last executing test programs: 7m7.051356518s ago: executing program 1 (id=2282): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x90004) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x3ffd, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141101) dup(r5) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r7, &(0x7f0000000000)="fa", 0xfffffdef) sendmsg$nl_xfrm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newsa={0x13c, 0x10, 0x413, 0x0, 0x0, {{@in6=@private2, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x20, 0x2b, 0x0, 0xee00}, {@in=@loopback, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0xf}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7}, {0x0, 0x4, 0xcc}, {0xf6}, 0x0, 0x0, 0xa, 0x1, 0x1}, [@algo_aead={0x4c, 0x12, {{'rfc4309(ccm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x201}, 0x1}) ioctl$VIDIOC_SUBDEV_S_SELECTION(0xffffffffffffffff, 0xc040563e, &(0x7f0000000000)={0x1, 0x0, 0x1, 0x0, {0x2, 0x0, 0x7fff, 0xe57}}) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(0xffffffffffffffff, 0x7, 0x0) 7m4.172914932s ago: executing program 1 (id=2286): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, 0x0) r3 = dup(r1) r4 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000280)={@remote, @initdev, 0x0}, &(0x7f0000000380)=0xc) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f00000003c0)={@loopback, 0x23, r5}) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) chdir(&(0x7f0000000100)='./file0\x00') r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) pwritev2(r7, &(0x7f0000000980)=[{0x0, 0x1e}, {&(0x7f0000000500)="be81e1310fb465f31a42f6efa58772d291c57be2782f6ff63ea3517e50771580447f7d195ee15e186027d518b2c77a051895fece1dc014c33d6928ab0376cf4077399b51451472f53be50af6897bc0fa353cad9156d19de3665191fdf17a2f07f4286cea5c10fbb81feb85e406524a47b1978139eaa8", 0x76}, {0x0}], 0x3, 0x5, 0xa, 0x14) r8 = socket$netlink(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, 0x0, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x0, 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 7m2.958174024s ago: executing program 1 (id=2288): syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) r0 = socket$kcm(0x25, 0x1, 0x0) recvmsg$kcm(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x160) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) move_mount(r1, 0x0, r1, &(0x7f00000003c0)='./file0\x00', 0x40) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newtaction={0xdac, 0x30, 0x1, 0x70bd2a, 0x0, {}, [{0xd98, 0x1, [@m_police={0xd4c, 0x1a, 0x0, 0x0, {{0xb}, {0xc40, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x81}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x40}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0xfffffffa, 0x6, 0x5, 0x6, 0x8, 0xc2, 0x6cb, 0x2, 0xffa, 0x10, 0x9, 0x0, 0x3, 0x3, 0x1, 0x58, 0x6, 0x5, 0x80, 0x7, 0x0, 0x7bf5c33c, 0x1, 0x3, 0x8e6, 0x1, 0xfffffffa, 0x0, 0x1, 0x4f, 0x4, 0x2, 0x0, 0x7, 0x6, 0x8, 0xf, 0x5, 0xf17, 0x1, 0x3, 0x0, 0x8, 0xb, 0xfffffffa, 0xfffffffd, 0x8000, 0xa, 0x3, 0x3, 0x81, 0x5, 0x1, 0xff, 0x7, 0x2, 0x1000, 0x6, 0x1, 0x4, 0x0, 0x1, 0x200, 0x7, 0xb6, 0x80000000, 0x0, 0x5, 0x5, 0x0, 0x5, 0x0, 0x0, 0x6, 0x9, 0x5, 0x7, 0xc20, 0x4, 0x10000, 0xc3, 0x7f, 0x9, 0x0, 0x7ff, 0x1, 0x3, 0x1, 0x2, 0x0, 0x9, 0x7ff, 0x7e, 0x9, 0x8, 0x5, 0x5, 0x8001, 0x4, 0xe18c, 0x7, 0x9, 0xfffffff9, 0x5, 0x3, 0xc65, 0x6, 0xfff, 0xffffff80, 0x5, 0x0, 0x3d, 0x3, 0x2, 0xd, 0xee, 0xc00, 0xd, 0x235, 0xffffff81, 0xa, 0x9, 0x9, 0x9, 0x101, 0x74, 0x3, 0x6, 0x7, 0x6e, 0x8, 0x6, 0xffff, 0xffffffff, 0x3, 0xff2, 0x101, 0x6c9e59f6, 0x18, 0x1, 0x3, 0x5, 0xffffff81, 0x101, 0x2, 0x78a, 0xe3c, 0x200, 0x6, 0xfffffe01, 0xe350, 0x1b9d, 0x7, 0x4, 0xf, 0xfffffff1, 0x7, 0x87, 0x7, 0x93c, 0x2, 0x12, 0x5, 0x40, 0x0, 0x3, 0xff, 0x1, 0x8, 0x800, 0xd, 0x3, 0xd, 0x3, 0x4, 0x4149, 0x80000000, 0x6, 0xdb3, 0x623, 0xffff, 0xfffffffd, 0x401, 0x8, 0x7fffffff, 0x7, 0x40, 0xd, 0x722a75d2, 0x0, 0xb, 0x401, 0xa9bd, 0x4, 0x7, 0x1, 0x400, 0x0, 0x4, 0x3, 0x80000000, 0x7fffffff, 0x8, 0x4, 0x40, 0x3, 0x7fff, 0x33, 0x1edf, 0x8, 0x6, 0x7, 0x5, 0x13, 0x2, 0x8, 0x0, 0x2, 0x2, 0x65b, 0x80000000, 0x3, 0xfffffff7, 0x5, 0x1, 0xffff, 0x8, 0x4, 0x9, 0xffff, 0xed, 0x7, 0x1, 0xb, 0x93b8, 0x0, 0x3f8c3396, 0x7fffffff, 0xf, 0x0, 0xfffffffe, 0x3, 0xa0, 0x400, 0x3, 0x1, 0x9, 0x0, 0x2, 0x6, 0x9, 0x5, 0x8, 0x1000, 0x7fffffff]}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0xe7, 0x9, 0x68, 0x8, 0x875, 0x8, 0xfffffc01, 0x4, 0x2, 0x5, 0x1, 0x0, 0x9, 0x3ff, 0xf2, 0x2, 0xff, 0xffffff01, 0x3, 0x8338, 0xd78, 0x10000, 0x3, 0x0, 0x7, 0x4, 0x1, 0x8, 0x9, 0x9, 0x7, 0x7fffffff, 0x1000, 0xe, 0xd5a, 0x9, 0x7, 0x4, 0x9, 0x0, 0xfffffffa, 0x8, 0x1, 0x2, 0x7f, 0x8, 0x10000, 0x6, 0x8, 0x3, 0x1, 0x3, 0x44, 0x8000, 0x5, 0x9, 0xa6f, 0x6, 0xf, 0xec, 0x6, 0x200, 0x4, 0x9, 0xd, 0x3b05, 0x7, 0x1, 0x5, 0x6, 0x4, 0x7ff, 0x5, 0x5, 0x10001, 0x28, 0xfffffff3, 0x8, 0x5, 0x1, 0x2, 0x10001, 0x4, 0xee, 0x4, 0x7ff, 0x0, 0x40, 0x133f, 0x9, 0x28000, 0x9, 0x3ff, 0x80000001, 0x9, 0x8, 0x9, 0xbd, 0x6, 0x800, 0x7763, 0x2, 0x3, 0x1, 0x3, 0x8, 0x3, 0x6d4f, 0xe5, 0x3, 0x8, 0xffffffff, 0x5930, 0xf7e8, 0xcd, 0x7a, 0x4, 0x9, 0x3, 0x0, 0x1000, 0x8, 0x6, 0x9, 0x2, 0x0, 0x8, 0x1, 0x7, 0x5, 0xfffffffb, 0x200, 0x3, 0x3, 0x5, 0x1, 0x7fff, 0x10000, 0xe, 0x400, 0x94, 0xfffff801, 0x7a9067ab, 0x9, 0x7fff, 0x6, 0x1, 0x4, 0x6, 0x4, 0x4, 0x0, 0x1, 0x7, 0x9, 0x4, 0x6, 0xfffffff9, 0x5, 0x9, 0x800, 0xd52, 0xc08, 0x0, 0xfffffffb, 0x960, 0xf, 0x8, 0x3, 0xffffffff, 0x8, 0xd3f, 0x6, 0x8000, 0x400, 0xffffffff, 0x2, 0x2, 0x1000, 0xc, 0x80000000, 0x8, 0x5, 0xffffd1ab, 0x8, 0x1, 0x5, 0xffff7fff, 0x3, 0x12200000, 0x80, 0x0, 0x1, 0x9, 0x5, 0x8, 0xe4a, 0x0, 0x4, 0x1, 0x13e1, 0x8, 0x3, 0x2, 0x10, 0x101, 0x473f, 0x9, 0x2b86, 0x3, 0x5, 0xd004, 0x1, 0x3cdb, 0x7, 0xc5b, 0xfffffffd, 0x6, 0x200, 0x100, 0x40, 0x4, 0xf, 0x200, 0x0, 0x6, 0x38, 0x1, 0x1, 0x0, 0xd, 0xffff723a, 0x100, 0xf, 0xfffffff4, 0x4, 0x10001, 0xb, 0x847, 0x100, 0x0, 0x0, 0x1, 0x6, 0x7fffffff, 0x0, 0xd, 0x0, 0x6, 0xffffffff, 0x4, 0x4, 0x1, 0x7fffffff, 0x4]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x0, 0x101, 0x4, 0x8, 0x9, 0x5e4, 0x1, 0xfffffffc, 0x5, 0xfff, 0x292eb0c4, 0x4, 0x3, 0x54e1abbc, 0x100, 0x40c7, 0x3, 0x2860000, 0x1, 0x3, 0xffff, 0x0, 0xa, 0x3, 0x80000001, 0xfffffff9, 0x5, 0x0, 0xf9, 0x80000001, 0x3ff, 0x3, 0xb, 0x8, 0x2, 0x0, 0x3, 0x9, 0xfffffff9, 0x8, 0x5, 0x0, 0x0, 0x4, 0x57c6291b, 0x40, 0x4, 0x7eb0f610, 0x3e, 0x5, 0xd5e6, 0xe56, 0x10000, 0x8, 0x7fff, 0x2, 0x40, 0x40, 0x2, 0x0, 0x0, 0x0, 0x8, 0x6df, 0x7, 0x5b, 0xb, 0xffffd524, 0x80000000, 0x0, 0x6, 0x2, 0x80000000, 0x6, 0x80, 0x3, 0x1ff, 0x1000, 0x20db, 0x40, 0x2, 0x7fffffff, 0x6, 0x1, 0x8a7, 0x0, 0xb1, 0x0, 0x8, 0x10001, 0x10001, 0xfffffffd, 0x7ff, 0x79, 0x3, 0x1ff, 0x7f, 0x7, 0x5, 0x7f, 0x10000, 0x83f3, 0x4, 0x7ef5, 0x7, 0x7, 0x5, 0x7ff, 0x0, 0x4e, 0x4, 0xc, 0x0, 0x1, 0x85a, 0x3, 0x8, 0x53, 0xfffff77c, 0x0, 0x80000001, 0x8000, 0x2, 0x0, 0x2d6b, 0x200, 0x4, 0x33, 0x6, 0xbed, 0x7ff, 0x6, 0x5, 0x8, 0x7, 0x3, 0x8, 0x7ff, 0x6, 0x9951, 0x7, 0x9, 0x5, 0x10000, 0x6, 0x2, 0x26ec, 0x0, 0x8000, 0x3, 0x2b3e, 0xb17b, 0xe, 0x7ba, 0x8000, 0x7, 0xf79, 0xd3c, 0x5, 0x0, 0x9, 0x7, 0x8, 0x9, 0x4, 0x8, 0x8, 0x5, 0x10, 0x2, 0x8, 0xdaf, 0x8, 0x4, 0x2, 0x745, 0x1, 0x0, 0x3, 0x4, 0xf4, 0x7f, 0x9, 0x1, 0x2, 0xffff, 0x8, 0x5, 0x3, 0x2, 0x8, 0xf60, 0x4, 0x0, 0xffffffff, 0x9, 0x3, 0x40, 0x0, 0x5, 0x3ea, 0x0, 0x1, 0x4d0eba58, 0xfffffffa, 0x0, 0x7fffffff, 0x9, 0x73, 0x81, 0xc70, 0x7, 0x2, 0xc5c, 0x7, 0x6, 0x80000, 0xc, 0x2, 0xb, 0x7f, 0x1, 0x3, 0xffffffff, 0xf, 0x4, 0x5, 0x9, 0x6, 0x1, 0x1, 0x3, 0x2, 0xcc, 0x40, 0x81, 0x7fffffff, 0x0, 0x6, 0x3, 0x0, 0x1, 0x7, 0x8001, 0xfffffff9, 0x7, 0x9, 0xfffffffd, 0x3, 0x167, 0x2, 0x7, 0x2, 0x1, 0x5]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xd}]]}, {0xe1, 0x6, "0b3144cac06ce2148e109f6c77e619971857ca59ff73f33fd5590f5ec46c042c1a103b2f42c7a108ece8d9a32e748d8033578f18700b7929a4117c896cf56e2042f6b4a8be38530e592459633b0aa669063f7035b6012b01684bba2dc998b1cea657357a7b362b3de39f0a346d5592fcfb61f9e07416057a8358c4abc6d2286e9caf0cabbc757e59b5e041e6835a58c99cfb65af6b9dad034202d1d36f196d022c11ef8f6d2a2531fdbf4ac2b9087fc700b4d5821784d5312c7abb8d681e39c65fff09351d6c371ec417f158b18aba491fcb8bf9beab16ffaf8e1c79da"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xffffffffffffffff, 0x4}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xdac}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010001000000fbdbdf250f00000008000300", @ANYRES32=r5, @ANYBLOB="08003900000800eecdebe5b790faa61243582bf8994eaaa1485c99043a8e3d32db54df2ece6fead92ee39c4def8d7e11455cfa10b6502ba8fcf2c16852c668150fd0aecb65f14897ef0801bf1c453ea0e53eea83b71b698157fe580ad906a9224794af5c82c2e4263545929e223f5763a537a0fe33afff000aa5828943517f84c8ba8454bd5368ec1640584f9cbc603953568ebb45e65172df2ae2fe515a889d9923484b8849b4978f505d106cfe0c2aeb2c0692b1b8b50793416b89c15e8cec28a3443a5e5e6a2d5518d20678e7cf8e8706c89e9acfc6cdf1e5e7130e"], 0x24}}, 0x24014040) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r6, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2fc, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x268, 0xffffff7a, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x41}, 0x6, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "e4ff0100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9eb85f401b0000000000ffffff7f00", 0x7d}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x2, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x358) r9 = socket$packet(0x11, 0x2, 0x300) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000241000/0x2000)=nil, 0x2000, &(0x7f0000000400)='bm\x00') setsockopt$packet_tx_ring(r9, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa960bffffd, 0x13012, r9, 0x0) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x14) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000380), 0x2, 0x0) 6m59.516097324s ago: executing program 1 (id=2291): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xffffffff, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$udambuf(0xffffff9c, 0x0, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x14, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000003240)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)=[0x0], &(0x7f0000005b40), 0x0, 0x1, 0x0, 0x0, r7}) syz_usb_connect$uac1(0x6, 0x82, &(0x7f0000000000)=ANY=[], 0x0) close_range(r5, 0xffffffffffffffff, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x2}}, 0x26) socket$nl_xfrm(0x10, 0x3, 0x6) 6m54.790134449s ago: executing program 1 (id=2297): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x24000805}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x48801}, 0x20004000) setreuid(0xee01, 0xee01) prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) r1 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_MADVISE={0x19, 0x59, 0x0, 0x0, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x9}) io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={0x1, 0x58, &(0x7f0000000300)}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=@gettaction={0x1c4, 0x32, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x78, 0x1, [{0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x401}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10}}, {0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x58}}]}, @action_gd=@TCA_ACT_TAB={0x2c, 0x1, [{0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x88}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_gd=@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x14, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x8c, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x14, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x14, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r7 = fsopen(&(0x7f0000000000)='nilfs2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 6m51.104612853s ago: executing program 1 (id=2302): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = gettid() sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f00000009c0)={&(0x7f0000000200)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x20040000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000f40)=@filter={'filter\x00', 0x4, 0x4, 0x458, 0xffffffff, 0x0, 0x0, 0xe4, 0xfeffffff, 0xffffffff, 0x390, 0x390, 0x390, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa4, 0xe4}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x4}}}, {{@ipv6={@private2, @empty, [], [], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xec, 0x12c, 0x0, {}, [@common=@dst={{0x48}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x57, {0x2000000}}}}, {{@ipv6={@empty, @mcast1, [], [], 'ip6tnl0\x00', 'dvmrp0\x00'}, 0x0, 0x15c, 0x180, 0x0, {}, [@common=@unspec=@realm={{0xb8}, {0x1, 0xdd8}}, @common=@srh1={{0x8c}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev, @private1}}]}, @REJECT={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4b4) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000000)={0x4, 0x0, 0x16, 0x1, 0x100, &(0x7f0000000040)="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"}) ioctl$VT_DISALLOCATE(r2, 0x5608) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x9) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000091c6c04f89a6e18ae74323154d88075dc99219d02e3ddb191788cd672158b40812b1ca879df6ed25e14f55baf812604a8a23d04b7e7c190f7c58884ef8eeb0587b84e1c318b66b6e182e76fb3ab00c358447636545c0b3b40a9f00eb4bdea3d21a08f93cc8f4ca162e860c831fecfd06ee46be831468c28f892dcfd80ad9cf72e82ec7d412bbcfc5ff7a9a7f5232e26b672b1e45509df541872ade0f2d1a1f09605bcb20c64496c891c412ef550545498bde239dd9a184e0429ae68bb72fdab0869a8a70", @ANYRES16=r6, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff"], 0x58}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000"], 0x7c}}, 0x0) syz_open_procfs$namespace(0x0, 0x0) r9 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r9, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10, 0x0}, 0x34005040) r10 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r10, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000000000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) sendmsg$key(0xffffffffffffffff, 0x0, 0x2404c857) 6m35.369370882s ago: executing program 32 (id=2302): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = gettid() sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f00000009c0)={&(0x7f0000000200)={0x2, 0x4e21, @multicast1}, 0x10, 0x0}, 0x20040000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000f40)=@filter={'filter\x00', 0x4, 0x4, 0x458, 0xffffffff, 0x0, 0x0, 0xe4, 0xfeffffff, 0xffffffff, 0x390, 0x390, 0x390, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa4, 0xe4}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x4}}}, {{@ipv6={@private2, @empty, [], [], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0xec, 0x12c, 0x0, {}, [@common=@dst={{0x48}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x57, {0x2000000}}}}, {{@ipv6={@empty, @mcast1, [], [], 'ip6tnl0\x00', 'dvmrp0\x00'}, 0x0, 0x15c, 0x180, 0x0, {}, [@common=@unspec=@realm={{0xb8}, {0x1, 0xdd8}}, @common=@srh1={{0x8c}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @dev, @private1}}]}, @REJECT={0x24}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x4b4) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000000)={0x4, 0x0, 0x16, 0x1, 0x100, &(0x7f0000000040)="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"}) ioctl$VT_DISALLOCATE(r2, 0x5608) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x9) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="5800000091c6c04f89a6e18ae74323154d88075dc99219d02e3ddb191788cd672158b40812b1ca879df6ed25e14f55baf812604a8a23d04b7e7c190f7c58884ef8eeb0587b84e1c318b66b6e182e76fb3ab00c358447636545c0b3b40a9f00eb4bdea3d21a08f93cc8f4ca162e860c831fecfd06ee46be831468c28f892dcfd80ad9cf72e82ec7d412bbcfc5ff7a9a7f5232e26b672b1e45509df541872ade0f2d1a1f09605bcb20c64496c891c412ef550545498bde239dd9a184e0429ae68bb72fdab0869a8a70", @ANYRES16=r6, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff"], 0x58}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000"], 0x7c}}, 0x0) syz_open_procfs$namespace(0x0, 0x0) r9 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r9, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10, 0x0}, 0x34005040) r10 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r10, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f000000000000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) sendmsg$key(0xffffffffffffffff, 0x0, 0x2404c857) 46.04989593s ago: executing program 2 (id=3249): r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r1) setfsuid(r1) 43.082576991s ago: executing program 3 (id=3582): creat(&(0x7f0000000000)='./file0\x00', 0x108) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x1, 0xc18da8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0xa4901, 0x0) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, 0x0) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x6, 0x800) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0xba7b, 0x0, 0x4, 0x2c}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) 41.171057489s ago: executing program 2 (id=3249): r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r1) setfsuid(r1) 38.422276559s ago: executing program 3 (id=3582): creat(&(0x7f0000000000)='./file0\x00', 0x108) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x1, 0xc18da8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0xa4901, 0x0) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, 0x0) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x6, 0x800) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0xba7b, 0x0, 0x4, 0x2c}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) 35.994498804s ago: executing program 2 (id=3249): r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r1) setfsuid(r1) 33.968859568s ago: executing program 3 (id=3582): creat(&(0x7f0000000000)='./file0\x00', 0x108) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x1, 0xc18da8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0xa4901, 0x0) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, 0x0) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x6, 0x800) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0xba7b, 0x0, 0x4, 0x2c}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) 30.507571383s ago: executing program 2 (id=3249): r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r1) setfsuid(r1) 29.036898429s ago: executing program 3 (id=3582): creat(&(0x7f0000000000)='./file0\x00', 0x108) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x1, 0xc18da8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0xa4901, 0x0) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, 0x0) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x6, 0x800) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0xba7b, 0x0, 0x4, 0x2c}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) 