last executing test programs: 3.600237174s ago: executing program 2 (id=602): socket$inet_udplite(0x2, 0x2, 0x88) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c1000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='ext4_mb_release_inode_pa\x00', r0}, 0x10) socket$alg(0x26, 0x5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @remote}, 0x10) r1 = syz_io_uring_setup(0x1fa4, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000140)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}) io_uring_enter(r1, 0x54, 0x0, 0xf, 0x0, 0x18) 3.530038473s ago: executing program 0 (id=603): r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) socket(0x15, 0x5, 0x0) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000340)="24000000010001", 0x7) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, 0x0, &(0x7f0000000080)) setresgid(0xee01, 0x0, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) 3.487663715s ago: executing program 3 (id=605): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r0, r2, 0x1, 0x0, @void}, 0x10) r3 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) writev(r3, &(0x7f0000002200)=[{&(0x7f0000000100)="716ddaa8f3061a7f625beb6e3a05b049c9713f5e399cdc7c0a149cf8bbbf47f8b4b7cfeda26b63bc", 0x28}], 0x1) 3.431161938s ago: executing program 0 (id=606): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @private=0xa010101}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000380)="e4", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) write(r1, &(0x7f00000002c0)="e4", 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000140)={0x8}, 0x10) sendmmsg$unix(r1, &(0x7f0000002600)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000400)='L', 0x1}], 0x1}}], 0x1, 0x0) close(r1) 2.71764353s ago: executing program 0 (id=607): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000580)="0b102acdc64d8e703c55a47e57f3f8ee60563f97fe55c482", 0x0, 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000003c0)={'bridge0\x00'}) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000080)='bridge0\x00') 2.66168385s ago: executing program 1 (id=609): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800"/11], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000100)=0xcf5) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) ppoll(&(0x7f0000000280)=[{r1}], 0x1, 0x0, 0x0, 0x0) r2 = syz_open_pts(r1, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x11) ioctl$TCSETSW2(r3, 0x5437, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) 2.648477027s ago: executing program 2 (id=610): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x409c884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @local}, 0x1c) sendto$inet6(r0, &(0x7f0000000780)="0d0ad7c36d6617110e434332d6ac582208222cfb7c37ce1148f448455bc37f5f70c92774dcb201629979039d7c8943b207e5bdf9ab8eed9a", 0x38, 0x6d91fb6102d8d9cc, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) sendto$inet6(r0, &(0x7f0000000140)="44b1654c33e8d68782d37f3b82", 0xd, 0x0, 0x0, 0x0) recvfrom(r0, &(0x7f0000001a80)=""/4096, 0x1000, 0x0, 0x0, 0x0) 2.648020482s ago: executing program 2 (id=611): openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000100), 0x3, 0x2) syz_io_uring_setup(0x239, &(0x7f0000000340)={0x0, 0x0, 0x10100}, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000009c0)='net/tcp6\x00') pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90f, 0x1}) 2.57438861s ago: executing program 3 (id=612): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000140)={@flat=@weak_handle={0x77682a85, 0x10a, 0x1}, @ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, &(0x7f00000004c0)=""/135, 0x87, 0x1, 0x36}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0}) 2.260757979s ago: executing program 2 (id=613): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(&(0x7f0000000480)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1m\x1c\xce\x9d\x8f\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2\x03\x00\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\x80\xfce\xc2\xc5\n7:\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\x9e\xf6\x14\x83Q\xd74\x06\x89\xe5J\x1deT\x11\xbe\xeb~x&\"\xe4d|0\xbf_\xb8#\xb7q\xc9i\x8f\xa5m\x8dS\xe8F\xef\xd2\n\xb6#\xe2\xdf\x9b\xd1>\xdf\xb7\x80\x14}X\xc2n8\xf1\x14X\x83\xe9\x10\xae\x8a\b\xd03\x92\xda\xdb\x1f\xfdc\xc9\xc7\x02w\xa6\xe8\xd9\x98f\xef\xf7\xcdai\a\xbe\x8c\'\xb9\'\x93\xe6\x10\x9a+Z7^\xc9G\xc32_yv\xb9\xcc\x8f\xb4\xbd\xc5(', 0xa) ftruncate(r2, 0xffff) socket$inet6(0xa, 0x3, 0xff) fcntl$addseals(r2, 0x409, 0x7) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000100)={r2, 0x0, 0x0, 0x1000}) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) 2.260096256s ago: executing program 3 (id=614): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 2.258409425s ago: executing program 0 (id=621): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) io_setup(0x7, &(0x7f0000000780)=0x0) io_submit(r2, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000004080)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, 0x0, &(0x7f0000004c80)=""/83, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000001040)=0x1) read$eventfd(r1, &(0x7f00000001c0), 0x8) 2.142826093s ago: executing program 3 (id=615): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000040)={0x0, 0xea60}, 0x10) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0xfffffe74) 1.987472715s ago: executing program 1 (id=616): bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x4, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x2) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7b13000019000000200012800b00010067656e657665000010000280060005004e200000040006"], 0x40}}, 0x0) 1.887835403s ago: executing program 0 (id=617): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) r1 = syz_open_dev$swradio(&(0x7f00000000c0), 0x0, 0x2) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000040)={0xf0f041}) 1.408999232s ago: executing program 2 (id=618): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000200)={0x50}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}]}}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x505, 0x41) 1.38900864s ago: executing program 1 (id=619): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x6}) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x59, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85512, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r2, 0x10c, 0x1, &(0x7f0000000040)=0x1000, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_hsr\x00'}]}]}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xf0}}, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) 1.190802127s ago: executing program 2 (id=620): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$kcm(0x10, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x101843, 0x0) vmsplice(r0, 0x0, 0x0, 0x0) 1.090102824s ago: executing program 1 (id=622): open(0x0, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) getpid() r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDSIGACCEPT(r1, 0x5607, 0xf) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r2, 0x4b3a, 0x1) ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000000)={0x4}) 179.607402ms ago: executing program 1 (id=623): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000140)={@flat=@weak_handle={0x77682a85, 0x10a, 0x1}, @ptr={0x70742a85, 0x0, 0x0}, @ptr={0x70742a85, 0x0, &(0x7f00000004c0)=""/135, 0x87, 0x1, 0x36}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0}) 179.417553ms ago: executing program 3 (id=624): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000001c0)) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000005c0)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/62, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/73, &(0x7f0000000880)=""/72}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000340)=0x0) 24.777354ms ago: executing program 0 (id=625): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) r1 = syz_io_uring_setup(0x24f5, &(0x7f0000000280)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0xa3d, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "00009200000000000000000000000058b200"}) write(r0, &(0x7f00000001c0)='u', 0x1) r4 = syz_open_pts(r0, 0x88a40) r5 = dup(r4) ioctl$TCSETS2(r5, 0x402c542b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "cd3165308dad42c22d6f78e986730fcfe6cf9a"}) read$FUSE(r5, &(0x7f00000038c0)={0x2020}, 0x2020) 9.779065ms ago: executing program 1 (id=626): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff801000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) chdir(&(0x7f0000000100)='./file0\x00') read$FUSE(r0, &(0x7f0000002380)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 0s ago: executing program 3 (id=627): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.events\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"]) chdir(&(0x7f0000000280)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x28011, r1, 0x0) ftruncate(r1, 0xc17c) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f0000000080)) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xbcb07b29f486204c, 0x10012, r0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:8709' (ED25519) to the list of known hosts. [ 34.919512][ T5285] cgroup: Unknown subsys name 'net' [ 35.054575][ T5285] cgroup: Unknown subsys name 'cpuset' [ 35.059109][ T5285] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 36.056808][ T5285] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 38.924307][ T5350] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 38.927210][ T5350] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 38.929571][ T5350] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 38.941791][ T5350] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 38.944150][ T5350] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 38.946599][ T5351] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 38.960261][ T5354] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 38.961411][ T5359] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 38.963284][ T5354] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 38.965899][ T5359] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 38.968904][ T5354] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 38.971420][ T5359] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 38.974234][ T5362] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 38.977098][ T5354] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 38.979514][ T5362] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 38.981753][ T5354] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 38.984197][ T5362] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 38.987374][ T5354] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 38.989008][ T5362] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 38.991259][ T5363] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 38.992905][ T5362] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 39.009682][ T5359] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 39.012668][ T5359] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 39.015174][ T5359] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 39.249127][ T5346] chnl_net:caif_netlink_parms(): no params data found [ 39.254459][ T5356] chnl_net:caif_netlink_parms(): no params data found [ 39.304158][ T5355] chnl_net:caif_netlink_parms(): no params data found [ 39.321748][ T5347] chnl_net:caif_netlink_parms(): no