last executing test programs: 2.249726801s ago: executing program 2 (id=5148): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) 1.999524936s ago: executing program 0 (id=5158): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) write$binfmt_misc(r0, &(0x7f0000000280)=ANY=[], 0xbf) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000019c0)=""/4080, 0xff0}], 0x1}, 0x40000162) 1.938722257s ago: executing program 0 (id=5161): syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x7, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010100, @local, {[@cipso={0x86, 0x8, 0x3, [{0x7, 0x2}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000480)=ANY=[], 0x20) io_uring_setup(0x29ea, 0x0) 1.889259454s ago: executing program 0 (id=5162): creat(&(0x7f0000000280)='./file0\x00', 0x0) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000200)='./file0\x00', 0x20000014) setxattr$incfs_metadata(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)=@known='user.incfs.metadata\x00') 1.819024859s ago: executing program 0 (id=5167): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2, 0x80001, 0x84) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000001040)={r2, 0xff}, &(0x7f00000010c0)=0x8) 1.743199259s ago: executing program 0 (id=5169): r0 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000000)=0x5, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x7, @mcast1, 0x6}, 0x1c) sendto$inet6(r0, &(0x7f0000000100)="80000fdc2208a1ce", 0x8, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000006280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 1.669634793s ago: executing program 0 (id=5170): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0e, &(0x7f0000000040)) 1.359970644s ago: executing program 1 (id=5174): prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) getpid() r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x6, 0x3}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r0) 1.26012103s ago: executing program 1 (id=5175): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2640], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000200)=r1, 0x4) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='\"\x00\x00\x00\a'], 0xd) 1.259915113s ago: executing program 1 (id=5176): r0 = socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000480)="b9ff03076844268cb89e14f088a847", 0x0, 0x0, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(r0, 0x107, 0x8, &(0x7f00000000c0), 0x8) recvmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 989.672354ms ago: executing program 1 (id=5177): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pread64(r1, &(0x7f0000000300)=""/150, 0x96, 0x0) 509.628457ms ago: executing program 3 (id=5178): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000580)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000680)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="cf0425bd7000000000001300000008000300", @ANYRES32=r3, @ANYBLOB="040013000a000600ffffffffffff000006001200000000000600b500c902000008001400", @ANYRES32, @ANYBLOB="0c0043006ae85ee14a"], 0x50}}, 0x0) 460.095443ms ago: executing program 3 (id=5179): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x40002, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 410.049659ms ago: executing program 3 (id=5180): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000440), &(0x7f0000000480)=0x10) 409.809742ms ago: executing program 2 (id=5181): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc08c5332, &(0x7f0000000400)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000540)={0x0, 0x3, {0x1, 0x2, 0x1, 0x2, 0x6}, 0x7}) 409.691742ms ago: executing program 3 (id=5182): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40042, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000c80)='./file0\x00', 0x0, 0x930066, 0x0) 319.448052ms ago: executing program 2 (id=5183): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)={0x1c, 0x5e, 0x6b4e12c8a09f3155, 0x0, 0x0, {}, [@generic="0000000e9e"]}, 0x1c}}, 0x0) 319.200815ms ago: executing program 3 (id=5184): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000080)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r1, &(0x7f0000001780), 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 319.038134ms ago: executing program 2 (id=5185): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000200)={0x1, 0x0, [{0x0, 0x4, 0x0, 0x0, @msi}]}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f00000000c0)) 159.23537ms ago: executing program 2 (id=5186): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000100)) 158.931537ms ago: executing program 1 (id=5187): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x10) 60.171426ms ago: executing program 1 (id=5188): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"]) chdir(&(0x7f0000000280)='./file0\x00') r0 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000100)={0x20}, 0xfdef) 167.105µs ago: executing program 3 (id=5189): syz_io_uring_setup(0x80002ee1, &(0x7f0000000080)={0x0, 0x5a8c, 0x800, 0x0, 0x161}, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000000c501"]) 0s ago: executing program 2 (id=5190): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000640)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000100)={0x3, r2, 0x0, 0x7ffffe02, 0xb, 0x1fd, 0x1}) kernel console output (not intermixed with test programs): 84.413157][T12727] bridge_slave_1: entered promiscuous mode [ 184.454660][T12727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.462141][T12727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.507393][T12727] team0: Port device team_slave_0 added [ 184.514694][T12727] team0: Port device team_slave_1 added [ 184.556944][T12727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.561296][T12727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.570924][T12727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.575909][T12727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.578599][T12727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.588144][T12727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.641784][T12727] hsr_slave_0: entered promiscuous mode [ 184.644280][T12727] hsr_slave_1: entered promiscuous mode [ 184.647046][T12727] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 184.649056][T12727] Cannot create hsr debugfs directory [ 184.764822][T12727] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.873078][T12727] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.979751][T12727] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.048738][T12727] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.247414][T12727] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 185.253078][T12727] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 185.257512][T12727] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 185.265759][T12727] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 185.280515][T12727] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.282505][T12727] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.284569][T12727] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.286473][T12727] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.326337][T12727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.347850][ T9443] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.354315][ T9443] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.387456][T12727] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.394125][ T9458] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.396096][ T9458] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.403661][ T9443] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.405648][ T9443] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.569499][T12727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.607320][T12727] veth0_vlan: entered promiscuous mode [ 185.621857][T12727] veth1_vlan: entered promiscuous mode [ 185.656017][T12727] veth0_macvtap: entered promiscuous mode [ 185.660341][T12727] veth1_macvtap: entered promiscuous mode [ 185.674584][T12727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.677300][T12727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.680346][T12727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.683048][T12727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.685572][T12727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.688271][T12727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.691943][T12727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.695621][T12727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.698355][T12727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.700950][T12727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.703670][T12727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.706207][T12727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.708962][T12727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.713983][T12727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.723498][T12727] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.725831][T12727] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.728303][T12727] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.730994][T12727] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.802827][ T9474] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.805174][ T9474] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.822613][ T9474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.824866][ T9474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.979320][ T1422] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 186.159357][ T1422] usb 6-1: Using ep0 maxpacket: 8 [ 186.173297][ T1422] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 186.175680][ T1422] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.177834][ T1422] usb 6-1: Product: syz [ 186.178943][ T1422] usb 6-1: Manufacturer: syz [ 186.180374][ T1422] usb 6-1: SerialNumber: syz [ 186.182975][ T1422] usb 6-1: config 0 descriptor?? [ 186.219484][ T5352] Bluetooth: hci5: command tx timeout [ 186.405634][ T1422] dvb_usb_rtl28xxu 6-1:0.0: chip type detection failed -71 [ 186.407592][ T1422] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 186.416645][ T1422] usb 6-1: USB disconnect, device number 14 [ 186.930994][T12844] random: crng reseeded on system resumption [ 188.299270][ T5352] Bluetooth: hci5: command tx timeout [ 188.418952][T12922] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3278'. [ 188.497062][T12932] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 188.905439][T12969] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3300'. [ 189.043660][ T39] audit: type=1326 audit(1726535489.362:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12986 comm="syz.0.3308" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf743e579 code=0x0 [ 189.124196][ T39] audit: type=1326 audit(1726535489.442:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12992 comm="syz.1.3310" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f71579 code=0x0 [ 189.981699][T13006] input: syz0 as /devices/virtual/input/input17 [ 190.319353][ T56] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 190.381517][ T5352] Bluetooth: hci5: command tx timeout [ 190.439910][T13040] bridge_slave_0: default FDB implementation only supports local addresses [ 190.522377][ T56] usb 6-1: Using ep0 maxpacket: 8 [ 190.525248][ T56] usb 6-1: config 167 has too many interfaces: 202, using maximum allowed: 32 [ 190.532445][ T56] usb 6-1: config 167 has 1 interface, different from the descriptor's value: 202 [ 190.543458][ T56] usb 6-1: New USB device found, idVendor=1025, idProduct=005f, bcdDevice=fe.29 [ 190.549225][ T56] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.551313][ T56] usb 6-1: Product: syz [ 190.552407][ T56] usb 6-1: Manufacturer: syz [ 190.553625][ T56] usb 6-1: SerialNumber: syz [ 190.576540][ T56] dvb-usb: found a 'Unknown USB1.1 DVB-T device ???? please report the name to the author' in warm state. [ 190.583818][ T56] dvb-usb: bulk message failed: -22 (3/0) [ 190.637743][ T56] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 190.655256][ T56] dvbdev: DVB: registering new adapter (Unknown USB1.1 DVB-T device ???? please report the name to the author) [ 190.658739][ T56] usb 6-1: media controller created [ 190.676385][T13054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3337'. [ 190.689521][ T56] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 190.734506][ T56] dvb-usb: bulk message failed: -22 (6/0) [ 190.736230][ T56] dvb-usb: no frontend was attached by 'Unknown USB1.1 DVB-T device ???? please report the name to the author' [ 190.741420][ T56] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb6/6-1/input/input18 [ 190.745764][ T56] dvb-usb: schedule remote query interval to 150 msecs. [ 190.747491][ T56] dvb-usb: bulk message failed: -22 (3/0) [ 190.770129][ T56] dvb-usb: Unknown USB1.1 DVB-T device ???? please report the name to the author successfully initialized and connected. [ 190.809464][ T62] usb 6-1: USB disconnect, device number 15 [ 190.846681][ T62] dvb-usb: Unknown USB1.1 DVB-T device ???? please successfully deinitialized and disconnected. [ 191.485878][ C3] IPv4: Oversized IP packet from 172.20.20.24 [ 191.804315][T13114] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3364'. [ 191.881256][ T62] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 192.069289][ T62] usb 5-1: Using ep0 maxpacket: 8 [ 192.072236][ T62] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 192.075249][ T62] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 192.077913][ T62] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 192.081181][ T62] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 192.085245][ T62] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 192.087654][ T62] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.153864][T13130] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3371'. [ 192.157148][T13130] validate_nla: 2 callbacks suppressed [ 192.157163][T13130] netlink: 'syz.2.3371': attribute type 5 has an invalid length. [ 192.161904][T13130] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3371'. [ 192.329458][ T62] usb 5-1: GET_CAPABILITIES returned 0 [ 192.331630][ T62] usbtmc 5-1:16.0: can't read capabilities [ 192.400400][T13143] netlink: 160 bytes leftover after parsing attributes in process `syz.2.3378'. [ 192.459948][ T5352] Bluetooth: hci5: command tx timeout [ 192.534537][T13157] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.3385'. [ 192.537761][T13157] netlink: zone id is out of range [ 192.539088][T13157] netlink: zone id is out of range [ 192.544101][ T982] usb 5-1: USB disconnect, device number 6 [ 192.545985][T13157] netlink: zone id is out of range [ 192.547468][T13157] netlink: zone id is out of range [ 192.549266][T13157] netlink: zone id is out of range [ 192.551364][T13157] netlink: zone id is out of range [ 192.553123][T13157] netlink: zone id is out of range [ 192.554880][T13157] netlink: zone id is out of range [ 192.556657][T13157] netlink: zone id is out of range [ 192.907389][T13189] bridge0: port 3(vlan2) entered blocking state [ 192.909276][T13189] bridge0: port 3(vlan2) entered disabled state [ 192.911044][T13189] vlan2: entered allmulticast mode [ 192.916827][T13189] vlan2: left allmulticast mode [ 