b15a75f492294bbc48dfdbad93cabfaeaf9d2cf4d0eea80639ed18cf81b5b8bc8004f4cb97799ace937f6d067720b632f003938b950b14c67579417f7e3ed442136029143a29653941ca0cf40f76817198b5a8ae36126daca3e1e4640b58e9bea2750dc1387e0b7", 0x79, 0x0, 0x0, 0x0) setsockopt$packet_add_memb(r6, 0x107, 0x18, &(0x7f0000000800)={r5, 0x1, 0x6, @broadcast}, 0x10) socket$kcm(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x1c, 0x0, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44004}, 0x20000800) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) sendto$packet(r6, 0x0, 0x0, 0x4000050, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) syz_emit_vhci(0x0, 0x0) ioctl$SNDCTL_TMR_METRONOME(r4, 0x40045407) 4.920733385s ago: executing program 0 (id=2541): r0 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) iopl(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) timer_settime(0x0, 0x1, &(0x7f0000000280)={{}, {0x0, 0x989680}}, 0x0) 4.849015213s ago: executing program 0 (id=2542): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4400000010000104004000"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800040000000000050017"], 0x44}}, 0x0) 4.730561147s ago: executing program 0 (id=2543): sigaltstack(&(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfffffffffffffefa}, &(0x7f0000000080)={&(0x7f0000000040)}) link(0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 3.650064366s ago: executing program 2 (id=2549): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000680)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000500)="142dd5257c806256764375c8ae0a84ab427288d4385d9da6e62b08793e6e9b98b4", 0x21, 0x20040004, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001080)=[{{0x0, 0x0, 0x0}, 0xfffffffc}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000007c0)=""/218, 0xda}], 0x1}, 0x3}], 0x2, 0x0, 0x0) 3.520200308s ago: executing program 2 (id=2550): r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) fcntl$setstatus(r0, 0x4, 0x2800) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = fcntl$dupfd(r0, 0x0, r1) socket$nl_generic(0x10, 0x3, 0x10) mq_open(&(0x7f0000000080)='m$\x00\xdc\xb7\xb8\xd0>,\xb0\x13\x8b3z>K\x84\x05\x00\x00\x00\x9c\x81\xed\xc2\x00', 0x6e93ebbbcc0884ee, 0x0, 0x0) syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xd) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x30) 2.629455794s ago: executing program 0 (id=2559): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000001440)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETOFFLOAD(r2, 0x400454c9, 0x9) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x38}}, 0x0) ioctl$TUNSETCARRIER(r2, 0x400454ce, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 2.629296834s ago: executing program 2 (id=2560): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x30}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x38}}, 0x0) 2.42353001s ago: executing program 2 (id=2561): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)={0x40, 0x4, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x2, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz1\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x800) 2.42111675s ago: executing program 2 (id=2562): syz_emit_ethernet(0xa6, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x70, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "ffffffffff60000000000000"}]}}}}}}, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000040)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a}]}}}}}}}, 0x0) syz_emit_ethernet(0x36, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xcf0, 0x2c285829, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) brk(0x0) 2.200671457s ago: executing program 2 (id=2566): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x74, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0x0) r3 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) lseek(r3, 0x0, 0x2) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000100)={{0xffff, 0x86fb}, 'syz0\x00'}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() syz_open_dev$usbmon(0x0, 0x5a3f, 0x20041) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000a00), 0x0) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0x6) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000340)={{0x1, 0x0, 0xffffffff}}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x0) 1.770643193s ago: executing program 1 (id=2567): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002300)=ANY=[@ANYBLOB="200000001200010a00000000000000000702"], 0x20}}, 0x0) 1.77040869s ago: executing program 1 (id=2568): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x4397a5c0115f3542, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) 1.600413467s ago: executing program 3 (id=2569): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000ffffffff000000000800010001"], 0x28}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) unshare(0x6a040000) socket$alg(0x26, 0x5, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000040000000800", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000058c38a631ecb260500"/27], 0x48) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000400)={0x3, 0x200, 0x3, 0x0, 0xc}) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, 0x0) unshare(0x8040480) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x4004743a, 0x0) r3 = io_uring_setup(0x497c, &(0x7f00000001c0)) close_range(r3, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000000)={&(0x7f00000001c0)={0x14, 0x24, 0x9, 0x3000000, 0x0, {0x6}}, 0x14}}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r5 = fsopen(&(0x7f00000003c0)='virtiofs\x00', 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x3d, 0x0, 0x0, 0x3654}]}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x12, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x76, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.500188496s ago: executing program 1 (id=2570): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"]) chdir(&(0x7f0000000280)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ftruncate(r0, 0xc17c) write$FUSE_LK(r0, &(0x7f00000002c0)={0x28, 0xfffffffffffffffe, 0x0, {{0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x28) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x7}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000500)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) socket$rds(0x15, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x7b43504fd1189517}, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0, 0x140) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f00000003c0)='fuse\x00', &(0x7f0000000400)='./file0\x00', r4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) signalfd4(0xffffffffffffffff, &(0x7f0000001140)={[0xfffffffffffffff5]}, 0x8, 0x0) 920.316141ms ago: executing program 3 (id=2571): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1200000000000000000000000080000001400000", @ANYRES32, @ANYBLOB="0000000000000000000000000900000000000000d892cf0ae783e7a5d47202404fab0749acd0a05ecca835a88dc12357b43176f6e64815d8ee1cbde8d418ea83fc9351c5a8a88def0faa872aef882fbaaa735190af90692763c7a570cc7e1f92e748c8ed4aac4678a9db7af0547d5efeec7c0428e84b06900db2d7a9931ca8feb8c41adaa430b13858c24c0d44e8e59766", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x9) r2 = openat(0xffffffffffffffff, &(0x7f0000000740)='./file1\x00', 0x1458c3, 0x1) r3 = openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(r2, r3, 0x0, 0x15) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x80, 0x3}, &(0x7f00000002c0), 0x0) r5 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) msync(&(0x7f0000ff7000/0x3000)=nil, 0x3000, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x5307, 0x0) write$6lowpan_enable(r5, &(0x7f0000000080)='1', 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[], 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000900), 0x1cb240, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c8, 0x2e0, 0x9403, 0x3002, 0x0, 0x2c0, 0x3f8, 0x3d8, 0x3d8, 0x3f8, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x80, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'virt_wifi0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x528) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000780)={&(0x7f0000000840)=ANY=[@ANYBLOB="2c00000002060102000000000000000007000000050004000200000005000100072dceae5f000100074925cb467b2b20ac429d54a00f23790ccc43b01e8234ac0d404a0f460236acad8b236900a702c8f7a000000000000000000000000000f7a97f3615e82e07a4ccd81e43b91abaf98a504a4d274b0b17f6fa94437563778eeca03996c8e9c1bbc65157984504033572ae7587b5ccfeba2702b8c6250f"], 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, 0x0) close_range(r0, r1, 0x2) shmget$private(0x0, 0x3000, 0x16001b20, &(0x7f0000ffd000/0x3000)=nil) r7 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r7, 0x6a, 0x2, 0x20000000, 0x3) 650.062313ms ago: executing program 3 (id=2572): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"]) chdir(&(0x7f0000000280)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0xc17c) write$FUSE_LK(0xffffffffffffffff, &(0x7f00000002c0)={0x28, 0xfffffffffffffffe, 0x0, {{0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x28) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000080)={0x0, 0x1, 0x7}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 510.356731ms ago: executing program 3 (id=2573): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r2) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000600, r2, 0x0) 260.563181ms ago: executing program 3 (id=2574): setsockopt$inet_sctp6_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, 0x0, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff6000/0x3000)=nil) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ff9000/0x2000)=nil) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xeee141d97cdc3b16, 0x10, 0xffffffffffffffff, 0x0) shmctl$IPC_RMID(0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000048000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000080007006e617400140004800800014000000000080002400000000014000000020a010800000000000000000000000014000000110001"], 0xa4}}, 0x0) 0s ago: executing program 3 (id=2575): close(0xffffffffffffffff) syz_emit_ethernet(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200"/16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) kernel console output (not intermixed with test programs): ] netlink: 12 bytes leftover after parsing attributes in process `syz.0.853'. [ 217.133916][ T5369] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 217.138071][ T5369] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 217.140791][ T5369] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 217.143800][ T5369] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 217.146561][ T5369] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 217.148812][ T5369] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 217.173688][ T7983] lo speed is unknown, defaulting to 1000 [ 217.247029][ T7999] 9pnet_fd: Insufficient options for proto=fd [ 217.309477][ T7983] chnl_net:caif_netlink_parms(): no params data found [ 217.363843][ T39] audit: type=1804 audit(1727793800.551:93): pid=8002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.861" name="/newroot/84/file1" dev="fuse" ino=1 res=1 errno=0 [ 217.442542][ T7983] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.455532][ T7983] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.462814][ T7983] bridge_slave_0: entered allmulticast mode [ 217.479899][ T7983] bridge_slave_0: entered promiscuous mode [ 217.496515][ T7983] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.499172][ T7983] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.523547][ T7983] bridge_slave_1: entered allmulticast mode [ 217.526806][ T7983] bridge_slave_1: entered promiscuous mode [ 217.544978][ T8019] netlink: 12 bytes leftover after parsing attributes in process `syz.0.864'. [ 217.613420][ T7983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.617587][ T7983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.676024][ T7983] team0: Port device team_slave_0 added [ 217.680690][ T7983] team0: Port device team_slave_1 added [ 217.741988][ T7983] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.751195][ T7983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.764647][ T7983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.770156][ T7983] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.773945][ T7983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.783546][ T7983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.851504][ T7983] hsr_slave_0: entered promiscuous mode [ 217.864499][ T7983] hsr_slave_1: entered promiscuous mode [ 217.878915][ T7983] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 217.882206][ T7983] Cannot create hsr debugfs directory [ 217.971026][ T8046] netlink: 12 bytes leftover after parsing attributes in process `syz.0.876'. [ 218.071041][ T7983] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.262099][ T7983] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.361501][ T7983] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.495633][ T7983] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.655408][ T7983] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 218.661545][ T7983] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 218.666533][ T7983] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 218.674650][ T7983] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 218.739717][ T7983] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.746929][ T7983] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.763810][ T1171] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.766768][ T1171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.779845][ T1171] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.781772][ T1171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.818833][ T7983] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 218.822066][ T7983] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 218.955876][ T7983] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.985512][ T7983] veth0_vlan: entered promiscuous mode [ 218.989943][ T7983] veth1_vlan: entered promiscuous mode [ 219.005660][ T7983] veth0_macvtap: entered promiscuous mode [ 219.009376][ T7983] veth1_macvtap: entered promiscuous mode [ 219.017145][ T7983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.019908][ T7983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.022674][ T7983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.025812][ T7983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.028326][ T7983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.031004][ T7983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.035225][ T7983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.038242][ T7983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.040930][ T7983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.047693][ T7983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.050224][ T7983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.052966][ T7983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.055753][ T7983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.058457][ T7983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.060979][ T7983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.067667][ T7983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.070374][ T7983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.073076][ T7983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.077557][ T7983] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.082217][ T7983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.089949][ T7983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.092473][ T7983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.095599][ T7983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.098142][ T7983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.100908][ T7983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.103979][ T7983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.106695][ T7983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.109289][ T7983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.111969][ T7983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.117145][ T7983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.120934][ T7983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.123810][ T7983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.126543][ T7983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.129230][ T7983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.132552][ T7983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.143532][ T7983] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.146276][ T7983] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.154562][ T7983] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.160449][ T7983] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.162853][ T7983] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.168293][ T7983] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.170805][ T7983] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.223315][ T4781] Bluetooth: hci9: command tx timeout [ 219.223897][ T1104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.227530][ T1104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.239122][ T1171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.241225][ T1171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.256690][ T8119] bridge0: port 3(syz_tun) entered blocking state [ 219.259854][ T8119] bridge0: port 3(syz_tun) entered disabled state [ 219.268656][ T8119] syz_tun: entered allmulticast mode [ 219.271087][ T8119] syz_tun: entered promiscuous mode [ 219.276024][ T8119] bridge0: port 3(syz_tun) entered blocking state [ 219.277938][ T8119] bridge0: port 3(syz_tun) entered forwarding state [ 219.622121][ T39] audit: type=1800 audit(1727793802.811:94): pid=8104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.903" name="/" dev="fuse" ino=1 res=0 errno=0 [ 220.422139][ T8157] bridge0: port 3(syz_tun) entered blocking state [ 220.433347][ T8157] bridge0: port 3(syz_tun) entered disabled state [ 220.435281][ T8157] syz_tun: entered allmulticast mode [ 220.437887][ T8157] syz_tun: entered promiscuous mode [ 220.439754][ T8157] bridge0: port 3(syz_tun) entered blocking state [ 220.441586][ T8157] bridge0: port 3(syz_tun) entered forwarding state [ 220.473587][ T8162] netlink: 12 bytes leftover after parsing attributes in process `syz.2.923'. [ 220.570001][ T8164] ceph: No mds server is up or the cluster is laggy [ 220.599154][ T8173] syz.2.927: vmalloc error: size 1742053888, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 220.621366][ T8173] CPU: 2 UID: 0 PID: 8173 Comm: syz.2.927 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 220.625091][ T8173] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 220.628795][ T8173] Call Trace: [ 220.629981][ T8173] [ 220.631042][ T8173] dump_stack_lvl+0x16c/0x1f0 [ 220.632733][ T8173] warn_alloc+0x24d/0x3a0 [ 220.634266][ T8173] ? __pfx_warn_alloc+0x10/0x10 [ 220.635998][ T8173] ? __pfx___lock_acquire+0x10/0x10 [ 220.637764][ T8173] ? get_ctrl+0x394/0x4f0 [ 220.639322][ T8173] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 220.641295][ T8173] __vmalloc_node_range_noprof+0x11a7/0x15a0 [ 220.643327][ T8173] ? __mutex_trylock_common+0xea/0x250 [ 220.645152][ T8173] ? __pfx___mutex_trylock_common+0x10/0x10 [ 220.647188][ T8173] ? __v4l2_ctrl_modify_dimensions+0x1c7/0x650 [ 220.649287][ T8173] ? rcu_is_watching+0x12/0xc0 [ 220.650963][ T8173] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 220.653111][ T8173] ? rcu_is_watching+0x12/0xc0 [ 220.654777][ T8173] ? rcu_is_watching+0x12/0xc0 [ 220.656421][ T8173] ? trace_kmalloc+0x2d/0xe0 [ 220.658088][ T8173] ? __kmalloc_node_noprof.cold+0x5a/0x5f [ 220.660278][ T8173] ? __v4l2_ctrl_modify_dimensions+0x1c7/0x650 [ 220.662404][ T8173] __kvmalloc_node_noprof+0x14f/0x1a0 [ 220.664261][ T8173] ? __v4l2_ctrl_modify_dimensions+0x1c7/0x650 [ 220.666399][ T8173] __v4l2_ctrl_modify_dimensions+0x1c7/0x650 [ 220.668474][ T8173] vivid_update_format_cap+0x127b/0x2530 [ 220.670382][ T8173] ? __pfx_vivid_update_format_cap+0x10/0x10 [ 220.672478][ T8173] ? v4l2_match_dv_timings+0x1df/0x1010 [ 220.674406][ T8173] vivid_vid_cap_s_dv_timings+0xc0f/0xfb0 [ 220.676459][ T8173] vidioc_s_dv_timings+0xa5/0xc0 [ 220.678247][ T8173] ? v4l_stub_s_dv_timings+0x1b/0x60 [ 220.680951][ T8173] __video_do_ioctl+0xaf0/0xf00 [ 220.682690][ T8173] ? __pfx___video_do_ioctl+0x10/0x10 [ 220.684655][ T8173] video_usercopy+0x426/0x1500 [ 220.686455][ T8173] ? __pfx___video_do_ioctl+0x10/0x10 [ 220.688373][ T8173] ? __pfx_video_usercopy+0x10/0x10 [ 220.690249][ T8173] v4l2_ioctl+0x1ba/0x250 [ 220.691815][ T8173] v4l2_compat_ioctl32+0x214/0x2c0 [ 220.693637][ T8173] ? __pfx_v4l2_compat_ioctl32+0x10/0x10 [ 220.695637][ T8173] __do_compat_sys_ioctl+0x259/0x2b0 [ 220.697525][ T8173] __do_fast_syscall_32+0x73/0x120 [ 220.699388][ T8173] do_fast_syscall_32+0x32/0x80 [ 220.701139][ T8173] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 220.703382][ T8173] RIP: 0023:0xf7fe1579 [ 220.704834][ T8173] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 220.711507][ T8173] RSP: 002b:00000000f576656c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 220.714491][ T8173] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0845657 [ 220.717265][ T8173] RDX: 00000000200007c0 RSI: 0000000000000000 RDI: 0000000000000000 [ 220.718598][ T8175] netlink: 'syz.3.928': attribute type 7 has an invalid length. [ 220.720053][ T8173] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 220.720091][ T8173] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 220.720106][ T8173] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 220.722877][ T8175] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.928'. [ 220.725584][ T8173] [ 220.726502][ C2] hpet: Lost 6 RTC interrupts [ 220.750744][ T8178] netlink: 'syz.0.930': attribute type 7 has an invalid length. [ 220.753805][ T8178] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.930'. [ 220.758145][ T8173] Mem-Info: [ 220.759397][ T8173] active_anon:370 inactive_anon:3417 isolated_anon:0 [ 220.759397][ T8173] active_file:3524 inactive_file:16851 isolated_file:0 [ 220.759397][ T8173] unevictable:768 dirty:264 writeback:0 [ 220.759397][ T8173] slab_reclaimable:5217 slab_unreclaimable:75231 [ 220.759397][ T8173] mapped:39107 shmem:960 pagetables:856 [ 220.759397][ T8173] sec_pagetables:322 bounce:0 [ 220.759397][ T8173] kernel_misc_reclaimable:0 [ 220.759397][ T8173] free:29023 free_pcp:4675 free_cma:0 [ 220.848196][ T8173] Node 0 active_anon:28kB inactive_anon:12kB active_file:0kB inactive_file:8kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:4532kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9400kB pagetables:1068kB sec_pagetables:1204kB all_unreclaimable? no [ 220.862639][ T8173] Node 1 active_anon:4552kB inactive_anon:10656kB active_file:14096kB inactive_file:67296kB unevictable:1536kB isolated(anon):0kB isolated(file):100kB mapped:151896kB dirty:1048kB writeback:0kB shmem:2304kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:3428kB pagetables:2280kB sec_pagetables:84kB all_unreclaimable? no [ 220.877154][ T8173] Node 0 DMA free:932kB boost:0kB min:760kB low:948kB high:1136kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:176kB local_pcp:4kB free_cma:0kB [ 220.886926][ T8173] lowmem_reserve[]: 0 273 0 0 0 [ 220.888455][ T8173] Node 0 DMA32 free:21440kB boost:0kB min:13904kB low:17380kB high:20856kB reserved_highatomic:4096KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:1536kB writepending:8kB present:1032196kB managed:306284kB mlocked:0kB bounce:0kB free_pcp:484kB local_pcp:212kB free_cma:0kB [ 220.921271][ T8173] lowmem_reserve[]: 0 0 0 0 0 [ 220.922633][ T8173] Node 1 DMA32 free:92692kB boost:0kB min:47144kB low:58928kB high:70712kB reserved_highatomic:2048KB active_anon:5152kB inactive_anon:9756kB active_file:13996kB inactive_file:66496kB unevictable:1536kB writepending:1048kB present:1048432kB managed:948252kB mlocked:0kB bounce:0kB free_pcp:16260kB local_pcp:900kB free_cma:0kB [ 220.942894][ T8173] lowmem_reserve[]: 0 0 0 0 0 [ 220.969744][ T8173] Node 0 DMA: 15*4kB (U) 5*8kB (U) 10*16kB (U) 21*32kB (U) 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 932kB [ 220.985193][ T8173] Node 0 DMA32: 63*4kB (UMEH) 52*8kB (UMEH) 22*16kB (UMEH) 77*32kB (UMEH) 46*64kB (UMEH) 23*128kB (UMEH) 14*256kB (UMEH) 11*512kB (UM) 3*1024kB (UM) 0*2048kB 0*4096kB = 21660kB [ 221.003362][ T8173] Node 1 DMA32: 279*4kB (MEH) 757*8kB (ME) 508*16kB (MEH) 408*32kB (UMEH) 259*64kB (ME) 72*128kB (ME) 34*256kB (UME) 15*512kB (ME) 12*1024kB (M) 4*2048kB (M) 0*4096kB = 91012kB [ 221.011755][ T8173] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 221.029364][ T8173] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 221.038331][ T8173] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 221.040921][ T8173] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 221.051044][ T8173] 22141 total pagecache pages [ 221.052361][ T8173] 806 pages in swap cache [ 221.063592][ T8173] Free swap = 113216kB [ 221.064770][ T8173] Total swap = 124996kB [ 221.067476][ T8173] 524155 pages RAM [ 221.068477][ T8173] 0 pages HighMem/MovableOnly [ 221.073071][ T8173] 206681 pages reserved [ 221.079003][ T8173] 0 pages cma reserved [ 221.223705][ T4781] Bluetooth: hci8: command 0x041b tx timeout [ 221.303768][ T4781] Bluetooth: hci9: command tx timeout [ 221.438270][ T8203] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 221.441108][ T8203] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 221.446534][ T8203] hsr_slave_0: left promiscuous mode [ 221.449606][ T8203] hsr_slave_1: left promiscuous mode [ 221.672510][ T8217] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 221.694305][ T8217] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 222.203290][ T35] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 222.363854][ T35] usb 7-1: Using ep0 maxpacket: 8 [ 222.374017][ T35] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 222.376519][ T35] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 222.378980][ T35] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 222.381591][ T35] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 222.385570][ T35] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 222.388034][ T35] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.595871][ T35] usb 7-1: GET_CAPABILITIES returned 0 [ 222.597939][ T35] usbtmc 7-1:16.0: can't read capabilities [ 222.801687][ T35] usb 7-1: USB disconnect, device number 4 [ 222.999561][ T8253] ceph: No mds server is up or the cluster is laggy [ 223.122085][ T8267] siw: device registration error -23 [ 223.129772][ T8267] smc: removing ib device syz1 [ 223.373619][ T4781] Bluetooth: hci9: command tx timeout [ 223.913341][ T35] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 224.094054][ T35] usb 8-1: Using ep0 maxpacket: 8 [ 224.096967][ T35] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 224.100458][ T35] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 224.104004][ T35] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 224.107119][ T35] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 224.123216][ T35] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 224.125706][ T35] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.253557][ T6277] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 224.335572][ T35] usb 8-1: GET_CAPABILITIES returned 0 [ 224.337047][ T35] usbtmc 8-1:16.0: can't read capabilities [ 224.375408][ T8311] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 224.383776][ T8311] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 224.426750][ T8311] netlink: 8 bytes leftover after parsing attributes in process `syz.0.990'. [ 224.433645][ T6277] usb 7-1: Using ep0 maxpacket: 16 [ 224.442492][ T6277] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 224.447391][ T6277] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 224.453397][ T6277] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 152, changing to 11 [ 224.457181][ T6277] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 8285, setting to 1024 [ 224.461127][ T6277] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 224.475184][ T6277] usb 7-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 224.477913][ T6277] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.480491][ T6277] usb 7-1: Product: syz [ 224.481923][ T6277] usb 7-1: Manufacturer: syz [ 224.485045][ T6277] usb 7-1: SerialNumber: syz [ 224.487853][ T6277] usb 7-1: config 0 descriptor?? [ 224.545496][ T35] usb 8-1: USB disconnect, device number 19 [ 224.705418][ T6277] appledisplay 7-1:0.0: Error while getting initial brightness: -32 [ 224.905927][ T4781] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 224.905990][ T4781] Bluetooth: hci6: Injecting HCI hardware error event [ 224.911684][ T5369] Bluetooth: hci6: hardware error 0x00 [ 224.994602][ T6277] appledisplay 7-1:0.0: probe with driver appledisplay failed with error -32 [ 225.009119][ T6277] usb 7-1: USB disconnect, device number 5 [ 225.463297][ T4781] Bluetooth: hci9: command tx timeout [ 225.620243][ T5396] IPVS: starting estimator thread 0... [ 225.713353][ T8346] IPVS: using max 35 ests per chain, 84000 per kthread [ 226.022229][ T4781] Bluetooth: Wrong link type (-71) [ 226.073407][ T8371] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 226.244062][ T8383] 9pnet_fd: Insufficient options for proto=fd [ 226.295783][ T4781] Bluetooth: Wrong link type (-71) [ 226.354533][ T8397] siw: device registration error -23 [ 226.363433][ T8395] overlayfs: failed to resolve './file1': -2 [ 226.554316][ T4781] Bluetooth: Wrong link type (-71) [ 226.806408][ T8438] overlayfs: failed to resolve './file0': -2 [ 226.957666][ T8451] 9pnet_fd: Insufficient options for proto=fd [ 226.983280][ T5369] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 227.155042][ T5369] Bluetooth: Wrong link type (-71) [ 227.257017][ T8484] 9pnet_fd: Insufficient options for proto=fd [ 227.676541][ T8500] overlayfs: failed to resolve './file0': -2 [ 228.085060][ T8526] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1074'. [ 228.089599][ T8526] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1074'. [ 228.103717][ T8526] netlink: 'syz.3.1074': attribute type 1 has an invalid length. [ 228.106670][ T8526] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1074'. [ 228.173371][ T6277] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 228.334890][ T6277] usb 7-1: Using ep0 maxpacket: 8 [ 228.339400][ T6277] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 228.342722][ T6277] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 228.346059][ T6277] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 228.349466][ T6277] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 228.355246][ T6277] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 228.358570][ T6277] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.574373][ T6277] usb 7-1: GET_CAPABILITIES returned 0 [ 228.583332][ T6277] usbtmc 7-1:16.0: can't read capabilities [ 228.775799][ T4568] usb 7-1: USB disconnect, device number 6 [ 228.800928][ T8531] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 228.882051][ T8546] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1084'. [ 229.101870][ T8569] delete_channel: no stack [ 229.288923][ T8588] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 229.291979][ T8588] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 229.303216][ T8588] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 231.149885][ T8645] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1126'. [ 231.529204][ T5369] Bluetooth: hci8: unexpected event for opcode 0x1003 [ 231.577873][ T8695] sit0: entered promiscuous