25.279933884s ago: executing program 2 (id=3249): r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r1) setfsuid(r1) 23.645250009s ago: executing program 3 (id=3582): creat(&(0x7f0000000000)='./file0\x00', 0x108) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x1, 0xc18da8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0xa4901, 0x0) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, 0x0) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x6, 0x800) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0xba7b, 0x0, 0x4, 0x2c}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) 20.678393947s ago: executing program 0 (id=3745): r0 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r1 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r1) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x13, r0, 0x0) 19.881189558s ago: executing program 2 (id=3249): r0 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setfsuid(r1) setfsuid(r1) 18.683854037s ago: executing program 3 (id=3582): creat(&(0x7f0000000000)='./file0\x00', 0x108) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x1, 0xc18da8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0xa4901, 0x0) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, 0x0) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x6, 0x800) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0xba7b, 0x0, 0x4, 0x2c}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) 17.594314393s ago: executing program 0 (id=3750): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000080)='./file0/file1\x00', 0xd6) write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff) link(&(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000180)='./file1\x00') mount$tmpfs(0x0, &(0x7f0000000140)='./file0/file1\x00', &(0x7f0000000580), 0x0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000201, 0x0, 0x0, 0x0) 17.395765618s ago: executing program 4 (id=3753): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2, &(0x7f0000000240)={0x1, {{0xa, 0x4e23, 0x804d8b, @remote, 0x401}}, {{0xa, 0x4e21, 0xfffffffe, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xd5}}}, 0x108) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00@\x00', 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "560400", 0x14, 0x6, 0x1, @private1, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x4, 0x0, 0x4}}}}}}}, 0x0) 17.336858771s ago: executing program 4 (id=3754): socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r2, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000894) 17.275809715s ago: executing program 4 (id=3755): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000040)=[0x0, 0x0], 0x1f, r3, r4, 0x3, 0x0, 0xffffffff, 0x804, {0xac7a, 0x1, 0x3, 0x67, 0xf4b, 0x1, 0x2, 0x5, 0x412f, 0xe154, 0x1000, 0x7f, 0x6, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}}) 17.208470846s ago: executing program 0 (id=3756): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r0, r2}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x2e}}, {{0xffff, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x800}}}}}}, 0x0) 17.204903456s ago: executing program 4 (id=3757): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r3, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r4, 0xc0383e04, &(0x7f00000000c0)={""/32, 0x0, 0x0, 0x0, 0xffffe000, 0x0}) 17.169716859s ago: executing program 4 (id=3758): r0 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0) r1 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r1) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000001, 0x13, r0, 0x0) 17.136691612s ago: executing program 0 (id=3759): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = io_uring_setup(0x61d8, &(0x7f0000000a40)={0x0, 0x5, 0x800, 0xfffffffe, 0x40003be}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xff, 0x0, 0x7fc00100}]}) io_getevents(0x0, 0xfffe, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 16.259540818s ago: executing program 0 (id=3760): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000100)) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 15.345204717s ago: executing program 0 (id=3761): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, 0x0) r4 = dup(r2) r5 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f0000000280)={@remote, @initdev, 0x0}, &(0x7f0000000380)=0xc) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f00000003c0)={@loopback, 0x23, r6}) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[]) chdir(&(0x7f0000000100)='./file0\x00') r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) pwritev2(r8, &(0x7f0000000980)=[{0x0, 0x1e}, {&(0x7f0000000500)="be81e1310fb465f31a42f6efa58772d291c57be2782f6ff63ea3517e50771580447f7d195ee15e186027d518b2c77a051895fece1dc014c33d6928ab0376cf4077399b51451472f53be50af6897bc0fa353cad9156d19de3665191fdf17a2f07f4286cea5c10fbb81feb85e406524a47b1978139eaa8", 0x76}, {0x0}], 0x3, 0x5, 0xa, 0x14) r9 = socket$netlink(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, 0x0, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x0, 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r7, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}, 0xa1}, {{0x0, 0x0, 0x0}, 0x1ff}], 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket(0x18, 0x4, 0x0) 14.095683229s ago: executing program 4 (id=3762): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r0, 0x0, 0xf69}, 0x18) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r2, 0x0, 0xf69}, 0x18) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 0s ago: executing program 33 (id=3761): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, 0x0) r4 = dup(r2) r5 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet_mreqn(r4, 0x0, 0x24, &(0x7f0000000280)={@remote, @initdev, 0x0}, &(0x7f0000000380)=0xc) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f00000003c0)={@loopback, 0x23, r6}) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[]) chdir(&(0x7f0000000100)='./file0\x00') r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) pwritev2(r8, &(0x7f0000000980)=[{0x0, 0x1e}, {&(0x7f0000000500)="be81e1310fb465f31a42f6efa58772d291c57be2782f6ff63ea3517e50771580447f7d195ee15e186027d518b2c77a051895fece1dc014c33d6928ab0376cf4077399b51451472f53be50af6897bc0fa353cad9156d19de3665191fdf17a2f07f4286cea5c10fbb81feb85e406524a47b1978139eaa8", 0x76}, {0x0}], 0x3, 0x5, 0xa, 0x14) r9 = socket$netlink(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, 0x0, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x0, 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r7, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}, 0xa1}, {{0x0, 0x0, 0x0}, 0x1ff}], 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket(0x18, 0x4, 0x0) kernel console output (not intermixed with test programs): 0000003 syscall=240 compat=1 ip=0xf70ae579 code=0x7ffc0000 [ 1241.179771][ T5322] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1241.196702][ T5322] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1241.200042][ T5322] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1241.203158][ T5322] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1241.206654][ T5322] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1241.225854][T21612] bond0: entered promiscuous mode [ 1241.229853][T21612] bond0: left promiscuous mode [ 1241.250686][T21609] lo speed is unknown, defaulting to 1000 [ 1241.253239][T21609] lo speed is unknown, defaulting to 1000 [ 1241.255770][T21609] lo speed is unknown, defaulting to 1000 [ 1241.336870][ T6297] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 1241.429863][T21609] chnl_net:caif_netlink_parms(): no params data found [ 1241.496874][ T6297] usb 9-1: Using ep0 maxpacket: 8 [ 1241.502334][ T6297] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1241.510728][ T6297] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1241.514751][ T6297] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1241.519090][ T6297] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1241.523259][ T6297] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1241.530302][ T6297] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1241.534163][ T6297] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1241.565102][T21609] bridge0: port 1(bridge_slave_0) entered blocking state [ 1241.567624][T21609] bridge0: port 1(bridge_slave_0) entered disabled state [ 1241.570188][T21609] bridge_slave_0: entered allmulticast mode [ 1241.572985][T21609] bridge_slave_0: entered promiscuous mode [ 1241.578428][T21609] bridge0: port 2(bridge_slave_1) entered blocking state [ 1241.580744][T21609] bridge0: port 2(bridge_slave_1) entered disabled state [ 1241.583003][T21609] bridge_slave_1: entered allmulticast mode [ 1241.585639][T21609] bridge_slave_1: entered promiscuous mode [ 1241.642509][T21609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1241.657537][T21609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1241.742209][T21609] team0: Port device team_slave_0 added [ 1241.756082][ T6297] usb 9-1: GET_CAPABILITIES returned 0 [ 1241.758354][T21609] team0: Port device team_slave_1 added [ 1241.758662][ T6297] usbtmc 9-1:16.0: can't read capabilities [ 1241.801386][T21609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1241.804157][T21609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1241.824485][T21609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1241.828905][T21609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1241.831070][T21609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1241.839220][T21609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1241.913872][T21609] hsr_slave_0: entered promiscuous mode [ 1241.916144][T21609] hsr_slave_1: entered promiscuous mode [ 1241.919089][T21609] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1241.921486][T21609] Cannot create hsr debugfs directory [ 1241.963840][ T6297] usb 9-1: USB disconnect, device number 11 [ 1242.257047][ T1251] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1242.360956][ T1251] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1242.443815][ T1251] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1242.618797][ T1251] bridge_slave_1: left allmulticast mode [ 1242.620612][ T1251] bridge_slave_1: left promiscuous mode [ 1242.623173][ T1251] bridge0: port 2(bridge_slave_1) entered disabled state [ 1242.634489][ T1251] bridge_slave_0: left allmulticast mode [ 1242.636485][ T1251] bridge_slave_0: left promiscuous mode [ 1242.645213][ T1251] bridge0: port 1(bridge_slave_0) entered disabled state [ 1242.766883][T21558] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1242.943537][T21558] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1242.946588][T21558] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1242.982265][T21558] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1242.985059][T21558] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1243.005717][ T1251] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1243.011284][ T1251] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1243.015243][ T1251] bond0 (unregistering): Released all slaves [ 1243.017271][T21558] usb 9-1: Product: syz [ 1243.017613][T21558] usb 9-1: Manufacturer: syz [ 1243.020888][T21558] usb 9-1: SerialNumber: syz [ 1243.044605][T21558] usb 9-1: config 0 descriptor?? [ 1243.088038][T21558] usb 9-1: selecting invalid altsetting 0 [ 1243.262774][T10883] usb 9-1: USB disconnect, device number 12 [ 1243.286891][ T5322] Bluetooth: hci1: command tx timeout [ 1243.459682][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 1243.482478][ T1251] hsr_slave_0: left promiscuous mode [ 1243.486282][ T1251] hsr_slave_1: left promiscuous mode [ 1243.489413][ T1251] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1243.492557][ T1251] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1243.499712][ T1251] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1243.503221][ T1251] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1243.560472][ T1251] veth1_macvtap: left promiscuous mode [ 1243.563466][ T1251] veth0_macvtap: left promiscuous mode [ 1243.565447][ T1251] veth1_vlan: left promiscuous mode [ 1243.567521][ T1251] veth0_vlan: left promiscuous mode [ 1244.814497][ T1251] team0 (unregistering): Port device team_slave_1 removed [ 1244.894897][ T1251] team0 (unregistering): Port device team_slave_0 removed [ 1245.367406][ T5322] Bluetooth: hci1: command tx timeout [ 1245.738154][T21609] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1245.748855][T21609] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1245.758089][T21609] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1245.764566][T21609] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1245.833871][T21609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1245.852912][T21609] 8021q: adding VLAN 0 to HW filter on device team0 [ 1245.858976][T14755] bridge0: port 1(bridge_slave_0) entered blocking state [ 1245.862027][T14755] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1245.873657][T10211] bridge0: port 2(bridge_slave_1) entered blocking state [ 1245.875895][T10211] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1245.913978][T21609] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1245.917545][T21609] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1246.036891][T21609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1246.061580][T21609] veth0_vlan: entered promiscuous mode [ 1246.073927][T21609] veth1_vlan: entered promiscuous mode [ 1246.095293][T21609] veth0_macvtap: entered promiscuous mode [ 1246.100597][T21609] veth1_macvtap: entered promiscuous mode [ 1246.110336][T21609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1246.118444][T21609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1246.123402][T21609] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1246.127973][T21609] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1246.130768][T21609] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1246.133647][T21609] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1246.192359][T14755] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1246.195687][T14755] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1246.217798][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1246.221161][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1246.957425][T21558] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1247.116573][T21558] usb 9-1: Using ep0 maxpacket: 8 [ 1247.120406][T21558] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 1247.123450][T21558] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1247.128176][T21558] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1247.132498][T21558] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1247.136209][T21558] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1247.141572][T21558] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 1247.144563][T21558] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1247.149291][T21558] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1247.154189][T21558] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1247.158964][T21558] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1247.164844][T21558] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 1247.168117][T21558] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1247.172681][T21558] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1247.177585][T21558] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1247.182252][T21558] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1247.188955][T21558] usb 9-1: string descriptor 0 read error: -22 [ 1247.191115][T21558] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1247.194383][T21558] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1247.205873][T21558] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1247.405562][T19048] usb 9-1: USB disconnect, device number 13 [ 1248.498768][T14755] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1248.716505][T19048] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1248.866469][T19048] usb 9-1: Using ep0 maxpacket: 8 [ 1248.870285][T19048] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 1248.873560][T19048] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1248.878418][T19048] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1248.883045][T19048] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1248.887708][T19048] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1248.893351][T19048] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 1248.896486][T19048] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1248.901032][T19048] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1248.905403][T19048] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1248.908958][T19048] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1248.913268][T19048] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 1248.915584][T19048] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1248.919691][T19048] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1248.924375][T19048] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1248.928592][T19048] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1248.934273][T19048] usb 9-1: string descriptor 0 read error: -22 [ 1248.936457][T19048] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1248.939324][T19048] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1248.954338][T19048] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1249.154117][T21558] usb 9-1: USB disconnect, device number 14 [ 1249.181153][T17778] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1249.186511][T17778] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1249.190246][T17778] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1249.197217][T17778] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1249.200684][T17778] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1249.219026][T21762] lo speed is unknown, defaulting to 1000 [ 1249.221510][T21762] lo speed is unknown, defaulting to 1000 [ 1249.223949][T21762] lo speed is unknown, defaulting to 1000 [ 1249.380348][T21762] chnl_net:caif_netlink_parms(): no params data found [ 1249.464561][T21762] bridge0: port 1(bridge_slave_0) entered blocking state [ 1249.468328][T21762] bridge0: port 1(bridge_slave_0) entered disabled state [ 1249.471375][T21762] bridge_slave_0: entered allmulticast mode [ 1249.475327][T21762] bridge_slave_0: entered promiscuous mode [ 1249.480996][T21762] bridge0: port 2(bridge_slave_1) entered blocking state [ 1249.483312][T21762] bridge0: port 2(bridge_slave_1) entered disabled state [ 1249.485617][T21762] bridge_slave_1: entered allmulticast mode [ 1249.488707][T21762] bridge_slave_1: entered promiscuous mode [ 1249.522554][T21762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1249.527429][T21762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1249.575795][T21762] team0: Port device team_slave_0 added [ 1249.581039][T21762] team0: Port device team_slave_1 added [ 1249.614239][T21762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1249.616983][T21762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1249.625698][T21762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1249.630597][T21762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1249.632976][T21762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1249.644314][T21762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1249.717193][T21762] hsr_slave_0: entered promiscuous mode [ 1249.722211][T21762] hsr_slave_1: entered promiscuous mode [ 1249.724987][T21762] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1249.727713][T21762] Cannot create hsr debugfs directory [ 1250.149721][T14755] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1250.252294][T14755] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1250.367884][T14755] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1250.529427][T14755] bridge_slave_1: left allmulticast mode [ 1250.531240][T14755] bridge_slave_1: left promiscuous mode [ 1250.533107][T14755] bridge0: port 2(bridge_slave_1) entered disabled state [ 1250.540098][T14755] bridge_slave_0: left allmulticast mode [ 1250.541985][T14755] bridge_slave_0: left promiscuous mode [ 1250.543917][T14755] bridge0: port 1(bridge_slave_0) entered disabled state [ 1250.728378][T21800] debugfs: Invalid uid '0x00000000ffffffff' [ 1251.290415][ T5322] Bluetooth: hci1: command tx timeout [ 1251.546716][T14755] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1251.550946][T14755] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1251.554770][T14755] bond0 (unregistering): Released all slaves [ 1251.706059][T21814] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3514'. [ 1251.986952][T14755] hsr_slave_0: left promiscuous mode [ 1251.993036][T14755] hsr_slave_1: left promiscuous mode [ 1251.995470][T14755] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1252.001748][T14755] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1252.007538][T14755] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1252.010504][T14755] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1252.041114][T14755] veth1_macvtap: left promiscuous mode [ 1252.045355][T14755] veth0_macvtap: left promiscuous mode [ 1252.047263][T14755] veth1_vlan: left promiscuous mode [ 1252.050132][T14755] veth0_vlan: left promiscuous mode [ 1252.203813][T21841] usb usb8: usbfs: process 21841 (syz.3.3523) did not claim interface 0 before use [ 1253.249342][T14755] team0 (unregistering): Port device team_slave_1 removed [ 1253.346313][T14755] team0 (unregistering): Port device team_slave_0 removed [ 1253.376230][ T5322] Bluetooth: hci1: command tx timeout [ 1254.048727][T21762] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1254.057450][T21762] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1254.066618][T21762] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1254.075630][T21762] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1254.166525][T21762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1254.191585][T21762] 8021q: adding VLAN 0 to HW filter on device team0 [ 1254.198329][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 1254.201151][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1254.225512][T19125] bridge0: port 2(bridge_slave_1) entered blocking state [ 1254.227963][T19125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1254.374174][T21762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1254.400808][T21762] veth0_vlan: entered promiscuous mode [ 1254.409943][T21762] veth1_vlan: entered promiscuous mode [ 1254.428592][T21762] veth0_macvtap: entered promiscuous mode [ 1254.437804][T21762] veth1_macvtap: entered promiscuous mode [ 1254.450789][T21762] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1254.458884][T21762] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1254.465079][T21762] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1254.470883][T21762] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1254.474819][T21762] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1254.478470][T21762] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1254.541384][T19125] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1254.544602][T19125] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1254.572293][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1254.574787][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1254.959509][T21911] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3546'. [ 1255.801615][T18299] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1255.993637][T18299] usb 9-1: Using ep0 maxpacket: 8 [ 1256.033852][T18299] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 1256.036567][T18299] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1256.039656][T18299] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1256.042623][T18299] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1256.045641][T18299] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1256.050272][T18299] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1256.053140][T18299] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1256.287907][T18299] usb 9-1: GET_CAPABILITIES returned 0 [ 1256.290271][T18299] usbtmc 9-1:16.0: can't read capabilities [ 1256.493294][T18299] usb 9-1: USB disconnect, device number 15 [ 1256.705481][ T46] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1257.551629][T17778] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1257.566342][T17778] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1257.575484][T17778] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1257.585312][T17778] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1257.589755][T17778] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1257.640717][T21958] lo speed is unknown, defaulting to 1000 [ 1257.647015][T21958] lo speed is unknown, defaulting to 1000 [ 1257.651758][T21958] lo speed is unknown, defaulting to 1000 [ 1257.824041][T21958] chnl_net:caif_netlink_parms(): no params data found [ 1257.894684][T21958] bridge0: port 1(bridge_slave_0) entered blocking state [ 1257.897267][T21958] bridge0: port 1(bridge_slave_0) entered disabled state [ 1257.899570][T21958] bridge_slave_0: entered allmulticast mode [ 1257.902296][T21958] bridge_slave_0: entered promiscuous mode [ 1257.905515][T21958] bridge0: port 2(bridge_slave_1) entered blocking state [ 1257.908658][T21958] bridge0: port 2(bridge_slave_1) entered disabled state [ 1257.910914][T21958] bridge_slave_1: entered allmulticast mode [ 1257.913592][T21958] bridge_slave_1: entered promiscuous mode [ 1257.947898][T21958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1257.952480][T21958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1257.990812][T21958] team0: Port device team_slave_0 added [ 1257.994501][T21958] team0: Port device team_slave_1 added [ 1258.027066][T21958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1258.029351][T21958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1258.038710][T21958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1258.043081][T21958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1258.045290][T21958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1258.053866][T21958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1258.101021][T21958] hsr_slave_0: entered promiscuous mode [ 1258.104033][T21958] hsr_slave_1: entered promiscuous mode [ 1258.106663][T21958] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1258.109650][T21958] Cannot create hsr debugfs directory [ 1258.743266][ T46] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1258.807338][ T46] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1258.825900][T19299] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1258.883550][ T46] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1258.975957][T19299] usb 9-1: Using ep0 maxpacket: 8 [ 1258.982153][T19299] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1258.986975][T19299] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1258.991729][T19299] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1258.995178][T19299] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1259.000682][T19299] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1259.004523][T19299] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1259.041454][ T46] bridge_slave_1: left allmulticast mode [ 1259.043866][ T46] bridge_slave_1: left promiscuous mode [ 1259.048203][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 1259.054787][ T46] bridge_slave_0: left allmulticast mode [ 1259.057754][ T46] bridge_slave_0: left promiscuous mode [ 1259.060335][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 1259.213777][T19299] usb 9-1: GET_CAPABILITIES returned 0 [ 1259.216184][T19299] usbtmc 9-1:16.0: can't read capabilities [ 1259.433656][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1259.438413][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1259.441768][ T46] bond0 (unregistering): Released all slaves [ 1259.686005][T17778] Bluetooth: hci1: command tx timeout [ 1259.848134][ T46] hsr_slave_0: left promiscuous mode [ 1259.857156][ T46] hsr_slave_1: left promiscuous mode [ 1259.860202][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1259.863327][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1259.882901][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1259.886881][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1259.921331][ T46] veth1_macvtap: left promiscuous mode [ 1259.923240][ T46] veth0_macvtap: left promiscuous mode [ 1259.925067][ T46] veth1_vlan: left promiscuous mode [ 1259.926984][ T46] veth0_vlan: left promiscuous mode [ 1260.746942][ T46] team0 (unregistering): Port device team_slave_1 removed [ 1260.875133][ T46] team0 (unregistering): Port device team_slave_0 removed [ 1261.606197][T18299] usb 9-1: USB disconnect, device number 16 [ 1261.693413][T21958] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1261.702081][T21958] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1261.719619][T21958] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1261.737849][T21958] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1261.766115][T17778] Bluetooth: hci1: command tx timeout [ 1261.821707][T21958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1261.834646][T21958] 8021q: adding VLAN 0 to HW filter on device team0 [ 1261.841718][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 1261.844301][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1261.850532][T19125] bridge0: port 2(bridge_slave_1) entered blocking state [ 1261.853306][T19125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1261.884679][T21958] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1261.899768][T22026] sch_tbf: burst 19920 is lower than device lo mtu (11337746) ! [ 1262.081414][ T5322] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1262.087118][ T5322] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1262.090991][ T5322] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1262.096819][ T5322] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1262.100235][T21958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1262.100248][ T5322] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1262.133044][T21958] veth0_vlan: entered promiscuous mode [ 1262.184022][ T46] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1262.199150][T22035] lo speed is unknown, defaulting to 1000 [ 1262.199662][T21958] veth1_vlan: entered promiscuous mode [ 1262.204821][T22035] lo speed is unknown, defaulting to 1000 [ 1262.211029][T22035] lo speed is unknown, defaulting to 1000 [ 1262.224559][T21958] veth0_macvtap: entered promiscuous mode [ 1262.230592][T21958] veth1_macvtap: entered promiscuous mode [ 1262.235671][T18299] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1262.257618][ T46] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1262.270364][T21958] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1262.281731][T21958] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1262.288538][T21958] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1262.292112][T21958] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1262.294914][T21958] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1262.298046][T21958] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1262.326612][T22046] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3592'. [ 1262.330304][T22046] netlink: 'syz.0.3592': attribute type 30 has an invalid length. [ 1262.344488][ T46] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1262.366931][T22046] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1262.370223][T22046] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1262.373548][T22046] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1262.377661][T22046] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1262.387047][T18299] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1262.390908][T18299] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1262.397662][T18299] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1262.401727][T18299] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1262.411501][T18299] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1262.415352][T18299] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1262.443040][T18299] usb 9-1: config 0 descriptor?? [ 1262.450647][ T46] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 1262.511884][T19125] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1262.514406][T19125] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1262.604814][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1262.613189][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1262.891510][T18299] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1262.938827][ T46] bond0 (unregistering): Released all slaves [ 1262.952014][T22035] chnl_net:caif_netlink_parms(): no params data found [ 1263.028393][ T46] : left promiscuous mode [ 1263.075201][T18299] usb 9-1: USB disconnect, device number 17 [ 1263.127703][ T46] tipc: Disabling bearer [ 1263.133897][ T46] tipc: Left network mode [ 1263.137706][T22035] bridge0: port 1(bridge_slave_0) entered blocking state [ 1263.140012][T22035] bridge0: port 1(bridge_slave_0) entered disabled state [ 1263.142300][T22035] bridge_slave_0: entered allmulticast mode [ 1263.145065][T22035] bridge_slave_0: entered promiscuous mode [ 1263.149010][T22035] bridge0: port 2(bridge_slave_1) entered blocking state [ 1263.151312][T22035] bridge0: port 2(bridge_slave_1) entered disabled state [ 1263.153650][T22035] bridge_slave_1: entered allmulticast mode [ 1263.157472][T22035] bridge_slave_1: entered promiscuous mode [ 1263.177039][ T46] IPVS: stopping master sync thread 19701 ... [ 1263.218330][T22035] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1263.225300][T22035] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1263.277418][T22035] team0: Port device team_slave_0 added [ 1263.281396][T22035] team0: Port device team_slave_1 added [ 1263.315459][T22035] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1263.318264][T22035] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1263.327169][T22035] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1263.332636][T22035] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1263.335229][T22035] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1263.345068][T22035] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1263.436980][T22035] hsr_slave_0: entered promiscuous mode [ 1263.439233][T22035] hsr_slave_1: entered promiscuous mode [ 1263.441336][T22035] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1263.443530][T22035] Cannot create hsr debugfs directory [ 1263.812989][ T46] hsr_slave_0: left promiscuous mode [ 1263.815162][ T46] hsr_slave_1: left promiscuous mode [ 1264.178765][ T5322] Bluetooth: hci0: command tx timeout [ 1265.485104][ T6004] lo speed is unknown, defaulting to 1000 [ 1265.488655][ T6004] s: Port: 1 Link DOWN [ 1265.682858][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 1265.682874][ T40] audit: type=1326 audit(1265.566:13792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22100 comm="syz.4.3607" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7fc8579 code=0x7ffc0000 [ 1265.704044][ T40] audit: type=1326 audit(1265.566:13793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22100 comm="syz.4.3607" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7fc85a7 code=0x7ffc0000 [ 1265.711200][ T40] audit: type=1326 audit(1265.566:13794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22100 comm="syz.4.3607" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8579 code=0x7ffc0000 [ 1265.718596][ T40] audit: type=1326 audit(1265.566:13795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22100 comm="syz.4.3607" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7fc8579 code=0x7ffc0000 [ 1265.726295][ T40] audit: type=1326 audit(1265.566:13796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22100 comm="syz.4.3607" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7fc85a7 code=0x7ffc0000 [ 1265.734442][ T40] audit: type=1326 audit(1265.566:13797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22100 comm="syz.4.3607" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7fc8579 code=0x7ffc0000 [ 1265.745646][ T40] audit: type=1326 audit(1265.566:13798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22100 comm="syz.4.3607" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7fc85a7 code=0x7ffc0000 [ 1265.753354][ T40] audit: type=1326 audit(1265.566:13799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22100 comm="syz.4.3607" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8579 code=0x7ffc0000 [ 1265.756057][T22035] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1265.761524][ T40] audit: type=1326 audit(1265.576:13800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22100 comm="syz.4.3607" exe="/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7fc8579 code=0x7ffc0000 [ 1265.771604][ T40] audit: type=1326 audit(1265.576:13801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22100 comm="syz.4.3607" exe="/syz-executor" sig=0 arch=40000003 syscall=173 compat=1 ip=0xf7fc85a7 code=0x7ffc0000 [ 