193.360634][T13216] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3413'. [ 193.405738][T13218] syz.0.3415 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 193.821726][ T1375] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.193153][T13273] netlink: 'syz.2.3437': attribute type 3 has an invalid length. [ 194.198870][T13273] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3437'. [ 194.963558][T13347] mkiss: ax0: crc mode is auto. [ 195.415083][T13364] input: syz1 as /devices/virtual/input/input19 [ 196.700361][T13416] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3502'. [ 196.721072][T13416] vlan2: entered allmulticast mode [ 196.723030][T13416] bridge0: entered allmulticast mode [ 196.911110][ T39] audit: type=1326 audit(1726535497.232:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13436 comm="syz.2.3513" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 196.917289][ T39] audit: type=1326 audit(1726535497.232:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13436 comm="syz.2.3513" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 196.931342][ T39] audit: type=1326 audit(1726535497.252:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13436 comm="syz.2.3513" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 196.943091][ T39] audit: type=1326 audit(1726535497.252:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13436 comm="syz.2.3513" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 196.951203][ T39] audit: type=1326 audit(1726535497.252:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13436 comm="syz.2.3513" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 196.956266][ T39] audit: type=1326 audit(1726535497.262:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13436 comm="syz.2.3513" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 196.961704][ T39] audit: type=1326 audit(1726535497.262:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13436 comm="syz.2.3513" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 196.966375][ T39] audit: type=1326 audit(1726535497.262:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13436 comm="syz.2.3513" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 196.975823][ T39] audit: type=1326 audit(1726535497.262:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13436 comm="syz.2.3513" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 196.980980][ T39] audit: type=1326 audit(1726535497.262:1470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13436 comm="syz.2.3513" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 197.219929][ T56] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 197.425750][ T56] usb 7-1: config 0 has no interfaces? [ 197.427275][ T56] usb 7-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 197.430120][ T56] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.433810][ T56] usb 7-1: config 0 descriptor?? [ 197.657998][ T56] usb 7-1: USB disconnect, device number 10 [ 198.317126][T13493] netlink: 'syz.2.3539': attribute type 9 has an invalid length. [ 198.503841][T13500] kvm: apic: phys broadcast and lowest prio [ 198.902529][T13535] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3558'. [ 200.287271][T13580] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 200.411333][T13588] netlink: 'syz.2.3581': attribute type 1 has an invalid length. [ 200.414263][T13588] netlink: 'syz.2.3581': attribute type 3 has an invalid length. [ 200.416987][T13588] netlink: 216 bytes leftover after parsing attributes in process `syz.2.3581'. [ 200.421367][T13588] NCSI netlink: No device for ifindex 813332851 [ 200.629366][ T5468] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 200.829494][ T5468] usb 6-1: Using ep0 maxpacket: 8 [ 200.833436][ T5468] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 200.837433][ T5468] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 200.849228][ T5468] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 200.852724][ T5468] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 200.857207][ T5468] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 200.860942][ T5468] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.087180][ T5468] usb 6-1: GET_CAPABILITIES returned 0 [ 201.089649][ T5468] usbtmc 6-1:16.0: can't read capabilities [ 201.202503][ T982] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 201.297498][ T6183] usb 6-1: USB disconnect, device number 16 [ 201.388124][ T982] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.391815][ T982] usb 7-1: config 0 has no interfaces? [ 201.393691][ T982] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 201.397246][ T982] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.403004][ T982] usb 7-1: config 0 descriptor?? [ 201.634048][ T1422] usb 7-1: USB disconnect, device number 11 [ 202.191186][T13625] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3600'. [ 202.196905][T13625] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3600'. [ 202.490901][ T39] kauditd_printk_skb: 31 callbacks suppressed [ 202.490918][ T39] audit: type=1326 audit(1726535502.812:1502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13639 comm="syz.2.3605" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 202.501950][ T39] audit: type=1326 audit(1726535502.812:1503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13639 comm="syz.2.3605" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 202.510610][ T39] audit: type=1326 audit(1726535502.832:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13639 comm="syz.2.3605" exe="/syz-executor" sig=0 arch=40000003 syscall=39 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 202.518990][ T39] audit: type=1326 audit(1726535502.832:1505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13639 comm="syz.2.3605" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 202.534555][ T39] audit: type=1326 audit(1726535502.832:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13639 comm="syz.2.3605" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 202.542911][ T39] audit: type=1326 audit(1726535502.842:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13639 comm="syz.2.3605" exe="/syz-executor" sig=0 arch=40000003 syscall=21 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 202.555371][ T39] audit: type=1326 audit(1726535502.842:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13639 comm="syz.2.3605" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 202.565465][ T39] audit: type=1326 audit(1726535502.852:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13639 comm="syz.2.3605" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 202.572298][ T39] audit: type=1326 audit(1726535502.852:1510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13639 comm="syz.2.3605" exe="/syz-executor" sig=0 arch=40000003 syscall=52 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 202.578309][ T39] audit: type=1326 audit(1726535502.862:1511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13639 comm="syz.2.3605" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 203.914095][T13713] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3635'. [ 204.213810][T13734] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3647'. [ 204.549240][ T5468] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 204.730764][ T5468] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 204.733757][ T5468] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 204.736303][ T5468] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 204.751238][ T5468] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 204.754007][ T5468] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.756161][ T5468] usb 6-1: Product: syz [ 204.758446][ T5468] usb 6-1: Manufacturer: syz [ 204.760075][ T5468] usb 6-1: SerialNumber: syz [ 204.871383][T13761] syzkaller1: entered promiscuous mode [ 204.875412][T13761] syzkaller1: entered allmulticast mode [ 204.986156][ T5468] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 17 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 205.044308][ T5354] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 205.050462][ T5354] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 205.053522][ T5354] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 205.056205][ T5354] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 205.058569][ T5354] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 205.061193][ T5354] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 205.219585][ T4765] usb 6-1: USB disconnect, device number 17 [ 205.282700][T13763] chnl_net:caif_netlink_parms(): no params data found [ 205.379499][T13763] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.381562][T13763] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.383718][T13763] bridge_slave_0: entered allmulticast mode [ 205.386358][T13763] bridge_slave_0: entered promiscuous mode [ 205.390967][T13782] netlink: 'syz.2.3666': attribute type 15 has an invalid length. [ 205.395108][T13763] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.397439][T13763] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.399890][T13763] bridge_slave_1: entered allmulticast mode [ 205.400723][T13737] usblp0: removed [ 205.402758][T13763] bridge_slave_1: entered promiscuous mode [ 205.462772][T13763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.469109][T13763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.527583][T13763] team0: Port device team_slave_0 added [ 205.535384][T13763] team0: Port device team_slave_1 added [ 205.596668][T13763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.599076][T13763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.607491][T13763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.614761][T13763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.616637][T13763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.624407][T13763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.698106][T13763] hsr_slave_0: entered promiscuous mode [ 205.701112][T13763] hsr_slave_1: entered promiscuous mode [ 205.705510][T13763] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 205.707515][T13763] Cannot create hsr debugfs directory [ 205.897945][T13763] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.985559][T13763] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.057005][T13763] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.112401][ T5468] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 206.162118][T13763] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.288218][T13763] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 206.292526][T13763] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 206.296589][T13763] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 206.300672][T13763] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 206.314977][ T5468] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 206.317389][ T5468] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.319918][ T5468] usb 7-1: Product: syz [ 206.321181][ T5468] usb 7-1: Manufacturer: syz [ 206.323258][ T5468] usb 7-1: SerialNumber: syz [ 206.326446][ T5468] usb 7-1: config 0 descriptor?? [ 206.379769][T13763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.394827][T13763] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.400827][ T9458] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.403116][ T9458] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.410776][ T9474] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.412839][ T9474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.507574][T13819] kernel read not supported for file /eth0 (pid: 13819 comm: syz.3.3682) [ 206.556889][ T64] usb 7-1: USB disconnect, device number 12 [ 206.591868][T13763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.636347][T13763] veth0_vlan: entered promiscuous mode [ 206.643211][T13763] veth1_vlan: entered promiscuous mode [ 206.664911][T13763] veth0_macvtap: entered promiscuous mode [ 206.669562][T13763] veth1_macvtap: entered promiscuous mode [ 206.681895][T13763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.684701][T13763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.687351][T13763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.690259][T13763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.692928][T13763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.695681][T13763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.698390][T13763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.701319][T13763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.705277][T13763] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 206.713653][T13763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.716704][T13763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.721951][T13763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.725474][T13763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.728054][T13763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.731359][T13763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.734259][T13763] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.736958][T13763] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.740906][T13763] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.746905][T13763] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.749639][T13763] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.751876][T13763] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.754085][T13763] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.803653][ T9458] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.811440][ T9458] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.844526][ T9458] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.847224][ T9458] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.959700][T13828] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3684'. [ 206.962141][T13828] netlink: 'syz.0.3684': attribute type 7 has an invalid length. [ 206.964130][T13828] netlink: 'syz.0.3684': attribute type 8 has an invalid length. [ 206.966166][T13828] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3684'. [ 207.099492][ T5352] Bluetooth: hci6: command tx timeout [ 207.424344][T13852] net_ratelimit: 43 callbacks suppressed [ 207.424357][T13852] dccp_invalid_packet: P.CsCov 3 exceeds packet length 256 [ 207.635625][T13862] ip6gretap0: entered promiscuous mode [ 207.642018][T13862] batadv_slave_0: entered promiscuous mode [ 208.030416][T13875] nfs: Unknown parameter 'ntext' [ 208.752613][T13923] netlink: 5288 bytes leftover after parsing attributes in process `syz.1.3730'. [ 208.755131][T13923] openvswitch: netlink: IP tunnel dst address not specified [ 209.188852][ T5352] Bluetooth: hci6: command tx timeout [ 210.048653][T13944] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 210.051919][T13944] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 210.070017][T13944] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 210.081632][T13944] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 210.083979][T13944] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 210.089538][T13944] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 210.093235][T13944] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 210.095140][T13944] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 