mode [ 231.581255][ T8695] netlink: 'syz.2.1149': attribute type 1 has an invalid length. [ 231.593359][ T8695] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1149'. [ 231.636180][ T8699] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1151'. [ 231.638608][ T8699] netlink: 'syz.2.1151': attribute type 2 has an invalid length. [ 231.640597][ T8699] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1151'. [ 231.937430][ T8707] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 232.678694][ T8745] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.752530][ T8752] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1168'. [ 232.755689][ T8752] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1168'. [ 232.794211][ T8745] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.800176][ T8752] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1168'. [ 232.869535][ T8745] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.017666][ T8745] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.176076][ T8745] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.198031][ T8745] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.217958][ T8745] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.248285][ T8745] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.757121][ T8770] sctp: [Deprecated]: syz.2.1175 (pid 8770) Use of int in max_burst socket option deprecated. [ 233.757121][ T8770] Use struct sctp_assoc_value instead [ 234.610358][ T8802] overlayfs: failed to resolve './file0': -2 [ 234.817540][ T8816] ceph: No mds server is up or the cluster is laggy [ 235.344314][ T8838] overlayfs: workdir and upperdir must reside under the same mount [ 235.437589][ T8840] netlink: 'syz.1.1205': attribute type 4 has an invalid length. [ 235.533402][ T5369] Bluetooth: hci8: Controller not accepting commands anymore: ncmd = 0 [ 235.538443][ T5369] Bluetooth: hci8: Injecting HCI hardware error event [ 235.542377][ T5369] Bluetooth: hci8: hardware error 0x00 [ 236.103055][ T8864] siw: device registration error -23 [ 237.236389][ T8895] siw: device registration error -23 [ 237.503660][ T8907] hsr_slave_0: left promiscuous mode [ 237.515568][ T8907] hsr_slave_1: left promiscuous mode [ 237.595981][ T8916] siw: device registration error -23 [ 237.628012][ T5369] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 237.672218][ T8919] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1240'. [ 237.970140][ T62] libceph: mon0 (1)[c::]:6789 socket closed (con state V1_BANNER) [ 238.693239][ T8934] ceph: No mds server is up or the cluster is laggy [ 238.720883][ T8961] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1257'. [ 238.827379][ T8969] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1261'. [ 238.968142][ T8978] netlink: 'syz.2.1265': attribute type 12 has an invalid length. [ 239.142928][ T8978] netlink: 'syz.2.1265': attribute type 4 has an invalid length. [ 239.618852][ T5363] Bluetooth: hci9: command 0x0405 tx timeout [ 239.729287][ T5369] Bluetooth: hci8: Opcode 0x2046 failed: -110 [ 254.574461][ T5369] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 254.578001][ T5369] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 254.580417][ T5369] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 254.584017][ T5369] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 254.586177][ T5369] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 254.588491][ T5369] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 254.800673][ T5363] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 254.806895][ T5354] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 254.810514][ T5363] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 254.817493][ T5354] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 254.820175][ T5363] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 254.822665][ T5363] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 254.854278][ T5354] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 254.854354][ T5363] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 254.857218][ T5354] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 254.859388][ T5363] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 254.860883][ T5354] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 254.861914][ T5363] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 254.893462][ T5369] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 254.898038][ T4781] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 254.902072][ T4781] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 254.911018][ T4781] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 254.913402][ T4781] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 254.914846][ T7269] bridge0: port 3(syz_tun) entered disabled state [ 254.916834][ T4781] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 254.940228][ T7269] syz_tun (unregistering): left allmulticast mode [ 254.942031][ T7269] syz_tun (unregistering): left promiscuous mode [ 254.944784][ T7269] bridge0: port 3(syz_tun) entered disabled state [ 254.958656][ T7983] bridge0: port 3(syz_tun) entered disabled state [ 254.971686][ T7983] syz_tun (unregistering): left allmulticast mode [ 254.974290][ T7983] syz_tun (unregistering): left promiscuous mode [ 254.976195][ T7983] bridge0: port 3(syz_tun) entered disabled state [ 254.992648][ T9021] chnl_net:caif_netlink_parms(): no params data found [ 255.154916][ T9021] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.156946][ T9021] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.158901][ T9021] bridge_slave_0: entered allmulticast mode [ 255.161002][ T9021] bridge_slave_0: entered promiscuous mode [ 255.211187][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.225310][ T9021] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.227225][ T9021] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.229759][ T9021] bridge_slave_1: entered allmulticast mode [ 255.232192][ T9021] bridge_slave_1: entered promiscuous mode [ 255.306427][ T1375] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.326474][ T9021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.337384][ T9021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.359039][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.424623][ T9033] chnl_net:caif_netlink_parms(): no params data found [ 255.525788][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.533106][ T9021] team0: Port device team_slave_0 added [ 255.541451][ T9029] chnl_net:caif_netlink_parms(): no params data found [ 255.548894][ T9030] chnl_net:caif_netlink_parms(): no params data found [ 255.555084][ T9021] team0: Port device team_slave_1 added [ 255.681563][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.725958][ T9021] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.728348][ T9021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.737675][ T9021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.756477][ T9033] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.759024][ T9033] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.761690][ T9033] bridge_slave_0: entered allmulticast mode [ 255.764962][ T9033] bridge_slave_0: entered promiscuous mode [ 255.769175][ T9033] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.771711][ T9033] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.774730][ T9033] bridge_slave_1: entered allmulticast mode [ 255.777605][ T9033] bridge_slave_1: entered promiscuous mode [ 255.785708][ T9021] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.788182][ T9021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.799836][ T9021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.864973][ T9033] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.971610][ T9033] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.988147][ T9029] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.990661][ T9029] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.992701][ T9029] bridge_slave_0: entered allmulticast mode [ 255.996058][ T9029] bridge_slave_0: entered promiscuous mode [ 255.998944][ T9030] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.000996][ T9030] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.003016][ T9030] bridge_slave_0: entered allmulticast mode [ 256.005491][ T9030] bridge_slave_0: entered promiscuous mode [ 256.008310][ T9030] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.010249][ T9030] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.012213][ T9030] bridge_slave_1: entered allmulticast mode [ 256.015531][ T9030] bridge_slave_1: entered promiscuous mode [ 256.050962][ T9021] hsr_slave_0: entered promiscuous mode [ 256.057041][ T9021] hsr_slave_1: entered promiscuous mode [ 256.059523][ T9021] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 256.062055][ T9021] Cannot create hsr debugfs directory [ 256.079842][ T9029] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.082228][ T9029] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.084878][ T9029] bridge_slave_1: entered allmulticast mode [ 256.087919][ T9029] bridge_slave_1: entered promiscuous mode [ 256.126614][ T9033] team0: Port device team_slave_0 added [ 256.186043][ T9029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.190010][ T9029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.210264][ T9030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.215399][ T9033] team0: Port device team_slave_1 added [ 256.271536][ T9030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.321259][ T11] bridge_slave_1: left allmulticast mode [ 256.327470][ T11] bridge_slave_1: left promiscuous mode [ 256.331952][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.341100][ T11] bridge_slave_0: left allmulticast mode [ 256.343074][ T11] bridge_slave_0: left promiscuous mode [ 256.347731][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.653381][ T4781] Bluetooth: hci10: command tx timeout [ 256.798681][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 256.813408][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 256.819047][ T11] bond0 (unregistering): Released all slaves [ 256.837374][ T9029] team0: Port device team_slave_0 added [ 256.859119][ T9030] team0: Port device team_slave_0 added [ 256.870746][ T9030] team0: Port device team_slave_1 added [ 256.890159][ T9033] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.892720][ T9033] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.893323][ T4781] Bluetooth: hci8: command tx timeout [ 256.902017][ T5354] Bluetooth: hci11: command tx timeout [ 256.902382][ T9033] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.904255][ T9033] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.916605][ T9033] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.926213][ T9033] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.973330][ T5354] Bluetooth: hci5: command tx timeout [ 256.982142][ T9029] team0: Port device team_slave_1 added [ 257.058984][ T9029] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.061587][ T9029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.075961][ T9029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.080002][ T9030] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.082157][ T9030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.093302][ T9030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.103972][ T9029] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.106408][ T9029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.116037][ T9029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.123790][ T9030] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.130390][ T9030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.140288][ T9030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.245755][ T9030] hsr_slave_0: entered promiscuous mode [ 257.247925][ T9030] hsr_slave_1: entered promiscuous mode [ 257.249843][ T9030] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 257.251815][ T9030] Cannot create hsr debugfs directory [ 257.306822][ T9021] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.317188][ T9029] hsr_slave_0: entered promiscuous mode [ 257.319369][ T9029] hsr_slave_1: entered promiscuous mode [ 257.321291][ T9029] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 257.323975][ T9029] Cannot create hsr debugfs directory [ 257.353033][ T9033] hsr_slave_0: entered promiscuous mode [ 257.356993][ T9033] hsr_slave_1: entered promiscuous mode [ 257.359022][ T9033] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 257.361073][ T9033] Cannot create hsr debugfs directory [ 257.448288][ T9021] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.489849][ T11] hsr_slave_0: left promiscuous mode [ 257.492962][ T11] hsr_slave_1: left promiscuous mode [ 257.500888][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.504028][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.509352][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.511859][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.542753][ T11] veth1_macvtap: left promiscuous mode [ 257.544618][ T11] veth0_macvtap: left promiscuous mode [ 257.546119][ T11] veth1_vlan: left promiscuous mode [ 257.548484][ T11] veth0_vlan: left promiscuous mode [ 258.551304][ T11] team0 (unregistering): Port device team_slave_1 removed [ 258.707004][ T11] team0 (unregistering): Port device team_slave_0 removed [ 258.743304][ T5354] Bluetooth: hci10: command tx timeout [ 258.978160][ T5354] Bluetooth: hci11: command tx timeout [ 258.978178][ T4781] Bluetooth: hci8: command tx timeout [ 259.053509][ T5354] Bluetooth: hci5: command tx timeout [ 259.604842][ T9021] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.785333][ T9021] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.912798][ T9030] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.009696][ T9030] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.178087][ T11] IPVS: stop unused estimator thread 0... [ 260.201602][ T9030] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.317035][ T9030] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.546709][ T9029] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.566542][ T9030] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 260.573781][ T9030] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 260.584462][ T9030] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 260.588791][ T9030] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 260.640021][ T9030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.652385][ T9030] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.663887][ T1097] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.666350][ T1097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.701593][ T9029] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.721273][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.723787][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.787390][ T9029] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.823424][ T5354] Bluetooth: hci10: command tx timeout [ 260.828744][ T9030] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 260.848587][ T9030] veth0_vlan: entered promiscuous mode [ 260.853092][ T9030] veth1_vlan: entered promiscuous mode [ 260.860162][ T9029] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.891472][ T9030] veth0_macvtap: entered promiscuous mode [ 260.899207][ T9030] veth1_macvtap: entered promiscuous mode [ 260.908406][ T9030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.911649][ T9030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.915580][ T9030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.918794][ T9030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.922150][ T9030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.925741][ T9030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.929028][ T9030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.932496][ T9030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.939388][ T9030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.943449][ T9030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.946832][ T9030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.950308][ T9030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.955196][ T9030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.958890][ T9030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.962330][ T9030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.965927][ T9030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.969221][ T9030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.972824][ T9030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.978141][ T9030] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.982992][ T9030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.987766][ T9030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.991130][ T9030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.996147][ T9030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.999515][ T9030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.003030][ T9030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.006841][ T9030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.010332][ T9030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.014065][ T9030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.017679][ T9030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.021001][ T9030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.025061][ T9030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.028434][ T9030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.031948][ T9030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.035946][ T9030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.039575][ T9030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.042884][ T9030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.046960][ T9030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.050803][ T9030] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.054223][ T5354] Bluetooth: hci8: command tx timeout [ 261.054252][ T4781] Bluetooth: hci11: command tx timeout [ 261.076080][ T9030] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.078971][ T9030] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.081266][ T9030] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.084176][ T9030] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.135468][ T4781] Bluetooth: hci5: command tx timeout [ 261.285484][ T9029] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 261.290352][ T9029] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 261.296743][ T9029] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 261.302138][ T9029] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 261.316299][ T1104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.318761][ T1104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.330409][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.334221][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.440292][ T9029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.449833][ T9029] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.454583][ T103] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.457045][ T103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.535418][ T1097] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.538473][ T1097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.577055][ T9029] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 261.716250][ T9029] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.720841][ T9150] sctp: [Deprecated]: syz.0.1289 (pid 9150) Use of int in max_burst socket option deprecated. [ 261.720841][ T9150] Use struct sctp_assoc_value instead [ 261.772334][ T9021] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 261.794970][ T9021] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 261.810324][ T9021] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 261.826593][ T9021] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 261.856665][ T9033] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 261.861758][ T9029] veth0_vlan: entered promiscuous mode [ 261.871239][ T9033] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 261.876780][ T9033] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 261.892283][ T9029] veth1_vlan: entered promiscuous mode [ 261.903783][ T9029] veth0_macvtap: entered promiscuous mode [ 261.905893][ T9033] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 261.922459][ T9029] veth1_macvtap: entered promiscuous mode [ 261.945064][ T9029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.947810][ T9029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.950370][ T9029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.953069][ T9029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.956044][ T9029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.958779][ T9029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.961290][ T9029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.964077][ T9029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.966599][ T9029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.969299][ T9029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.972028][ T9029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.974875][ T9029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.977416][ T9029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.980159][ T9029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.982700][ T9029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.985467][ T9029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.988142][ T9029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.991649][ T9029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.995018][ T9029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.998445][ T9029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.002850][ T9029] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.007338][ T9021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.016477][ T9021] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.019369][ T9166] netlink: zone id is out of range [ 262.023594][ T9166] netlink: zone id is out of range [ 262.026790][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.026799][ T9166] netlink: set zone limit has 4 unknown bytes [ 262.030584][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.033754][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.035619][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.039135][ T9029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.041655][ T9166] netlink: 191416 bytes leftover after parsing attributes in process `syz.0.1292'. [ 262.042630][ T9029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.049172][ T9029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.051873][ T9029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.054522][ T9029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.057066][ T9029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.059528][ T9029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.062218][ T9029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.064893][ T9029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.067608][ T9029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.070192][ T9029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.072809][ T9029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.075472][ T9029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.078213][ T9029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.081102][ T9029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.084004][ T9029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.086524][ T9029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.089099][ T9029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.091632][ T9029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.094851][ T9029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.099566][ T9029] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.122618][ T9033] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.131441][ T9033] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.143914][ T9029] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.149509][ T9029] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.151735][ T9029] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.156103][ T9029] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.161101][ T103] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.163493][ T103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.176327][ T103] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.178639][ T103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.238292][ T9033] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 262.241830][ T9033] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 262.258132][ T9021] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 262.312965][ T103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.320503][ T103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.337334][ T103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.339722][ T103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.389553][ T9021] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.402846][ T9033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.417083][ T9033] veth0_vlan: entered promiscuous mode [ 262.420867][ T9033] veth1_vlan: entered promiscuous mode [ 262.431035][ T9033] veth0_macvtap: entered promiscuous mode [ 262.436706][ T9033] veth1_macvtap: entered promiscuous mode [ 262.442758][ T9033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.446473][ T9033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.449002][ T9033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.451788][ T9033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.454642][ T9033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.457690][ T9033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.460747][ T9033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.463553][ T9033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.466084][ T9033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.468796][ T9033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.471437][ T9033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.473713][ T9200] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1294'. [ 262.474219][ T9033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.479406][ T9033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.482113][ T9033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.485047][ T9033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.487628][ T9033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.490619][ T9033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.493416][ T9033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.493686][ T9200] netlink: 173 bytes leftover after parsing attributes in process `syz.0.1294'. [ 262.496051][ T9033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.501427][ T9033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.504135][ T9033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.507284][ T9033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.510697][ T9033] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.515865][ T9033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.518607][ T9033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.521134][ T9033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.524372][ T9033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.526957][ T9033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.529703][ T9033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.532285][ T9033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.535106][ T9033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.538436][ T9033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.541114][ T9033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.543690][ T9033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.546376][ T9033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.548872][ T9033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.551551][ T9033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.554853][ T9033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.557933][ T9033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.560435][ T9033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.563189][ T9033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.565719][ T9033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.568854][ T9033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.572122][ T9033] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.575652][ T9033] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.579713][ T9033] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.601938][ T9021] veth0_vlan: entered promiscuous mode [ 262.612644][ T9033] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.617303][ T9033] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.619627][ T9033] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.621885][ T9033] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.639878][ T9021] veth1_vlan: entered promiscuous mode [ 262.646784][ T9212] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1297'. [ 262.774390][ T9021] veth0_macvtap: entered promiscuous mode [ 262.777974][ T9021] veth1_macvtap: entered promiscuous mode [ 262.785816][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.788541][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.800151][ T9021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.804772][ T9021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.807544][ T9021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.810232][ T9021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.812737][ T9021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.815614][ T9021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.818580][ T9021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.821260][ T9021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.823734][ T9021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.826421][ T9021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.828957][ T9021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.831643][ T9021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.834596][ T9021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.837275][ T9021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.839802][ T9021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.842475][ T9021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.845041][ T9021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.847750][ T9021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.851468][ T9021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.854235][ T9021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.856770][ T9021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.859699][ T9021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.862943][ T9021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.866977][ T9021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.871295][ T9021] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.885010][ T9021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.887858][ T9021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.890394][ T9021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.893073][ T9021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.897979][ T9021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.900828][ T9021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.900973][ T4781] Bluetooth: hci10: command tx timeout [ 262.903504][ T9021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.903517][ T9021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.903533][ T9021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.903540][ T9021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.903548][ T9021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.903555][ T9021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.903565][ T9021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.903572][ T9021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.903582][ T9021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.929584][ T9021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.932103][ T9021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.934961][ T9021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.937472][ T9021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.940154][ T9021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.942646][ T9021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.945770][ T9021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.948279][ T9021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.950935][ T9021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.954509][ T9021] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.958523][ T9021] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.961846][ T9021] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.964870][ T9021] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.967893][ T9021] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.978395][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.980587][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.065441][ T1171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.067541][ T1171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.098548][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.101020][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.198262][ T4781] Bluetooth: hci8: command tx timeout [ 263.198298][ T5354] Bluetooth: hci11: command tx timeout [ 263.217422][ T5354] Bluetooth: hci5: command tx timeout [ 263.318851][ T9265] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1309'. [ 263.392930][ C3] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:2. Sending cookies. [ 263.637581][ T9305] netlink: 'syz.2.1320': attribute type 12 has an invalid length. [ 263.892370][ T9321] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1326'. [ 264.171928][ T9329] netlink: zone id is out of range [ 264.176950][ T9329] netlink: zone id is out of range [ 264.183917][ T9329] netlink: set zone limit has 4 unknown bytes [ 264.453120][ T9341] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1336'. [ 264.574631][ T9349] netlink: zone id is out of range [ 264.577202][ T9349] netlink: zone id is out of range [ 264.581847][ T9349] netlink: set zone limit has 4 unknown bytes [ 264.615702][ T9353] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1342'. [ 267.702191][ T4781] Bluetooth: hci4: command 0x0406 tx timeout [ 267.904809][ T9367] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1348'. [ 268.068646][ T9381] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1355'. [ 268.146749][ T9389] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1360'. [ 268.264007][ T9391] team0: Device sit1 is of different type [ 268.283907][ T9393] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1361'. [ 268.334050][ T5354] Bluetooth: hci10: Controller not accepting commands anymore: ncmd = 0 [ 268.336498][ T5354] Bluetooth: hci10: Injecting HCI hardware error event [ 268.340228][ T5354] Bluetooth: hci10: hardware error 0x00 [ 268.364172][ T9398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.367028][ T9398] team0: Port device bond0 added [ 268.375578][ T9398] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1364'. [ 268.510833][ T9409] netlink: 191416 bytes leftover after parsing attributes in process `syz.0.1370'. [ 268.737696][ T9424] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1376'. [ 268.762434][ T9424] wg2: entered promiscuous mode [ 268.767319][ T9424] team0: Device wg2 is of different type [ 268.775835][ T9428] netlink: 'syz.1.1378': attribute type 4 has an invalid length. [ 268.782448][ T9424] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1376'. [ 269.015004][ T9440] netlink: 191416 bytes leftover after parsing attributes in process `syz.1.1382'. [ 270.035432][ T9499] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1407'. [ 270.094193][ T56] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 270.243287][ T56] usb 5-1: Using ep0 maxpacket: 8 [ 270.246622][ T56] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 270.249661][ T56] usb 5-1: config 0 has no interface number 0 [ 270.251887][ T56] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 270.255934][ T56] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 270.259137][ T56] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.273842][ T56] usb 5-1: config 0 descriptor?? [ 270.284695][ T56] iowarrior 5-1:0.1: no interrupt-in endpoint found [ 270.413649][ T5354] Bluetooth: hci10: Opcode 0x0c03 failed: -110 [ 270.433289][ T5963] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 270.484843][ T56] usb 5-1: USB disconnect, device number 5 [ 270.608621][ T5963] usb 8-1: Using ep0 maxpacket: 8 [ 270.616210][ T5963] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 270.619071][ T5963] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 270.633254][ T5963] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 270.639979][ T5963] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 270.651917][ T5963] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 270.656710][ T5963] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.864677][ T5963] usb 8-1: GET_CAPABILITIES returned 0 [ 270.866771][ T5963] usbtmc 8-1:16.0: can't read capabilities [ 271.013431][ T9511] fuse: Bad value for 'group_id' [ 271.015204][ T9511] fuse: Bad value for 'group_id' [ 271.076702][ T5963] usb 8-1: USB disconnect, device number 20 [ 271.274762][ T9529] fuse: Bad value for 'group_id' [ 271.276683][ T9529] fuse: Bad value for 'group_id' [ 272.141433][ T5963] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 272.314841][ T5963] usb 7-1: Using ep0 maxpacket: 8 [ 272.327522][ T5963] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 272.330105][ T5963] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 272.332590][ T5963] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 272.341124][ T5963] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 272.352236][ T5963] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 272.355269][ T5963] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.576323][ T5963] usb 7-1: GET_CAPABILITIES returned 0 [ 272.577842][ T5963] usbtmc 7-1:16.0: can't read capabilities [ 272.784277][ T1297] usb 7-1: USB disconnect, device number 7 [ 275.254875][ T9694] __nla_validate_parse: 7 callbacks suppressed [ 275.254888][ T9694] netlink: 191416 bytes leftover after parsing attributes in process `syz.3.1495'. [ 277.033578][ T9766] syz.3.1525[9766] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 277.033644][ T9766] syz.3.1525[9766] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 277.037485][ T9766] syz.3.1525[9766] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 277.044282][ T9766] syz.3.1525[9766] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 277.048132][ T9766] syz.3.1525[9766] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 277.051825][ T9766] syz.3.1525[9766] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 277.067765][ T9766] pim6reg1: entered promiscuous mode [ 277.073034][ T9766] pim6reg1: entered allmulticast mode [ 277.291792][ T9772] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1528'. [ 277.392270][ T9783] syz.0.1533[9783] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 277.392317][ T9783] syz.0.1533[9783] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 277.401446][ T9786] pim6reg1: entered promiscuous mode [ 277.403251][ T9783] syz.0.1533[9783] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 277.409602][ T9786] pim6reg1: entered allmulticast mode [ 277.638356][ T9805] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1543'. [ 281.107884][ T9889] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1579'. [ 281.233274][ T5396] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 281.276878][ T9895] syzkaller0: entered allmulticast mode [ 281.362835][ T9903] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1586'. [ 281.431263][ T9908] fuse: Unknown parameter 'group_id00000000000000000000' [ 281.480956][ T9914] syz.2.1589[9914] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 281.493298][ T5396] usb 6-1: Using ep0 maxpacket: 8 [ 281.504069][ T5396] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 281.506277][ T5396] usb 6-1: config 0 has no interface number 0 [ 281.507940][ T5396] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 281.510535][ T5396] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 281.512949][ T5396] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.516353][ T5396] usb 6-1: config 0 descriptor?? [ 281.518858][ T5396] iowarrior 6-1:0.1: no interrupt-in endpoint found [ 281.725232][ T1996] usb 6-1: USB disconnect, device number 17 [ 284.144380][ T9988] bpf_get_probe_write_proto: 2 callbacks suppressed [ 284.144402][ T9988] syz.0.1627[9988] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 284.147430][ T9988] syz.0.1627[9988] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 284.159617][ T9988] syz.0.1627[9988] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 286.261693][T10014] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1638'. [ 286.408876][T10030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1643'. [ 286.518218][T10040] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1648'. [ 286.622292][T10052] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1654'. [ 286.686114][T10059] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1657'. [ 286.722177][T10069] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1661'. [ 286.764918][T10073] 9pnet: p9_errstr2errno: server reported unknown error 1844674407 [ 286.823841][T10076] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1665'. [ 286.893447][T10085] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1668'. [ 286.919879][T10074] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1935764512 (15486116096 ns) > initial count (13340742528 ns). Using initial count to start timer. [ 286.958641][T10090] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1671'. [ 287.007021][T10097] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1674'. [ 287.042819][ T39] audit: type=1326 audit(1727793870.231:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10101 comm="syz.3.1677" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73ee579 code=0x0 [ 287.709221][T10119] : entered promiscuous mode [ 287.990842][T10134] batadv0: entered promiscuous mode [ 287.993070][T10134] batadv_slave_0: entered promiscuous mode [ 287.995843][T10134] batadv_slave_0: left promiscuous mode [ 287.997688][T10134] batadv0: left promiscuous mode [ 288.201202][T10155] netlink: zone id is out of range [ 288.202703][T10155] netlink: zone id is out of range [ 288.204222][T10155] netlink: zone id is out of range [ 288.206133][T10155] netlink: zone id is out of range [ 288.208015][T10155] netlink: zone id is out of range [ 288.209834][T10155] netlink: zone id is out of range [ 288.211153][T10155] netlink: zone id is out of range [ 288.212399][T10155] netlink: zone id is out of range [ 288.213907][T10155] netlink: zone id is out of range [ 288.215236][T10155] netlink: zone id is out of range [ 288.231551][T10150] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 288.243228][T10150] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 288.253513][T10150] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 288.255586][T10150] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 288.289780][T10150] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 288.292048][T10150] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 288.295672][T10150] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 288.298005][T10150] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 288.311561][T10150] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 288.313359][T10150] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 288.367000][T10150] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 288.369462][T10150] Bluetooth: hci8: Error when powering off device on rfkill (-4) [ 288.381269][T10150] Bluetooth: hci11: Opcode 0x0c1a failed: -4 [ 288.393185][T10150] Bluetooth: hci11: Error when powering off device on rfkill (-4) [ 288.397289][ T1996] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 288.402965][T10150] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 288.414933][T10150] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 288.553381][ T1996] usb 8-1: Using ep0 maxpacket: 8 [ 288.556235][ T1996] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 288.558379][ T1996] usb 8-1: config 0 has no interface number 0 [ 288.560244][ T1996] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 288.562578][ T1996] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 288.564815][ T1996] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.568898][ T1996] usb 8-1: config 0 descriptor?? [ 288.577997][ T1996] iowarrior 8-1:0.1: no interrupt-in endpoint found [ 288.638767][T10180] netlink: 'syz.0.1707': attribute type 20 has an invalid length. [ 288.782080][ T5963] usb 8-1: USB disconnect, device number 21 [ 290.283298][ T56] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 290.435481][ T56] usb 7-1: Using ep0 maxpacket: 8 [ 290.443735][ T56] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 290.446553][ T56] usb 7-1: config 0 has no interface number 0 [ 290.448682][ T56] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 290.452050][ T56] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 290.463792][ T56] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.474778][ T56] usb 7-1: config 0 descriptor?? [ 290.478480][ T56] iowarrior 7-1:0.1: no interrupt-in endpoint found [ 290.680313][ T5963] usb 7-1: USB disconnect, device number 8 [ 290.704554][T10251] fuse: Bad value for 'fd' [ 290.784558][ T56] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 290.933219][ T56] usb 8-1: Using ep0 maxpacket: 8 [ 290.936363][ T56] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 290.938915][ T56] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 290.944202][ T56] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 290.946688][ T56] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 290.950094][ T56] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 290.962636][ T56] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.168826][ T56] usb 8-1: GET_CAPABILITIES returned 0 [ 291.170346][ T56] usbtmc 8-1:16.0: can't read capabilities [ 291.317493][T10264] __nla_validate_parse: 14 callbacks suppressed [ 291.317506][T10264] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1740'. [ 291.374484][ T56] usb 8-1: USB disconnect, device number 22 [ 291.432875][T10272] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1744'. [ 291.782967][T10284] fuse: Invalid rootmode [ 291.955546][T10290] capability: warning: `syz.3.1752' uses deprecated v2 capabilities in a way that may be insecure [ 292.002438][T10292] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1753'. [ 292.005416][T10292] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1753'. [ 292.438344][T10319] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.442241][T10319] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.452319][T10319] bridge0: entered allmulticast mode [ 292.503534][ T39] audit: type=1326 audit(1727793875.521:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10311 comm="syz.1.1760" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744e579 