params data found [ 39.437173][ T5346] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.439745][ T5346] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.443610][ T5346] bridge_slave_0: entered allmulticast mode [ 39.446652][ T5346] bridge_slave_0: entered promiscuous mode [ 39.452100][ T5356] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.455019][ T5356] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.457651][ T5356] bridge_slave_0: entered allmulticast mode [ 39.461763][ T5356] bridge_slave_0: entered promiscuous mode [ 39.465399][ T5356] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.467874][ T5356] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.470564][ T5356] bridge_slave_1: entered allmulticast mode [ 39.473420][ T5356] bridge_slave_1: entered promiscuous mode [ 39.497113][ T5346] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.499778][ T5346] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.502764][ T5346] bridge_slave_1: entered allmulticast mode [ 39.505754][ T5346] bridge_slave_1: entered promiscuous mode [ 39.591134][ T5356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.619200][ T5346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.623010][ T5356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.658814][ T5347] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.661592][ T5347] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.664200][ T5347] bridge_slave_0: entered allmulticast mode [ 39.666943][ T5347] bridge_slave_0: entered promiscuous mode [ 39.672192][ T5346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.714341][ T5355] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.718409][ T5355] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.721350][ T5355] bridge_slave_0: entered allmulticast mode [ 39.724234][ T5355] bridge_slave_0: entered promiscuous mode [ 39.727484][ T5347] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.730267][ T5347] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.732770][ T5347] bridge_slave_1: entered allmulticast mode [ 39.735669][ T5347] bridge_slave_1: entered promiscuous mode [ 39.760171][ T5356] team0: Port device team_slave_0 added [ 39.762824][ T5355] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.765644][ T5355] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.768739][ T5355] bridge_slave_1: entered allmulticast mode [ 39.772327][ T5355] bridge_slave_1: entered promiscuous mode [ 39.828127][ T5356] team0: Port device team_slave_1 added [ 39.872399][ T5346] team0: Port device team_slave_0 added [ 39.891490][ T5356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.893526][ T5356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.902763][ T5356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.909051][ T5355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.914318][ T5347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.919009][ T5346] team0: Port device team_slave_1 added [ 39.921707][ T5356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.923981][ T5356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.932569][ T5356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.938185][ T5355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.943176][ T5347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.032782][ T5347] team0: Port device team_slave_0 added [ 40.035917][ T5346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.038352][ T5346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.047026][ T5346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.067615][ T5355] team0: Port device team_slave_0 added [ 40.071767][ T5347] team0: Port device team_slave_1 added [ 40.074479][ T5346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.076994][ T5346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.085768][ T5346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.104094][ T5355] team0: Port device team_slave_1 added [ 40.180186][ T5347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.182008][ T5347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.188606][ T5347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.195200][ T5356] hsr_slave_0: entered promiscuous mode [ 40.197960][ T5356] hsr_slave_1: entered promiscuous mode [ 40.213263][ T5355] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.215539][ T5355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.224189][ T5355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.229476][ T5355] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.232426][ T5355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.241750][ T5355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.246325][ T5347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.248844][ T5347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.258145][ T5347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.344796][ T5346] hsr_slave_0: entered promiscuous mode [ 40.347710][ T5346] hsr_slave_1: entered promiscuous mode [ 40.350590][ T5346] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 40.353381][ T5346] Cannot create hsr debugfs directory [ 40.396418][ T5347] hsr_slave_0: entered promiscuous mode [ 40.399332][ T5347] hsr_slave_1: entered promiscuous mode [ 40.402833][ T5347] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 40.405606][ T5347] Cannot create hsr debugfs directory [ 40.437517][ T5355] hsr_slave_0: entered promiscuous mode [ 40.440856][ T5355] hsr_slave_1: entered promiscuous mode [ 40.443568][ T5355] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 40.446136][ T5355] Cannot create hsr debugfs directory [ 40.682306][ T5356] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 40.692706][ T5356] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 40.700857][ T5356] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 40.705300][ T5356] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 40.733678][ T5347] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 40.738558][ T5347] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 40.743642][ T5347] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 40.748938][ T5347] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 40.786443][ T5346] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 40.791090][ T5346] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 40.802060][ T5346] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 40.809273][ T5346] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 40.846833][ T5355] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 40.852559][ T5355] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 40.868635][ T5355] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 40.875808][ T5355] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 40.919677][ T5356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.945450][ T5356] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.981179][ T1097] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.983896][ T1097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.988302][ T1097] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.990988][ T1097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.999265][ T5347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.014179][ T5347] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.021706][ T5359] Bluetooth: hci2: command tx timeout [ 41.025145][ T5351] Bluetooth: hci1: command tx timeout [ 41.025409][ T5359] Bluetooth: hci0: command tx timeout [ 41.031400][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.033879][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.062702][ T1097] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.065327][ T1097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.079480][ T5346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.097671][ T5355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 41.100851][ T5359] Bluetooth: hci3: command tx timeout [ 41.120446][ T5346] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.129645][ T5355] 8021q: adding VLAN 0 to HW filter on device team0 [ 41.138884][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.141459][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.151734][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.153604][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.158700][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.161039][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.171812][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.173726][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.226879][ T5356] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.253356][ T5356] veth0_vlan: entered promiscuous mode [ 41.257960][ T5356] veth1_vlan: entered promiscuous mode [ 41.268926][ T5347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.297192][ T5356] veth0_macvtap: entered promiscuous mode [ 41.312490][ T5356] veth1_macvtap: entered promiscuous mode [ 41.328278][ T5356] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.333294][ T5346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.339760][ T5347] veth0_vlan: entered promiscuous mode [ 41.349224][ T5355] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 41.354533][ T5356] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.358256][ T5347] veth1_vlan: entered promiscuous mode [ 41.373001][ T5356] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.376259][ T5356] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.379248][ T5356] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.382685][ T5356] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.420539][ T5346] veth0_vlan: entered promiscuous mode [ 41.424550][ T5347] veth0_macvtap: entered promiscuous mode [ 41.443077][ T5347] veth1_macvtap: entered promiscuous mode [ 41.446060][ T5355] veth0_vlan: entered promiscuous mode [ 41.455686][ T5346] veth1_vlan: entered promiscuous mode [ 41.461775][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.464728][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.487190][ T5347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.492227][ T5347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.496861][ T5347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.501851][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.502037][ T5355] veth1_vlan: entered promiscuous mode [ 41.504644][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.510779][ T5347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.514504][ T5347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.519354][ T5347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.524422][ T5347] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.527599][ T5347] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.531246][ T5347] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.534589][ T5347] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.555677][ T5346] veth0_macvtap: entered promiscuous mode [ 41.572130][ T5346] veth1_macvtap: entered promiscuous mode [ 41.585136][ T5356] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 41.597213][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.603135][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.614552][ T5346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.618200][ T5346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.622215][ T5346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.625785][ T5346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.631500][ T5346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.655388][ T5346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.658992][ T5346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.662623][ T5346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.665368][ T5346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.669636][ T5346] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.674201][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.675325][ T5355] veth0_macvtap: entered promiscuous mode [ 41.676258][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.683223][ T5355] veth1_macvtap: entered promiscuous mode [ 41.698596][ T5355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.703158][ T5355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.706263][ T5355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.709519][ T5355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.713373][ T5355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 41.716611][ T5355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.721171][ T5355] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 41.725049][ T5355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.727564][ T5355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.729884][ T5355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.732503][ T5355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.735303][ T5355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 41.737613][ T5355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 41.742376][ T5355] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 41.747058][ T5346] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.749571][ T5346] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.752475][ T5346] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.755002][ T5346] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.760915][ T5355] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.764079][ T5355] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.767168][ T5355] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.771060][ T5355] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.835337][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.838159][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.846961][ T5413] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 41.854217][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.857281][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.884195][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.887036][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.924781][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 41.927571][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 41.952661][ T5422] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7'. [ 41.958616][ T5422] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7'. [ 42.033221][ T5427] netlink: 'syz.1.2': attribute type 9 has an invalid length. [ 42.035808][ T5427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 42.091720][ T5431] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10'. [ 42.418370][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 42.552354][ T39] audit: type=1800 audit(1728158164.661:2): pid=5451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.14" name="/" dev="fuse" ino=1 res=0 errno=0 [ 42.784030][ T5463] Bluetooth: Error in BCSP hdr checksum [ 42.937138][ T39] audit: type=1804 audit(1728158165.041:3): pid=5466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.23" name="/" dev="pidfs" ino=5765 res=1 errno=0 [ 43.100609][ T5363] Bluetooth: hci1: command tx timeout [ 43.100651][ T5351] Bluetooth: hci0: command tx timeout [ 43.180887][ T5351] Bluetooth: hci3: command tx timeout [ 44.304023][ T5487] netlink: 191416 bytes leftover after parsing attributes in process `syz.3.30'. [ 44.515258][ T5497] evm: overlay not supported [ 44.525831][ T39] audit: type=1800 audit(1728158166.631:4): pid=5497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.34" name="file2" dev="overlay" ino=85 res=0 errno=0 [ 44.653149][ T5505] netlink: 12 bytes leftover after parsing attributes in process `syz.3.38'. [ 44.706324][ T5508] netlink: 28 bytes leftover after parsing attributes in process `syz.3.40'. [ 44.713469][ T5508] netlink: 28 bytes leftover after parsing attributes in process `syz.3.40'. [ 44.781156][ T5359] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 45.180266][ T5351] Bluetooth: hci0: command tx timeout [ 45.190476][ T5351] Bluetooth: hci1: command tx timeout [ 45.261162][ T5351] Bluetooth: hci3: command tx timeout [ 45.304175][ T5541] IPv4: Oversized IP packet from 172.20.20.10 [ 45.307959][ C2] IPv4: Oversized IP packet from 172.20.20.10 [ 45.310745][ C2] IPv4: Oversized IP packet from 172.20.20.10 [ 45.313515][ T5541] IPv4: Oversized IP packet from 172.20.20.10 [ 45.316080][ C2] IPv4: Oversized IP packet from 172.20.20.10 [ 45.318414][ C2] IPv4: Oversized IP packet from 172.20.20.10 [ 45.322001][ T5541] IPv4: Oversized IP packet from 172.20.20.10 [ 45.324574][ C2] IPv4: Oversized IP packet from 172.20.20.10 [ 45.326934][ C2] IPv4: Oversized IP packet from 172.20.20.10 [ 45.777579][ T5555] netlink: 12 bytes leftover after parsing attributes in process `syz.1.55'. [ 45.918097][ T5565] tipc: Started in network mode [ 45.920335][ T5565] tipc: Node identity 46b89bba33e5, cluster identity 4711 [ 45.922287][ T5565] tipc: Enabled bearer , priority 0 [ 45.953955][ T5564] tipc: Disabling bearer [ 45.990870][ T5351] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 45.993186][ T5351] Bluetooth: hci2: Injecting HCI hardware error event [ 45.995559][ T5351] Bluetooth: hci2: hardware error 0x00 [ 46.252207][ T5578] syz.2.65[5578] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.252260][ T5578] syz.2.65[5578] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.255217][ T5578] syz.2.65[5578] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 46.490617][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 47.261390][ T5359] Bluetooth: hci1: command tx timeout [ 47.262391][ T5363] Bluetooth: hci0: command tx timeout [ 47.340919][ T5363] Bluetooth: hci3: command tx timeout [ 47.491935][ T5627] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 47.494181][ T5627] overlayfs: failed to set xattr on upper [ 47.495699][ T5627] overlayfs: ...falling back to redirect_dir=nofollow. [ 47.497410][ T5627] overlayfs: ...falling back to index=off. [ 47.498999][ T5627] overlayfs: ...falling back to uuid=null. [ 47.561487][ T5634] netlink: 20 bytes leftover after parsing attributes in process `syz.0.86'. [ 47.598697][ T5633] kvm: kvm [5632]: vcpu0, guest rIP: 0xe3 Unhandled WRMSR(0xc1) = 0x8000 [ 48.060221][ T5351] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 48.346749][ T5650] input: syz0 as /devices/virtual/input/input5 [ 48.854497][ T5667] Zero length message leads to an empty skb [ 48.862245][ T5665] mmap: syz.0.97 (5665) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 48.917861][ T5357] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 48.930252][ T5357] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 48.932667][ T5357] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 48.934530][ T5357] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 48.936431][ T5357] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 48.942621][ T5357] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 48.946809][ T5357] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 48.952786][ T5357] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 48.957294][ T5357] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 48.963033][ T5357] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 48.967641][ T5357] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 48.974008][ T5357] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 48.976143][ T5357] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 48.978083][ T5357] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 48.982060][ T5357] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 48.984036][ T5357] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 48.985837][ T5357] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 48.987764][ T5357] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 48.991299][ T5357] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 48.993354][ T5357] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 48.995436][ T5357] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 48.997249][ T5357] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 48.999531][ T5357] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 49.002932][ T5357] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 49.004889][ T5357] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 49.006764][ T5357] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 49.008936][ T5357] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 49.012629][ T5357] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 49.014523][ T5357] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 49.016497][ T5357] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 49.018499][ T5357] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 49.021168][ T5357] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 49.023044][ T5357] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 49.025234][ T5357] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 49.027245][ T5357] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 49.029680][ T5357] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 49.033490][ T5357] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 49.035452][ T5357] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 49.037336][ T5357] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 49.039238][ T5357] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 49.041411][ T5357] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 49.053251][ T5357] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 49.056769][ T5357] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 49.058860][ T5357] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 49.065870][ T5357] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 49.069019][ T5357] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 49.079209][ T5357] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 49.081269][ T5357] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 49.083184][ T5357] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 49.085062][ T5357] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 49.086960][ T5357] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 49.089181][ T5357] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 49.093351][ T5357] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 49.096065][ T5357] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 49.099486][ T5357] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 49.103362][ T5357] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 49.110365][ T5357] hid-generic 0001:0000:0000.0002: hidraw1: HID v0.00 Device [syz0] on syz1 [ 49.184262][ T39] audit: type=1804 audit(1728158171.291:5): pid=5676 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.102" name="/newroot/21/file0/file0" dev="9p" ino=35922619 res=1 errno=0 [ 49.973307][ T5700] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 49.981707][ T5700] netlink: 'syz.1.111': attribute type 1 has an invalid length. [ 49.983707][ T5700] netlink: 224 bytes leftover after parsing attributes in process `syz.1.111'. [ 50.003077][ T5702] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.110'. [ 50.079418][ T5704] block device autoloading is deprecated and will be removed. [ 50.141996][ T5702] md: superblock version 620756992 not known [ 50.144109][ T5702] md: couldn't set array info. -22 [ 50.163865][ T5706] syzkaller0: entered promiscuous mode [ 50.165408][ T5706] syzkaller0: entered allmulticast mode [ 50.169107][ T1209] syzkaller0: tun_net_xmit 48 [ 50.191531][ T5706] syzkaller0: tun_net_xmit 1280 [ 50.194533][ T5706] syzkaller0: create flow: hash 3244827234 index 1 [ 50.214765][ T5705] syzkaller0: delete flow: hash 3244827234 index 1 [ 50.350193][ T5717] nbd2: detected capacity change from 0 to 12 [ 50.360565][ T5717] block nbd2: NBD_DISCONNECT [ 50.367391][ T5353] block nbd2: Send control failed (result -89) [ 50.369829][ T5353] block nbd2: Request send failed, requeueing [ 50.374131][ T5353] block nbd2: Disconnected due to user request. [ 50.378105][ T5717] block nbd2: Send disconnect failed -89 [ 50.381178][ T54] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 50.385116][ T54] Buffer I/O error on dev nbd2, logical block 0, async page read [ 50.391149][ T5353] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 50.393564][ T5353] Buffer I/O error on dev nbd2, logical block 0, async page read [ 50.396435][ T5353] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 50.398919][ T5353] Buffer I/O error on dev nbd2, logical block 0, async page read [ 50.400947][ T5353] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 50.403180][ T5353] Buffer I/O error on dev nbd2, logical block 0, async page read [ 50.405118][ T5353] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 50.407366][ T5353] Buffer I/O error on dev nbd2, logical block 0, async page read [ 50.409350][ T5353] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 50.411741][ T5353] Buffer I/O error on dev nbd2, logical block 0, async page read [ 50.413835][ T5353] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 50.416273][ T5353] Buffer I/O error on dev nbd2, logical block 0, async page read [ 50.418356][ T5353] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 50.420782][ T5353] Buffer I/O error on dev nbd2, logical block 0, async page read [ 50.422804][ T5353] ldm_validate_partition_table(): Disk read failed. [ 50.425631][ T5353] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 50.428026][ T5353] Buffer I/O error on dev nbd2, logical block 0, async page read [ 50.430182][ T5353] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 50.432598][ T5353] Buffer I/O error on dev nbd2, logical block 0, async page read [ 50.434760][ T5353] Dev nbd2: unable to read RDB block 0 [ 50.436325][ T5353] nbd2: unable to read partition table [ 50.438412][ T5353] nbd2: partition table beyond EOD, truncated [ 50.445275][ T5353] ldm_validate_partition_table(): Disk read failed. [ 50.448606][ T5353] Dev nbd2: unable to read RDB block 0 [ 50.450661][ T5353] nbd2: unable to read partition table [ 50.452133][ T5353] nbd2: partition table beyond EOD, truncated [ 50.536319][ T39] audit: type=1800 audit(1728158172.641:6): pid=5721 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.117" name="bus" dev="overlay" ino=241 res=0 errno=0 [ 50.603918][ T5723] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 51.709982][ T5751] netlink: 84 bytes leftover after parsing attributes in process `syz.2.128'. [ 51.715155][ T5751] veth0_vlan: left promiscuous mode [ 51.716581][ T5751] veth0_vlan: entered allmulticast mode [ 51.718983][ T5751] veth0_vlan: entered promiscuous mode [ 52.103744][ T5765] syz.3.134 (5765): drop_caches: 2 [ 53.108304][ T5786] ======================================================= [ 53.108304][ T5786] WARNING: The mand mount option has been deprecated and [ 53.108304][ T5786] and is ignored by this kernel. Remove the mand [ 53.108304][ T5786] option from the mount to silence this warning. [ 53.108304][ T5786] ======================================================= [ 53.127238][ T39] audit: type=1804 audit(1728158175.231:7): pid=5786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.142" name="/newroot/39/file0/file1" dev="ramfs" ino=8804 res=1 errno=0 [ 53.257505][ T63] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 53.410237][ T63] usb 5-1: Using ep0 maxpacket: 8 [ 53.423224][ T63] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 53.426013][ T63] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 53.429480][ T63] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 53.440248][ T63] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 53.443596][ T63] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 53.447958][ T63] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 53.463138][ T63] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.698062][ T63] usb 5-1: GET_CAPABILITIES returned 0 [ 53.700188][ T63] usbtmc 5-1:16.0: can't read capabilities [ 54.080678][ T5784] usbtmc 5-1:16.0: usb_control_msg returned -71 [ 54.083334][ T64] usb 5-1: USB disconnect, device number 2 [ 55.235461][ T5840] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 55.239961][ T5840] batadv_slave_0: entered promiscuous mode [ 55.880217][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 56.741090][ T5870] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 56.936892][ T5880] Bluetooth: (null): Non-link packet received in non-active state [ 57.266447][ T5888] input: syz0 as /devices/virtual/input/input6 [ 58.322924][ T5904] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 58.700346][ T5906] nbd0: detected capacity change from 0 to 12 [ 58.702732][ T5907] block nbd0: NBD_DISCONNECT [ 58.704260][ T5907] block nbd0: Send disconnect failed -89 [ 58.706372][ T5353] block nbd0: Send control failed (result -89) [ 58.708063][ T5353] block nbd0: Request send failed, requeueing [ 58.709885][ T5353] block nbd0: Disconnected due to user request. [ 58.712709][ T71] blk_print_req_error: 25 callbacks suppressed [ 58.712718][ T71] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 58.716656][ T71] buffer_io_error: 25 callbacks suppressed [ 58.716662][ T71] Buffer I/O error on dev nbd0, logical block 0, async page read [ 58.720486][ T5353] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 58.722841][ T5353] Buffer I/O error on dev nbd0, logical block 0, async page read [ 58.724892][ T5353] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 58.727230][ T5353] Buffer I/O error on dev nbd0, logical block 0, async page read [ 58.729264][ T5353] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 58.731820][ T5353] Buffer I/O error on dev nbd0, logical block 0, async page read [ 58.733863][ T5353] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 58.736238][ T5353] Buffer I/O error on dev nbd0, logical block 0, async page read [ 58.738280][ T5353] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 58.740677][ T5353] Buffer I/O error on dev nbd0, logical block 0, async page read [ 58.742681][ T5353] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 58.745007][ T5353] Buffer I/O error on dev nbd0, logical block 0, async page read [ 58.747039][ T5353] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 58.749388][ T5353] Buffer I/O error on dev nbd0, logical block 0, async page read [ 58.751645][ T5353] ldm_validate_partition_table(): Disk read failed. [ 58.753440][ T5353] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 58.755787][ T5353] Buffer I/O error on dev nbd0, logical block 0, async page read [ 58.757833][ T5353] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 58.760462][ T5353] Buffer I/O error on dev nbd0, logical block 0, async page read [ 58.762593][ T5353] Dev nbd0: unable to read RDB block 0 [ 58.764163][ T5353] nbd0: unable to read partition table [ 58.765688][ T5353] nbd0: partition table beyond EOD, truncated [ 58.771400][ T5353] ldm_validate_partition_table(): Disk read failed. [ 58.773271][ T5353] Dev nbd0: unable to read RDB block 0 [ 58.774811][ T5353] nbd0: unable to read partition table [ 58.776833][ T5353] nbd0: partition table beyond EOD, truncated [ 60.250273][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 60.309733][ T5940] netlink: 20 bytes leftover after parsing attributes in process `syz.3.199'. [ 60.578252][ T5948] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 60.583403][ T5948] batadv_slave_0: entered promiscuous mode [ 61.106483][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 62.752968][ T8] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 62.755141][ T8] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 62.757194][ T8] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 62.760154][ T8] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 62.762238][ T8] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 62.764253][ T8] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 62.766716][ T8] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 62.769031][ T8] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 62.772068][ T8] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 62.774043][ T8] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 62.775996][ T8] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 62.777961][ T8] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 62.779938][ T8] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 62.782438][ T8] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 62.784457][ T8] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 62.786487][ T8] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 62.788780][ T8] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 62.791567][ T8] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 62.793681][ T8] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 62.795863][ T8] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 62.797838][ T8] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 62.799822][ T8] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 62.810184][ T8] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 62.812436][ T8] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 62.814646][ T8] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 62.817120][ T8] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 62.819682][ T8] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 62.823959][ T8] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 62.826467][ T8] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 62.828422][ T8] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 62.830502][ T8] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 62.832661][ T8] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 62.835077][ T8] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 62.837166][ T8] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 62.839471][ T8] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 62.841543][ T8] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 62.843512][ T8] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 62.845523][ T8] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 62.848222][ T8] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 62.850353][ T8] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 