210.111712][T13944] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 210.444506][T13970] netlink: 4232 bytes leftover after parsing attributes in process `syz.3.3751'. [ 210.560668][T13977] trusted_key: syz.3.3754 sent an empty control message without MSG_MORE. [ 210.802835][T13997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3764'. [ 210.939075][T14006] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3768'. [ 210.942470][T14006] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3768'. [ 211.339725][ T5352] Bluetooth: hci4: command 0x0c1a tx timeout [ 212.034757][T14023] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3775'. [ 212.139382][ T5352] Bluetooth: hci6: command 0x0419 tx timeout [ 212.139462][ T5354] Bluetooth: hci5: command 0x0c1a tx timeout [ 212.276202][T14039] netlink: 'syz.1.3789': attribute type 10 has an invalid length. [ 212.297024][T14039] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.304820][T14039] bond0: (slave team0): Enslaving as an active interface with an up link [ 212.339845][ T982] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 212.529593][ T982] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 212.533546][ T982] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 212.537409][ T982] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 212.542272][ T982] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 212.548381][ T982] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 212.551794][ T982] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 212.554028][ T982] usb 7-1: Manufacturer: syz [ 212.558351][ T982] usb 7-1: config 0 descriptor?? [ 212.911110][T14042] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3782'. [ 212.990095][ T982] appleir 0003:05AC:8243.0007: unknown main item tag 0x0 [ 212.994061][ T982] appleir 0003:05AC:8243.0007: No inputs registered, leaving [ 213.013958][T14050] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.3785'. [ 213.014016][ T982] appleir 0003:05AC:8243.0007: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 213.087692][T14040] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 213.090369][T14040] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 213.092085][T14040] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 213.262060][ T982] usb 7-1: USB disconnect, device number 13 [ 213.369230][ T1995] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 213.550830][ T1995] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 213.553725][ T1995] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 213.556756][ T1995] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 213.562216][ T1995] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 213.565631][ T1995] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 213.568159][ T1995] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.572237][ T1995] usb 5-1: config 0 descriptor?? [ 213.574220][T14053] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 213.997386][ T1995] plantronics 0003:047F:FFFF.0008: unknown main item tag 0xd [ 214.011626][ T1995] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 214.022508][ T1995] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 214.260231][ T1995] usb 5-1: USB disconnect, device number 7 [ 214.389379][ T5352] Bluetooth: hci4: command 0x0c1a tx timeout [ 214.562933][T14123] kernel profiling enabled (shift: 0) [ 215.000030][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 215.099272][ T5352] Bluetooth: hci6: command 0x0419 tx timeout [ 215.109245][ T5352] Bluetooth: hci5: command 0x0c1a tx timeout [ 215.810930][T14138] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 215.813368][T14138] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 215.819542][T14138] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 215.953419][ T39] kauditd_printk_skb: 2 callbacks suppressed [ 215.953430][ T39] audit: type=1326 audit(1726535516.272:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14159 comm="syz.1.3833" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f71579 code=0x0 [ 216.294386][ T39] audit: type=1326 audit(1726535516.612:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14172 comm="syz.3.3837" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f26579 code=0x0 [ 217.099339][ T5352] Bluetooth: hci4: command 0x0c1a tx timeout [ 217.319577][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 217.574448][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 217.641145][T14212] netlink: 'syz.0.3851': attribute type 2 has an invalid length. [ 217.645682][T14212] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3851'. [ 217.829332][ T5352] Bluetooth: hci5: command 0x0c1a tx timeout [ 217.899395][ T5352] Bluetooth: hci6: command 0x0419 tx timeout [ 218.107076][T14202] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 218.111088][T14202] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 218.112757][T14202] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 218.240722][T14246] overlayfs: workdir and upperdir must reside under the same mount [ 218.311579][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 218.744535][T14279] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3880'. [ 219.052906][T14295] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3887'. [ 219.055945][T14295] bMtadv_lave_0: renamed from lo [ 219.059000][T14295] bMtadv_lave_0: entered allmulticast mode [ 219.429607][ T5352] Bluetooth: hci4: command 0x0c1a tx timeout [ 219.436578][T14319] vxcan1: tx address claim with dest, not broadcast [ 219.529112][T14321] kvm: kvm [14320]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010000) = 0x7fffffe00000240 [ 219.690442][ T9458] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.820420][ T9458] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.948079][ T5354] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 219.955448][ T5354] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 219.956764][ T9458] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.958071][ T5354] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 219.971299][ T5354] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 219.974631][ T5354] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 219.976836][ T5354] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 220.019470][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 220.022887][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 220.117183][T14360] loop0: detected capacity change from 0 to 6 [ 220.125504][T14360] loop0: [POWERTEC] p1 p2 p3 [ 220.128180][T14360] loop0: p1 start 8 is beyond EOD, truncated [ 220.131323][T14360] loop0: p2 start 327680 is beyond EOD, truncated [ 220.136393][T14360] loop0: p3 size 1986356271 extends beyond EOD, truncated [ 220.159296][ T5354] Bluetooth: hci6: command 0x0419 tx timeout [ 220.161217][ T5352] Bluetooth: hci5: command 0x0c1a tx timeout [ 220.221606][ T9458] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.299062][ T39] audit: type=1326 audit(1726535520.612:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14361 comm="syz.0.3919" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 220.304555][ T5363] udevd[5363]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 220.319406][ T39] audit: type=1326 audit(1726535520.612:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14361 comm="syz.0.3919" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 220.324921][ T39] audit: type=1326 audit(1726535520.622:1518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14361 comm="syz.0.3919" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 220.339260][ T39] audit: type=1326 audit(1726535520.622:1519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14361 comm="syz.0.3919" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 220.344942][ T39] audit: type=1326 audit(1726535520.622:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14361 comm="syz.0.3919" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 220.359214][ T39] audit: type=1326 audit(1726535520.622:1521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14361 comm="syz.0.3919" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 220.364794][ T39] audit: type=1326 audit(1726535520.622:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14361 comm="syz.0.3919" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 220.389250][ T39] audit: type=1326 audit(1726535520.622:1523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14361 comm="syz.0.3919" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 220.512501][T14347] chnl_net:caif_netlink_parms(): no params data found [ 220.618281][ T9458] bridge_slave_1: left allmulticast mode [ 220.620236][ T9458] bridge_slave_1: left promiscuous mode [ 220.621888][ T9458] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.639367][ T9458] bridge_slave_0: left allmulticast mode [ 220.640912][ T9458] bridge_slave_0: left promiscuous mode [ 220.642389][ T9458] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.652167][ T9458] tipc: Resetting bearer [ 220.737346][ T9458] ip6gretap0 (unregistering): left promiscuous mode [ 220.784042][ T9458] tipc: Disabling bearer [ 221.058960][ T9458] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.068036][ T9458] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.073747][ T9458] bond0 (unregistering): (slave team0): Releasing backup interface [ 221.078804][ T9458] bond0 (unregistering): Released all slaves [ 221.178214][T14393] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3928'. [ 221.214628][ T9458] tipc: Left network mode [ 221.214774][T14347] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.217886][T14347] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.221346][T14347] bridge_slave_0: entered allmulticast mode [ 221.223800][T14347] bridge_slave_0: entered promiscuous mode [ 221.234325][T14347] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.236333][T14347] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.238403][T14347] bridge_slave_1: entered allmulticast mode [ 221.243271][T14347] bridge_slave_1: entered promiscuous mode [ 221.394099][T14347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.398504][T14347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.490707][T14347] team0: Port device team_slave_0 added [ 221.495003][T14347] team0: Port device team_slave_1 added [ 221.536400][ T9458] batadv_slave_0: left promiscuous mode [ 221.547786][ T9458] hsr_slave_0: left promiscuous mode [ 221.551014][ T9458] hsr_slave_1: left promiscuous mode [ 221.585171][ T9458] veth1_macvtap: left promiscuous mode [ 221.586655][ T9458] veth0_macvtap: left promiscuous mode [ 221.588228][ T9458] veth1_vlan: left promiscuous mode [ 221.589763][ T9458] veth0_vlan: left promiscuous mode [ 222.060973][ T5354] Bluetooth: hci2: command tx timeout [ 222.775439][ T9458] team0 (unregistering): Port device team_slave_1 removed [ 222.895984][ T9458] team0 (unregistering): Port device team_slave_0 removed [ 223.748970][T14347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.754442][T14347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.763178][T14347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.796799][T14347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 223.802178][T14347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.809346][T14347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.915171][T14347] hsr_slave_0: entered promiscuous mode [ 223.927722][T14347] hsr_slave_1: entered promiscuous mode [ 223.936639][T14347] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 223.938879][T14347] Cannot create hsr debugfs directory [ 224.140018][ T5354] Bluetooth: hci2: command tx timeout [ 224.782898][T14347] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 224.787236][T14347] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 224.832704][T14347] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 224.838319][T14347] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 224.986608][T14347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.021605][T14347] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.047208][ T9474] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.049874][ T9474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.080640][ T9467] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.083245][ T9467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.325073][T14347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.378462][T14347] veth0_vlan: entered promiscuous mode [ 225.388048][T14347] veth1_vlan: entered promiscuous mode [ 225.429450][T14347] veth0_macvtap: entered promiscuous mode [ 225.441745][T14347] veth1_macvtap: entered promiscuous mode [ 225.452783][T14347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.459717][T14347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.462625][T14347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.466011][T14347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.474154][T14347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.477311][T14347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.486761][T14347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.498188][T14347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.501095][T14347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.503868][T14347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.507649][T14347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.516820][T14347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.534164][T14347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.536719][T14347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.540464][T14347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.543092][T14347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.546541][T14347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.549642][T14347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.553097][T14347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.555612][T14347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.558420][T14347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.562158][T14347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.568029][T14347] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.571049][T14347] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.573804][T14347] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.576456][T14347] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.639811][ T9458] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.641904][ T9458] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.688906][ T9474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.692546][ T9474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.219244][ T5354] Bluetooth: hci2: command tx timeout [ 226.524031][T14528] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 226.529643][T14528] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 226.539346][T14528] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 226.543012][T14528] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 226.547372][T14528] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 226.552120][T14528] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 226.849384][ T25] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 227.042866][ T25] usb 6-1: New USB device