code=0x7ffc0000 [ 292.520076][ T39] audit: type=1326 audit(1727793875.521:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10311 comm="syz.1.1760" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744e579 code=0x7ffc0000 [ 292.542821][ T39] audit: type=1326 audit(1727793875.521:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10311 comm="syz.1.1760" exe="/syz-executor" sig=0 arch=40000003 syscall=277 compat=1 ip=0xf744e579 code=0x7ffc0000 [ 292.570160][ T39] audit: type=1326 audit(1727793875.521:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10311 comm="syz.1.1760" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744e579 code=0x7ffc0000 [ 292.580616][ T39] audit: type=1326 audit(1727793875.521:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10311 comm="syz.1.1760" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744e579 code=0x7ffc0000 [ 292.618536][ T5354] Bluetooth: hci6: sending frame failed (-49) [ 292.620954][ T4781] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 292.625113][T10325] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.627147][T10325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.629614][T10325] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.632650][T10325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.653029][T10325] bridge0: entered promiscuous mode [ 293.110381][T10335] syzkaller0: entered allmulticast mode [ 293.659182][T10353] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1777'. [ 293.680000][T10353] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1777'. [ 293.689304][T10353] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.691923][T10353] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.500934][T10373] fuse: Bad value for 'rootmode' [ 294.540032][T10375] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1784'. [ 296.222385][T10396] fuse: Bad value for 'rootmode' [ 296.603730][T10407] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1798'. [ 296.743349][ T56] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 296.894154][ T56] usb 6-1: Using ep0 maxpacket: 8 [ 296.897726][ T56] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 296.900549][ T56] usb 6-1: config 0 has no interface number 0 [ 296.902648][ T56] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 296.917115][ T56] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 296.919708][ T56] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.926945][T10419] fuse: Bad value for 'rootmode' [ 296.927657][ T56] usb 6-1: config 0 descriptor?? [ 296.960886][ T56] iowarrior 6-1:0.1: no interrupt-in endpoint found [ 297.065941][T10425] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1805'. [ 297.139093][ T56] usb 6-1: USB disconnect, device number 18 [ 297.720224][T10441] fuse: Unknown parameter 'use00000000000000000000' [ 298.559790][T10466] random: crng reseeded on system resumption [ 298.688139][T10465] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 298.704556][T10465] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 298.714436][T10465] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 299.095697][T10473] netlink: 'syz.2.1824': attribute type 12 has an invalid length. [ 299.197638][T10477] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1827'. [ 299.446356][T10483] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1826'. [ 300.164798][T10496] netlink: 'syz.2.1834': attribute type 12 has an invalid length. [ 301.268639][T10512] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1840'. [ 301.381836][T10517] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1838'. [ 301.657905][T10526] fuse: Unknown parameter 'user_i00000000000000000000' [ 301.720286][T10528] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1847'. [ 301.817236][T10531] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1848'. [ 301.984079][T10537] netlink: 'syz.1.1850': attribute type 20 has an invalid length. [ 302.130676][T10551] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1857'. [ 302.171845][T10553] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1858'. [ 302.284058][ T56] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 302.453324][ T56] usb 6-1: Using ep0 maxpacket: 8 [ 302.455999][ T56] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 302.458364][ T56] usb 6-1: config 0 has no interface number 0 [ 302.460334][ T56] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 302.462799][ T56] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 302.465739][ T56] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.472338][ T56] usb 6-1: config 0 descriptor?? [ 302.478175][ T56] iowarrior 6-1:0.1: no interrupt-in endpoint found [ 302.682553][ T56] usb 6-1: USB disconnect, device number 19 [ 302.684397][T10564] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1861'. [ 302.817376][T10567] netlink: 'syz.0.1862': attribute type 20 has an invalid length. [ 302.865398][T10569] netlink: 'syz.0.1863': attribute type 12 has an invalid length. [ 303.045044][T10581] netlink: 108 bytes leftover after parsing attributes in process `syz.0.1869'. [ 303.172520][T10585] netlink: 'syz.0.1871': attribute type 20 has an invalid length. [ 303.202319][T10587] netlink: 'syz.0.1872': attribute type 12 has an invalid length. [ 303.818415][T10628] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1892'. [ 303.893556][ T56] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 303.951063][T10640] random: crng reseeded on system resumption [ 304.043232][ T56] usb 7-1: Using ep0 maxpacket: 8 [ 304.045786][ T56] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 304.047828][ T56] usb 7-1: config 0 has no interface number 0 [ 304.049389][ T56] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 304.052206][ T56] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 304.055045][ T56] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 304.057248][ T56] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.062978][ T56] usb 7-1: config 0 descriptor?? [ 304.069160][ T56] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 304.163093][T10654] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1903'. [ 304.201943][T10658] capability: warning: `syz.3.1905' uses 32-bit capabilities (legacy support in use) [ 304.205940][T10658] ucma_write: process 354 (syz.3.1905) changed security contexts after opening file descriptor, this is not allowed. [ 304.267980][T10615] iowarrior 7-1:0.1: Error -90 while submitting URB [ 304.270558][T10615] iowarrior 7-1:0.1: Error -90 while submitting URB [ 304.272956][ T56] usb 7-1: USB disconnect, device number 9 [ 304.276071][ T56] iowarrior 7-1:0.1: I/O-Warror #0 now disconnected [ 305.973359][ T5528] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 306.123314][ T5528] usb 7-1: Using ep0 maxpacket: 8 [ 306.131744][ T5528] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 306.140494][ T5528] usb 7-1: config 0 has no interface number 0 [ 306.142721][ T5528] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 306.147398][ T5528] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 306.150845][ T5528] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 306.154034][ T5528] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.157952][ T5528] usb 7-1: config 0 descriptor?? [ 306.167444][ T5528] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 306.366290][T10697] iowarrior 7-1:0.1: Error -90 while submitting URB [ 306.371144][T10697] iowarrior 7-1:0.1: Error -90 while submitting URB [ 306.382556][ T5528] usb 7-1: USB disconnect, device number 10 [ 306.388782][ T5528] iowarrior 7-1:0.1: I/O-Warror #0 now disconnected [ 306.405014][T10706] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1925'. [ 306.596451][T10711] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1927'. [ 306.624456][T10713] netlink: 'syz.0.1928': attribute type 12 has an invalid length. [ 307.860814][T10743] fuse: Bad value for 'fd' [ 307.893424][ T4568] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 308.062391][ T4568] usb 5-1: Using ep0 maxpacket: 8 [ 308.065761][ T4568] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 308.068600][ T4568] usb 5-1: config 0 has no interface number 0 [ 308.070770][ T4568] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 308.074720][ T4568] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 308.078017][ T4568] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 308.081083][ T4568] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.085556][ T4568] usb 5-1: config 0 descriptor?? [ 308.098590][ T4568] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 308.289940][T10736] iowarrior 5-1:0.1: Error -90 while submitting URB [ 308.294971][T10736] iowarrior 5-1:0.1: Error -90 while submitting URB [ 308.305138][ T5528] usb 5-1: USB disconnect, device number 6 [ 308.309850][ T5528] iowarrior 5-1:0.1: I/O-Warror #0 now disconnected [ 308.726926][T10768] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1950'. [ 308.734063][T10768] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1950'. [ 309.166514][ T39] audit: type=1326 audit(1727793892.361:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10794 comm="syz.0.1962" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27579 code=0x7ffc0000 [ 309.183261][ T39] audit: type=1326 audit(1727793892.361:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10794 comm="syz.0.1962" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27579 code=0x7ffc0000 [ 309.191079][ T39] audit: type=1326 audit(1727793892.361:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10794 comm="syz.0.1962" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f27579 code=0x7ffc0000 [ 309.213192][ T39] audit: type=1326 audit(1727793892.361:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10794 comm="syz.0.1962" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f27579 code=0x7ffc0000 [ 309.218690][ T39] audit: type=1326 audit(1727793892.361:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10794 comm="syz.0.1962" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27579 code=0x7ffc0000 [ 309.229608][ T39] audit: type=1326 audit(1727793892.361:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10794 comm="syz.0.1962" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27579 code=0x7ffc0000 [ 309.235622][ T39] audit: type=1326 audit(1727793892.361:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10794 comm="syz.0.1962" exe="/syz-executor" sig=0 arch=40000003 syscall=133 compat=1 ip=0xf7f27579 code=0x7ffc0000 [ 309.241174][ T39] audit: type=1326 audit(1727793892.361:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10794 comm="syz.0.1962" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27579 code=0x7ffc0000 [ 309.247350][ T39] audit: type=1326 audit(1727793892.361:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10794 comm="syz.0.1962" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf7f27579 code=0x7ffc0000 [ 309.253245][ T39] audit: type=1326 audit(1727793892.361:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10794 comm="syz.0.1962" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27579 code=0x7ffc0000 [ 309.347727][T10803] libceph: resolve '. [ 309.347727][T10803] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 309.347727][T10803] ' (ret=-3): failed [ 309.440777][T10811] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 309.446521][T10811] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 309.451213][T10811] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1963'. [ 311.535402][T10889] random: crng reseeded on system resumption [ 311.785915][T10902] net_ratelimit: 22 callbacks suppressed [ 311.785929][T10902] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 311.913651][T10904] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2008'. [ 311.919677][T10904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2008'. [ 311.943412][T10904] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.946265][T10904] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.281980][T10913] syzkaller0: entered allmulticast mode [ 312.410505][T10925] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2019'. [ 312.785688][T10947] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2026'. [ 312.788756][T10947] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2026'. [ 312.791626][T10947] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.793645][T10947] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.795550][T10947] bridge0: left allmulticast mode [ 313.334907][T10957] netlink: 191416 bytes leftover after parsing attributes in process `syz.3.2032'. [ 313.383433][ T979] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 313.535902][ T979] usb 7-1: Using ep0 maxpacket: 8 [ 313.539719][ T979] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 313.542665][ T979] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 313.553942][ T979] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 313.557043][ T979] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 313.560925][ T979] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 313.565011][ T979] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.772735][ T979] usb 7-1: GET_CAPABILITIES returned 0 [ 313.780078][ T979] usbtmc 7-1:16.0: can't read capabilities [ 313.781097][T10982] random: crng reseeded on system resumption [ 313.973835][ T979] usb 7-1: USB disconnect, device number 11 [ 314.080300][T10991] overlayfs: failed to resolve './file1': -2 [ 314.318193][T11003] fuse: Unknown parameter '0x0000000000000004' [ 314.378918][T11009] overlayfs: failed to resolve './file1': -2 [ 314.381509][T11008] syzkaller0: entered allmulticast mode [ 314.728732][T11031] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2064'. [ 314.732046][T11031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2064'. [ 314.738123][T11031] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.740156][T11031] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.797833][T11033] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2067'. [ 314.958260][T11037] netlink: 191416 bytes leftover after parsing attributes in process `syz.0.2069'. [ 315.205327][T11053] fuse: Unknown parameter 'fd0x0000000000000004' [ 315.270794][T11057] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2079'. [ 315.292555][T11059] netlink: 191416 bytes leftover after parsing attributes in process `syz.3.2080'. [ 315.348440][T11068] overlayfs: failed to resolve './file0': -2 [ 315.458668][T11072] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2086'. [ 315.482122][T11075] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2083'. [ 315.552200][T11082] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2090'. [ 315.966827][T11095] overlayfs: failed to resolve './file0': -2 [ 316.473699][T11102] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2098'. [ 316.688898][T11118] overlayfs: failed to resolve './file0': -2 [ 316.747201][ T1375] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.853554][ T979] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 316.993415][ T979] usb 8-1: device descriptor read/64, error -71 [ 317.243307][ T979] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 317.373546][ T979] usb 8-1: device descriptor read/64, error -71 [ 317.483465][ T979] usb usb8-port1: attempt power cycle [ 317.833707][ T979] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 317.853910][ T979] usb 8-1: device descriptor read/8, error -71 [ 318.105989][ T979] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 318.153883][ T979] usb 8-1: device descriptor read/8, error -71 [ 318.264481][ T979] usb usb8-port1: unable to enumerate USB device [ 318.437098][T11167] netlink: 'syz.0.2128': attribute type 12 has an invalid length. [ 318.441924][T11167] netlink: 'syz.0.2128': attribute type 11 has an invalid length. [ 318.489853][T11173] syzkaller0: entered allmulticast mode [ 320.387284][T11277] __nla_validate_parse: 