1265.780207][T22035] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1265.811062][T22035] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1265.818940][T22035] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1265.957768][T22035] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1266.148505][T22035] 8021q: adding VLAN 0 to HW filter on device team0 [ 1266.157698][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 1266.159979][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1266.168088][ T1251] bridge0: port 2(bridge_slave_1) entered blocking state [ 1266.170789][ T1251] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1266.245678][ T5322] Bluetooth: hci0: command tx timeout [ 1266.318949][T22035] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1266.345281][T22035] veth0_vlan: entered promiscuous mode [ 1266.351013][T22035] veth1_vlan: entered promiscuous mode [ 1266.378898][T22035] veth0_macvtap: entered promiscuous mode [ 1266.385007][T22035] veth1_macvtap: entered promiscuous mode [ 1266.398249][T22035] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1266.408938][T22035] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1266.414470][T22035] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.417485][T22035] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.420967][T22035] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.424610][T22035] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.472477][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1266.475252][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1266.491722][T15060] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1266.495064][T15060] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1266.929743][T17778] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1266.934456][T17778] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1266.939880][T17778] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1266.945611][T17778] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1266.949142][T17778] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1266.996130][T22135] lo speed is unknown, defaulting to 1000 [ 1267.000565][T22135] lo speed is unknown, defaulting to 1000 [ 1267.301565][T22135] chnl_net:caif_netlink_parms(): no params data found [ 1267.401681][T22135] bridge0: port 1(bridge_slave_0) entered blocking state [ 1267.404018][T22135] bridge0: port 1(bridge_slave_0) entered disabled state [ 1267.407038][T22135] bridge_slave_0: entered allmulticast mode [ 1267.409603][T22135] bridge_slave_0: entered promiscuous mode [ 1267.413432][T22135] bridge0: port 2(bridge_slave_1) entered blocking state [ 1267.418316][T22135] bridge0: port 2(bridge_slave_1) entered disabled state [ 1267.420651][T22135] bridge_slave_1: entered allmulticast mode [ 1267.424016][T22135] bridge_slave_1: entered promiscuous mode [ 1267.489496][T22135] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1267.500379][T22135] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1267.558226][T22135] team0: Port device team_slave_0 added [ 1267.562882][T22135] team0: Port device team_slave_1 added [ 1267.607043][T22135] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1267.609365][T22135] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1267.619722][T22135] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1267.624375][T22135] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1267.626682][T22135] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1267.637380][T22135] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1267.687753][T22135] hsr_slave_0: entered promiscuous mode [ 1267.690030][T22135] hsr_slave_1: entered promiscuous mode [ 1267.755345][T21558] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1267.866770][T22135] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1267.905403][T21558] usb 9-1: Using ep0 maxpacket: 8 [ 1267.909508][T21558] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1267.913889][T21558] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1267.918267][T21558] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1267.922654][T21558] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1267.928457][T21558] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1267.932173][T21558] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1267.951955][T22135] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1268.067660][T22135] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1268.146478][T22135] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1268.146924][T21558] usb 9-1: GET_CAPABILITIES returned 0 [ 1268.152701][T21558] usbtmc 9-1:16.0: can't read capabilities [ 1268.264574][T22177] netfs: Couldn't get user pages (rc=-14) [ 1268.304054][T22135] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1268.347821][T21558] usb 9-1: USB disconnect, device number 18 [ 1268.569320][T22135] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1268.584290][ T5322] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1268.589089][ T5322] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1268.593951][ T5322] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1268.593978][T22135] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1268.599950][ T5322] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1268.601719][T22135] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1268.603507][ T5322] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1268.689574][T22179] lo speed is unknown, defaulting to 1000 [ 1268.693860][T22179] lo speed is unknown, defaulting to 1000 [ 1268.765796][T22135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1268.791169][T22135] 8021q: adding VLAN 0 to HW filter on device team0 [ 1268.801878][T15060] bridge0: port 1(bridge_slave_0) entered blocking state [ 1268.804236][T15060] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1268.815076][T15060] bridge0: port 2(bridge_slave_1) entered blocking state [ 1268.817510][T15060] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1268.909038][T22179] chnl_net:caif_netlink_parms(): no params data found [ 1268.966314][ T5322] Bluetooth: hci0: command tx timeout [ 1268.999646][T22179] bridge0: port 1(bridge_slave_0) entered blocking state [ 1269.002039][T22179] bridge0: port 1(bridge_slave_0) entered disabled state [ 1269.004383][T22179] bridge_slave_0: entered allmulticast mode [ 1269.007807][T22179] bridge_slave_0: entered promiscuous mode [ 1269.011810][T22179] bridge0: port 2(bridge_slave_1) entered blocking state [ 1269.014237][T22179] bridge0: port 2(bridge_slave_1) entered disabled state [ 1269.017321][T22179] bridge_slave_1: entered allmulticast mode [ 1269.020363][T22179] bridge_slave_1: entered promiscuous mode [ 1269.053554][T22212] netlink: 240 bytes leftover after parsing attributes in process `syz.0.3634'. [ 1269.059624][T22179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1269.067763][T22179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1269.120342][T22179] team0: Port device team_slave_0 added [ 1269.126145][T22179] team0: Port device team_slave_1 added [ 1269.162576][T22135] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1269.180981][T22179] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1269.183174][T22179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1269.192273][T22179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1269.203098][T22179] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1269.215371][T22179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1269.223400][T22179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1269.296633][T22179] hsr_slave_0: entered promiscuous mode [ 1269.298879][T22179] hsr_slave_1: entered promiscuous mode [ 1269.300891][T22179] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1269.303226][T22179] Cannot create hsr debugfs directory [ 1269.308054][T22135] veth0_vlan: entered promiscuous mode [ 1269.329396][T22135] veth1_vlan: entered promiscuous mode [ 1269.417630][T22135] veth0_macvtap: entered promiscuous mode [ 1269.442662][T22135] veth1_macvtap: entered promiscuous mode [ 1269.517602][T22179] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1269.520965][T22225] x_tables: duplicate underflow at hook 3 [ 1269.541787][T22225] macsec1: entered promiscuous mode [ 1269.543497][T22225] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 1269.546138][T22225] macsec1: entered allmulticast mode [ 1269.548469][T22225] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 1269.561013][T22135] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1269.579439][T22135] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1269.593343][T22135] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1269.598431][T22135] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1269.602213][T22135] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1269.605017][T22135] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1269.815499][ T1170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1269.818020][ T1170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1269.878111][ T1251] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1269.881190][ T1251] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1270.645305][ T5322] Bluetooth: hci1: command tx timeout [ 1270.775921][T22179] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1270.935532][T22179] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1271.057557][T22179] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1271.201944][T22179] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1271.207055][T22179] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1271.211228][T22179] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1271.216335][T22179] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1271.261973][T22179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1271.291453][T22179] 8021q: adding VLAN 0 to HW filter on device team0 [ 1271.300577][T10211] bridge0: port 1(bridge_slave_0) entered blocking state [ 1271.302853][T10211] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1271.310605][T10211] bridge0: port 2(bridge_slave_1) entered blocking state [ 1271.312866][T10211] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1271.346673][T22179] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1271.454568][T22179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1271.479475][T22179] veth0_vlan: entered promiscuous mode [ 1271.484481][T22179] veth1_vlan: entered promiscuous mode [ 1271.501164][T22179] veth0_macvtap: entered promiscuous mode [ 1271.518974][T22179] veth1_macvtap: entered promiscuous mode [ 1271.530546][T22179] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1271.548258][T22179] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1271.555845][T22179] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1271.558702][T22179] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1271.561496][T22179] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1271.564238][T22179] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1271.603241][ T1251] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1271.607612][ T1251] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1271.620282][ T1170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1271.622741][ T1170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1271.790853][T22270] lo speed is unknown, defaulting to 1000 [ 1271.793544][T22270] lo speed is unknown, defaulting to 1000 [ 1271.917056][T17778] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1271.922064][T17778] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1271.927255][T17778] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1271.932180][T17778] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1271.937048][T17778] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1271.970014][T22278] lo speed is unknown, defaulting to 1000 [ 1271.972498][T22278] lo speed is unknown, defaulting to 1000 [ 1272.176643][ T40] kauditd_printk_skb: 606 callbacks suppressed [ 1272.176659][ T40] audit: type=1326 audit(1272.067:14408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22284 comm="syz.4.3652" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc8598 code=0x7ffc0000 [ 1272.178901][T22278] chnl_net:caif_netlink_parms(): no params data found [ 1272.179056][ T40] audit: type=1326 audit(1272.067:14409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22284 comm="syz.4.3652" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc8598 code=0x7ffc0000 [ 1272.204572][ T40] audit: type=1326 audit(1272.067:14410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22284 comm="syz.4.3652" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc8598 code=0x7ffc0000 [ 1272.211864][ T40] audit: type=1326 audit(1272.067:14411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22284 comm="syz.4.3652" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8579 code=0x7ffc0000 [ 1272.219251][ T40] audit: type=1326 audit(1272.067:14412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22284 comm="syz.4.3652" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8579 code=0x7ffc0000 [ 1272.226655][ T40] audit: type=1326 audit(1272.087:14413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22284 comm="syz.4.3652" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8579 code=0x7ffc0000 [ 1272.233051][ T40] audit: type=1326 audit(1272.087:14414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22284 comm="syz.4.3652" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc8598 code=0x7ffc0000 [ 1272.240180][ T40] audit: type=1326 audit(1272.087:14415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22284 comm="syz.4.3652" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fc8598 code=0x7ffc0000 [ 1272.247060][ T40] audit: type=1326 audit(1272.087:14416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22284 comm="syz.4.3652" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8579 code=0x7ffc0000 [ 1272.253555][ T40] audit: type=1326 audit(1272.087:14417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22284 comm="syz.4.3652" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc8579 code=0x7ffc0000 [ 1272.299897][T22278] bridge0: port 1(bridge_slave_0) entered blocking state [ 1272.302118][T22278] bridge0: port 1(bridge_slave_0) entered disabled state [ 1272.304315][T22278] bridge_slave_0: entered allmulticast mode [ 1272.309300][T22278] bridge_slave_0: entered promiscuous mode [ 1272.318550][T22278] bridge0: port 2(bridge_slave_1) entered blocking state [ 1272.321619][T22278] bridge0: port 2(bridge_slave_1) entered disabled state [ 1272.324919][T22278] bridge_slave_1: entered allmulticast mode [ 1272.329628][T22278] bridge_slave_1: entered promiscuous mode [ 1272.370548][T22278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1272.375961][T22278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1272.416815][T22278] team0: Port device team_slave_0 added [ 1272.422159][T22278] team0: Port device team_slave_1 added [ 1272.473074][T22278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1272.476247][T22278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1272.487197][T22278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1272.492649][T22278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1272.495485][T22278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1272.506854][T22278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1272.549426][T22278] hsr_slave_0: entered promiscuous mode [ 1272.551767][T22278] hsr_slave_1: entered promiscuous mode [ 1272.553852][T22278] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1272.556342][T22278] Cannot create hsr debugfs directory [ 1272.585048][ T54] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 1272.677051][T22278] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1272.745106][ T54] usb 9-1: Using ep0 maxpacket: 32 [ 1272.748371][ T54] usb 9-1: config 0 has an invalid interface number: 12 but max is 0 [ 1272.751009][ T54] usb 9-1: config 0 has no interface number 0 [ 1272.753381][ T54] usb 9-1: config 0 interface 12 has no altsetting 0 [ 1272.758091][ T54] usb 9-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1272.760882][ T54] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1272.763826][ T54] usb 9-1: Product: syz [ 1272.765441][ T54] usb 9-1: Manufacturer: syz [ 1272.766894][ T54] usb 9-1: SerialNumber: syz [ 1272.770796][ T54] usb 9-1: config 0 descriptor?? [ 1272.776282][ T54] f81534 9-1:0.12: required endpoints missing [ 1272.794860][T22278] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1272.885499][T22278] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1272.990505][T22278] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1273.165375][T22278] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1273.177275][T22278] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1273.183093][T22278] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1273.187993][T22278] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1273.250312][T22278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1273.278242][T22278] 8021q: adding VLAN 0 to HW filter on device team0 [ 1273.296587][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1273.299798][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1273.303922][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1273.306829][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1273.356952][T22315] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3661'. [ 1273.435191][T22278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1273.472200][T22278] veth0_vlan: entered promiscuous mode [ 1273.477459][T22278] veth1_vlan: entered promiscuous mode [ 1273.492638][T22278] veth0_macvtap: entered promiscuous mode [ 1273.497102][T22278] veth1_macvtap: entered promiscuous mode [ 1273.507600][T22278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1273.527852][T22278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1273.532948][T22278] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1273.537111][T22278] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1273.539815][T22278] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1273.542387][T22278] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1273.597718][T15060] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1273.600776][T15060] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1273.603666][T10211] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1273.606983][T10211] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1274.397806][T17778] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1274.402954][T17778] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1274.408271][T17778] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1274.412430][T17778] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1274.419318][T17778] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1274.453223][T22342] lo