found, idVendor=a766, idProduct=7cb5, bcdDevice=55.3a [ 227.046104][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.051398][ T25] usb 6-1: config 0 descriptor?? [ 227.055378][ T25] usb-storage 6-1:0.0: USB Mass Storage device detected [ 227.146220][T14552] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 227.341638][ T25] usb 6-1: USB disconnect, device number 18 [ 227.386515][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 227.852426][T14583] 8021q: VLANs not supported on lo [ 227.900342][ T5354] Bluetooth: hci4: command 0x0c1a tx timeout [ 227.905481][T14585] unknown channel width for channel at 909000KHz? [ 227.907308][T14585] unknown channel width for channel at 909000KHz? [ 227.909349][T14585] unknown channel width for channel at 909000KHz? [ 228.179410][ T25] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 228.372305][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.379290][ T25] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 228.384185][ T25] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 228.387193][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.413302][ T25] usb 6-1: config 0 descriptor?? [ 228.464090][T14616] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4003'. [ 228.539253][ T5354] Bluetooth: hci5: command 0x0c1a tx timeout [ 228.619307][ T5352] Bluetooth: hci6: command 0x0419 tx timeout [ 228.621317][ T5354] Bluetooth: hci2: command 0x0c1a tx timeout [ 228.841525][ T25] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 228.843795][ T25] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 228.845666][ T25] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 228.847554][ T25] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 228.850319][ T25] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 228.852313][ T25] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 228.854215][ T25] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 228.856118][ T25] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 228.858026][ T25] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 228.860863][ T25] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 228.864201][ T25] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 228.882370][ T25] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 229.112147][ T25] usb 6-1: USB disconnect, device number 19 [ 229.666558][T14647] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 230.699244][ T5354] Bluetooth: hci2: command 0x0c1a tx timeout [ 230.807421][T14702] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.4030'. [ 231.391119][ T9452] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.503757][ T9452] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.664862][ T9452] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.680738][ T5352] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 231.687577][ T5352] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 231.690757][ T5352] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 231.693986][ T5352] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 231.697526][ T5352] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 231.700264][ T5352] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 231.753331][ T9452] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.976563][T14749] chnl_net:caif_netlink_parms(): no params data found [ 231.996346][ T9452] bridge_slave_1: left allmulticast mode [ 231.997960][ T9452] bridge_slave_1: left promiscuous mode [ 232.003046][ T39] kauditd_printk_skb: 3 callbacks suppressed [ 232.003057][ T39] audit: type=1326 audit(1726535532.322:1527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14768 comm="syz.0.4060" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 232.010460][ T9452] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.019235][ T39] audit: type=1326 audit(1726535532.322:1528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14768 comm="syz.0.4060" exe="/syz-executor" sig=0 arch=40000003 syscall=144 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 232.024820][ T39] audit: type=1326 audit(1726535532.322:1529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14768 comm="syz.0.4060" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 232.030835][ T9452] bridge_slave_0: left allmulticast mode [ 232.032359][ T9452] bridge_slave_0: left promiscuous mode [ 232.033995][ T9452] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.039223][ T39] audit: type=1326 audit(1726535532.322:1530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14768 comm="syz.0.4060" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 232.137183][ T9452] bridge0: left allmulticast mode [ 232.656322][ T9452] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.682817][ T9452] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.689473][ T9452] bond0 (unregistering): Released all slaves [ 232.784901][ T5354] Bluetooth: hci2: command 0x0c1a tx timeout [ 232.905569][T14749] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.907643][T14749] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.911690][T14749] bridge_slave_0: entered allmulticast mode [ 232.914336][T14749] bridge_slave_0: entered promiscuous mode [ 232.917687][T14749] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.922928][T14749] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.924990][T14749] bridge_slave_1: entered allmulticast mode [ 232.927582][T14749] bridge_slave_1: entered promiscuous mode [ 232.995038][T14749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.008654][T14749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.184588][T14749] team0: Port device team_slave_0 added [ 233.188285][T14749] team0: Port device team_slave_1 added [ 233.246439][T14749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.248749][T14749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.256849][T14749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.263070][T14749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.264901][T14749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.273642][T14749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.399933][ T9452] hsr_slave_0: left promiscuous mode [ 233.402062][ T9452] hsr_slave_1: left promiscuous mode [ 233.404076][ T9452] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.406143][ T9452] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.427664][ T9452] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.429856][ T9452] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.479273][ T982] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 233.487602][ T9452] veth1_macvtap: left promiscuous mode [ 233.492662][ T9452] veth0_macvtap: left promiscuous mode [ 233.494304][ T9452] veth1_vlan: left promiscuous mode [ 233.495935][ T9452] veth0_vlan: left promiscuous mode [ 233.679248][ T982] usb 7-1: Using ep0 maxpacket: 8 [ 233.682360][ T982] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 233.684426][ T982] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 233.686898][ T982] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 233.696004][ T982] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 233.698642][ T982] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 233.708978][ T982] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 233.712487][ T982] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.743493][ T5354] Bluetooth: hci4: command tx timeout [ 233.938290][ T982] usb 7-1: GET_CAPABILITIES returned 0 [ 233.939954][ T982] usbtmc 7-1:16.0: can't read capabilities [ 234.552162][T14874] usbtmc 7-1:16.0: usb_control_msg returned -32 [ 234.566401][ T25] usb 7-1: USB disconnect, device number 14 [ 234.657320][ T9452] team0 (unregistering): Port device team_slave_1 removed [ 234.779772][ T9452] team0 (unregistering): Port device team_slave_0 removed [ 235.617212][T14749] hsr_slave_0: entered promiscuous mode [ 235.619740][T14749] hsr_slave_1: entered promiscuous mode [ 235.621727][T14749] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 235.623740][T14749] Cannot create hsr debugfs directory [ 235.823265][ T5354] Bluetooth: hci4: command tx timeout [ 236.179295][ T982] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 236.369225][ T982] usb 7-1: Using ep0 maxpacket: 8 [ 236.372103][ T982] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 236.375541][ T982] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 236.382274][ T982] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 236.388454][ T982] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 236.391234][T14749] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 236.406696][T14749] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 236.409400][ T982] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 236.409431][ T982] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 236.409443][ T982] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.436195][T14749] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 236.442949][T14749] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 236.513117][T14749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.529376][T14749] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.541796][ T9467] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.543719][ T9467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.552863][ T9459] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.555028][ T9459] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.641400][ T982] usb 7-1: usb_control_msg returned -32 [ 236.643061][ T982] usbtmc 7-1:16.0: can't read capabilities [ 236.794463][T14749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.827882][T14749] veth0_vlan: entered promiscuous mode [ 236.838059][T14749] veth1_vlan: entered promiscuous mode [ 236.874206][T14749] veth0_macvtap: entered promiscuous mode [ 236.883545][T14749] veth1_macvtap: entered promiscuous mode [ 236.898556][T14749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.903063][T14749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.906051][T14749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.912746][T14749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.917632][T14749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.924903][T14749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.930513][T14749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.933309][T14749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.935907][T14749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 236.938483][T14749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.942523][T14749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.948301][T14749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.951827][T14749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.954428][T14749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.957628][T14749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.960763][T14749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.963586][T14749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.966037][T14749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.969859][T14749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.972584][T14749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.975570][T14749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.979866][T14749] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.995380][T14749] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.997798][T14749] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.004288][T14749] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.004366][T14952] usbtmc 7-1:16.0: control status returned 0 [ 237.006634][T14749] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 237.109196][ T9506] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.111515][ T9506] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.145584][ T9459] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.147561][ T9459] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.208283][ T982] usb 7-1: USB disconnect, device number 15 [ 237.439228][ T39] audit: type=1800 audit(1726535537.752:1531): pid=14973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4120" name="bus" dev="9p" ino=36575728 res=0 errno=0 [ 237.448503][T14973] netfs: Couldn't get user pages (rc=-14) [ 237.614267][ T39] audit: type=1326 audit(1726535537.932:1532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14984 comm="syz.0.4125" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x0 [ 237.826787][ T39] audit: type=1804 audit(1726535538.142:1533): pid=14998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4131" name="/newroot/47/file0/bus" dev="hugetlbfs" ino=56929 res=1 errno=0 [ 237.909426][ T5354] Bluetooth: hci4: command tx timeout [ 238.328238][T15037] syzkaller1: entered promiscuous mode [ 238.332288][T15037] syzkaller1: entered allmulticast mode [ 238.497246][T15045] netlink: 3068 bytes leftover after parsing attributes in process `syz.2.4152'. [ 238.505069][T15045] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4152'. [ 239.080837][ T39] audit: type=1800 audit(1726535539.402:1534): pid=15068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4160" name="bus" dev="9p" ino=36575728 res=0 errno=0 [ 239.089415][T15068] netfs: Couldn't get user pages (rc=-14) [ 239.979300][ T5354] Bluetooth: hci4: command tx timeout [ 240.025917][T15133] loop2: detected capacity change from 0 to 61 [ 240.219283][ T6183] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 240.279288][ T1995] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 240.386838][T15144] bond_slave_0: entered promiscuous mode [ 240.388675][T15144] bond_slave_1: entered promiscuous mode [ 240.392937][T15144] bond_slave_0: left promiscuous mode [ 240.394665][T15144] bond_slave_1: left promiscuous mode [ 240.400413][ T6183] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 240.403528][ T6183] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 240.406462][ T6183] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 240.409536][ T6183] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 240.412906][ T6183] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 240.415327][ T6183] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.418925][ T6183] usb 6-1: config 0 descriptor?? [ 240.479493][ T1995] usb 7-1: Using ep0 maxpacket: 8 [ 240.482742][ T1995] usb 7-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 240.485123][ T1995] usb 7-1: config 246 descriptor has 1 excess byte, ignoring [ 240.487165][ T1995] usb 7-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 240.489639][ T1995] usb 7-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 240.492902][ T1995] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 240.496458][ T1995] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 240.499445][ T1995] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 240.503034][ T1995] usb 7-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 240.505406][ T1995] usb 7-1: config 246 descriptor has 1 excess byte, ignoring [ 240.507428][ T1995] usb 7-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 240.510044][ T1995] usb 7-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 240.513869][ T1995] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 240.517252][ T1995] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 