12 callbacks suppressed [ 320.387297][T11277] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2175'. [ 320.473244][ T1297] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 320.613693][ T1297] usb 7-1: device descriptor read/64, error -71 [ 320.863335][ T1297] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 320.907739][T11282] random: crng reseeded on system resumption [ 321.003262][ T1297] usb 7-1: device descriptor read/64, error -71 [ 321.123441][ T1297] usb usb7-port1: attempt power cycle [ 321.386860][T11299] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2184'. [ 321.463255][ T1297] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 321.484200][ T1297] usb 7-1: device descriptor read/8, error -71 [ 321.723260][ T1297] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 321.757612][ T1297] usb 7-1: device descriptor read/8, error -71 [ 321.867851][ T1297] usb usb7-port1: unable to enumerate USB device [ 322.721649][T11329] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2196'. [ 324.424577][T11376] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2216'. [ 324.601797][T11390] dvmrp5: entered allmulticast mode [ 325.615659][T11420] overlayfs: missing 'lowerdir' [ 325.751888][T11432] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2242'. [ 326.733407][T11457] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 327.277353][T11486] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2262'. [ 327.281301][T11486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2262'. [ 327.481194][T11489] netlink: 'syz.2.2263': attribute type 21 has an invalid length. [ 327.486794][T11489] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2263'. [ 327.494852][T11489] netlink: 'syz.2.2263': attribute type 4 has an invalid length. [ 327.497532][T11489] netlink: 'syz.2.2263': attribute type 5 has an invalid length. [ 327.500032][T11489] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2263'. [ 327.724797][T11498] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2267'. [ 327.781792][T11502] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2269'. [ 327.948932][T11521] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2277'. [ 327.959008][T11524] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2279'. [ 328.203593][T11547] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2289'. [ 330.528608][T11683] overlayfs: missing 'lowerdir' [ 330.813421][ T4568] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 330.980360][ T4568] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 330.982728][ T4568] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 330.985735][ T4568] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 330.988108][ T4568] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 330.991007][ T4568] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 331.000406][ T4568] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 331.002790][ T4568] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 331.005313][ T4568] usb 5-1: Product: syz [ 331.006471][ T4568] usb 5-1: Manufacturer: syz [ 331.014236][ T4568] cdc_wdm 5-1:1.0: skipping garbage [ 331.023252][ T4568] cdc_wdm 5-1:1.0: skipping garbage [ 331.025799][ T4568] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 331.027877][ T4568] cdc_wdm 5-1:1.0: Unknown control protocol [ 331.269938][T11695] tap0: tun_chr_ioctl cmd 1074025678 [ 331.271576][T11695] tap0: group set to 0 [ 331.380301][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 331.380472][ T4568] usb 5-1: USB disconnect, device number 7 [ 331.382145][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 331.385692][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 331.391574][T11689] cdc_wdm 5-1:1.0: Tx URB error: -19 [ 331.472585][T11699] __nla_validate_parse: 3 callbacks suppressed [ 331.472597][T11699] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2340'. [ 331.479656][T11699] MTD: Couldn't look up './file0': -15 [ 332.625720][T11724] mkiss: ax0: crc mode is auto. [ 333.527916][T11741] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2355'. [ 334.716128][T11774] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 334.718660][T11774] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 334.723068][T11774] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 334.756778][T11776] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2365'. [ 335.954125][T11797] netfs: Couldn't get user pages (rc=-14) [ 336.183984][T11801] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2375'. [ 336.964311][T11836] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2386'. [ 337.249876][ T1101] bridge_slave_1: left allmulticast mode [ 337.251464][ T1101] bridge_slave_1: left promiscuous mode [ 337.253060][ T1101] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.257292][ T1101] bridge_slave_0: left allmulticast mode [ 337.258872][ T1101] bridge_slave_0: left promiscuous mode [ 337.260451][ T1101] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.280273][T11847] Bluetooth: MGMT ver 1.23 [ 337.785897][ T1101] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 337.790751][ T1101] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 337.795267][ T1101] bond0 (unregistering): Released all slaves [ 337.803912][ T1101] bond1 (unregistering): Released all slaves [ 337.888665][T11859] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2397'. [ 338.088944][ T1101] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 338.091661][ T1101] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 338.100074][ T1101] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 338.103810][ T1101] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 338.148875][ T1101] veth1_macvtap: left promiscuous mode [ 338.150566][ T1101] veth0_macvtap: left promiscuous mode [ 338.152549][ T1101] veth1_vlan: left promiscuous mode [ 338.154455][ T1101] veth0_vlan: left promiscuous mode [ 338.243379][ T5417] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 338.416262][ T5417] usb 8-1: Using ep0 maxpacket: 8 [ 338.418857][ T5417] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 338.421595][ T5417] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 338.428809][ T5417] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 338.431683][ T5417] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 338.435389][ T5417] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 338.438315][ T5417] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.449103][ T5417] hub 8-1:1.0: bad descriptor, ignoring hub [ 338.459490][ T5417] hub 8-1:1.0: probe with driver hub failed with error -5 [ 338.461570][ T5417] cdc_wdm 8-1:1.0: skipping garbage [ 338.462955][ T5417] cdc_wdm 8-1:1.0: skipping garbage [ 338.465426][ T5417] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 338.466998][ T5417] cdc_wdm 8-1:1.0: Unknown control protocol [ 338.931683][ T5963] usb 8-1: USB disconnect, device number 27 [ 339.308491][ T1101] team0 (unregistering): Port device team_slave_1 removed [ 339.429369][ T1101] team0 (unregistering): Port device team_slave_0 removed [ 339.862454][T11890] overlayfs: missing 'lowerdir' [ 343.873665][T11978] netfs: Couldn't get user pages (rc=-14) [ 344.072195][T11982] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2445'. [ 344.079122][T11982] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2445'. [ 344.739077][T11990] overlayfs: missing 'workdir' [ 345.935869][T12011] overlayfs: missing 'workdir' [ 346.038384][T12020] netfs: Couldn't get user pages (rc=-14) [ 346.144585][T12029] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2459'. [ 346.147876][T12029] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2459'. [ 346.169311][T12031] overlayfs: missing 'workdir' [ 347.645196][T12071] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2480'. [ 347.653846][T12071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2480'. [ 347.855990][ T39] kauditd_printk_skb: 15 callbacks suppressed [ 347.856009][ T39] audit: type=1326 audit(1727793931.051:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12077 comm="syz.2.2483" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 347.869066][ T39] audit: type=1326 audit(1727793931.061:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12077 comm="syz.2.2483" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 347.876117][ T39] audit: type=1326 audit(1727793931.061:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12077 comm="syz.2.2483" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 347.882613][ T39] audit: type=1326 audit(1727793931.061:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12077 comm="syz.2.2483" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 347.888870][ T39] audit: type=1326 audit(1727793931.061:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12077 comm="syz.2.2483" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 347.911162][ T39] audit: type=1326 audit(1727793931.061:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12077 comm="syz.2.2483" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 347.924115][ T39] audit: type=1326 audit(1727793931.071:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12077 comm="syz.2.2483" exe="/syz-executor" sig=0 arch=40000003 syscall=133 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 347.932540][ T39] audit: type=1326 audit(1727793931.071:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12077 comm="syz.2.2483" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 347.947317][ T39] audit: type=1326 audit(1727793931.071:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12077 comm="syz.2.2483" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 347.953714][ T39] audit: type=1326 audit(1727793931.071:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12077 comm="syz.2.2483" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf748e579 code=0x7ffc0000 [ 348.404205][ T1996] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 348.563278][ T1996] usb 7-1: Using ep0 maxpacket: 8 [ 348.572386][ T1996] usb 7-1: config index 0 descriptor too short (expected 260, got 27) [ 348.578325][ T1996] usb 7-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 348.593350][ T1996] usb 7-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 348.601184][ T1996] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 348.609772][ T1996] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.834031][ T1996] usb 7-1: string descriptor 0 read error: -71 [ 348.846867][ T1996] usb 7-1: USB disconnect, device number 16 [ 349.571094][T12116] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2497'. [ 349.586268][T12117] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2496'. [ 349.589132][T12117] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2496'. [ 350.029596][T12140] netlink: 'syz.3.2507': attribute type 1 has an invalid length. [ 350.061312][T12142] netlink: zone id is out of range [ 350.062695][T12142] netlink: zone id is out of range [ 350.068625][T12142] netlink: zone id is out of range [ 350.070586][T12142] netlink: zone id is out of range [ 350.083989][T12142] netlink: set zone limit has 4 unknown bytes [ 350.094671][T12143] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2507'. [ 350.184215][ T1996] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 350.343316][ T1996] usb 6-1: Using ep0 maxpacket: 8 [ 350.346128][ T1996] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 350.355752][ T1996] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 350.362746][ T1996] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.376620][T12163] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2514'. [ 351.391629][T12163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2514'. [ 352.904828][ T1297] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 352.942262][ T5414] usb 6-1: USB disconnect, device number 20 [ 352.966038][T12221] Error parsing options; rc = [-22] [ 353.054608][ T1297] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 353.057110][ T1297] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 353.059899][ T1297] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 353.062342][ T1297] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 353.065497][ T1297] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 353.070583][ T1297] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 353.072939][ T1297] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 353.075108][ T1297] usb 8-1: Product: syz [ 353.076209][ T1297] usb 8-1: Manufacturer: syz [ 353.088947][ T1297] cdc_wdm 8-1:1.0: skipping garbage [ 353.090371][ T1297] cdc_wdm 8-1:1.0: skipping garbage [ 353.092185][ T1297] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 353.094192][ T1297] cdc_wdm 8-1:1.0: Unknown control protocol [ 353.232685][T12244] netem: unknown loss type 0 [ 353.346624][T12251] tap0: tun_chr_ioctl cmd 1074025678 [ 353.348536][T12251] tap0: group set to 0 [ 353.507440][T12257] libceph: resolve '. [ 353.507440][T12257] #)|.fǝa2sow?'%ЏKAqfCzeSb3L)HyoǤYMhE$ [ 353.507440][T12257] ' (ret=-3): failed [ 353.582809][T12258] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 353.585839][T12258] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 353.604441][T12257] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2533'. [ 353.608725][T12257] Restarting kernel threads ... done. [ 354.109070][T12266] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2537'. [ 354.149851][T12268] netfs: Couldn't get user pages (rc=-14) [ 354.653409][ T5414] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 354.823550][ T5414] usb 6-1: Using ep0 maxpacket: 8 [ 354.827218][ T5414] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 354.829853][ T5414] usb 6-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 354.834228][ T5414] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 354.836604][ T5414] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.846852][ T5414] usbtmc 6-1:16.0: bulk endpoints not found [ 355.419243][T12287] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2547'. [ 355.446797][T12288] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0002 with DS=0x7 [ 355.733853][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 355.734276][ T5395] usb 8-1: USB disconnect, device number 28 [ 355.736148][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 355.739879][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 356.403618][T12307] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2556'. [ 356.572326][T12278] syz.0.2543 (12278) used greatest stack depth: 19552 bytes left [ 356.676382][T12315] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2561'. [ 356.859092][T12321] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2564'. [ 357.353327][ T5417] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 357.363322][ T64] usb 6-1: USB disconnect, device number 21 [ 357.524352][ T5417] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 357.526622][ T5417] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 357.529254][ T5417] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 357.531567][ T5417] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 357.543519][ T5417] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 357.553105][ T5417] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 357.555877][ T5417] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 357.558043][ T5417] usb 5-1: Product: syz [ 357.559142][ T5417] usb 5-1: Manufacturer: syz [ 357.564596][ T5417] cdc_wdm 5-1:1.0: skipping garbage [ 357.565998][ T5417] cdc_wdm 5-1:1.0: skipping garbage [ 357.578849][ T5417] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 357.582042][ T5417] cdc_wdm 5-1:1.0: Unknown control protocol [ 357.620070][T12338] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2569'. [ 357.710875][T12340] netfs: Couldn't get user pages (rc=-14) [ 357.927080][T12341] virtio-fs: tag <(null)> not found [ 357.930754][T12344] tap0: tun_chr_ioctl cmd 1074025678 [ 357.932764][T12344] tap0: group set to 0 [ 358.614897][T12350] 9pnet_virtio: no channels available for device syz [ 359.200958][T12343] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x2cf pfn:0x6dde8 [ 359.204130][T12343] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 359.213297][T12343] raw: 04fff00000000000 ffffea0001b2de48 ffffea0001a40508 0000000000000000 [ 359.216617][T12343] raw: 00000000000002cf 0000000000000000 00000000ffffffff 0000000000000000 [ 359.219572][T12343] page dumped because: VM_BUG_ON_FOLIO(((unsigned int) folio_ref_count(folio) + 127u <= 127u)) [ 359.225465][T12343] page_owner tracks the page as freed [ 359.233390][T12343] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 10462, tgid 10462 (syz.2.1822), ts 298440300781, free_ts 359188555720 [ 359.243495][T12343] post_alloc_hook+0x2d1/0x350 [ 359.250687][T12343] get_page_from_freelist+0x101e/0x3070 [ 359.263229][T12343] __alloc_pages_noprof+0x223/0x25c0 [ 359.271616][T12343] alloc_pages_mpol_noprof+0x2c9/0x610 [ 359.276312][T12343] folio_alloc_mpol_noprof+0x36/0xd0 [ 359.280324][T12343] __read_swap_cache_async+0x50a/0x660 [ 359.282714][T12343] swap_cluster_readahead+0x4a9/0x6e0 [ 359.285010][T12343] swapin_readahead+0x12e/0xd20 [ 359.286878][T12343] do_swap_page+0x61a/0x59b0 [ 359.288535][T12343] __handle_mm_fault+0x1023/0x2a10 [ 359.290380][T12343] handle_mm_fault+0x3fa/0xaa0 [ 359.296964][T12343] do_user_addr_fault+0x60d/0x13f0 [ 359.298885][T12343] exc_page_fault+0x5c/0xc0 [ 359.300567][T12343] asm_exc_page_fault+0x26/0x30 [ 359.308180][T12343] page last free pid 114 tgid 114 stack trace: [ 359.309974][T12343] free_unref_folios+0x956/0x1310 [ 359.311378][T12343] shrink_folio_list+0x3468/0x42d0 [ 359.318591][T12343] evict_folios+0x6d6/0x1970 [ 359.319920][T12343] try_to_shrink_lruvec+0x612/0x9b0 [ 359.321394][T12343] shrink_one+0x3e3/0x7b0 [ 359.327433][T12343] shrink_node+0x2452/0x39d0 [ 359.329081][T12343] balance_pgdat+0xc19/0x18f0 [ 359.330746][T12343] kswapd+0x5ea/0xbf0 [ 359.332141][T12343] kthread+0x2c1/0x3a0 [ 359.340837][T12343] ret_from_fork+0x45/0x80 [ 359.342461][T12343] ret_from_fork_asm+0x1a/0x30 [ 359.351718][T12343] ------------[ cut here ]------------ [ 359.353781][T12343] kernel BUG at include/linux/mm.h:1444! [ 359.357186][T12343] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 359.361651][T12343] CPU: 1 UID: 0 PID: 12343 Comm: syz.1.2570 Not tainted 6.12.0-rc1-syzkaller-00031-ge32cde8d2bd7 #0 [ 359.365468][T12343] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 359.369136][T12343] RIP: 0010:__iov_iter_get_pages_alloc+0x1d10/0x2230 [ 359.371438][T12343] Code: b0 8b 48 89 df e8 f0 23 4b fd 90 0f 0b 49 89 c5 e9 99 f6 ff ff e8 40 75 05 fd 48 c7 c6 a0 c6 b0 8b 4c 89 e7 e8 d1 23 4b fd 90 <0f> 0b e8 29 75 05 fd 4c 8b 64 24 48 49 83 ec 01 e9 94 fd ff ff 4c [ 359.378020][T12343] RSP: 0018:ffffc900044a6be8 EFLAGS: 00010246 [ 359.380215][T12343] RAX: 0000000000040000 RBX: 0000000000000000 RCX: ffffc9003ba04000 [ 359.382996][T12343] RDX: 0000000000040000 RSI: ffffffff84873a3f RDI: ffff88807787a884 [ 359.385490][T12343] RBP: ffffea0001b77a34 R08: 0000000000000001 R09: fffffbfff2d315c7 [ 359.388192][T12343] R10: ffffffff9698ae3f R11: ffff88802b528a40 R12: ffffea0001b77a00 [ 359.390946][T12343] R13: ffff888000dfb800 R14: 0000000000001000 R15: 0000000000001000 [ 359.393639][T12343] FS: 0000000000000000(0000) GS:ffff88802b500000(0063) knlGS:00000000f5715b40 [ 359.396834][T12343] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 359.399085][T12343] CR2: 0000000020042000 CR3: 00000000541ba000 CR4: 0000000000352ef0 [ 359.401771][T12343] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 359.404450][T12343] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 359.407184][T12343] Call Trace: [ 359.408335][T12343] [ 359.409457][T12343] ? die+0x31/0x80 [ 359.410798][T12343] ? do_trap+0x232/0x430 [ 359.412319][T12343] ? __iov_iter_get_pages_alloc+0x1d10/0x2230 [ 359.414388][T12343] ? __iov_iter_get_pages_alloc+0x1d10/0x2230 [ 359.416449][T12343] ? do_error_trap+0xf4/0x230 [ 359.418088][T12343] ? __iov_iter_get_pages_alloc+0x1d10/0x2230 [ 359.420144][T12343] ? handle_invalid_op+0x34/0x40 [ 359.421832][T12343] ? __iov_iter_get_pages_alloc+0x1d10/0x2230 [ 359.423878][T12343] ? exc_invalid_op+0x2e/0x50 [ 359.425505][T12343] ? asm_exc_invalid_op+0x1a/0x20 [ 359.427327][T12343] ? __iov_iter_get_pages_alloc+0x1d0f/0x2230 [ 359.429510][T12343] ? __iov_iter_get_pages_alloc+0x1d10/0x2230 [ 359.431571][T12343] ? __iov_iter_get_pages_alloc+0x1d0f/0x2230 [ 359.433633][T12343] ? __pfx___iov_iter_get_pages_alloc+0x10/0x10 [ 359.435644][T12343] ? delete_node+0x207/0x8e0 [ 359.437231][T12343] iov_iter_get_pages_alloc2+0x53/0xf0 [ 359.438705][T12343] p9_get_mapped_pages.part.0.constprop.0+0x4ca/0x7d0 [ 359.440828][T12343] ? p9pdu_vwritef+0x368/0x21d0 [ 359.442550][T12343] ? __pfx_p9_get_mapped_pages.part.0.constprop.0+0x10/0x10 [ 359.444964][T12343] ? __pfx_p9pdu_vwritef+0x10/0x10 [ 359.446710][T12343] ? __pfx_p9pdu_vwritef+0x10/0x10 [ 359.448443][T12343] ? p9_tag_alloc+0x4cc/0x870 [ 359.449980][T12343] ? reacquire_held_locks+0x464/0x4c0 [ 359.451877][T12343] p9_virtio_zc_request+0x991/0x1460 [ 359.453635][T12343] ? p9pdu_writef+0xc4/0x100 [ 359.455270][T12343] ? __pfx_p9pdu_writef+0x10/0x10 [ 359.456925][T12343] ? __pfx_p9pdu_vwritef+0x10/0x10 [ 359.458711][T12343] ? __pfx_p9_virtio_zc_request+0x10/0x10 [ 359.460810][T12343] ? rcu_is_watching+0x12/0xc0 [ 359.462540][T12343] ? trace_9p_protocol_dump+0x192/0x220 [ 359.464475][T12343] ? rcu_is_watching+0x12/0xc0 [ 359.466155][T12343] ? p9_client_prepare_req+0x111/0x4d0 [ 359.468055][T12343] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 359.470069][T12343] ? mark_lock+0xb5/0xc60 [ 359.471574][T12343] p9_client_zc_rpc.constprop.0+0x29a/0x880 [ 359.473683][T12343] ? __pfx_p9_client_zc_rpc.constprop.0+0x10/0x10 [ 359.475888][T12343] ? hlock_class+0x4e/0x130 [ 359.477510][T12343] ? __lock_acquire+0x163e/0x3ce0 [ 359.479268][T12343] ? __pfx_p9_virtio_zc_request+0x10/0x10 [ 359.481258][T12343] p9_client_read_once+0x443/0x820 [ 359.483063][T12343] ? __pfx_p9_client_read_once+0x10/0x10 [ 359.484942][T12343] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 359.486944][T12343] ? lockdep_hardirqs_on+0x7c/0x110 [ 359.488735][T12343] p9_client_read+0x13f/0x1b0 [ 359.490470][T12343] v9fs_issue_read+0x115/0x310 [ 359.492156][T12343] ? __pfx_v9fs_issue_read+0x10/0x10 [ 359.493999][T12343] ? __local_bh_enable_ip+0xa4/0x120 [ 359.495804][T12343] netfs_read_to_pagecache+0x5c9/0x9a0 [ 359.497683][T12343] netfs_readahead+0x7fa/0xaa0 [ 359.499317][T12343] ? __pfx_netfs_readahead+0x10/0x10 [ 359.501115][T12343] read_pages+0x1a8/0xd80 [ 359.502616][T12343] ? __folio_batch_add_and_move+0x689/0xc60 [ 359.504643][T12343] ? __folio_batch_add_and_move+0x612/0xc60 [ 359.506725][T12343] ? __pfx_read_pages+0x10/0x10 [ 359.508391][T12343] ? mark_lock+0xb5/0xc60 [ 359.509869][T12343] page_cache_ra_unbounded+0x3c0/0x6c0 [ 359.511681][T12343] page_cache_ra_order+0x7d9/0xc90 [ 359.513396][T12343] filemap_fault+0x148d/0x2820 [ 359.515053][T12343] ? __pfx_filemap_fault+0x10/0x10 [ 359.516839][T12343] ? lock_acquire+0x2f/0xb0 [ 359.518468][T12343] ? __pte_offset_map+0x42/0x540 [ 359.520232][T12343] ? __pfx_filemap_map_pages+0x10/0x10 [ 359.522238][T12343] __do_fault+0x10a/0x490 [ 359.523782][T12343] ? __pfx_filemap_map_pages+0x10/0x10 [ 359.525693][T12343] do_pte_missing+0x1a8/0x3e50 [ 359.527412][T12343] __handle_mm_fault+0x100a/0x2a10 [ 359.529246][T12343] ? __pfx_mt_find+0x10/0x10 [ 359.530886][T12343] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 359.532876][T12343] ? __pfx___handle_mm_fault+0x10/0x10 [ 359.534802][T12343] ? find_vma+0xc0/0x140 [ 359.536382][T12343] ? __pfx_find_vma+0x10/0x10 [ 359.538068][T12343] handle_mm_fault+0x3fa/0xaa0 [ 359.539759][T12343] do_user_addr_fault+0x7a3/0x13f0 [ 359.541589][T12343] exc_page_fault+0x5c/0xc0 [ 359.543240][T12343] asm_exc_page_fault+0x26/0x30 [ 359.544974][T12343] RIP: 0010:_copy_to_user+0xa7/0xc0 [ 359.546779][T12343] Code: 89 ee 48 89 ef e8 39 1f 04 fd 4d 85 f6 75 b5 e8 7f 1d 04 fd 89 de 4c 89 e7 e8 a5 6d 65 fd 0f 01 cb 48 89 d9 48 89 ef 4c 89 e6 a4 0f 1f 00 0f 01 ca 48 89 cb eb 8d 66 66 2e 0f 1f 84 00 00 00 [ 359.553334][T12343] RSP: 0018:ffffc900044a7c40 EFLAGS: 00050246 [ 359.555429][T12343] RAX: 0000000000000001 RBX: 0000000000000008 RCX: 0000000000000008 [ 359.558241][T12343] RDX: fffff52000894f96 RSI: ffffc900044a7ca8 RDI: 0000000020042000 [ 359.560991][T12343] RBP: 0000000020042000 R08: 0000000000000000 R09: fffff52000894f95 [ 359.563722][T12343] R10: ffffc900044a7caf R11: 0000000000000000 R12: ffffc900044a7ca8 [ 359.566486][T12343] R13: 0000000020042008 R14: 0000000000000000 R15: 0000000020032680 [ 359.569240][T12343] msr_read+0x14f/0x250 [ 359.570690][T12343] ? __pfx_msr_read+0x10/0x10 [ 359.572414][T12343] ? bpf_lsm_file_permission+0x9/0x10 [ 359.574237][T12343] ? security_file_permission+0x71/0x210 [ 359.575759][T12343] ? __pfx_msr_read+0x10/0x10 [ 359.577148][T12343] vfs_read+0x1ce/0xbd0 [ 359.578410][T12343] ? __fget_files+0x23a/0x3f0 [ 359.579701][T12343] ? __pfx_lock_release+0x10/0x10 [ 359.581235][T12343] ? trace_lock_acquire+0x14a/0x1d0 [ 359.583102][T12343] ? __pfx_vfs_read+0x10/0x10 [ 359.584751][T12343] ? lock_acquire+0x2f/0xb0 [ 359.586387][T12343] ? __fget_files+0x40/0x3f0 [ 359.588012][T12343] ? __fget_files+0x244/0x3f0 [ 359.589688][T12343] ksys_read+0x12f/0x260 [ 359.591198][T12343] ? __pfx_ksys_read+0x10/0x10 [ 359.592859][T12343] __do_fast_syscall_32+0x73/0x120 [ 359.594665][T12343] do_fast_syscall_32+0x32/0x80 [ 359.596407][T12343] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 359.598810][T12343] RIP: 0023:0xf744e579 [ 359.600211][T12343] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 359.606834][T12343] RSP: 002b:00000000f571556c EFLAGS: 00000296 ORIG_RAX: 0000000000000003 [ 359.609693][T12343] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 0000000020032680 [ 359.612353][T12343] RDX: 0000000000019000 RSI: 0000000000000000 RDI: 0000000000000000 [ 359.615146][T12343] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 359.617876][T12343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 359.620579][T12343] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 359.623257][T12343] [ 359.624354][T12343] Modules linked in: [ 359.626048][T12343] ---[ end trace 0000000000000000 ]--- [ 359.706768][T12343] RIP: 0010:__iov_iter_get_pages_alloc+0x1d10/0x2230 [ 359.715520][T12343] Code: b0 8b 48 89 df e8 f0 23 4b fd 90 0f 0b 49 89 c5 e9 99 f6 ff ff e8 40 75 05 fd 48 c7 c6 a0 c6 b0 8b 4c 89 e7 e8 d1 23 4b fd 90 <0f> 0b e8 29 75 05 fd 4c 8b 64 24 48 49 83 ec 01 e9 94 fd ff ff 4c [ 359.742966][T12343] RSP: 0018:ffffc900044a6be8 EFLAGS: 00010246 [ 359.777591][T12343] RAX: 0000000000040000 RBX: 0000000000000000 RCX: ffffc9003ba04000 [ 359.780325][T12343] RDX: 0000000000040000 RSI: ffffffff84873a3f RDI: ffff88807787a884 [ 359.790857][T12343] RBP: ffffea0001b77a34 R08: 0000000000000001 R09: fffffbfff2d315c7 [ 359.802421][T12343] R10: ffffffff9698ae3f R11: ffff88802b528a40 R12: ffffea0001b77a00 [ 359.811692][T12343] R13: ffff888000dfb800 R14: 0000000000001000 R15: 0000000000001000 [ 359.823092][T12343] FS: 0000000000000000(0000) GS:ffff88802b500000(0063) knlGS:00000000f5715b40 [ 359.832772][T12343] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 359.841647][T12343] CR2: 00000000f72118e0 CR3: 00000000541ba000 CR4: 0000000000352ef0 [ 359.850932][T12343] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 359.860338][T12343] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 359.880651][T12343] Kernel panic - not syncing: Fatal exception [ 359.883261][T12343] Kernel Offset: disabled [ 359.884689][T12343] Rebooting in 86400 seconds.. VM DIAGNOSIS: 14:45:42 Registers: info registers vcpu 0 CPU#0 RAX=00000000004b499c RBX=0000000000000000 RCX=ffffffff8b12f739 RDX=ffffed1005687026 RSI=ffffffff8bb11fe0 RDI=ffffffff8164098c RBP=fffffbfff1b52af8 RSP=ffffffff8da07e20 R8 =0000000000000000 R9 =ffffed1005687025 R10=ffff88802b43812b R11=0000000000000001 R12=0000000000000000 R13=ffffffff8da957c0 R14=ffffffff901cc608 R15=0000000000000000 RIP=ffffffff8b130b1f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f735d760 CR3=000000004e4d8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff85035ad0 RDI=ffffffff9a63a260 RBP=ffffffff9a63a220 RSP=ffffc900044a64f0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6e69203a73706f4f R12=0000000000000000 R13=0000000000000020 R14=fffffbfff34c749e R15=dffffc0000000000 RIP=ffffffff85035af7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b500000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020042000 CR3=00000000541ba000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000001 Opmask01=0000000000000000 Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=00000000ffffdfff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff61ce8ef0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6565656565656565 6565656565656565 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffff0000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3320205b3e343c00 30666278302f6165 3578302b64706177 736b20205d333400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3320205134343600 3066627230256165 3572302164706177 7361202057333400 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30305f6565000020 2931373230203330 2000003032203535 202c293132353120 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302e435550000020 2631303120203330 2000003032203031 20262331202c2220 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 474549555a4c4d55 55764f46484b5c45 4755584f595f424d 4342555a4c4d226b ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 797e556f6f786c2a 263b323d3a3a393a 3e3e3233382a797e 2a26233838323b24 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffffc90000e2f870 RCX=ffffffff81cadb56 RDX=ffff88801eb9a440 RSI=0000000000000000 RDI=0000000000000005 RBP=ffff888062a65200 RSP=ffffc90000e2f718 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000008 R11=ffff88802b628a40 R12=0000000000000400 R13=0000000000000000 R14=0000000000000008 R15=ffff8880272f0000 RIP=ffffffff818caf7c RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c23437b CR3=0000000051d2c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=ffffea0001895fc0 RBX=ffff88806257ff40 RCX=ffffffff813e872c RDX=ffff88801ac42780 RSI=ffffffff813e8736 RDI=0000000000000007 RBP=0000000000000000 RSP=ffffc900005f0bc0 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=ffffffff8b4e5440 R12=ffffffff81e37540 R13=0000000000000200 R14=ffffea0000ab4500 R15=0000000000000000 RIP=ffffffff81edc4aa RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055a8b1e4f000 CR3=0000000049d70000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=c627ef29c627ef29 c627ef29c627ef29 c627ef29c627ef29 c627ef29c627ef29 c627ef29c627ef29 c627ef29c627ef29 c627ef29c627ef29 c627ef29c627ef29 ZMM22=dfc031dbdfc031db dfc031dbdfc031db dfc031dbdfc031db dfc031dbdfc031db dfc031dbdfc031db dfc031dbdfc031db dfc031dbdfc031db dfc031dbdfc031db ZMM23=68c785ec68c785ec 68c785ec68c785ec 68c785ec68c785ec 68c785ec68c785ec 68c785ec68c785ec 68c785ec68c785ec 68c785ec68c785ec 68c785ec68c785ec ZMM24=2fac5ef22fac5ef2 2fac5ef22fac5ef2 2fac5ef22fac5ef2 2fac5ef22fac5ef2 2fac5ef22fac5ef2 2fac5ef22fac5ef2 2fac5ef22fac5ef2 2fac5ef22fac5ef2 ZMM25=d136329dd136329d d136329dd136329d d136329dd136329d d136329dd136329d d136329dd136329d d136329dd136329d d136329dd136329d d136329dd136329d ZMM26=a0f3983aa0f3983a a0f3983aa0f3983a a0f3983aa0f3983a a0f3983aa0f3983a a0f3983aa0f3983a a0f3983aa0f3983a a0f3983aa0f3983a a0f3983aa0f3983a ZMM27=a7587a17a7587a17 a7587a17a7587a17 a7587a17a7587a17 a7587a17a7587a17 a7587a17a7587a17 a7587a17a7587a17 a7587a17a7587a17 a7587a17a7587a17 ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=a2140000a2140000 a2140000a2140000 a2140000a2140000 a2140000a2140000 a2140000a2140000 a2140000a2140000 a2140000a2140000 a2140000a2140000