speed is unknown, defaulting to 1000 [ 1274.457041][T22342] lo speed is unknown, defaulting to 1000 [ 1274.727281][T22342] chnl_net:caif_netlink_parms(): no params data found [ 1274.817838][T22342] bridge0: port 1(bridge_slave_0) entered blocking state [ 1274.820111][T22342] bridge0: port 1(bridge_slave_0) entered disabled state [ 1274.822461][T22342] bridge_slave_0: entered allmulticast mode [ 1274.825414][T22342] bridge_slave_0: entered promiscuous mode [ 1274.828777][T22342] bridge0: port 2(bridge_slave_1) entered blocking state [ 1274.831020][T22342] bridge0: port 2(bridge_slave_1) entered disabled state [ 1274.833495][T22342] bridge_slave_1: entered allmulticast mode [ 1274.837284][T22342] bridge_slave_1: entered promiscuous mode [ 1274.874772][T22342] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1274.879590][T22342] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1274.932305][T22342] team0: Port device team_slave_0 added [ 1274.949124][T22342] team0: Port device team_slave_1 added [ 1274.993605][T22342] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1274.995979][T22342] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1275.003885][T22342] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1275.008295][T22342] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1275.010473][T22342] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1275.018568][T22342] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1275.074113][T22342] hsr_slave_0: entered promiscuous mode [ 1275.077678][T22342] hsr_slave_1: entered promiscuous mode [ 1275.081397][T22342] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1275.084567][T22342] Cannot create hsr debugfs directory [ 1275.232986][T22342] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1275.342524][T19299] usb 9-1: USB disconnect, device number 19 [ 1275.573482][T22342] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1275.656197][T22342] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1275.737555][T22342] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1275.915476][T22342] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1275.921838][T22342] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1275.932266][T22342] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1275.938868][T22342] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1275.992010][T22342] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1276.011208][T22342] 8021q: adding VLAN 0 to HW filter on device team0 [ 1276.019013][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1276.021386][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1276.028870][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1276.031174][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1276.172750][T22342] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1276.197247][T22342] veth0_vlan: entered promiscuous mode [ 1276.208593][T22342] veth1_vlan: entered promiscuous mode [ 1276.246364][T22342] veth0_macvtap: entered promiscuous mode [ 1276.265437][T22342] veth1_macvtap: entered promiscuous mode [ 1276.328224][T22342] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1276.340428][T22342] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1276.345463][T22342] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1276.348257][T22342] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1276.350942][T22342] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1276.353831][T22342] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1276.407072][ T1170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1276.410281][ T1170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1276.427373][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1276.430038][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1276.881415][ T5322] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1276.891576][ T5322] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1276.907146][ T5322] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1276.922089][ T5322] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1276.928277][ T5322] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1276.955356][T22380] lo speed is unknown, defaulting to 1000 [ 1276.957864][T22380] lo speed is unknown, defaulting to 1000 [ 1277.140408][T22380] chnl_net:caif_netlink_parms(): no params data found [ 1277.238903][T22380] bridge0: port 1(bridge_slave_0) entered blocking state [ 1277.241185][T22380] bridge0: port 1(bridge_slave_0) entered disabled state [ 1277.243472][T22380] bridge_slave_0: entered allmulticast mode [ 1277.247356][T22380] bridge_slave_0: entered promiscuous mode [ 1277.250443][T22380] bridge0: port 2(bridge_slave_1) entered blocking state [ 1277.252676][T22380] bridge0: port 2(bridge_slave_1) entered disabled state [ 1277.255135][T22380] bridge_slave_1: entered allmulticast mode [ 1277.257932][T22380] bridge_slave_1: entered promiscuous mode [ 1277.285301][ T6297] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 1277.294144][T22380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1277.299920][T22380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1277.350292][T22380] team0: Port device team_slave_0 added [ 1277.356447][T22380] team0: Port device team_slave_1 added [ 1277.397140][T22380] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1277.399908][T22380] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1277.410309][T22380] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1277.417109][T22380] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1277.419948][T22380] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1277.430511][T22380] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1277.454897][ T6297] usb 9-1: Using ep0 maxpacket: 16 [ 1277.457957][ T6297] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1277.461239][ T6297] usb 9-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1277.464238][ T6297] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1277.469732][ T6297] usb 9-1: config 0 descriptor?? [ 1277.473629][T22380] hsr_slave_0: entered promiscuous mode [ 1277.476613][T22380] hsr_slave_1: entered promiscuous mode [ 1277.476976][ T6297] input: bcm5974 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input34 [ 1277.478969][T22380] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1277.484586][T22380] Cannot create hsr debugfs directory [ 1277.643245][T22380] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1277.730576][T22380] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1277.822477][ T6297] bcm5974 9-1:0.0: could not read from device [ 1277.851197][T22380] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1277.855393][ T6297] input: failed to attach handler mousedev to device input34, error: -5 [ 1277.861821][ T6297] usb 9-1: USB disconnect, device number 20 [ 1277.979271][T22380] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1278.147482][T22380] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1278.152930][T22380] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1278.157517][T22380] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1278.163034][T22380] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1278.215444][T22380] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1278.228731][T22380] 8021q: adding VLAN 0 to HW filter on device team0 [ 1278.234389][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1278.237448][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1278.245715][T15060] bridge0: port 2(bridge_slave_1) entered blocking state [ 1278.248784][T15060] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1278.423025][T22380] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1278.452598][T22380] veth0_vlan: entered promiscuous mode [ 1278.463739][T22380] veth1_vlan: entered promiscuous mode [ 1278.489072][T22380] veth0_macvtap: entered promiscuous mode [ 1278.497347][T22380] veth1_macvtap: entered promiscuous mode [ 1278.512223][T22380] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1278.524016][T22380] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1278.530841][T22380] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1278.534467][T22380] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1278.538642][T22380] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1278.542210][T22380] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1278.589449][T10211] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1278.595321][T10211] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1278.609267][T19125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1278.611841][T19125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1278.649977][ T6004] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1278.804939][ T6004] usb 9-1: Using ep0 maxpacket: 8 [ 1278.809047][ T6004] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1278.813410][ T6004] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1278.817730][ T6004] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1278.822426][ T6004] usb 9-1: config 0 descriptor?? [ 1279.039281][ T6004] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1279.369220][ T5322] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1279.374448][ T5322] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1279.379320][ T5322] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1279.385573][ T5322] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1279.389564][ T5322] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1279.421240][T22421] lo speed is unknown, defaulting to 1000 [ 1279.425178][T22421] lo speed is unknown, defaulting to 1000 [ 1279.446143][ T6297] usb 9-1: USB disconnect, device number 21 [ 1279.684978][T22421] chnl_net:caif_netlink_parms(): no params data found [ 1279.761933][T22421] bridge0: port 1(bridge_slave_0) entered blocking state [ 1279.764299][T22421] bridge0: port 1(bridge_slave_0) entered disabled state [ 1279.767702][T22421] bridge_slave_0: entered allmulticast mode [ 1279.770706][T22421] bridge_slave_0: entered promiscuous mode [ 1279.773940][T22421] bridge0: port 2(bridge_slave_1) entered blocking state [ 1279.776447][T22421] bridge0: port 2(bridge_slave_1) entered disabled state [ 1279.778732][T22421] bridge_slave_1: entered allmulticast mode [ 1279.781468][T22421] bridge_slave_1: entered promiscuous mode [ 1279.825787][T22421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1279.830636][T22421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1279.872077][T22421] team0: Port device team_slave_0 added [ 1279.876041][T22421] team0: Port device team_slave_1 added [ 1279.907471][T22421] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1279.909607][T22421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1279.918538][T22421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1279.923095][T22421] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1279.926818][T22421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1279.935222][T22421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1280.009270][T22421] hsr_slave_0: entered promiscuous mode [ 1280.012635][T22421] hsr_slave_1: entered promiscuous mode [ 1280.015711][T22421] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1280.018569][T22421] Cannot create hsr debugfs directory [ 1280.174355][T22421] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1280.245328][ T6297] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 1280.380358][T22421] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1280.406460][ T6297] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1280.411106][ T6297] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1280.416851][ T6297] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1280.420796][ T6297] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1280.427220][ T6297] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1280.430830][ T6297] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1280.439653][ T6297] usb 9-1: config 0 descriptor?? [ 1280.460126][T22421] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1280.554721][T22421] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1280.754666][T22421] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1280.760676][T22421] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1280.767269][T22421] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1280.773353][T22421] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1280.845486][T22421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1280.855051][ T6297] plantronics 0003:047F:FFFF.000B: ignoring exceeding usage max [ 1280.855810][T22421] 8021q: adding VLAN 0 to HW filter on device team0 [ 1280.863355][ T1170] bridge0: port 1(bridge_slave_0) entered blocking state [ 1280.863727][ T6297] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1280.866542][ T1170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1280.879371][T19125] bridge0: port 2(bridge_slave_1) entered blocking state [ 1280.881615][T19125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1281.001178][T22421] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1281.021906][T22421] veth0_vlan: entered promiscuous mode [ 1281.028544][T22421] veth1_vlan: entered promiscuous mode [ 1281.051254][T22421] veth0_macvtap: entered promiscuous mode [ 1281.055536][ T29] usb 9-1: USB disconnect, device number 22 [ 1281.056977][T22421] veth1_macvtap: entered promiscuous mode [ 1281.067069][T22421] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1281.073115][T22421] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1281.078715][T22421] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1281.081459][T22421] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1281.084167][T22421] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1281.086981][T22421] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1281.127542][ T1170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1281.134020][ T1170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1281.145361][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1281.147853][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1281.853553][ T5322] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1281.859156][ T5322] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1281.862941][ T5322] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1281.872666][ T5322] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1281.876743][ T5322] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1281.903971][T22454] lo speed is unknown, defaulting to 1000 [ 1281.906819][T22454] lo speed is unknown, defaulting to 1000 [ 1282.103517][T22454] chnl_net:caif_netlink_parms(): no params data found [ 1282.365463][T22454] bridge0: port 1(bridge_slave_0) entered blocking state [ 1282.368962][T22454] bridge0: port 1(bridge_slave_0) entered disabled state [ 1282.371275][T22454] bridge_slave_0: entered allmulticast mode [ 1282.374073][T22454] bridge_slave_0: entered promiscuous mode [ 1282.378526][T22454] bridge0: port 2(bridge_slave_1) entered blocking state [ 1282.380846][T22454] bridge0: port 2(bridge_slave_1) entered disabled state [ 1282.383093][T22454] bridge_slave_1: entered allmulticast mode [ 1282.387203][T22454] bridge_slave_1: entered promiscuous mode [ 1282.422126][T22454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1282.427318][T22454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1282.463310][T22454] team0: Port device team_slave_0 added [ 1282.468599][T22454] team0: Port device team_slave_1 added [ 1282.529102][T22454] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1282.532207][T22454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1282.546158][T22454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1282.553395][T22454] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1282.556757][T22454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1282.569513][T22454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1282.637453][T22454] hsr_slave_0: entered promiscuous mode [ 1282.640362][T22454] hsr_slave_1: entered promiscuous mode [ 1282.642494][T22454] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1282.645833][T22454] Cannot create hsr debugfs directory [ 1282.759570][T22454] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1282.890739][T22454] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1282.950295][T22454] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1283.079386][T22454] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1283.201869][T22454] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1283.213852][T22454] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1283.220170][T22454] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1283.224236][T22454] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1283.240787][T22454] bridge0: port 2(bridge_slave_1) entered blocking state [ 1283.243057][T22454] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1283.245559][T22454] bridge0: port 1(bridge_slave_0) entered blocking state [ 1283.247845][T22454] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1283.275923][T22454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1283.286233][ T1170] bridge0: port 1(bridge_slave_0) entered disabled state [ 1283.290928][ T1170] bridge0: port 2(bridge_slave_1) entered disabled state [ 1283.311444][T22454] 8021q: adding VLAN 0 to HW filter on device team0 [ 1283.317143][ T1170] bridge0: port 1(bridge_slave_0) entered blocking state [ 1283.319457][ T1170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1283.326783][T10211] bridge0: port 2(bridge_slave_1) entered blocking state [ 1283.329605][T10211] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1283.455939][T22454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1283.480966][T22454] veth0_vlan: entered promiscuous mode [ 1283.488048][T22454] veth1_vlan: entered promiscuous mode [ 1283.501687][T22454] veth0_macvtap: entered promiscuous mode [ 1283.509518][T22454] veth1_macvtap: entered promiscuous mode [ 1283.518096][T22454] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1283.523954][T22454] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1283.529817][T22454] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1283.532555][T22454] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1283.535334][T22454] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1283.538085][T22454] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1283.570659][T10211] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1283.573141][T10211] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1283.587934][T10211] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1283.591156][T10211] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1284.113779][ T5322] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1284.121064][ T5322] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1284.125273][ T5322] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1284.131765][ T5322] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1284.138094][ T5322] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1284.167533][T22490] lo speed is unknown, defaulting to 1000 [ 1284.170033][T22490] lo speed is unknown, defaulting to 1000 [ 1284.356263][T22490] chnl_net:caif_netlink_parms(): no params data found [ 1284.438176][T22490] bridge0: port 1(bridge_slave_0) entered blocking state [ 1284.440855][T22490] bridge0: port 1(bridge_slave_0) entered disabled state [ 1284.443786][T22490] bridge_slave_0: entered allmulticast mode [ 1284.447304][T22490] bridge_slave_0: entered promiscuous mode [ 1284.450727][T22490] bridge0: port 2(bridge_slave_1) entered blocking state [ 1284.452981][T22490] bridge0: port 2(bridge_slave_1) entered disabled state [ 1284.455653][T22490] bridge_slave_1: entered allmulticast mode [ 1284.458419][T22490] bridge_slave_1: entered promiscuous mode [ 1284.490448][T22490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1284.497797][T22490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1284.549899][T22490] team0: Port device team_slave_0 added [ 1284.556170][T22490] team0: Port device team_slave_1 added [ 1284.592162][T22490] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1284.595118][T22490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1284.607523][T22490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1284.612572][T22490] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1284.616012][T22490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1284.624374][T22490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1284.676696][T22490] hsr_slave_0: entered promiscuous mode [ 1284.679213][T22490] hsr_slave_1: entered promiscuous mode [ 1284.681383][T22490] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1284.683888][T22490] Cannot create hsr debugfs directory [ 1284.955465][T22490] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1285.068296][T22490] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1285.134949][T22490] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1285.214871][T22490] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1285.304513][T18299] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 1285.456175][T22490] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1285.462628][T22490] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1285.468059][T22490] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1285.475038][T22490] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1285.485916][T18299] usb 9-1: Using ep0 maxpacket: 16 [ 1285.488822][T18299] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1285.504540][T18299] usb 9-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1285.507384][T18299] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1285.511192][T18299] usb 9-1: config 0 descriptor?? [ 1285.517502][T18299] input: bcm5974 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input35 [ 1285.545631][T22490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1285.557373][T22490] 8021q: adding VLAN 0 to HW filter on device team0 [ 1285.566363][ T1170] bridge0: port 1(bridge_slave_0) entered blocking state [ 1285.568636][ T1170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1285.573445][ T1170] bridge0: port 2(bridge_slave_1) entered blocking state [ 1285.575676][ T1170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1285.758979][T22490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1285.797308][T22490] veth0_vlan: entered promiscuous mode [ 1285.838048][T22490] veth1_vlan: entered promiscuous mode [ 1285.863976][T22490] veth0_macvtap: entered promiscuous mode [ 1285.870886][T22490] veth1_macvtap: entered promiscuous mode [ 1285.876547][T18299] bcm5974 9-1:0.0: could not read from device [ 1285.886993][T22490] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1285.893807][T18299] input: failed to attach handler mousedev to device input35, error: -5 [ 1285.896379][T22490] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1285.901308][T18299] usb 9-1: USB disconnect, device number 23 [ 1285.910018][T22490] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1285.913671][T22490] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1285.919035][T22490] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1285.922600][T22490] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1286.001520][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1286.014301][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1286.027146][T14755] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1286.030190][T14755] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1287.158126][T22535] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3701'. [ 1287.202524][T17778] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1287.210233][T17778] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1287.214225][T17778] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1287.216918][T17778] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1287.219676][T17778] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1287.228416][T22542] Bluetooth: MGMT ver 1.23 [ 1287.252003][T22536] lo speed is unknown, defaulting to 1000 [ 1287.256407][T22536] lo speed is unknown, defaulting to 1000 [ 1287.442164][T22536] chnl_net:caif_netlink_parms(): no params data found [ 1287.591069][T22536] bridge0: port 1(bridge_slave_0) entered blocking state [ 1287.594017][T22536] bridge0: port 1(bridge_slave_0) entered disabled state [ 1287.598253][T22536] bridge_slave_0: entered allmulticast mode [ 1287.602036][T22536] bridge_slave_0: entered promiscuous mode [ 1287.608792][T22536] bridge0: port 2(bridge_slave_1) entered blocking state [ 1287.611205][T22536] bridge0: port 2(bridge_slave_1) entered disabled state [ 1287.613819][T22536] bridge_slave_1: entered allmulticast mode [ 1287.619311][T22536] bridge_slave_1: entered promiscuous mode [ 1287.644836][T22558] input: syz0 as /devices/virtual/input/input36 [ 1287.681115][T22536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1287.687588][T22536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1287.746305][T22536] team0: Port device team_slave_0 added [ 1287.751673][T22536] team0: Port device team_slave_1 added [ 1287.790755][T22536] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1287.793691][T22536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1287.806295][T22536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1287.812430][T22536] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1287.815436][T22536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1287.827754][T22536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1287.871665][T22536] hsr_slave_0: entered promiscuous mode [ 1287.873945][T22536] hsr_slave_1: entered promiscuous mode [ 1287.876222][T22536] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1287.878577][T22536] Cannot create hsr debugfs directory [ 1287.990092][T22536] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1288.066810][T22536] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1288.198812][T22536] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1288.269795][T22536] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1288.402503][T22536] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1288.407530][T22536] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1288.411417][T22536] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1288.415516][T22536] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1288.438549][T22536] bridge0: port 2(bridge_slave_1) entered blocking state [ 1288.440805][T22536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1288.443194][T22536] bridge0: port 1(bridge_slave_0) entered blocking state [ 1288.445492][T22536] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1288.475785][T22536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1288.485732][T10211] bridge0: port 1(bridge_slave_0) entered disabled state [ 1288.490324][T10211] bridge0: port 2(bridge_slave_1) entered disabled state [ 1288.509936][T22536] 8021q: adding VLAN 0 to HW filter on device team0 [ 1288.515598][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1288.517896][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1288.523491][T19125] bridge0: port 2(bridge_slave_1) entered blocking state [ 1288.526897][T19125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1288.639470][T22579] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3711'. [ 1288.653608][ T5322] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1288.664813][ T5322] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1288.668673][ T5322] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1288.675532][ T5322] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1288.679047][ T5322] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1288.689328][T22536] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1288.719391][T22580] lo speed is unknown, defaulting to 1000 [ 1288.720438][T22536] veth0_vlan: entered promiscuous mode [ 1288.727764][T22536] veth1_vlan: entered promiscuous mode [ 1288.728213][T22580] lo speed is unknown, defaulting to 1000 [ 1288.751690][T22536] veth0_macvtap: entered promiscuous mode [ 1288.756415][T22536] veth1_macvtap: entered promiscuous mode [ 1288.769850][T22536] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1288.786826][T22536] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1288.797705][T22536] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1288.800473][T22536] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1288.803467][T22536] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1288.806781][T22536] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1288.909645][T19125] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1288.912458][T19125] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1288.988221][T22187] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1288.991445][T22187] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1289.065491][T22580] chnl_net:caif_netlink_parms(): no params data found [ 1289.155918][T22614] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input37 [ 1289.252908][T22580] bridge0: port 1(bridge_slave_0) entered blocking state [ 1289.256229][T22580] bridge0: port 1(bridge_slave_0) entered disabled state [ 1289.259464][T22580] bridge_slave_0: entered allmulticast mode [ 1289.265850][T22580] bridge_slave_0: entered promiscuous mode [ 1289.272224][T22580] bridge0: port 2(bridge_slave_1) entered blocking state [ 1289.276014][T22580] bridge0: port 2(bridge_slave_1) entered disabled state [ 1289.279182][T22580] bridge_slave_1: entered allmulticast mode [ 1289.282573][T22580] bridge_slave_1: entered promiscuous mode [ 1289.319247][T22580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1289.328372][T22580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1289.387732][T22580] team0: Port device team_slave_0 added [ 1289.393363][T22580] team0: Port device team_slave_1 added [ 1289.409062][T22627] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3723'. [ 1289.437195][T22580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1289.439437][T22580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1289.448345][T22580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1289.452723][T22580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1289.454821][T22580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1289.462627][T22580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1289.516981][T22580] hsr_slave_0: entered promiscuous mode [ 1289.519382][T22580] hsr_slave_1: entered promiscuous mode [ 1289.521601][T22580] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1289.525157][T22580] Cannot create hsr debugfs directory [ 1289.647590][T22580] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1289.684646][ T6004] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 1289.721247][T22580] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1289.791043][T22580] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1289.835824][ T6004] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1289.839851][ T6004] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1289.843725][ T6004] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1289.849913][ T6004] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1289.856747][ T6004] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 1289.860323][ T6004] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 1289.863233][ T6004] usb 9-1: Manufacturer: syz [ 1289.867705][ T6004] usb 9-1: config 0 descriptor?? [ 1289.885481][T22580] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1290.028168][T22580] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1290.033623][T22580] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1290.041143][T22580] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1290.045667][T22580] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1290.099158][T22580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1290.111514][T22580] 8021q: adding VLAN 0 to HW filter on device team0 [ 1290.117819][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1290.120050][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1290.127195][T22187] bridge0: port 2(bridge_slave_1) entered blocking state [ 1290.129578][T22187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1290.275841][T22580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1290.280896][ T6004] appleir 0003:05AC:8243.000C: unknown main item tag 0x0 [ 1290.286659][ T6004] appleir 0003:05AC:8243.000C: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 1290.309951][T22580] veth0_vlan: entered promiscuous mode [ 1290.317603][T22580] veth1_vlan: entered promiscuous mode [ 1290.345140][T22580] veth0_macvtap: entered promiscuous mode [ 1290.349393][T22580] veth1_macvtap: entered promiscuous mode [ 1290.360014][T22580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1290.366045][T22580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1290.370904][T22580] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1290.373589][T22580] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1290.377134][T22580] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1290.379732][T22580] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1290.415726][T10211] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1290.418235][T10211] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1290.442178][T14755] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1290.445592][T14755] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1292.460991][ T6004] usb 9-1: USB disconnect, device number 24 [ 1292.713276][T17778] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1292.716655][T17778] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1292.720417][T17778] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1292.727330][T17778] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1292.730127][T17778] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1292.755066][T22651] lo speed is unknown, defaulting to 1000 [ 1292.757623][T22651] lo speed is unknown, defaulting to 1000 [ 1292.928809][T22651] chnl_net:caif_netlink_parms(): no params data found [ 1293.010524][T22651] bridge0: port 1(bridge_slave_0) entered blocking state [ 1293.012999][T22651] bridge0: port 1(bridge_slave_0) entered disabled state [ 1293.015665][T22651] bridge_slave_0: entered allmulticast mode [ 1293.018389][T22651] bridge_slave_0: entered promiscuous mode [ 1293.022997][T22651] bridge0: port 2(bridge_slave_1) entered blocking state [ 1293.025880][T22651] bridge0: port 2(bridge_slave_1) entered disabled state [ 1293.028588][T22651] bridge_slave_1: entered allmulticast mode [ 1293.032658][T22651] bridge_slave_1: entered promiscuous mode [ 1293.070788][T22651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1293.076107][T22651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1293.131670][T22651] team0: Port device team_slave_0 added [ 1293.135776][T22651] team0: Port device team_slave_1 added [ 1293.169736][T22651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1293.171960][T22651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1293.180253][T22651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1293.185192][T22651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1293.187990][T22651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1293.196133][T22651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1293.239258][T22651] hsr_slave_0: entered promiscuous mode [ 1293.241581][T22651] hsr_slave_1: entered promiscuous mode [ 1293.243792][T22651] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1293.246346][T22651] Cannot create hsr debugfs directory [ 1293.359866][T22651] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1293.490687][T22651] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1293.616231][T22651] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1293.745583][T22651] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1293.780132][T17778] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1293.786021][T17778] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1293.788966][T17778] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1293.791469][T17778] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1293.825799][T17778] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1293.916913][T22673] lo speed is unknown, defaulting to 1000 [ 1293.940873][T22673] lo speed is unknown, defaulting to 1000 [ 1294.045975][T22651] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1294.067579][T22651] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1294.080809][T22651] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1294.091720][T22651] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1294.186165][T22651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1294.197441][T22651] 8021q: adding VLAN 0 to HW filter on device team0 [ 1294.202420][ T1170] bridge0: port 1(bridge_slave_0) entered blocking state [ 1294.204825][ T1170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1294.258630][T10211] bridge0: port 2(bridge_slave_1) entered blocking state [ 