240.520196][ T1995] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 240.524491][ T1995] usb 7-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 240.526935][ T1995] usb 7-1: config 246 descriptor has 1 excess byte, ignoring [ 240.529012][ T1995] usb 7-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 240.531674][ T1995] usb 7-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 240.535199][ T1995] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 240.538261][ T1995] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 240.542287][ T1995] usb 7-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 240.547312][ T1995] usb 7-1: string descriptor 0 read error: -22 [ 240.549234][ T1995] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 240.551903][ T1995] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.557612][ T1995] adutux 7-1:246.0: ADU100 now attached to /dev/usb/adutux0 [ 240.828833][ T6183] plantronics 0003:047F:FFFF.000A: ignoring exceeding usage max [ 240.836138][ T6183] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 240.843032][ T6183] plantronics 0003:047F:FFFF.000A: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 241.031200][ T25] usb 6-1: USB disconnect, device number 20 [ 242.059352][ T5354] Bluetooth: hci4: command tx timeout [ 242.930902][T15207] netlink: 'syz.1.4225': attribute type 9 has an invalid length. [ 242.932976][T15207] netlink: 134660 bytes leftover after parsing attributes in process `syz.1.4225'. [ 242.949752][T14632] usb 7-1: USB disconnect, device number 16 [ 243.155976][T15224] syz.0.4223[15224] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 243.156069][T15224] syz.0.4223[15224] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 243.782545][T15271] kernel read not supported for file /eth0 (pid: 15271 comm: syz.1.4242) [ 243.789862][ T39] audit: type=1800 audit(1726535544.112:1535): pid=15271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4242" name="eth0" dev="mqueue" ino=55887 res=0 errno=0 [ 243.865969][ T5468] kernel read not supported for file /eth0 (pid: 5468 comm: kworker/3:4) [ 244.301688][T15290] netlink: 'syz.1.4250': attribute type 9 has an invalid length. [ 244.304567][T15290] netlink: 134660 bytes leftover after parsing attributes in process `syz.1.4250'. [ 245.604290][T15306] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4258'. [ 245.607906][T15306] netlink: 'syz.3.4258': attribute type 7 has an invalid length. [ 245.629309][T15306] netlink: 'syz.3.4258': attribute type 8 has an invalid length. [ 245.631999][T15306] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4258'. [ 245.652583][T15306] gretap0: entered promiscuous mode [ 245.669527][T15306] batadv_slave_1: entered promiscuous mode [ 245.679945][T15306] gretap0: left promiscuous mode [ 245.689723][T15306] batadv_slave_1: left promiscuous mode [ 245.969765][T15319] syzkaller1: entered promiscuous mode [ 245.971776][T15319] syzkaller1: entered allmulticast mode [ 246.283878][T15346] ubi: mtd0 is already attached to ubi0 [ 246.423265][T15358] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4281'. [ 246.473933][T15361] No buffer was provided with the request [ 246.545583][T15366] ubi: mtd0 is already attached to ubi0 [ 247.416689][ T25] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 247.609209][ T25] usb 6-1: Using ep0 maxpacket: 8 [ 247.611845][ T25] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 247.614060][ T25] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 247.616687][ T25] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 247.619705][ T25] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 247.623353][ T25] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 247.626779][ T25] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 247.634914][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.855122][ T25] usb 6-1: usb_control_msg returned -32 [ 247.856715][ T25] usbtmc 6-1:16.0: can't read capabilities [ 248.210895][T15441] usbtmc 6-1:16.0: control status returned 0 [ 248.421736][ T982] usb 6-1: USB disconnect, device number 21 [ 248.876317][T15465] syzkaller1: entered promiscuous mode [ 248.877961][T15465] syzkaller1: entered allmulticast mode [ 249.074963][T15471] netlink: 'syz.2.4332': attribute type 9 has an invalid length. [ 249.077029][T15471] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4332'. [ 249.649248][ T56] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 249.810771][ T39] audit: type=1326 audit(1726535550.122:1536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15519 comm="syz.2.4356" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73de579 code=0x0 [ 249.851443][ T56] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 249.855728][ T56] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 249.860096][ T56] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 249.863586][ T56] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 249.873885][ T56] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 249.877179][ T56] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.885517][ T56] usb 6-1: config 0 descriptor?? [ 250.077793][T15525] netlink: 'syz.3.4358': attribute type 3 has an invalid length. [ 250.310999][ T56] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 250.324420][ T56] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 250.592400][ T6183] usb 6-1: USB disconnect, device number 22 [ 251.143150][T15544] netlink: 'syz.1.4365': attribute type 27 has an invalid length. [ 252.017740][T15574] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4378'. [ 252.539470][ T5354] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 252.828583][T15619] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4399'. [ 253.480527][T15666] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4421'. [ 253.709963][T15686] netlink: 'syz.3.4430': attribute type 9 has an invalid length. [ 253.712421][T15686] netlink: 134660 bytes leftover after parsing attributes in process `syz.3.4430'. [ 253.890763][T15700] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4436'. [ 253.894182][T15700] openvswitch: netlink: Key type 29 is not supported [ 254.403072][T15736] fuse: Bad value for 'group_id' [ 254.404357][T15736] fuse: Bad value for 'group_id' [ 254.478726][T15740] netlink: 'syz.1.4455': attribute type 9 has an invalid length. [ 254.480946][T15740] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4455'. [ 254.580385][T15746] input: syz1 as /devices/virtual/input/input22 [ 254.589367][ T56] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 254.617636][T15750] vlan2: entered promiscuous mode [ 254.621487][T15750] vlan2: entered allmulticast mode [ 254.622852][T15750] hsr_slave_1: entered allmulticast mode [ 254.792345][ T56] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 254.795230][ T56] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 254.819557][ T56] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 254.822096][ T56] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 254.825405][ T56] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 254.828646][ T56] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.840442][ T56] usb 7-1: config 0 descriptor?? [ 255.270803][ T1375] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.278442][T15804] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 255.288305][ T56] plantronics 0003:047F:FFFF.000C: ignoring exceeding usage max [ 255.293910][ T56] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 255.311604][ T56] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 255.626818][T15819] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 256.212205][ T39] audit: type=1326 audit(1726535556.532:1537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15866 comm="syz.0.4515" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 256.231786][ T39] audit: type=1326 audit(1726535556.532:1538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15866 comm="syz.0.4515" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 256.242971][ T39] audit: type=1326 audit(1726535556.542:1539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15866 comm="syz.0.4515" exe="/syz-executor" sig=0 arch=40000003 syscall=136 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 256.250637][ T39] audit: type=1326 audit(1726535556.542:1540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15866 comm="syz.0.4515" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 256.256758][ T39] audit: type=1326 audit(1726535556.542:1541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15866 comm="syz.0.4515" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73fe579 code=0x7ffc0000 [ 257.344976][ T25] usb 7-1: USB disconnect, device number 17 [ 258.779596][T15951] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4553'. [ 258.854006][T15955] input input23: cannot allocate more than FF_MAX_EFFECTS effects [ 259.302239][T15977] netlink: 188 bytes leftover after parsing attributes in process `syz.1.4565'. [ 259.305198][T15977] netlink: 'syz.1.4565': attribute type 1 has an invalid length. [ 259.369806][T15983] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 259.686229][ T39] audit: type=1326 audit(1726535560.002:1542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16002 comm="syz.1.4577" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f7f579 code=0x0 [ 259.894741][T16010] syzkaller1: entered promiscuous mode [ 259.896645][T16010] syzkaller1: entered allmulticast mode [ 260.495069][T16034] vivid-006: disconnect [ 260.497196][T16033] vivid-006: reconnect [ 261.067194][T16065] loop2: detected capacity change from 0 to 2 [ 261.070273][T16065] Dev loop2: unable to read RDB block 2 [ 261.071938][T16065] loop2: unable to read partition table [ 261.074736][T16065] loop2: partition table beyond EOD, truncated [ 261.077492][T16065] loop_reread_partitions: partition scan of loop2 (被 ) failed (rc=-5) [ 261.712381][T16116] Invalid option length (1031570) for dns_resolver key [ 261.839235][ T4765] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 261.927717][T16122] netlink: 'syz.3.4626': attribute type 1 has an invalid length. [ 261.930546][T16122] netlink: 88156 bytes leftover after parsing attributes in process `syz.3.4626'. [ 262.039596][ T4765] usb 7-1: Using ep0 maxpacket: 16 [ 262.042435][ T4765] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 262.044420][ T4765] usb 7-1: config 0 has no interface number 0 [ 262.046115][ T4765] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 262.051468][ T4765] usb 7-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 262.058251][ T4765] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 262.061360][ T4765] usb 7-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 262.063673][ T4765] usb 7-1: Product: syz [ 262.064851][ T4765] usb 7-1: SerialNumber: syz [ 262.067433][ T4765] usb 7-1: config 0 descriptor?? [ 262.070864][ T4765] cm109 7-1:0.8: invalid payload size 0, expected 4 [ 262.073643][ T4765] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.8/input/input24 [ 262.307145][ C3] cm109 7-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 262.572679][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 262.575005][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 262.576997][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 262.579023][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 262.581077][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 262.583047][ C0] cm109 7-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 262.584860][ C0] cm109 7-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 262.587193][ T5163] usb 7-1: USB disconnect, device number 18 [ 262.594941][ T5163] cm109 7-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 262.629252][ T25] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 262.830412][ T25] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 262.833410][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 262.836349][ T25] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 262.839262][ T25] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 262.842585][ T25] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 262.844901][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.848172][ T25] usb 6-1: config 0 descriptor?? [ 262.850552][T16157] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 262.910666][T16174] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 262.933724][ T39] audit: type=1326 audit(1726535563.252:1543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16175 comm="syz.3.4650" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 262.954138][ T39] audit: type=1326 audit(1726535563.252:1544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16175 comm="syz.3.4650" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 262.965616][ T39] audit: type=1326 audit(1726535563.252:1545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16175 comm="syz.3.4650" exe="/syz-executor" sig=0 arch=40000003 syscall=5 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 262.974924][ T39] audit: type=1326 audit(1726535563.252:1546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16175 comm="syz.3.4650" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 262.982205][ T39] audit: type=1326 audit(1726535563.252:1547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16175 comm="syz.3.4650" exe="/syz-executor" sig=0 arch=40000003 syscall=226 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 262.988580][ T39] audit: type=1326 audit(1726535563.252:1548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16175 comm="syz.3.4650" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 262.994734][ T39] audit: type=1326 audit(1726535563.252:1549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16175 comm="syz.3.4650" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 263.002538][ T39] audit: type=1326 audit(1726535563.252:1550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16175 comm="syz.3.4650" exe="/syz-executor" sig=0 arch=40000003 syscall=227 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 263.011476][ T39] audit: type=1326 audit(1726535563.252:1551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16175 comm="syz.3.4650" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 263.017714][ T39] audit: type=1326 audit(1726535563.252:1552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16175 comm="syz.3.4650" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 263.259462][ T25] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 263.264116][ T25] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 263.266662][ T25] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 263.269754][ T25] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 263.272354][ T25] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 263.275424][ T25] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 263.285579][ T25] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 263.409215][ T5387] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 263.530681][ T982] usb 6-1: USB disconnect, device number 23 [ 263.601002][ T5387] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 263.605032][ T5387] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 263.608623][ T5387] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 263.612194][ T5387] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 263.617077][ T5387] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 263.620215][ T5387] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.624482][ T5387] usb 7-1: config 0 descriptor?? [ 263.921251][T16210] input: syz1 as /devices/virtual/input/input26 [ 264.042000][ T5387] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 264.045270][ T5387] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving [ 264.054688][ T5387] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 264.321644][ T5387] usb 7-1: USB disconnect, device number 19 [ 264.459598][ T5468] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 264.603425][T16253] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 264.649305][ T5468] usb 6-1: Using ep0 maxpacket: 8 [ 264.652020][ T5468] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 264.654440][ T5468] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 264.657531][ T5468] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 264.661112][ T5468] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 264.664557][ T5468] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 264.667121][ T5468] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.912923][ T5468] usb 6-1: GET_CAPABILITIES returned 0 [ 264.914430][ T5468] usbtmc 6-1:16.0: can't read capabilities [ 265.086758][T16283] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4697'. [ 265.117607][T16285] debugfs: Invalid uid '0x00000000ffffffff' [ 265.123037][ T56] usb 6-1: USB disconnect, device number 24 [ 265.999253][ T56] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 266.179311][ T56] usb 7-1: Using ep0 maxpacket: 8 [ 266.182404][ T56] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 266.185651][ T56] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 266.188684][ T56] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 266.191977][ T56] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 266.195331][ T56] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 266.197774][ T56] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.419777][ T56] usb 7-1: usb_control_msg returned -32 [ 266.421335][ T56] usbtmc 7-1:16.0: can't read capabilities [ 268.219379][ T5354] Bluetooth: hci5: command 0x0c1a tx timeout [ 268.219707][T16346] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 268.623241][T16355] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4728'. [ 268.718720][T16358] 9pnet_fd: Insufficient options for proto=fd [ 268.724265][ T982] usb 7-1: USB disconnect, device number 20 [ 269.096696][T16346] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 269.099366][T16346] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 269.103322][T16346] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 269.105153][T16346] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 269.110260][T16346] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 269.679244][T16395] netlink: 116 bytes leftover after parsing attributes in process `syz.3.4744'. [ 270.299357][ T5354] Bluetooth: hci6: command 0x0419 tx timeout [ 270.520551][T16449] Invalid option length (1031570) for dns_resolver key [ 270.533063][ T30] kernel write not supported for file [eventfd] (pid: 30 comm: kworker/1:0) [ 271.179612][ T5354] Bluetooth: hci4: command 0x0c1a tx timeout [ 271.181315][ T5354] Bluetooth: hci2: command 0x0c1a tx timeout [ 271.296442][T16500] Invalid option length (1031570) for dns_resolver key [ 271.392221][ T39] kauditd_printk_skb: 2 callbacks suppressed [ 271.392233][ T39] audit: type=1326 audit(1726535827.710:1555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16501 comm="syz.3.4787" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 271.416634][ T39] audit: type=1326 audit(1726535827.710:1556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16501 comm="syz.3.4787" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 271.423500][ T39] audit: type=1326 audit(1726535827.710:1557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16501 comm="syz.3.4787" exe="/syz-executor" sig=0 arch=40000003 syscall=50 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 271.436235][ T39] audit: type=1326 audit(1726535827.710:1558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16501 comm="syz.3.4787" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 271.451280][ T39] audit: type=1326 audit(1726535827.710:1559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16501 comm="syz.3.4787" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 271.721961][T16524] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4797'. [ 271.820153][T16532] netlink: 'syz.2.4800': attribute type 1 has an invalid length. [ 271.822777][T16532] netlink: 88156 bytes leftover after parsing attributes in process `syz.2.4800'. [ 273.259239][ T5352] Bluetooth: hci4: command 0x0c1a tx timeout [ 275.339794][ T5352] Bluetooth: hci4: command 0x0c1a tx timeout [ 281.164986][T16545] sg_write: data in/out 655360/1 bytes for SCSI command 0xf2-- guessing data in; [ 281.164986][T16545] program syz.2.4807 not setting count and/or reply_len properly [ 281.248934][T16554] input: syz1 as /devices/virtual/input/input27 [ 281.252458][T16556] netlink: 9 bytes leftover after parsing attributes in process `syz.3.4813'. [ 281.254859][T16556] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4813'. [ 281.264180][T16556] netlink: 9 bytes leftover after parsing attributes in process `syz.3.4813'. [ 281.278556][ T5354] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 281.291614][ T5354] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 281.295218][ T5354] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 281.300433][ T5354] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 281.304579][ T5354] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 281.307193][ T5354] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 281.502182][T16560] chnl_net:caif_netlink_parms(): no params data found [ 281.519213][ T30] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 281.607839][T16560] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.610733][T16560] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.612940][T16560] bridge_slave_0: entered allmulticast mode [ 281.615932][T16560] bridge_slave_0: entered promiscuous mode [ 281.619377][T16560] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.621332][T16560] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.623288][T16560] bridge_slave_1: entered allmulticast mode [ 281.625666][T16560] bridge_slave_1: entered promiscuous mode [ 281.672049][T16560] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.677285][T16560] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.709945][ T30] usb 6-1: Using ep0 maxpacket: 16 [ 281.713222][ T30] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 281.715367][ T30] usb 6-1: config 0 has no interface number 0 [ 281.716972][ T30] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 281.729185][ T30] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 281.731261][T16560] team0: Port device team_slave_0 added [ 281.734071][ T30] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 281.735971][T16560] team0: Port device team_slave_1 added [ 281.736317][ T30] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 281.736330][ T30] usb 6-1: Product: syz [ 281.736338][ T30] usb 6-1: SerialNumber: syz [ 281.737586][ T30] usb 6-1: config 0 descriptor?? [ 281.751975][ T30] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 281.754720][ T30] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.8/input/input28 [ 281.838673][T16560] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.847976][T16560] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.860855][T16560] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.867079][T16560] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.868950][T16560] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.875695][T16560] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.933343][T16560] hsr_slave_0: entered promiscuous mode [ 281.936180][T16560] hsr_slave_1: entered promiscuous mode [ 281.938198][T16560] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 281.943702][T16560] Cannot create hsr debugfs directory [ 281.974332][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 282.084778][T16560] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.172902][T16560] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.235122][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 282.243670][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 282.245849][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 282.248722][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 282.250734][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 282.253823][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 282.255849][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 282.257772][ T30] usb 6-1: USB disconnect, device number 25 [ 282.259372][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 282.259382][ C1] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 282.268254][T16560] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.272716][ T30] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 282.344009][ T39] audit: type=1326 audit(1726535838.660:1560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16583 comm="syz.3.4820" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x0 [ 282.384969][T16560] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.401960][T16579] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 282.404735][T16579] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 282.518768][T16560] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 282.523419][T16560] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 282.527514][T16560] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 282.539076][T16560] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 282.662850][T16560] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.679001][T16560] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.686022][ T9467] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.687911][ T9467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.699501][ T9459] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.701422][ T9459] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.817813][T16598] input: syz1 as /devices/virtual/input/input29 [ 282.870739][T16601] netlink: 'syz.2.4826': attribute type 11 has an invalid length. [ 282.896375][T16560] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.990427][T16560] veth0_vlan: entered promiscuous mode [ 282.996887][T16560] veth1_vlan: entered promiscuous mode [ 283.033153][T16560] veth0_macvtap: entered promiscuous mode [ 283.040871][T16560] veth1_macvtap: entered promiscuous mode [ 283.054897][T16560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.058607][T16560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.062296][T16560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.065080][T16560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.067669][T16560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.070425][T16560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.072931][T16560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.075859][T16560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.079033][T16560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.082088][T16560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.084630][T16560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.087772][T16560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.093163][T16560] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 283.104022][T16560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.106851][T16560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.109990][T16560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.113173][T16560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.115839][T16560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.122965][T16560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.125734][T16560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.128420][T16560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.131453][T16560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.134252][T16560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.137608][T16560] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.144615][T16560] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.148471][T16560] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 283.158698][T16560] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.164582][T16560] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.166942][T16560] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.169858][T16560] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.189321][T16610] input: syz0 as /devices/virtual/input/input30 [ 283.306693][ T9467] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.308583][ T9467] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.341630][ T5352] Bluetooth: hci7: command tx timeout [ 283.351328][ T9459] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.361166][ T9459] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.408122][T16620] input: syz1 as /devices/virtual/input/input31 [ 283.647703][T16640] Invalid option length (1031570) for dns_resolver key [ 283.959347][ T5163] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 284.069611][T16662] input: syz1 as /devices/virtual/input/input32 [ 284.151661][ T5163] usb 6-1: Using ep0 maxpacket: 8 [ 284.155749][ T5163] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 284.158432][ T5163] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 284.169191][ T5163] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 284.171896][ T5163] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 284.175326][ T5163] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 284.187895][ T5163] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.382018][T16668] IPVS: Scheduler module ip_vs_sip not found [ 284.399688][ T5163] usb 6-1: GET_CAPABILITIES returned 0 [ 284.401776][ T5163] usbtmc 6-1:16.0: can't read capabilities [ 284.532156][T16683] Invalid option length (1031570) for dns_resolver key [ 284.623498][T16643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.629292][T16643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.635218][ T5163] usb 6-1: USB disconnect, device number 26 [ 285.040574][T16703] loop2: detected capacity change from 0 to 7 [ 285.049359][T16703] Dev loop2: unable to read RDB block 7 [ 285.051524][T16703] loop2: unable to read partition table [ 285.053864][T16703] loop2: partition table beyond EOD, truncated [ 285.055530][T16703] loop_reread_partitions: partition scan of loop2 (被 ) failed (rc=-5) [ 285.080150][ T4835] Dev loop2: unable to read RDB block 7 [ 285.082278][ T4835] loop2: unable to read partition table [ 285.084652][ T4835] loop2: partition table beyond EOD, truncated [ 285.307950][T16719] Invalid option length (1031570) for dns_resolver key [ 285.420325][ T5352] Bluetooth: hci7: command tx timeout [ 285.520175][T16727] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4878'. [ 285.601977][T16731] netlink: 'syz.1.4881': attribute type 