62.852339][ T8] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 62.854496][ T8] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 62.856747][ T8] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 62.858735][ T8] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 62.860788][ T8] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 62.863021][ T8] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 62.865204][ T8] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 62.867370][ T8] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 62.869333][ T8] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 62.871998][ T8] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 62.874510][ T8] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 62.877024][ T8] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 62.879595][ T8] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 62.882250][ T8] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 62.884789][ T8] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 62.887396][ T8] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 62.893284][ T8] hid-generic 0001:0000:0000.0003: hidraw1: HID v0.00 Device [syz0] on syz1 [ 64.852020][ T6006] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 64.866570][ T6006] netlink: 'syz.3.213': attribute type 1 has an invalid length. [ 64.870654][ T6006] netlink: 224 bytes leftover after parsing attributes in process `syz.3.213'. [ 65.612165][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 65.769906][ T6023] process 'syz.1.219' launched './file0' with NULL argv: empty string added [ 66.633782][ T1209] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.702836][ T1209] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.780494][ T1209] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.857615][ T1209] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.937110][ T5363] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 66.940447][ T5363] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 66.944320][ T5363] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 66.948232][ T5363] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 66.954381][ T5363] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 66.957025][ T5363] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.041411][ T1209] bridge_slave_1: left allmulticast mode [ 67.043142][ T1209] bridge_slave_1: left promiscuous mode [ 67.045792][ T1209] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.053333][ T1209] bridge_slave_0: left allmulticast mode [ 67.055446][ T1209] bridge_slave_0: left promiscuous mode [ 67.057545][ T1209] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.288617][ T1209] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 67.294104][ T1209] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 67.298374][ T1209] bond0 (unregistering): Released all slaves [ 67.335018][ T6048] chnl_net:caif_netlink_parms(): no params data found [ 67.434648][ T6048] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.437137][ T6048] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.439599][ T6048] bridge_slave_0: entered allmulticast mode [ 67.442564][ T6048] bridge_slave_0: entered promiscuous mode [ 67.449738][ T6048] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.454174][ T6048] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.456935][ T6048] bridge_slave_1: entered allmulticast mode [ 67.459878][ T6048] bridge_slave_1: entered promiscuous mode [ 67.504568][ T6048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.518035][ T6048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.571061][ T6048] team0: Port device team_slave_0 added [ 67.573811][ T6048] team0: Port device team_slave_1 added [ 67.595658][ T6048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.597565][ T6048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.604825][ T6048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.609188][ T6048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.611762][ T6048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.618512][ T6048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.630448][ T1209] hsr_slave_0: left promiscuous mode [ 67.633164][ T1209] hsr_slave_1: left promiscuous mode [ 67.635949][ T1209] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.639837][ T1209] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.643918][ T1209] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.666521][ T1209] veth1_macvtap: left promiscuous mode [ 67.668805][ T1209] veth0_macvtap: left promiscuous mode [ 67.671950][ T1209] veth1_vlan: left promiscuous mode [ 67.673927][ T1209] veth0_vlan: left promiscuous mode [ 68.334856][ T1209] team0 (unregistering): Port device team_slave_1 removed [ 68.401595][ T1209] team0 (unregistering): Port device team_slave_0 removed [ 68.886224][ T6048] hsr_slave_0: entered promiscuous mode [ 68.889263][ T6048] hsr_slave_1: entered promiscuous mode [ 68.891999][ T6048] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.895354][ T6048] Cannot create hsr debugfs directory [ 69.023390][ T5351] Bluetooth: hci2: command tx timeout [ 69.602658][ T6048] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.606695][ T6048] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.609767][ T6048] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.613443][ T6048] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.649831][ T6048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.660244][ T6048] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.665593][ T1097] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.667553][ T1097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.691317][ T1097] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.693232][ T1097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.770955][ T6048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.788179][ T6048] veth0_vlan: entered promiscuous mode [ 69.794224][ T6048] veth1_vlan: entered promiscuous mode [ 69.805776][ T6048] veth0_macvtap: entered promiscuous mode [ 69.808772][ T6048] veth1_macvtap: entered promiscuous mode [ 69.816781][ T6048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.819620][ T6048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.822450][ T6048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.825026][ T6048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.828363][ T6048] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.833228][ T6048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.836214][ T6048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.839090][ T6048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.842600][ T6048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.845301][ T6048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.848039][ T6048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.851660][ T6048] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.856120][ T6048] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.859049][ T6048] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.862033][ T6048] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.864350][ T6048] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.891228][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.893285][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.903730][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.905814][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.044781][ T6113] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 70.046674][ T6113] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 70.074370][ T6113] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 70.076451][ T6113] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 70.082401][ T6113] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 70.086118][ T6113] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 70.088894][ T6113] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 70.094509][ T6113] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 70.103851][ T6113] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 70.110044][ T6113] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 70.116827][ T6113] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 70.864913][ T1377] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.653009][ T39] audit: type=1326 audit(1728158193.761:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6137 comm="syz.0.235" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fd3579 code=0x0 [ 72.060342][ T5351] Bluetooth: hci0: command 0x0c1a tx timeout [ 72.063839][ T5363] Bluetooth: hci0: Opcode 0x2046 failed: -110 [ 72.130050][ T6142] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 72.140445][ T5363] Bluetooth: hci2: command 0x040f tx timeout [ 72.150548][ T5363] Bluetooth: hci1: command 0x0c1a tx timeout [ 72.150733][ T5351] Bluetooth: hci3: command 0x0c1a tx timeout [ 72.166972][ T39] audit: type=1804 audit(1728158194.271:9): pid=6142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.236" name="/newroot/46/bus/file0" dev="overlay" ino=35922619 res=1 errno=0 [ 72.176042][ T39] audit: type=1804 audit(1728158194.281:10): pid=6142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.236" name="/newroot/46/bus/file0" dev="overlay" ino=35922619 res=1 errno=0 [ 72.521281][ T39] audit: type=1800 audit(1728158194.631:11): pid=6155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.245" name="bus" dev="overlay" ino=340 res=0 errno=0 [ 72.588322][ T6159] syz.0.246[6159] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 72.588377][ T6159] syz.0.246[6159] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 72.592479][ T6159] syz.0.246[6159] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 72.840931][ T6166] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 72.853498][ T6166] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 72.865502][ T6166] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 72.874419][ T6166] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 74.860245][ T5351] Bluetooth: hci0: command 0x0c1a tx timeout [ 74.860624][ T5359] Bluetooth: hci1: command 0x0c1a tx timeout [ 74.865994][ T5363] Bluetooth: hci1: Opcode 0x2046 failed: -110 [ 74.940614][ T5363] Bluetooth: hci2: command 0x040f tx timeout [ 74.940640][ T5359] Bluetooth: hci3: command 0x0c1a tx timeout [ 75.087194][ T6192] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 75.129634][ T39] audit: type=1804 audit(1728158197.231:12): pid=6192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.257" name="/newroot/5/bus/file0" dev="overlay" ino=35922619 res=1 errno=0 [ 75.141303][ T39] audit: type=1804 audit(1728158197.251:13): pid=6192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.257" name="/newroot/5/bus/file0" dev="overlay" ino=35922619 res=1 errno=0 [ 75.181100][ T1449] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 75.350519][ T1449] usb 6-1: Using ep0 maxpacket: 8 [ 75.358172][ T1449] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 75.362298][ T1449] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 75.365699][ T1449] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 75.369231][ T1449] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 75.373799][ T1449] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 75.378386][ T1449] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 75.383556][ T1449] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.615642][ T1449] usb 6-1: GET_CAPABILITIES returned 0 [ 75.618339][ T1449] usbtmc 6-1:16.0: can't read capabilities [ 75.990393][ T63] usb 6-1: USB disconnect, device number 2 [ 75.991684][ T1285] cfg80211: failed to load regulatory.db [ 75.997404][ T6188] usbtmc 6-1:16.0: usb_control_msg returned -71 [ 76.140566][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.741799][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.743244][ T6219] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 76.746875][ T6219] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 76.749034][ T6219] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 76.753358][ T6219] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 77.128660][ T6231] tipc: Started in network mode [ 77.130003][ T6231] tipc: Node identity 12880773484a, cluster identity 4711 [ 77.132309][ T6231] tipc: Enabled bearer , priority 0 [ 77.146297][ T6231] syzkaller0: entered promiscuous mode [ 77.147801][ T6231] syzkaller0: entered allmulticast mode [ 77.149594][ T6231] tipc: Resetting bearer [ 77.169291][ T6230] tipc: Resetting bearer [ 78.175516][ T57] tipc: Node number set to 1522665331 [ 78.262259][ T6230] tipc: Disabling bearer [ 78.428780][ T6242] binder: 6241:6242 ioctl c0306201 20000380 returned -14 [ 78.780305][ T5359] Bluetooth: hci2: Opcode 0x2046 failed: -110 [ 78.780372][ T5363] Bluetooth: hci3: command 0x0c1a tx timeout [ 78.780437][ T5351] Bluetooth: hci0: command 0x0c1a tx timeout [ 78.780472][ T5351] Bluetooth: hci2: command 0x040f tx timeout [ 78.780511][ T5350] Bluetooth: hci1: command 0x0c1a tx timeout [ 79.060291][ T1285] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 79.190334][ T63] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 79.212656][ T1285] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 79.215388][ T1285] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 79.217988][ T1285] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 79.224163][ T1285] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 79.228152][ T1285] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 79.236442][ T1285] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 79.239571][ T1285] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 79.242803][ T1285] usb 8-1: Product: syz [ 79.244240][ T1285] usb 8-1: Manufacturer: syz [ 79.253304][ T1285] cdc_wdm 8-1:1.0: skipping garbage [ 79.254796][ T1285] cdc_wdm 8-1:1.0: skipping garbage [ 79.257478][ T1285] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 79.259465][ T1285] cdc_wdm 8-1:1.0: Unknown control protocol [ 79.360220][ T63] usb 7-1: Using ep0 maxpacket: 8 [ 79.365918][ T63] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 79.368757][ T63] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 79.372389][ T63] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 79.375670][ T63] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 79.379020][ T63] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 79.383549][ T63] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 79.386604][ T63] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.458165][ T1449] usb 8-1: USB disconnect, device number 2 [ 79.599321][ T63] usb 7-1: GET_CAPABILITIES returned 0 [ 79.601338][ T63] usbtmc 7-1:16.0: can't read capabilities [ 79.965889][ T6263] usbtmc 7-1:16.0: usb_control_msg returned -71 [ 79.968169][ T1285] usb 7-1: USB disconnect, device number 2 [ 80.110286][ T63] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 80.271838][ T63] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 80.275058][ T63] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 80.278738][ T63] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 80.282199][ T63] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 80.286026][ T63] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 80.294968][ T63] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 80.298310][ T63] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 80.301374][ T63] usb 8-1: Product: syz [ 80.302957][ T63] usb 8-1: Manufacturer: syz [ 80.309362][ T63] cdc_wdm 8-1:1.0: skipping garbage [ 80.314269][ T63] cdc_wdm 8-1:1.0: skipping garbage [ 80.319179][ T63] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 80.321534][ T63] cdc_wdm 8-1:1.0: Unknown control protocol [ 80.860332][ T5363] Bluetooth: hci1: command 0x0c1a tx timeout [ 80.863224][ T5363] Bluetooth: hci2: command 0x040f tx timeout [ 80.872801][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 80.874958][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 80.877856][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 80.880374][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 80.882465][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 80.884945][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 80.887204][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 80.889284][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 80.891558][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 80.894234][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 80.897900][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 80.900195][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 80.902433][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 80.904768][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 80.907036][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 80.909266][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 80.911621][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 80.915257][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 80.917625][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 80.919867][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 80.921945][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 80.924181][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 80.926254][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 80.928465][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 80.930827][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 80.933055][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 80.935295][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 80.937524][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 80.940013][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 80.943685][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 80.948059][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 80.950418][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 80.952641][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 80.954865][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 80.957134][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 80.959205][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 80.961461][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 80.963699][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 80.965926][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 80.968208][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 80.970305][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 80.972718][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 80.975038][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 80.977310][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 80.979383][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 80.981622][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 80.983863][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 80.985959][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 80.988172][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 80.990415][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 80.992677][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 80.994939][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 80.997766][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 81.000606][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 81.003338][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 81.005836][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 81.008164][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 81.010314][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 81.012562][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 81.014888][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 81.016976][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 81.019181][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 81.021266][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 81.023451][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 81.025956][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 81.028179][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 81.030473][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 81.032775][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 81.034852][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 81.037055][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 81.039120][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 81.041351][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 81.043515][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 81.045833][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 81.047942][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 81.050257][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 81.052498][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 81.054809][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 81.056912][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 81.059280][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 81.061387][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 81.063591][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 81.065838][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 81.068006][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 81.070331][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 81.072454][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 81.074887][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 81.077742][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 81.079834][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 81.082078][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 81.084396][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 81.086497][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 81.088681][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 81.090757][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 81.092970][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 81.095030][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 81.097203][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 81.099017][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 81.100776][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 81.103545][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 81.105015][ C3] cdc_wdm 8-1:1.0: Cannot schedule work [ 81.106700][ C3] cdc_wdm 8-1:1.0: Stall on int endpoint [ 81.109113][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 81.112311][ T1449] usb 8-1: USB disconnect, device number 3 [ 81.297981][ T6302] netlink: 8 bytes leftover after parsing attributes in process `syz.1.294'. [ 81.302381][ T6302] netlink: 4 bytes leftover after parsing attributes in process `syz.1.294'. [ 81.305541][ T6302] netlink: 32 bytes