1294.260910][T10211] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1294.267035][T22673] chnl_net:caif_netlink_parms(): no params data found [ 1294.425888][T22673] bridge0: port 1(bridge_slave_0) entered blocking state [ 1294.428256][T22673] bridge0: port 1(bridge_slave_0) entered disabled state [ 1294.430616][T22673] bridge_slave_0: entered allmulticast mode [ 1294.433381][T22673] bridge_slave_0: entered promiscuous mode [ 1294.436834][T22673] bridge0: port 2(bridge_slave_1) entered blocking state [ 1294.439070][T22673] bridge0: port 2(bridge_slave_1) entered disabled state [ 1294.441790][T22673] bridge_slave_1: entered allmulticast mode [ 1294.445080][T22673] bridge_slave_1: entered promiscuous mode [ 1294.485865][T22673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1294.490687][T22673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1294.540162][T22673] team0: Port device team_slave_0 added [ 1294.551868][T22673] team0: Port device team_slave_1 added [ 1294.624674][T22651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1294.634751][T22673] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1294.637670][T22673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1294.650819][T22673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1294.656613][T22673] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1294.658891][T22673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1294.666824][T22673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1294.741115][T22673] hsr_slave_0: entered promiscuous mode [ 1294.743437][T22673] hsr_slave_1: entered promiscuous mode [ 1294.746028][T22673] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1294.749480][T22673] Cannot create hsr debugfs directory [ 1294.804098][ T5322] Bluetooth: hci0: command tx timeout [ 1294.898400][T22651] veth0_vlan: entered promiscuous mode [ 1294.940045][T22673] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1294.951086][T22651] veth1_vlan: entered promiscuous mode [ 1294.969776][T22651] veth0_macvtap: entered promiscuous mode [ 1294.975149][T22651] veth1_macvtap: entered promiscuous mode [ 1294.990828][T22651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1294.997823][T22651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1295.003145][T22651] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1295.006689][T22651] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1295.009491][T22651] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1295.012416][T22651] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1295.029784][T22673] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1295.079947][T22187] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1295.082513][T22187] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1295.098004][T22673] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1295.127052][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1295.129413][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1295.163604][T22673] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1295.305131][T22673] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1295.310695][T22673] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1295.314680][T22673] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1295.318815][T22673] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1295.364850][T22673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1295.377506][T22673] 8021q: adding VLAN 0 to HW filter on device team0 [ 1295.382626][T14755] bridge0: port 1(bridge_slave_0) entered blocking state [ 1295.384963][T14755] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1295.391237][T22187] bridge0: port 2(bridge_slave_1) entered blocking state [ 1295.393509][T22187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1295.541405][T22673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1295.562555][T22673] veth0_vlan: entered promiscuous mode [ 1295.568866][T22673] veth1_vlan: entered promiscuous mode [ 1295.585131][T22673] veth0_macvtap: entered promiscuous mode [ 1295.589194][T22673] veth1_macvtap: entered promiscuous mode [ 1295.598559][T22673] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1295.608094][T22673] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1295.614981][T22673] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1295.618366][T22673] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1295.621523][T22673] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1295.627581][T22673] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1295.667212][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1295.670856][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1295.696326][T14755] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1295.698873][T14755] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1298.066640][T17778] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1298.070742][T17778] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1298.079606][T17778] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1298.085165][T17778] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1298.088704][T17778] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1298.110746][T22721] lo speed is unknown, defaulting to 1000 [ 1298.113266][T22721] lo speed is unknown, defaulting to 1000 [ 1298.253646][T21660] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 1298.301658][T22721] chnl_net:caif_netlink_parms(): no params data found [ 1298.378476][T22721] bridge0: port 1(bridge_slave_0) entered blocking state [ 1298.380718][T22721] bridge0: port 1(bridge_slave_0) entered disabled state [ 1298.383100][T22721] bridge_slave_0: entered allmulticast mode [ 1298.385804][T22721] bridge_slave_0: entered promiscuous mode [ 1298.389055][T22721] bridge0: port 2(bridge_slave_1) entered blocking state [ 1298.391229][T22721] bridge0: port 2(bridge_slave_1) entered disabled state [ 1298.395017][T22721] bridge_slave_1: entered allmulticast mode [ 1298.397748][T22721] bridge_slave_1: entered promiscuous mode [ 1298.418198][T21660] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1298.421603][T21660] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1298.426020][T21660] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1298.429700][T21660] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1298.435566][T22721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1298.435866][T21660] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1298.440471][T22721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1298.444821][T21660] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1298.449485][T21660] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1298.452249][T21660] usb 9-1: Product: syz [ 1298.453667][T21660] usb 9-1: Manufacturer: syz [ 1298.460080][T21660] cdc_wdm 9-1:1.0: skipping garbage [ 1298.461987][T21660] cdc_wdm 9-1:1.0: skipping garbage [ 1298.469403][T21660] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 1298.471314][T21660] cdc_wdm 9-1:1.0: Unknown control protocol [ 1298.505759][T22721] team0: Port device team_slave_0 added [ 1298.512072][T22721] team0: Port device team_slave_1 added [ 1298.562197][T22721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1298.565201][T22721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1298.573042][T22721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1298.577518][T22721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1298.579475][T22721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1298.587289][T22721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1298.626464][T22721] hsr_slave_0: entered promiscuous mode [ 1298.628803][T22721] hsr_slave_1: entered promiscuous mode [ 1298.630913][T22721] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1298.633273][T22721] Cannot create hsr debugfs directory [ 1298.740092][T22721] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1298.816605][T22721] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1298.948040][T22721] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1299.030700][T22721] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1299.190314][ T5322] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1299.191381][T22721] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1299.196104][ T5322] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1299.197844][T22721] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1299.199013][ T5322] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1299.203754][ T5322] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1299.205617][T22721] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1299.206457][ T5322] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1299.212195][T22721] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1299.235277][T22731] lo speed is unknown, defaulting to 1000 [ 1299.237793][T22731] lo speed is unknown, defaulting to 1000 [ 1299.239069][T22721] bridge0: port 2(bridge_slave_1) entered blocking state [ 1299.242091][T22721] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1299.244559][T22721] bridge0: port 1(bridge_slave_0) entered blocking state [ 1299.246761][T22721] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1299.286459][T22721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1299.297487][T15060] bridge0: port 1(bridge_slave_0) entered disabled state [ 1299.301291][T15060] bridge0: port 2(bridge_slave_1) entered disabled state [ 1299.325194][T22721] 8021q: adding VLAN 0 to HW filter on device team0 [ 1299.344360][T15060] bridge0: port 1(bridge_slave_0) entered blocking state [ 1299.346713][T15060] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1299.366777][T22187] bridge0: port 2(bridge_slave_1) entered blocking state [ 1299.369122][T22187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1299.455770][T22731] chnl_net:caif_netlink_parms(): no params data found [ 1299.566301][T22731] bridge0: port 1(bridge_slave_0) entered blocking state [ 1299.568659][T22731] bridge0: port 1(bridge_slave_0) entered disabled state [ 1299.570973][T22731] bridge_slave_0: entered allmulticast mode [ 1299.574749][T22731] bridge_slave_0: entered promiscuous mode [ 1299.578477][T22731] bridge0: port 2(bridge_slave_1) entered blocking state [ 1299.580777][T22731] bridge0: port 2(bridge_slave_1) entered disabled state [ 1299.583114][T22731] bridge_slave_1: entered allmulticast mode [ 1299.587185][T22731] bridge_slave_1: entered promiscuous mode [ 1299.620982][T22731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1299.626867][T22731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1299.682798][T22731] team0: Port device team_slave_0 added [ 1299.691149][T22731] team0: Port device team_slave_1 added [ 1299.730264][T22721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1299.735989][T22731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1299.738890][T22731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1299.747829][T22731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1299.754157][T22731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1299.756291][T22731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1299.769767][T22731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1299.832025][T22731] hsr_slave_0: entered promiscuous mode [ 1299.835132][T22731] hsr_slave_1: entered promiscuous mode [ 1299.837301][T22731] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1299.839833][T22731] Cannot create hsr debugfs directory [ 1299.934103][T22721] veth0_vlan: entered promiscuous mode [ 1299.985804][T22721] veth1_vlan: entered promiscuous mode [ 1300.014067][T22731] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1300.054793][T22721] veth0_macvtap: entered promiscuous mode [ 1300.059994][T22721] veth1_macvtap: entered promiscuous mode [ 1300.095474][T22731] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1300.110725][T22721] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1300.120896][T22721] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1300.128588][T22721] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.132268][T22721] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.135814][T22721] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.139125][T22721] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.179756][ T5322] Bluetooth: hci0: command tx timeout [ 1300.186069][T22731] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1300.231908][ T1251] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1300.235180][ T1251] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1300.279122][T22731] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1300.287134][T14755] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1300.290241][T14755] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1300.442680][T22731] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1300.460805][T22731] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1300.465950][T22731] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1300.470748][T22731] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1300.540742][T22731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1300.554017][T22731] 8021q: adding VLAN 0 to HW filter on device team0 [ 1300.559731][ T1144] bridge0: port 1(bridge_slave_0) entered blocking state [ 1300.562010][ T1144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1300.580286][T19125] bridge0: port 2(bridge_slave_1) entered blocking state [ 1300.582615][T19125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1300.757986][T22731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1300.797712][T22731] veth0_vlan: entered promiscuous mode [ 1300.807539][T22731] veth1_vlan: entered promiscuous mode [ 1300.826918][T22731] veth0_macvtap: entered promiscuous mode [ 1300.831148][T22731] veth1_macvtap: entered promiscuous mode [ 1300.840559][T22731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1300.847804][T22731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1300.852417][T22731] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.855226][T22731] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.857911][T22731] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.860567][T22731] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.907879][T14755] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1300.911574][T14755] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1300.925250][T14755] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1300.927755][T14755] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1301.024367][T11695] usb 9-1: USB disconnect, device number 25 [ 1303.211612][T17778] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1303.215400][T17778] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1303.218459][T17778] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1303.222340][T17778] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1303.228938][T17778] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1303.247382][T22770] lo speed is unknown, defaulting to 1000 [ 1303.249948][T22770] lo speed is unknown, defaulting to 1000 [ 1303.406254][T22770] chnl_net:caif_netlink_parms(): no params data found [ 1303.481534][T22770] bridge0: port 1(bridge_slave_0) entered blocking state [ 1303.484262][T22770] bridge0: port 1(bridge_slave_0) entered disabled state [ 1303.486877][T22770] bridge_slave_0: entered allmulticast mode [ 1303.489546][T22770] bridge_slave_0: entered promiscuous mode [ 1303.492777][T22770] bridge0: port 2(bridge_slave_1) entered blocking state [ 1303.500022][T22770] bridge0: port 2(bridge_slave_1) entered disabled state [ 1303.502367][T22770] bridge_slave_1: entered allmulticast mode [ 1303.506522][T22770] bridge_slave_1: entered promiscuous mode [ 1303.559155][T22770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1303.566579][T22770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1303.631838][T22770] team0: Port device team_slave_0 added [ 1303.635685][T22770] team0: Port device team_slave_1 added [ 1303.671443][T22770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1303.674900][T22770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1303.685374][T22770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1303.691628][T22770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1303.694655][T22770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1303.705316][T22770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1303.756819][T22770] hsr_slave_0: entered promiscuous mode [ 1303.760414][T22770] hsr_slave_1: entered promiscuous mode [ 1303.762567][T22770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1303.765514][T22770] Cannot create hsr debugfs directory [ 1303.874957][T22770] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1303.978510][T22770] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1304.126524][T22770] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1304.155164][ T5322] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1304.159210][ T5322] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1304.163986][ T5322] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1304.169881][ T5322] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1304.173086][ T5322] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1304.216808][T22785] lo speed is unknown, defaulting to 1000 [ 1304.219662][T22785] lo speed is unknown, defaulting to 1000 [ 1304.264606][T22770] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1304.542565][T22770] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1304.547504][T22770] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1304.573824][T22770] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1304.579730][T22770] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1304.632176][T22785] chnl_net:caif_netlink_parms(): no params data found [ 1304.742789][T22785] bridge0: port 1(bridge_slave_0) entered blocking state [ 1304.745789][T22785] bridge0: port 1(bridge_slave_0) entered disabled state [ 1304.748125][T22785] bridge_slave_0: entered allmulticast mode [ 1304.750910][T22785] bridge_slave_0: entered promiscuous mode [ 1304.755435][T22785] bridge0: port 2(bridge_slave_1) entered blocking state [ 1304.757732][T22785] bridge0: port 2(bridge_slave_1) entered disabled state [ 1304.760023][T22785] bridge_slave_1: entered allmulticast mode [ 1304.762711][T22785] bridge_slave_1: entered promiscuous mode [ 1304.797532][T22785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1304.802644][T22785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1304.807800][T22770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1304.841220][T22785] team0: Port device team_slave_0 added [ 1304.847218][T22785] team0: Port device team_slave_1 added [ 