4 has an invalid length. [ 285.613158][T16731] netlink: 'syz.1.4881': attribute type 17 has an invalid length. [ 286.165153][ T5352] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 286.246385][T16751] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4888'. [ 286.942771][T16748] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 287.499468][ T5352] Bluetooth: hci7: command tx timeout [ 288.321243][T16800] mkiss: ax0: crc mode is auto. [ 288.528396][T16812] io-wq is not configured for unbound workers [ 288.582853][T16814] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4917'. [ 288.586896][T16814] netlink: 'syz.1.4917': attribute type 7 has an invalid length. [ 288.588924][T16814] netlink: 'syz.1.4917': attribute type 8 has an invalid length. [ 288.594320][T16814] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4917'. [ 288.767190][T16825] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4922'. [ 288.981468][T16836] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 289.152128][ T39] audit: type=1326 audit(1726535845.470:1561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16847 comm="syz.0.4933" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf745e579 code=0x0 [ 289.333175][T16861] tipc: Started in network mode [ 289.334552][T16861] tipc: Node identity ac1414aa, cluster identity 4711 [ 289.337754][T16861] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 289.340954][T16861] tipc: Enabled bearer , priority 10 [ 289.469715][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 289.579230][ T5352] Bluetooth: hci7: command tx timeout [ 289.609387][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 289.749260][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 289.889307][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 290.029264][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 290.169319][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 290.300078][T16907] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4957'. [ 290.302587][T16907] openvswitch: netlink: Key type 29 is not supported [ 290.309300][ C2] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 290.455046][ T56] tipc: Node number set to 2886997162 [ 290.570710][T16918] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4962'. [ 290.760874][ T39] audit: type=1326 audit(1726535847.080:1562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16932 comm="syz.2.4970" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 290.768378][ T39] audit: type=1326 audit(1726535847.080:1563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16932 comm="syz.2.4970" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 290.783503][ T39] audit: type=1326 audit(1726535847.090:1564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16932 comm="syz.2.4970" exe="/syz-executor" sig=0 arch=40000003 syscall=132 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 290.789106][ T39] audit: type=1326 audit(1726535847.090:1565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16932 comm="syz.2.4970" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 290.809355][ T39] audit: type=1326 audit(1726535847.090:1566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16932 comm="syz.2.4970" exe="/syz-executor" sig=0 arch=40000003 syscall=434 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 290.815213][ T39] audit: type=1326 audit(1726535847.090:1567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16932 comm="syz.2.4970" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 290.831432][ T39] audit: type=1326 audit(1726535847.090:1568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16932 comm="syz.2.4970" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 290.837108][ T39] audit: type=1326 audit(1726535847.090:1569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16932 comm="syz.2.4970" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 290.844557][ T39] audit: type=1326 audit(1726535847.090:1570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16932 comm="syz.2.4970" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73de579 code=0x7ffc0000 [ 290.928415][T16947] vivid-004: disconnect [ 290.934082][T16945] vivid-004: reconnect [ 290.940231][T16949] Cannot find add_set index 0 as target [ 291.392069][T16966] netlink: 'syz.1.4984': attribute type 10 has an invalid length. [ 291.430883][T16966] bond0: (slave bond_slave_0): Releasing backup interface [ 291.600051][T16971] vivid-002: disconnect [ 291.601984][T16969] vivid-002: reconnect [ 292.019555][ T4765] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 292.216152][ T4765] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.220865][ T4765] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.225351][ T4765] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 292.235011][ T4765] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 292.238394][ T4765] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.245798][ T4765] usb 6-1: config 0 descriptor?? [ 292.305863][T17004] tun0: tun_chr_ioctl cmd 1074025675 [ 292.307930][T17004] tun0: persist enabled [ 292.311127][T17004] tun0: tun_chr_ioctl cmd 1074025675 [ 292.313223][T17004] tun0: persist disabled [ 292.537535][T17018] vivid-000: ================= START STATUS ================= [ 292.542480][T17018] vivid-000: Test Pattern: 75% Colorbar [ 292.544398][T17018] vivid-000: Fill Percentage of Frame: 100 [ 292.546017][T17018] vivid-000: Horizontal Movement: No Movement [ 292.549786][T17018] vivid-000: Vertical Movement: No Movement [ 292.551405][T17018] vivid-000: OSD Text Mode: All [ 292.559280][T17018] vivid-000: Show Border: false [ 292.560674][T17018] vivid-000: Show Square: false [ 292.561998][T17018] vivid-000: Sensor Flipped Horizontally: false [ 292.563668][T17018] vivid-000: Sensor Flipped Vertically: false [ 292.565306][T17018] vivid-000: Insert SAV Code in Image: false [ 292.566918][T17018] vivid-000: Insert EAV Code in Image: false [ 292.568538][T17018] vivid-000: Insert Video Guard Band: false [ 292.575272][T17018] vivid-000: Reduced Framerate: false [ 292.576921][T17018] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 292.578972][T17018] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 292.582367][T17018] vivid-000: Enable Capture Cropping: true [ 292.583961][T17018] vivid-000: Enable Capture Composing: true [ 292.585559][T17018] vivid-000: Enable Capture Scaler: true [ 292.587069][T17018] vivid-000: Timestamp Source: End of Frame [ 292.588678][T17018] vivid-000: Colorspace: sRGB [ 292.590065][T17018] vivid-000: Transfer Function: Default [ 292.591578][T17018] vivid-000: Y'CbCr Encoding: Default [ 292.593128][T17018] vivid-000: HSV Encoding: Hue 0-179 [ 292.594693][T17018] vivid-000: Quantization: Default [ 292.596124][T17018] vivid-000: Apply Alpha To Red Only: false [ 292.597782][T17018] vivid-000: Standard Aspect Ratio: 4x3 [ 292.599380][T17018] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 292.601554][T17018] vivid-000: DV Timings: 640x480p59 inactive [ 292.603263][T17018] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 292.609098][T17018] vivid-000: Maximum EDID Blocks: 2 [ 292.610881][T17018] vivid-000: Limited RGB Range (16-235): false [ 292.612618][T17018] vivid-000: Rx RGB Quantization Range: Automatic [ 292.616436][T17018] vivid-000: Power Present: 0x00000001 [ 292.617999][T17018] tpg source WxH: 640x360 (Y'CbCr) [ 292.620561][T17018] tpg field: 1 [ 292.621682][T17018] tpg crop: 640x360@0x0 [ 292.622864][T17018] tpg compose: 640x360@0x0 [ 292.624229][T17018] tpg colorspace: 8 [ 292.625473][T17018] tpg transfer function: 0/0 [ 292.627377][T17018] tpg Y'CbCr encoding: 0/0 [ 292.628658][T17018] tpg quantization: 0/0 [ 292.629882][T17018] tpg RGB range: 0/2 [ 292.630944][T17018] vivid-000: ================== END STATUS ================== [ 292.668410][ T4765] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 292.673430][ T4765] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 292.675401][ T4765] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 292.677337][ T4765] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 292.680132][ T4765] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 292.682078][ T4765] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 292.683996][ T4765] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 292.685925][ T4765] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 292.687846][ T4765] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 292.690544][ T4765] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 292.692588][ T4765] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 292.694519][ T4765] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 292.696445][ T4765] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 292.698379][ T4765] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 292.709446][ T4765] plantronics 0003:047F:FFFF.000F: unknown main item tag 0x0 [ 292.712816][ T4765] plantronics 0003:047F:FFFF.000F: No inputs registered, leaving [ 292.726175][ T4765] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 292.741593][T17027] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 292.950364][ T4765] usb 6-1: USB disconnect, device number 27 [ 293.309238][ T56] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 293.490850][ T56] usb 7-1: config 0 has no interfaces? [ 293.492329][ T56] usb 7-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 293.494676][ T56] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.506540][ T56] usb 7-1: config 0 descriptor?? [ 293.766911][T17061] sctp: [Deprecated]: syz.2.5024 (pid 17061) Use of int in max_burst socket option. [ 293.766911][T17061] Use struct sctp_assoc_value instead [ 294.001268][T17074] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 294.159039][T17089] kernel read not supported for file /!selinuxselinux (pid: 17089 comm: syz.1.5040) [ 294.162324][ T39] kauditd_printk_skb: 3 callbacks suppressed [ 294.162333][ T39] audit: type=1800 audit(1726535850.480:1574): pid=17089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5040" name="!selinuxselinux" dev="mqueue" ino=68659 res=0 errno=0 [ 294.315818][ T39] audit: type=1326 audit(1726535850.630:1575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17091 comm="syz.3.5041" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 294.334283][ T39] audit: type=1326 audit(1726535850.630:1576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17091 comm="syz.3.5041" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 294.335033][ T30] usb 7-1: USB disconnect, device number 21 [ 294.348793][ T39] audit: type=1326 audit(1726535850.650:1577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17091 comm="syz.3.5041" exe="/syz-executor" sig=0 arch=40000003 syscall=163 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 294.376720][ T39] audit: type=1326 audit(1726535850.650:1578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17091 comm="syz.3.5041" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 294.387652][ T39] audit: type=1326 audit(1726535850.650:1579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17091 comm="syz.3.5041" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 294.397887][ T39] audit: type=1326 audit(1726535850.660:1580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17091 comm="syz.3.5041" exe="/syz-executor" sig=0 arch=40000003 syscall=162 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 294.403296][ T39] audit: type=1326 audit(1726535850.660:1581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17091 comm="syz.3.5041" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 294.408823][ T39] audit: type=1326 audit(1726535850.660:1582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17091 comm="syz.3.5041" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 294.415199][ T39] audit: type=1326 audit(1726535850.660:1583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17091 comm="syz.3.5041" exe="/syz-executor" sig=0 arch=40000003 syscall=322 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 295.229622][T17126] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 295.233666][T17126] gretap1: entered promiscuous mode [ 295.235056][T17126] gretap1: entered allmulticast mode [ 295.686273][T17130] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5061'. [ 295.758437][T17139] loop0: detected capacity change from 0 to 7 [ 295.764748][T17139] Dev loop0: unable to read RDB block 7 [ 295.766239][T17139] loop0: AHDI p3 [ 295.767228][T17139] loop0: partition table partially beyond EOD, truncated [ 295.774383][T17140] syzkaller1: entered promiscuous mode [ 295.775896][T17140] syzkaller1: entered allmulticast mode [ 295.887246][T17148] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5067'. [ 296.211576][T17170] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5077'. [ 296.449361][ T4765] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 296.629208][ T4765] usb 7-1: Using ep0 maxpacket: 32 [ 296.632367][ T4765] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.635312][ T4765] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.637885][ T4765] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 296.643608][ T4765] usb 7-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 296.646974][ T4765] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.651744][ T4765] usb 7-1: config 0 descriptor?? [ 296.985073][T17188] binder: 17187:17188 ioctl c0306201 20000140 returned -14 [ 297.080364][T17192] netlink: 'syz.1.5085': attribute type 2 has an invalid length. [ 297.093575][ T4765] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:0458:5011.0010/input/input33 [ 297.181272][ T4765] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:0458:5011.0010/input/input34 [ 297.201700][ T4765] kye 0003:0458:5011.0010: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.2-1/input0 [ 298.029723][ T5387] usb 6-1: new low-speed USB device number 28 using dummy_hcd [ 298.210563][ T5387] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 298.212562][ T5387] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 298.215146][ T5387] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 298.217676][ T5387] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 35204, setting to 8 [ 298.230880][ C3] kye 0003:0458:5011.0010: usb_submit_urb(ctrl) failed: -1 [ 298.239052][ T5387] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 298.243588][ T5387] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 298.246234][ T5387] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 298.249074][ T5387] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 35204, setting to 8 [ 298.262556][ T5387] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 298.264441][ T5387] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 298.266933][ T5387] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 298.269426][ T5387] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 35204, setting to 8 [ 298.284273][ T5387] usb 6-1: string descriptor 0 read error: -22 [ 298.285866][ T5387] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 298.288126][ T5387] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.310666][ T5387] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 298.564530][ T35] usb 6-1: USB disconnect, device number 28 [ 299.052528][ T4765] usb 7-1: USB