leftover after parsing attributes in process `syz.1.294'. [ 81.760368][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.762580][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 81.765328][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 82.940239][ T5363] Bluetooth: hci2: command 0x040f tx timeout [ 82.950463][ T64] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 82.960189][ T1449] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 83.101919][ T64] usb 8-1: Using ep0 maxpacket: 8 [ 83.105052][ T64] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 83.107885][ T64] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 83.111206][ T1449] usb 6-1: Using ep0 maxpacket: 32 [ 83.113331][ T64] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 83.116214][ T64] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 83.123348][ T1449] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 83.125743][ T1449] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.128393][ T64] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 83.133746][ T1449] usb 6-1: config 0 descriptor?? [ 83.143363][ T64] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 83.145962][ T64] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.150823][ T1449] as10x_usb: device has been detected [ 83.155377][ T1449] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 83.187779][ T1449] usb 6-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 83.221869][ T1449] as10x_usb: error during firmware upload part1 [ 83.223844][ T1449] Registered device nBox DVB-T Dongle [ 83.351064][ T1449] usb 6-1: USB disconnect, device number 3 [ 83.370036][ T64] usb 8-1: GET_CAPABILITIES returned 0 [ 83.372175][ T64] usbtmc 8-1:16.0: can't read capabilities [ 83.379574][ T1449] Unregistered device nBox DVB-T Dongle [ 83.387120][ T1449] as10x_usb: device has been disconnected [ 83.579315][ T64] usb 8-1: USB disconnect, device number 4 [ 83.810173][ T1449] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 83.880453][ T6337] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 83.931561][ T6339] netlink: 4 bytes leftover after parsing attributes in process `syz.0.304'. [ 83.960834][ T1449] usb 6-1: too many configurations: 13, using maximum allowed: 8 [ 83.964511][ T1449] usb 6-1: config 0 has no interfaces? [ 83.972832][ T1449] usb 6-1: config 0 has no interfaces? [ 83.975701][ T1449] usb 6-1: config 0 has no interfaces? [ 83.978545][ T1449] usb 6-1: config 0 has no interfaces? [ 83.981627][ T1449] usb 6-1: config 0 has no interfaces? [ 83.984468][ T1449] usb 6-1: config 0 has no interfaces? [ 83.987176][ T1449] usb 6-1: config 0 has no interfaces? [ 83.990024][ T1449] usb 6-1: config 0 has no interfaces? [ 83.993863][ T1449] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 83.997061][ T1449] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.999992][ T1449] usb 6-1: Product: syz [ 84.001657][ T1449] usb 6-1: Manufacturer: syz [ 84.003361][ T1449] usb 6-1: SerialNumber: syz [ 84.007468][ T1449] usb 6-1: config 0 descriptor?? [ 84.226178][ T6108] usb 6-1: USB disconnect, device number 4 [ 84.329772][ T6353] netlink: 24 bytes leftover after parsing attributes in process `syz.3.309'. [ 84.660892][ T57] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 84.702627][ T6367] kvm: pic: non byte read [ 84.839789][ T57] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 84.843984][ T57] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 84.847707][ T57] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 84.851874][ T57] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 84.856607][ T57] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 84.860301][ T57] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.863816][ T57] usb 7-1: config 0 descriptor?? [ 84.866621][ T6359] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 84.890397][ T5357] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 85.020330][ T5359] Bluetooth: hci2: command 0x040f tx timeout [ 85.050455][ T5357] usb 6-1: Using ep0 maxpacket: 32 [ 85.053891][ T5357] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 85.057025][ T5357] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.062470][ T5357] usb 6-1: config 0 descriptor?? [ 85.069289][ T5357] as10x_usb: device has been detected [ 85.071873][ T5357] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 85.088557][ T5357] usb 6-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 85.101610][ T5357] as10x_usb: error during firmware upload part1 [ 85.103872][ T5357] Registered device nBox DVB-T Dongle [ 85.281540][ T1449] usb 6-1: USB disconnect, device number 5 [ 85.293325][ T1449] Unregistered device nBox DVB-T Dongle [ 85.294162][ T1449] as10x_usb: device has been disconnected [ 85.309422][ T57] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 85.313543][ T57] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 85.316523][ T57] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 85.319269][ T57] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 85.322688][ T57] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 85.324675][ T57] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 85.326586][ T57] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 85.328494][ T57] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 85.333382][ T57] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 85.336092][ T57] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 85.338647][ T57] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 85.341511][ T57] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 85.344290][ T57] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 85.346917][ T57] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 85.349620][ T57] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 85.353451][ T57] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 85.362292][ T57] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 85.424542][ T6387] tipc: Cannot configure node identity twice [ 85.467689][ T6389] ALSA: seq fatal error: cannot create timer (-22) [ 85.615942][ T6359] usb 7-1: language id specifier not provided by device, defaulting to English [ 86.018694][ T6359] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 86.021345][ T6359] overlayfs: missing 'lowerdir' [ 86.026604][ T1449] usb 7-1: USB disconnect, device number 3 [ 86.582805][ T6421] overlayfs: statfs failed on './file0' [ 86.835783][ T6430] Bluetooth: (null): Invalid header checksum [ 87.110482][ T5363] Bluetooth: hci2: command 0x040f tx timeout [ 87.379380][ T39] audit: type=1800 audit(1728158209.481:14): pid=6441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.340" name="/" dev="9p" ino=2 res=0 errno=0 [ 87.754602][ T5363] Bluetooth: hci1: unexpected event for opcode 0x0000 [ 88.086346][ T6478] 9pnet: p9_errstr2errno: server reported unknown error Ý@íÎhQI¸¥ŠteœkKzEËxÐBAšÁbà¹lpΆ²vxÝé*óÍDŽ‘àò}‘©Ù’ñ;5ÏÇ–3OŲ"`õͶ [ 89.180223][ T5363] Bluetooth: hci2: command 0x040f tx timeout [ 89.862407][ T6532] sp0: Synchronizing with TNC [ 89.875957][ T6532] sp0: Found TNC [ 91.140269][ T5357] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 91.266660][ T5363] Bluetooth: hci2: command 0x040f tx timeout [ 91.323631][ T5357] usb 5-1: Using ep0 maxpacket: 8 [ 91.329503][ T5357] usb 5-1: config 0 has no interfaces? [ 91.351077][ T5357] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 91.384771][ T5357] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.389714][ T5357] usb 5-1: Product: syz [ 91.392516][ T5357] usb 5-1: Manufacturer: syz [ 91.410979][ T5357] usb 5-1: SerialNumber: syz [ 91.416690][ T5357] usb 5-1: config 0 descriptor?? [ 91.824400][ T5363] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 91.844177][ T5363] Bluetooth: hci1: Injecting HCI hardware error event [ 91.852475][ T5363] Bluetooth: hci1: hardware error 0x00 [ 91.970764][ T6108] usb 5-1: USB disconnect, device number 3 [ 93.585938][ T5359] Bluetooth: hci1: unexpected cc 0x2007 length: 100 > 2 [ 93.603627][ T5359] Bluetooth: hci1: unexpected event for opcode 0x2007 [ 93.922412][ C2] vkms_vblank_simulate: vblank timer overrun [ 93.927190][ T5363] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 94.890292][ C2] vkms_vblank_simulate: vblank timer overrun [ 96.226247][ C2] vkms_vblank_simulate: vblank timer overrun [ 96.622333][ C2] vkms_vblank_simulate: vblank timer overrun [ 97.182308][ T6610] netlink: 8 bytes leftover after parsing attributes in process `syz.3.400'. [ 97.187752][ T6610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.400'. [ 97.268124][ T5363] block nbd1: Receive control failed (result -107) [ 97.478899][ C2] vkms_vblank_simulate: vblank timer overrun [ 97.910335][ C2] vkms_vblank_simulate: vblank timer overrun [ 98.091036][ C2] vkms_vblank_simulate: vblank timer overrun [ 98.334043][ T6635] capability: warning: `syz.0.408' uses deprecated v2 capabilities in a way that may be insecure [ 98.658348][ C2] vkms_vblank_simulate: vblank timer overrun [ 98.660370][ T6646] overlayfs: failed to resolve './file0': -2 [ 98.686424][ C2] vkms_vblank_simulate: vblank timer overrun [ 98.779995][ T6648] Bluetooth: MGMT ver 1.23 [ 98.805532][ T6648] ucma_write: process 246 (syz.1.413) changed security contexts after opening file descriptor, this is not allowed. [ 98.882322][ C2] vkms_vblank_simulate: vblank timer overrun [ 99.108920][ T39] audit: type=1800 audit(1728158221.211:15): pid=6657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.417" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 99.186418][ C2] vkms_vblank_simulate: vblank timer overrun [ 99.242318][ C2] vkms_vblank_simulate: vblank timer overrun [ 99.374305][ C2] vkms_vblank_simulate: vblank timer overrun [ 99.434413][ C2] vkms_vblank_simulate: vblank timer overrun [ 99.455390][ T6663] netlink: 12 bytes leftover after parsing attributes in process `syz.2.419'. [ 99.595426][ T6663] 8021q: adding VLAN 0 to HW filter on device bond1 [ 99.606504][ T6663] bond0: (slave bond1): Enslaving as an active interface with an up link [ 99.614246][ C2] vkms_vblank_simulate: vblank timer overrun [ 99.650321][ C2] vkms_vblank_simulate: vblank timer overrun [ 99.763165][ T6663] bond0: (slave bond1): Releasing backup interface [ 99.802331][ C2] vkms_vblank_simulate: vblank timer overrun [ 100.247292][ C2] vkms_vblank_simulate: vblank timer overrun [ 100.288585][ T63] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 100.347137][ T6674] pim6reg1: entered promiscuous mode [ 100.364474][ T6674] pim6reg1: entered allmulticast mode [ 100.455454][ C3] net_ratelimit: 88 callbacks suppressed [ 100.455472][ C3] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 100.485987][ T63] usb 7-1: Using ep0 maxpacket: 32 [ 100.495679][ T63] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.519355][ T63] usb 7-1: config 0 has no interfaces? [ 100.536453][ T63] usb 7-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 100.542535][ T63] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.550346][ T63] usb 7-1: Product: syz [ 100.589714][ T63] usb 7-1: Manufacturer: syz [ 100.609706][ T63] usb 7-1: SerialNumber: syz [ 100.654578][ T63] usb 7-1: config 0 descriptor?? [ 101.057412][ T57] usb 7-1: USB disconnect, device number 4 [ 101.070272][ C2] vkms_vblank_simulate: vblank timer overrun [ 101.114437][ C2] vkms_vblank_simulate: vblank timer overrun [ 101.120270][ T5252] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 