1304.873357][ T10] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 1304.886484][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 1304.888705][T22770] 8021q: adding VLAN 0 to HW filter on device team0 [ 1305.490968][ T40] kauditd_printk_skb: 171 callbacks suppressed [ 1305.490981][ T40] audit: type=1326 audit(1305.379:14589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22820 comm="syz.0.3759" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f95579 code=0x7fc00000 [ 1306.243540][T17778] Bluetooth: hci1: command tx timeout [ 1306.759629][T22835] netfs: Couldn't get user pages (rc=-14) [ 1308.323404][T17778] Bluetooth: hci1: command tx timeout [ 1310.403267][T17778] Bluetooth: hci1: command tx timeout [ 1312.483003][T17778] Bluetooth: hci1: command tx timeout [ 1314.203264][ T28] sched: DL replenish lagged too much [ 1321.799052][ T1419] ================================================================== [ 1321.801554][ T1419] BUG: KASAN: slab-use-after-free in handle_tx+0x5a5/0x630 [ 1321.804356][ T1419] Read of size 8 at addr ffff88800b96a020 by task aoe_tx0/1419 [ 1321.808377][ T1419] [ 1321.809598][ T1419] CPU: 0 UID: 0 PID: 1419 Comm: aoe_tx0 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 1321.809619][ T1419] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1321.809626][ T1419] Call Trace: [ 1321.809631][ T1419] [ 1321.809636][ T1419] dump_stack_lvl+0x116/0x1f0 [ 1321.809664][ T1419] print_report+0xcd/0x680 [ 1321.809675][ T1419] ? __virt_addr_valid+0x81/0x610 [ 1321.809687][ T1419] ? __phys_addr+0xe8/0x180 [ 1321.809700][ T1419] ? handle_tx+0x5a5/0x630 [ 1321.809711][ T1419] kasan_report+0xe0/0x110 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1321.809721][ T1419] ? handle_tx+0x5a5/0x630 [ 1321.809732][ T1419] handle_tx+0x5a5/0x630 [ 1321.809744][ T1419] dev_hard_start_xmit+0x94/0x740 [ 1321.809760][ T1419] __dev_queue_xmit+0x7eb/0x43e0 [ 1321.809774][ T1419] ? lockdep_hardirqs_on+0x7c/0x110 [ 1321.809790][ T1419] ? finish_task_switch.isra.0+0x221/0xc10 [ 1321.809803][ T1419] ? rcu_is_watching+0x12/0xc0 [ 1321.809814][ T1419] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1321.809829][ T1419] ? __lock_acquire+0xb8a/0x1c90 [ 1321.809845][ T1419] ? __lock_acquire+0xb8a/0x1c90 [ 1321.809861][ T1419] ? do_raw_spin_lock+0x12c/0x2b0 [ 1321.809880][ T1419] ? rcu_is_watching+0x12/0xc0 [ 1321.809892][ T1419] tx+0xcc/0x190 [ 1321.809904][ T1419] ? __pfx_tx+0x10/0x10 [ 1321.809914][ T1419] kthread+0x1e1/0x3e0 [ 1321.809924][ T1419] ? find_held_lock+0x2b/0x80 [ 1321.809935][ T1419] ? __pfx_kthread+0x10/0x10 [ 1321.809944][ T1419] ? __pfx_default_wake_function+0x10/0x10 [ 1321.809956][ T1419] ? lockdep_hardirqs_on+0x7c/0x110 [ 1321.809971][ T1419] ? __kthread_parkme+0x19e/0x250 [ 1321.809985][ T1419] ? __pfx_kthread+0x10/0x10 [ 1321.809994][ T1419] kthread+0x3c5/0x780 [ 1321.810009][ T1419] ? __pfx_kthread+0x10/0x10 [ 1321.810025][ T1419] ? rcu_is_watching+0x12/0xc0 [ 1321.810036][ T1419] ? __pfx_kthread+0x10/0x10 [ 1321.810052][ T1419] ret_from_fork+0x5d4/0x6f0 [ 1321.810067][ T1419] ? __pfx_kthread+0x10/0x10 [ 1321.810082][ T1419] ret_from_fork_asm+0x1a/0x30 [ 1321.810097][ T1419] [ 1321.810101][ T1419] [ 1321.885500][ T1419] Allocated by task 18694: [ 1321.887261][ T1419] kasan_save_stack+0x33/0x60 [ 1321.889128][ T1419] kasan_save_track+0x14/0x30 [ 1321.890965][ T1419] __kasan_kmalloc+0xaa/0xb0 [ 1321.892816][ T1419] alloc_tty_struct+0x96/0x8c0 [ 1321.894675][ T1419] tty_init_dev.part.0+0x1e/0x500 [ 1321.896686][ T1419] tty_open+0xa50/0xf90 [ 1321.898283][ T1419] chrdev_open+0x234/0x6a0 [ 1321.900039][ T1419] do_dentry_open+0x741/0x1c10 [ 1321.901924][ T1419] vfs_open+0x82/0x3f0 [ 1321.903535][ T1419] path_openat+0x1de4/0x2cb0 [ 1321.905388][ T1419] do_filp_open+0x20b/0x470 [ 1321.907180][ T1419] do_sys_openat2+0x11b/0x1d0 [ 1321.909039][ T1419] __ia32_compat_sys_openat+0x16d/0x210 [ 1321.911179][ T1419] __do_fast_syscall_32+0x7c/0x3a0 [ 1321.913214][ T1419] do_fast_syscall_32+0x32/0x80 [ 1321.915139][ T1419] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1321.917590][ T1419] [ 1321.918548][ T1419] Freed by task 19299: [ 1321.920132][ T1419] kasan_save_stack+0x33/0x60 [ 1321.921975][ T1419] kasan_save_track+0x14/0x30 [ 1321.923935][ T1419] kasan_save_free_info+0x3b/0x60 [ 1321.925932][ T1419] __kasan_slab_free+0x51/0x70 [ 1321.927845][ T1419] kfree+0x2b4/0x4d0 [ 1321.929393][ T1419] process_one_work+0x9cc/0x1b70 [ 1321.931352][ T1419] worker_thread+0x6c8/0xf10 [ 1321.933167][ T1419] kthread+0x3c5/0x780 [ 1321.934757][ T1419] ret_from_fork+0x5d4/0x6f0 [ 1321.936606][ T1419] ret_from_fork_asm+0x1a/0x30 [ 1321.938494][ T1419] [ 1321.939457][ T1419] Last potentially related work creation: [ 1321.941551][ T1419] kasan_save_stack+0x33/0x60 [ 1321.943428][ T1419] kasan_record_aux_stack+0xa7/0xc0 [ 1321.945486][ T1419] insert_work+0x36/0x230 [ 1321.947182][ T1419] __queue_work+0x97e/0x10f0 [ 1321.949035][ T1419] queue_work_on+0x1a4/0x1f0 [ 1321.950837][ T1419] release_tty+0x4de/0x5d0 [ 1321.952590][ T1419] tty_release_struct+0xb7/0xe0 [ 1321.954505][ T1419] tty_release+0xe2d/0x1430 [ 1321.956307][ T1419] __fput+0x402/0xb70 [ 1321.957876][ T1419] task_work_run+0x14d/0x240 [ 1321.959693][ T1419] do_exit+0x86c/0x2bd0 [ 1321.961334][ T1419] do_group_exit+0xd3/0x2a0 [ 1321.963094][ T1419] get_signal+0x2673/0x26d0 [ 1321.964847][ T1419] arch_do_signal_or_restart+0x8f/0x790 [ 1321.967028][ T1419] exit_to_user_mode_loop+0x84/0x110 [ 1321.969127][ T1419] __do_fast_syscall_32+0x2ac/0x3a0 [ 1321.971165][ T1419] do_fast_syscall_32+0x32/0x80 [ 1321.973096][ T1419] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1321.975567][ T1419] [ 1321.976534][ T1419] The buggy address belongs to the object at ffff88800b96a000 [ 1321.976534][ T1419] which belongs to the cache kmalloc-cg-2k of size 2048 [ 1321.981946][ T1419] The buggy address is located 32 bytes inside of [ 1321.981946][ T1419] freed 2048-byte region [ffff88800b96a000, ffff88800b96a800) [ 1321.987254][ T1419] [ 1321.988223][ T1419] The buggy address belongs to the physical page: [ 1321.990693][ T1419] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0xb968 [ 1321.994040][ T1419] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1321.997309][ T1419] memcg:ffff888022bfdd01 [ 1321.999039][ T1419] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1322.001936][ T1419] page_type: f5(slab) [ 1322.003516][ T1419] raw: 00fff00000000040 ffff88801b84c140 ffffea00004e0e00 dead000000000002 [ 1322.006806][ T1419] raw: 0000000000000000 0000000000080008 00000000f5000000 ffff888022bfdd01 [ 1322.010138][ T1419] head: 00fff00000000040 ffff88801b84c140 ffffea00004e0e00 dead000000000002 [ 1322.013461][ T1419] head: 0000000000000000 0000000000080008 00000000f5000000 ffff888022bfdd01 [ 1322.016855][ T1419] head: 00fff00000000003 ffffea00002e5a01 00000000ffffffff 00000000ffffffff [ 1322.020188][ T1419] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1322.023501][ T1419] page dumped because: kasan: bad access detected [ 1322.025972][ T1419] page_owner tracks the page as allocated [ 1322.028198][ T1419] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 18137, tgid 18126 (syz.3.2432), ts 1009183259551, free_ts 1006782662989 [ 1322.036264][ T1419] post_alloc_hook+0x1c0/0x230 [ 1322.038108][ T1419] get_page_from_freelist+0x1321/0x3890 [ 1322.039843][ T1419] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 1322.042056][ T1419] alloc_pages_mpol+0x1fb/0x550 [ 1322.043716][ T1419] new_slab+0x23b/0x330 [ 1322.045377][ T1419] ___slab_alloc+0xd9c/0x1940 [ 1322.047229][ T1419] __slab_alloc.constprop.0+0x56/0xb0 [ 1322.049294][ T1419] __kmalloc_noprof+0x2f2/0x510 [ 1322.050853][ T1419] __register_sysctl_table+0xb3/0x1900 [ 1322.052569][ T1419] __devinet_sysctl_register+0x1b9/0x360 [ 1322.054307][ T1419] devinet_init_net+0x347/0x910 [ 1322.055843][ T1419] ops_init+0x1df/0x5f0 [ 1322.057219][ T1419] setup_net+0x1ff/0x510 [ 1322.058720][ T1419] copy_net_ns+0x2a6/0x5f0 [ 1322.060162][ T1419] create_new_namespaces+0x3ea/0xa90 [ 1322.062040][ T1419] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1322.064070][ T1419] page last free pid 18112 tgid 18112 stack trace: [ 1322.066090][ T1419] __free_frozen_pages+0x7fe/0x1180 [ 1322.067746][ T1419] __put_partials+0x16d/0x1c0 [ 1322.069255][ T1419] qlist_free_all+0x4d/0x120 [ 1322.070720][ T1419] kasan_quarantine_reduce+0x195/0x1e0 [ 1322.072517][ T1419] __kasan_slab_alloc+0x69/0x90 [ 1322.074032][ T1419] kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 1322.075798][ T1419] vm_area_dup+0x27/0x8d0 [ 1322.077175][ T1419] __split_vma+0x18e/0x1070 [ 1322.078614][ T1419] vms_gather_munmap_vmas+0x1c2/0x1310 [ 1322.080328][ T1419] __mmap_region+0x3c7/0x25e0 [ 1322.081818][ T1419] mmap_region+0x32b/0x3f0 [ 1322.083226][ T1419] do_mmap+0xa3e/0x1210 [ 1322.084555][ T1419] vm_mmap_pgoff+0x281/0x450 [ 1322.086036][ T1419] ksys_mmap_pgoff+0x32c/0x5c0 [ 1322.087567][ T1419] __do_fast_syscall_32+0x7c/0x3a0 [ 1322.089171][ T1419] do_fast_syscall_32+0x32/0x80 [ 1322.090708][ T1419] [ 1322.091496][ T1419] Memory state around the buggy address: [ 1322.093316][ T1419] ffff88800b969f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1322.096434][ T1419] ffff88800b969f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1322.099309][ T1419] >ffff88800b96a000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1322.101718][ T1419] ^ [ 1322.103330][ T1419] ffff88800b96a080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1322.105834][ T1419] ffff88800b96a100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1322.108292][ T1419] ================================================================== [ 1322.110865][ T1419] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1322.113120][ T1419] CPU: 0 UID: 0 PID: 1419 Comm: aoe_tx0 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 1322.116181][ T1419] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 1322.119480][ T1419] Call Trace: [ 1322.120531][ T1419] [ 1322.121466][ T1419] dump_stack_lvl+0x3d/0x1f0 [ 1322.122928][ T1419] panic+0x71c/0x800 [ 1322.124184][ T1419] ? __pfx_panic+0x10/0x10 [ 1322.125558][ T1419] ? irqentry_exit+0x3b/0x90 [ 1322.126984][ T1419] ? lockdep_hardirqs_on+0x7c/0x110 [ 1322.128621][ T1419] ? handle_tx+0x5a5/0x630 [ 1322.130023][ T1419] ? check_panic_on_warn+0x1f/0xb0 [ 1322.131640][ T1419] ? handle_tx+0x5a5/0x630 [ 1322.133020][ T1419] check_panic_on_warn+0xab/0xb0 [ 1322.134580][ T1419] end_report+0x107/0x170 [ 1322.135981][ T1419] kasan_report+0xee/0x110 [ 1322.137396][ T1419] ? handle_tx+0x5a5/0x630 [ 1322.138794][ T1419] handle_tx+0x5a5/0x630 [ 1322.140126][ T1419] dev_hard_start_xmit+0x94/0x740 [ 1322.141701][ T1419] __dev_queue_xmit+0x7eb/0x43e0 [ 1322.143255][ T1419] ? lockdep_hardirqs_on+0x7c/0x110 [ 1322.144874][ T1419] ? finish_task_switch.isra.0+0x221/0xc10 [ 1322.146678][ T1419] ? rcu_is_watching+0x12/0xc0 [ 1322.148151][ T1419] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1322.149838][ T1419] ? __lock_acquire+0xb8a/0x1c90 [ 1322.151393][ T1419] ? __lock_acquire+0xb8a/0x1c90 [ 1322.152941][ T1419] ? do_raw_spin_lock+0x12c/0x2b0 [ 1322.154471][ T1419] ? rcu_is_watching+0x12/0xc0 [ 1322.155984][ T1419] tx+0xcc/0x190 [ 1322.157166][ T1419] ? __pfx_tx+0x10/0x10 [ 1322.158471][ T1419] kthread+0x1e1/0x3e0 [ 1322.159818][ T1419] ? find_held_lock+0x2b/0x80 [ 1322.161636][ T1419] ? __pfx_kthread+0x10/0x10 [ 1322.163141][ T1419] ? __pfx_default_wake_function+0x10/0x10 [ 1322.164959][ T1419] ? lockdep_hardirqs_on+0x7c/0x110 [ 1322.166594][ T1419] ? __kthread_parkme+0x19e/0x250 [ 1322.168214][ T1419] ? __pfx_kthread+0x10/0x10 [ 1322.169920][ T1419] kthread+0x3c5/0x780 [ 1322.171525][ T1419] ? __pfx_kthread+0x10/0x10 [ 1322.173144][ T1419] ? rcu_is_watching+0x12/0xc0 [ 1322.174885][ T1419] ? __pfx_kthread+0x10/0x10 [ 1322.176553][ T1419] ret_from_fork+0x5d4/0x6f0 [ 1322.178345][ T1419] ? __pfx_kthread+0x10/0x10 [ 1322.179829][ T1419] ret_from_fork_asm+0x1a/0x30 [ 1322.181599][ T1419] [ 1322.183369][ T1419] Kernel Offset: disabled [ 1322.184777][ T1419] Rebooting in 86400 seconds.. VM DIAGNOSIS: 15:36:55 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000038 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85582c95 RDI=ffffffff9b0a9980 RBP=ffffffff9b0a9940 RSP=ffffc900077af458 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000038 R14=ffffffff9b0a9940 R15=ffffffff85582c30 RIP=ffffffff85582cbf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097523000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7f46e40 CR3=000000006eea5000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffff00 000000ffffffff00 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e4f4954504f5f4e 4153410063657865 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000001d10073 RBX=0000000000000001 RCX=ffffffff8b843c39 RDX=0000000000000000 RSI=ffffffff8de2ad71 RDI=ffffffff8c157060 RBP=ffffed1003bd8488 RSP=ffffc9000046fdf8 R8 =0000000000000001 R9 =ffffed1005666645 R10=ffff88802b33322b R11=0000000000000001 R12=0000000000000001 R13=ffff88801dec2440 R14=ffffffff90a98e50 R15=0000000000000000 RIP=ffffffff8b84279f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097623000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c47f479 CR3=0000000024bdf000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000fff Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 34d51728c55ade91 f03e86c74f5bb95a ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 38367e914c287904 4024190d5b3e372a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 da36543bbf828fe7 717dc79dd365c46e ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3577923cea6caa99 8000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c200000000000000 0000000000000001 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0001020304050607 08090a0b0c0d0e0f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 cda419f600000000 0000021500000001 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 9e8428a5c0118985 c42704cb43807394 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8a69b7d80b612c0f 36fd52ff68568ecc ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 45a611187c950d8b ecb7d19d15bb3f62 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f4a1407b570c287d 360fcdc9e6971c70 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 cda419f600000000 0000021500000008 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8779fc74e77d77ee c37ed04c7b3ddee3 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6d51d6d828f7c7c0 5462ca4bb8d51bd6 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8a69b7d80b612c0f 36fd52ff68568ecc ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c200000000000000 0000000000000001 c200000000000000 0000000000000001 info registers vcpu 2 CPU#2 RAX=0000000080000201 RBX=0000000000000040 RCX=ffffffff84df65d6 RDX=ffff888027a22440 RSI=ffffffff84df6681 RDI=0000000000000001 RBP=ffffc900010ff330 RSP=ffffc900010ff1f0 R8 =0000000000000001 R9 =0000000000000040 R10=0000000000000040 R11=0000000000000001 R12=1ffff9200021fe48 R13=0000000000000040 R14=0000000000000002 R15=ffffffff8c15c246 RIP=ffffffff81bb536b RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f21c119c300 ffffffff 00c00000 GS =0000 ffff888097723000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005556d83e1ec8 CR3=000000004c257000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000097 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=8a4ca7a8e2737fd4 addb821a1634cfe5 8a4ca7a8e2737fd4 addb821a1634cfe5 8a4ca7a8e2737fd4 addb821a1634cfe5 8a4ca7a8e2737fd4 addb821a1634cfe5 ZMM18=7e6cf5dc8a22c499 aeba823daa3e24c1 7e6cf5dc8a22c499 aeba823daa3e24c1 7e6cf5dc8a22c499 aeba823daa3e24c1 7e6cf5dc8a22c499 aeba823daa3e24c1 ZMM19=dc2a000000000000 0000000000000004 dc2a000000000000 0000000000000003 dc2a000000000000 0000000000000002 dc2a000000000000 0000000000000001 ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff895426daffffff ff89542cd2ffffff ff89542b44ffffff ff89542ed3ffffff ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff895429d5ffffff ff89542d25ffffff ff89542e0affffff ff89542428ffffff ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff8954222bffffff ff89542707ffffff ff89542211ffffff ff89542c28ffffff ZMM24=4f45d2694f45d269 4f45d2694f45d269 4f45d2694f45d269 4f45d2694f45d269 4f45d2694f45d269 4f45d2694f45d269 4f45d2694f45d269 4f45d2694f45d269 ZMM25=e2951049e2951049 e2951049e2951049 e2951049e2951049 e2951049e2951049 e2951049e2951049 e2951049e2951049 e2951049e2951049 e2951049e2951049 ZMM26=48de352448de3524 48de352448de3524 48de352448de3524 48de352448de3524 48de352448de3524 48de352448de3524 48de352448de3524 48de352448de3524 ZMM27=ad11911aad11911a ad11911aad11911a ad11911aad11911a ad11911aad11911a ad11911aad11911a ad11911aad11911a ad11911aad11911a ad11911aad11911a ZMM28=000001d0000001cf 000001ce000001cd 000001cc000001cb 000001ca000001c9 000001c8000001c7 000001c6000001c5 000001c4000001c3 000001c2000001c1 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=e3500000e3500000 e3500000e3500000 e3500000e3500000 e3500000e3500000 e3500000e3500000 e3500000e3500000 e3500000e3500000 e3500000e3500000 info registers vcpu 3 CPU#3 RAX=0000000000000007 RBX=0000000000000002 RCX=000000006108635e RDX=0000000000000000 RSI=000000008d8b2fd8 RDI=ffff888022c52f80 RBP=ffff888022c52440 RSP=ffffc90006a2f9e0 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=ffff888022c52f30 R13=ffff888022c52f80 R14=0000000000000002 R15=0000000000000001 RIP=ffffffff81979583 RFL=00000003 [------C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097823000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f88276d6a28 CR3=000000004769d000 CR4=00352ef0 DR0=000000005ffffffd DR1=0000000000000097 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000600 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 37aa38e6990e54e2 481c69dfd6de6194 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 683eca2bc0bbd38c ab6f91347fc326d5 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ec824b2d5fd5fdb8 67fca10117ca582c ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 385f163c8bb779c1 0181ccc042b5df43 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000200 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 009f78e900000321 0080010000000321 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 75d2efde75ec62c2 7605f1b000000321 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0080010075d40928 0000032100000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 75ed57cc00800100 0080010000000321 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a625e01261e166bb c497fcc7b0b98bfa ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 af806a20493e2a06 bc6c223fc8590e76 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000