disconnect, device number 22 [ 300.909410][T17251] mac80211_hwsim hwsim27 CTY<: renamed from wlan1 [ 300.929926][T17257] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 301.710220][T17287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5126'. [ 301.716137][T17287] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5126'. [ 302.732010][T17329] netlink: 'syz.0.5142': attribute type 9 has an invalid length. [ 302.734912][T17329] netlink: 134660 bytes leftover after parsing attributes in process `syz.0.5142'. [ 303.139255][ T982] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 303.299544][T17376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5166'. [ 303.322424][ T982] usb 7-1: Using ep0 maxpacket: 8 [ 303.325183][ T982] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 303.327370][ T982] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 303.330094][ T982] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 303.332599][ T982] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 303.335118][ T982] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 303.338625][ T982] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 303.343623][ T982] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.569918][ T982] usb 7-1: usb_control_msg returned -32 [ 303.571760][ T982] usbtmc 7-1:16.0: can't read capabilities [ 303.937791][T17399] usbtmc 7-1:16.0: INITIATE_CLEAR returned 0 [ 304.140664][ T982] usb 7-1: USB disconnect, device number 23 [ 305.092298][T17425] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x201c5 pfn:0x6d344 [ 305.105185][T17425] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff) [ 305.107089][T17425] page_type: 0xbfffffff(buddy) [ 305.108356][T17425] raw: 04fff00000000000 ffffea0001a9e208 ffffea0001421c08 0000000000000000 [ 305.112777][T17425] raw: 00000000000201c5 0000000000000002 00000000bfffffff 0000000000000000 [ 305.115125][T17425] page dumped because: VM_BUG_ON_FOLIO(((unsigned int) folio_ref_count(folio) + 127u <= 127u)) [ 305.119584][T17425] page_owner tracks the page as freed [ 305.122563][T17425] page last allocated via order 0, migratetype Movable, gfp_mask 0x140dca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_ZERO), pid 17331, tgid 17330 (syz.3.5145), ts 302758664330, free_ts 302967258118 [ 305.127379][T17425] post_alloc_hook+0x2d1/0x350 [ 305.128710][T17425] get_page_from_freelist+0x1351/0x2e50 [ 305.134032][T17425] __alloc_pages_noprof+0x22b/0x2460 [ 305.135452][T17425] alloc_pages_mpol_noprof+0x275/0x610 [ 305.137524][T17425] folio_alloc_mpol_noprof+0x36/0xd0 [ 305.138925][T17425] vma_alloc_folio_noprof+0xee/0x1b0 [ 305.140408][T17425] do_wp_page+0xf59/0x3360 [ 305.141595][T17425] __handle_mm_fault+0x23c4/0x5470 [ 305.142965][T17425] handle_mm_fault+0x498/0xa60 [ 305.144295][T17425] do_user_addr_fault+0x7a3/0x13f0 [ 305.145597][T17425] exc_page_fault+0x5c/0xc0 [ 305.146784][T17425] asm_exc_page_fault+0x26/0x30 [ 305.148032][T17425] page last free pid 17330 tgid 17330 stack trace: [ 305.149818][T17425] free_unref_folios+0x9e9/0x1390 [ 305.151182][T17425] folios_put_refs+0x560/0x760 [ 305.152515][T17425] free_pages_and_swap_cache+0x36d/0x510 [ 305.154100][T17425] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 305.155717][T17425] tlb_flush_mmu+0xe9/0x590 [ 305.156909][T17425] unmap_page_range+0x1c74/0x3bf0 [ 305.158219][T17425] unmap_single_vma+0x194/0x2b0 [ 305.165825][T17425] unmap_vmas+0x22f/0x490 [ 305.166999][T17425] exit_mmap+0x1b8/0xb20 [ 305.168120][T17425] __mmput+0x12a/0x480 [ 305.175772][T17425] mmput+0x62/0x70 [ 305.176891][T17425] do_exit+0x9bf/0x2bb0 [ 305.178007][T17425] do_group_exit+0xd3/0x2a0 [ 305.179542][T17425] __ia32_sys_exit_group+0x3e/0x50 [ 305.180859][T17425] ia32_sys_call+0x13f8/0x1bb0 [ 305.182032][T17425] __do_fast_syscall_32+0x73/0x120 [ 305.185188][T17425] ------------[ cut here ]------------ [ 305.186602][T17425] kernel BUG at include/linux/mm.h:1460! [ 305.188044][T17425] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 305.189971][T17425] CPU: 2 UID: 0 PID: 17425 Comm: syz.1.5188 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 305.194207][T17425] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 305.197004][T17425] RIP: 0010:__iov_iter_get_pages_alloc+0x1d1e/0x2240 [ 305.198774][T17425] Code: b0 8b 48 89 df e8 32 4b 4e fd 90 0f 0b 49 89 c5 e9 99 f6 ff ff e8 f2 db 09 fd 48 c7 c6 20 44 b0 8b 4c 89 e7 e8 13 4b 4e fd 90 <0f> 0b e8 db db 09 fd 4c 8b 64 24 48 49 83 ec 01 e9 94 fd ff ff 4c [ 305.199720][T17433] macvlan0: entered promiscuous mode [ 305.203724][T17425] RSP: 0018:ffffc9002e406fd8 EFLAGS: 00010293 [ 305.203744][T17425] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 0000000000000000 [ 305.203750][T17425] RDX: ffff888022190000 RSI: ffffffff848148dd RDI: ffff888022190444 [ 305.203756][T17425] RBP: ffffea0001b4d134 R08: 0000000000000001 R09: fffffbfff2d2791d [ 305.203763][T17425] R10: ffffffff9693c8ef R11: ffff88802b928a40 R12: ffffea0001b4d100 [ 305.203769][T17425] R13: ffff888061f8ec00 R14: 0000000000001000 R15: 0000000000001000 [ 305.203775][T17425] FS: 0000000000000000(0000) GS:ffff88802b800000(0063) knlGS:0000000056ff4440 [ 305.209773][T17433] macvlan0: entered allmulticast mode [ 305.210921][T17425] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 305.220102][T17433] macvlan0: left promiscuous mode [ 305.220796][T17425] CR2: 000000000c3a11f9 CR3: 0000000062be6000 CR4: 0000000000352ef0 [ 305.222608][T17433] macvlan0: left allmulticast mode [ 305.223820][T17425] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 305.229274][T17425] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 305.231323][T17425] Call Trace: [ 305.232206][T17425] [ 305.232992][T17425] ? show_regs+0x8c/0xa0 [ 305.234347][T17425] ? die+0x36/0xa0 [ 305.235343][T17425] ? do_trap+0x232/0x430 [ 305.236471][T17425] ? __iov_iter_get_pages_alloc+0x1d1e/0x2240 [ 305.238054][T17425] ? __iov_iter_get_pages_alloc+0x1d1e/0x2240 [ 305.239637][T17425] ? do_error_trap+0xf4/0x230 [ 305.240867][T17425] ? __iov_iter_get_pages_alloc+0x1d1e/0x2240 [ 305.242428][T17425] ? handle_invalid_op+0x34/0x40 [ 305.243706][T17425] ? __iov_iter_get_pages_alloc+0x1d1e/0x2240 [ 305.245288][T17425] ? exc_invalid_op+0x2e/0x50 [ 305.246512][T17425] ? asm_exc_invalid_op+0x1a/0x20 [ 305.247833][T17425] ? __iov_iter_get_pages_alloc+0x1d1d/0x2240 [ 305.249398][T17425] ? __iov_iter_get_pages_alloc+0x1d1e/0x2240 [ 305.251084][T17425] ? __iov_iter_get_pages_alloc+0x1d1d/0x2240 [ 305.252667][T17425] ? __pfx___iov_iter_get_pages_alloc+0x10/0x10 [ 305.254272][T17425] ? delete_node+0x207/0x8e0 [ 305.255476][T17425] iov_iter_get_pages_alloc2+0x53/0xf0 [ 305.256897][T17425] p9_get_mapped_pages.part.0.constprop.0+0x4ca/0x7d0 [ 305.258631][T17425] ? p9pdu_vwritef+0x368/0x21d0 [ 305.259896][T17425] ? __pfx_p9_get_mapped_pages.part.0.constprop.0+0x10/0x10 [ 305.261792][T17425] ? __pfx_p9pdu_vwritef+0x10/0x10 [ 305.263354][T17425] ? __pfx_p9pdu_vwritef+0x10/0x10 [ 305.264808][T17425] ? p9_tag_alloc+0x4cc/0x870 [ 305.266038][T17425] ? __pfx_lock_release+0x6/0x10 [ 305.267329][T17425] p9_virtio_zc_request+0x1ac/0x1460 [ 305.268717][T17425] ? p9pdu_writef+0xc4/0x100 [ 305.269929][T17425] ? __pfx_p9pdu_writef+0x10/0x10 [ 305.271245][T17425] ? __pfx_p9pdu_vwritef+0x10/0x10 [ 305.272635][T17425] ? __pfx_p9_virtio_zc_request+0x10/0x10 [ 305.274099][T17425] ? rcu_is_watching+0x12/0xc0 [ 305.275343][T17425] ? trace_9p_protocol_dump+0x192/0x220 [ 305.276791][T17425] ? rcu_is_watching+0x12/0xc0 [ 305.278040][T17425] ? p9_client_prepare_req+0x111/0x4d0 [ 305.279461][T17425] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 305.281016][T17425] ? hlock_class+0x4e/0x130 [ 305.282241][T17425] ? stack_trace_save+0x95/0xd0 [ 305.283506][T17425] p9_client_zc_rpc.constprop.0+0x29a/0x880 [ 305.285047][T17425] ? __pfx_p9_client_zc_rpc.constprop.0+0x10/0x10 [ 305.286725][T17425] ? __pfx___lock_acquire+0x10/0x10 [ 305.288087][T17425] ? hlock_class+0x4e/0x130 [ 305.289279][T17425] ? mark_lock+0xb5/0xc60 [ 305.290411][T17425] ? __pfx_mark_lock+0x10/0x10 [ 305.291662][T17425] ? __pfx_p9_virtio_zc_request+0x10/0x10 [ 305.293181][T17425] p9_client_write+0x447/0x680 [ 305.294440][T17425] ? __pfx_p9_client_write+0x10/0x10 [ 305.295788][T17425] ? mark_held_locks+0x9f/0xe0 [ 305.297059][T17425] v9fs_issue_write+0xe2/0x180 [ 305.298304][T17425] ? __pfx_v9fs_issue_write+0x10/0x10 [ 305.299707][T17425] ? rcu_is_watching+0x12/0xc0 [ 305.300986][T17425] ? trace_netfs_sreq+0x193/0x220 [ 305.302353][T17425] netfs_do_issue_write+0x92/0x110 [ 305.303685][T17425] netfs_advance_write+0x384/0xbd0 [ 305.305020][T17425] ? netfs_buffer_append_folio+0x569/0x750 [ 305.306534][T17425] netfs_write_folio+0xc44/0x18f0 [ 305.307839][T17425] netfs_writepages+0x2ba/0xb90 [ 305.309117][T17425] ? __pfx_netfs_writepages+0x10/0x10 [ 305.310502][T17425] ? __pfx___lock_acquire+0x10/0x10 [ 305.311913][T17425] ? stack_access_ok+0xf9/0x270 [ 305.313215][T17425] ? __pfx_netfs_writepages+0x10/0x10 [ 305.314605][T17425] do_writepages+0x1a3/0x7f0 [ 305.315823][T17425] ? __pfx_do_writepages+0x10/0x10 [ 305.317180][T17425] ? __pfx_lock_acquire+0x10/0x10 [ 305.318500][T17425] ? do_raw_spin_lock+0x12d/0x2c0 [ 305.319824][T17425] ? do_raw_spin_unlock+0x172/0x230 [ 305.321215][T17425] ? _raw_spin_unlock+0x28/0x50 [ 305.322534][T17425] ? wbc_attach_and_unlock_inode+0x597/0x940 [ 305.324082][T17425] filemap_fdatawrite_wbc+0x148/0x1c0 [ 305.325440][T17425] __filemap_fdatawrite_range+0xba/0x100 [ 305.326911][T17425] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 305.328558][T17425] v9fs_dir_release+0x429/0x590 [ 305.329846][T17425] ? __pfx_v9fs_dir_release+0x10/0x10 [ 305.331247][T17425] ? __pfx_v9fs_dir_release+0x10/0x10 [ 305.332699][T17425] __fput+0x3f6/0xb60 [ 305.333749][T17425] ? _raw_spin_unlock_irq+0x23/0x50 [ 305.335130][T17425] task_work_run+0x14e/0x250 [ 305.336567][T17425] ? __pfx_task_work_run+0x10/0x10 [ 305.337895][T17425] ? __pfx___close_range+0x10/0x10 [ 305.339223][T17425] syscall_exit_to_user_mode+0x27b/0x2a0 [ 305.340695][T17425] __do_fast_syscall_32+0x80/0x120 [ 305.342014][T17425] do_fast_syscall_32+0x32/0x80 [ 305.343393][T17425] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 305.345023][T17425] RIP: 0023:0xf7f7f579 [ 305.346081][T17425] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 305.351021][T17425] RSP: 002b:00000000ff80b08c EFLAGS: 00000202 ORIG_RAX: 00000000000001b4 [ 305.353178][T17425] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 000000000000001e [ 305.355204][T17425] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 305.357231][T17425] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 305.359259][T17425] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 305.361309][T17425] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 305.363323][T17425] [ 305.364106][T17425] Modules linked in: [ 305.365161][ C2] vkms_vblank_simulate: vblank timer overrun [ 305.372383][T17425] ---[ end trace 0000000000000000 ]--- [ 305.373735][T17425] RIP: 0010:__iov_iter_get_pages_alloc+0x1d1e/0x2240 [ 305.375471][T17425] Code: b0 8b 48 89 df e8 32 4b 4e fd 90 0f 0b 49 89 c5 e9 99 f6 ff ff e8 f2 db 09 fd 48 c7 c6 20 44 b0 8b 4c 89 e7 e8 13 4b 4e fd 90 <0f> 0b e8 db db 09 fd 4c 8b 64 24 48 49 83 ec 01 e9 94 fd ff ff 4c [ 305.380672][T17425] RSP: 0018:ffffc9002e406fd8 EFLAGS: 00010293 [ 305.382283][T17425] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 0000000000000000 [ 305.384579][T17425] RDX: ffff888022190000 RSI: ffffffff848148dd RDI: ffff888022190444 [ 305.387918][T17425] RBP: ffffea0001b4d134 R08: 0000000000000001 R09: fffffbfff2d2791d [ 305.390132][T17425] R10: ffffffff9693c8ef R11: ffff88802b928a40 R12: ffffea0001b4d100 [ 305.403222][T17425] R13: ffff888061f8ec00 R14: 0000000000001000 R15: 0000000000001000 [ 305.407889][T17425] FS: 0000000000000000(0000) GS:ffff88802b800000(0063) knlGS:0000000056ff4440 [ 305.410388][T17425] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 305.412107][T17425] CR2: 00000000f73cf048 CR3: 0000000062be6000 CR4: 0000000000352ef0 [ 305.414292][T17425] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 305.416346][T17425] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 305.418435][T17425] Kernel panic - not syncing: Fatal exception [ 305.420608][T17425] Kernel Offset: disabled [ 305.421734][T17425] Rebooting in 86400 seconds.. VM DIAGNOSIS: 01:13:25 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffff888023096500 RCX=ffffffff88de6d07 RDX=ffff88801ea00000 RSI=0000000000000000 RDI=0000000000000001 RBP=0000000000000000 RSP=ffffc900000078b0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=ffffc90000007ff8 R12=0000000000000000 R13=ffff8880276b4000 R14=ffff8880230965d0 R15=0000000000000000 RIP=ffffffff818b24cc RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c2fed35 CR3=0000000064bd6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b29985c383b5c921 9110359c84d923a2 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 749d5c849c81115f d08f35666e849789 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3307927e590c2a66 a59df46a12f2ed8e ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 54c27e430f0e5ee7 852e7437d73834d9 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 00000000000000b4 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000034 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 185d8d51c900be71 f2bb8456170c9e9a ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 fa749d98b37c04e7 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 9066531714772521 a1e2cb4dd6d29f60 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d0bfbd000000000 e1423a8b0a81aba9 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 71ac83b3aa2537e7 eccd05689c6f0b2a ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f9620a7d9ddc9bca 8509739073fa8747 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffffc90003ce7330 RCX=ffffffff813c977c RDX=ffff8880267ec880 RSI=ffffffff813c9798 RDI=0000000000000005 RBP=0000000000000001 RSP=ffffc90003ce7300 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=dffffc0000000000 R12=ffffc90003ce7330 R13=ffffffff8176dea0 R14=ffffc90003ce73f0 R15=ffff8880267ec880 RIP=ffffffff818b2501 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b700000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7402064 CR3=0000000029fe6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000000007a RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff84fcd3b5 RDI=ffffffff9a5e9460 RBP=ffffffff9a5e9420 RSP=ffffc9002e406968 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=552032203a555043 R12=0000000000000000 R13=000000000000007a R14=ffffffff84fcd350 R15=0000000000000000 RIP=ffffffff84fcd3df RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b800000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c3a11f9 CR3=0000000062be6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffff888029424880 RCX=ffffffff8165b84c RDX=ffffed1005284914 RSI=0000000000000004 RDI=ffff888029424898 RBP=0000000000000001 RSP=ffffc90006777b68 R8 =0000000000000001 R9 =ffffed1005284913 R10=ffff88802942489b R11=0000000000000001 R12=ffff888025df22d8 R13=0000000000000202 R14=0000000000000000 R15=ffffffff8165b825 RIP=ffffffff8165b851 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b900000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7405008 CR3=000000002187e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000