101.186331][ C2] vkms_vblank_simulate: vblank timer overrun [ 101.211769][ T5391] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 101.233437][ C2] vkms_vblank_simulate: vblank timer overrun [ 101.310222][ T5252] usb 6-1: Using ep0 maxpacket: 16 [ 101.319784][ T5252] usb 6-1: config index 0 descriptor too short (expected 65535, got 36) [ 101.327714][ T5252] usb 6-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 101.342709][ T5252] usb 6-1: config 255 has an invalid descriptor of length 32, skipping remainder of the config [ 101.346702][ T5252] usb 6-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 101.350427][ T5252] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 101.354876][ T5252] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.429457][ T6690] netlink: 48 bytes leftover after parsing attributes in process `syz.0.430'. [ 101.452238][ T5391] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 101.455117][ T5391] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 101.458296][ T5391] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 101.462156][ T5391] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 101.473658][ T5391] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 101.489248][ T5391] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 101.499289][ T5391] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 101.520192][ T5391] usb 8-1: Product: syz [ 101.522507][ T5391] usb 8-1: Manufacturer: syz [ 101.593098][ T5391] cdc_wdm 8-1:1.0: skipping garbage [ 101.595771][ T5391] cdc_wdm 8-1:1.0: skipping garbage [ 101.638810][ T5391] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 101.642006][ T5391] cdc_wdm 8-1:1.0: Unknown control protocol [ 101.729117][ T5252] usb 6-1: string descriptor 0 read error: -71 [ 101.734623][ T6695] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 101.746494][ T5252] usb 6-1: USB disconnect, device number 6 [ 101.932223][ T63] usb 8-1: USB disconnect, device number 5 [ 101.932340][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 101.937121][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 101.939872][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 101.948386][ T6684] cdc_wdm 8-1:1.0: Tx URB error: -19 [ 102.557902][ C2] vkms_vblank_simulate: vblank timer overrun [ 102.666261][ C2] vkms_vblank_simulate: vblank timer overrun [ 103.519377][ C2] vkms_vblank_simulate: vblank timer overrun [ 104.590296][ T6729] block nbd2: Device being setup by another task [ 104.697267][ T6729] block nbd2: shutting down sockets [ 105.262500][ T95] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.717949][ T95] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.195564][ T5359] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 106.226679][ T5359] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 106.275983][ T5359] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 106.285055][ T5359] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 106.313050][ T5359] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 106.316812][ T5359] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 106.363512][ T6750] binder: BINDER_SET_CONTEXT_MGR already set [ 106.367337][ T6750] binder: 6749:6750 ioctl 4018620d 20000040 returned -16 [ 106.437083][ T95] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.846022][ T95] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.885318][ T39] audit: type=1800 audit(1728158228.981:16): pid=6758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.456" name="/" dev="fuse" ino=1 res=0 errno=0 [ 107.192007][ T6747] chnl_net:caif_netlink_parms(): no params data found [ 107.543039][ T6747] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.567785][ T6747] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.596762][ T6747] bridge_slave_0: entered allmulticast mode [ 107.601895][ T6747] bridge_slave_0: entered promiscuous mode [ 107.627491][ T6747] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.649002][ T6747] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.653525][ T6747] bridge_slave_1: entered allmulticast mode [ 107.656880][ T6747] bridge_slave_1: entered promiscuous mode [ 107.696488][ T95] bridge_slave_1: left allmulticast mode [ 107.699870][ T95] bridge_slave_1: left promiscuous mode [ 107.702305][ T95] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.887649][ T95] bridge_slave_0: left allmulticast mode [ 107.898819][ T95] bridge_slave_0: left promiscuous mode [ 107.916488][ T95] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.495214][ T5363] Bluetooth: hci0: command tx timeout [ 109.527226][ T95] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.651044][ T95] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.670925][ T95] bond0 (unregistering): Released all slaves [ 109.837938][ T95] tipc: Left network mode [ 110.026378][ T6747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.051032][ T6747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.594960][ T5363] Bluetooth: hci0: command tx timeout [ 110.735891][ T6747] team0: Port device team_slave_0 added [ 110.745777][ T6747] team0: Port device team_slave_1 added [ 111.081768][ T6747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.084691][ T6747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.140189][ T6747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.252415][ T6747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.255290][ T6747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.282698][ T6747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.998289][ T6747] hsr_slave_0: entered promiscuous mode [ 112.051057][ T6747] hsr_slave_1: entered promiscuous mode [ 112.055329][ T6747] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.059404][ T6747] Cannot create hsr debugfs directory [ 112.242759][ T95] hsr_slave_0: left promiscuous mode [ 112.266622][ T95] hsr_slave_1: left promiscuous mode [ 112.269795][ T95] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.272871][ T95] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.336982][ T95] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.344084][ T95] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.479226][ T95] veth1_macvtap: left promiscuous mode [ 112.490594][ T95] veth0_macvtap: left promiscuous mode [ 112.495337][ T95] veth1_vlan: left promiscuous mode [ 112.497949][ T95] veth0_vlan: left promiscuous mode [ 112.638340][ T5359] Bluetooth: hci0: command tx timeout [ 112.906523][ T5391] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 113.126599][ T5391] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 113.132106][ T5391] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.136075][ T5391] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.155946][ T5391] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 113.179485][ T5391] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 113.182425][ T5391] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 113.185240][ T5391] usb 7-1: Manufacturer: syz [ 113.189114][ T5391] usb 7-1: config 0 descriptor?? [ 113.693473][ T5391] appleir 0003:05AC:8243.0005: unknown main item tag 0x0 [ 113.697778][ T5391] appleir 0003:05AC:8243.0005: No inputs registered, leaving [ 113.752059][ T5391] appleir 0003:05AC:8243.0005: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 113.831001][ T5363] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 113.842595][ T5363] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 113.872386][ T5363] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 113.901640][ T5363] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 113.908146][ T5363] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 113.919158][ T5363] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 114.538085][ T1449] usb 7-1: USB disconnect, device number 5 [ 114.719674][ T5363] Bluetooth: hci0: command tx timeout [ 116.174472][ T5363] Bluetooth: hci4: command tx timeout [ 117.128523][ T95] team0 (unregistering): Port device team_slave_1 removed [ 117.876997][ T95] team0 (unregistering): Port device team_slave_0 removed [ 118.240438][ T5363] Bluetooth: hci4: command tx timeout [ 120.300939][ T5363] Bluetooth: hci4: command tx timeout [ 120.554084][ T6800] netlink: 4 bytes leftover after parsing attributes in process `syz.3.460'. [ 120.558483][ T6803] netlink: 12 bytes leftover after parsing attributes in process `syz.3.460'. [ 120.785001][ T6817] Bluetooth: MGMT ver 1.23 [ 121.704836][ T6813] chnl_net:caif_netlink_parms(): no params data found [ 122.060605][ T6378] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 122.185482][ T6813] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.189594][ T6813] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.200458][ T6813] bridge_slave_0: entered allmulticast mode [ 122.203541][ T6813] bridge_slave_0: entered promiscuous mode [ 122.213432][ T6813] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.216493][ T6813] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.219746][ T6813] bridge_slave_1: entered allmulticast mode [ 122.220468][ T6378] usb 8-1: Using ep0 maxpacket: 32 [ 122.228049][ T6378] usb 8-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 122.244921][ T6813] bridge_slave_1: entered promiscuous mode [ 122.251271][ T6378] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.355203][ T6378] usb 8-1: config 0 descriptor?? [ 122.386634][ T5363] Bluetooth: hci4: command tx timeout [ 122.388236][ T6378] as10x_usb: device has been detected [ 122.396239][ T6378] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 122.417702][ T6378] usb 8-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 122.471842][ T6378] as10x_usb: error during firmware upload part1 [ 122.475397][ T6378] Registered device nBox DVB-T Dongle [ 122.639225][ T5252] usb 8-1: USB disconnect, device number 6 [ 122.683097][ T5252] Unregistered device nBox DVB-T Dongle [ 122.696442][ T5252] as10x_usb: device has been disconnected [ 122.863681][ T6813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.972505][ T6854] netlink: 12 bytes leftover after parsing attributes in process `syz.2.473'. [ 122.984782][ T6813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.189590][ T6813] team0: Port device team_slave_0 added [ 123.190268][ T64] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 123.239630][ T6813] team0: Port device team_slave_1 added [ 123.326998][ T6813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.330586][ T6813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.351393][ T6813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.380680][ T64] usb 8-1: too many configurations: 13, using maximum allowed: 8 [ 123.386706][ T64] usb 8-1: config 0 has no interfaces? [ 123.389155][ T6747] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 123.391268][ T64] usb 8-1: config 0 has no interfaces? [ 123.437502][ T64] usb 8-1: config 0 has no interfaces? [ 123.448480][ T64] usb 8-1: config 0 has no interfaces? [ 123.456278][ T6747] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 123.457652][ T64] usb 8-1: config 0 has no interfaces? [ 123.472443][ T6813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.479225][ T6813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.481404][ T64] usb 8-1: config 0 has no interfaces? [ 123.492620][ T6813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.519164][ T64] usb 8-1: config 0 has no interfaces? [ 123.522454][ T64] usb 8-1: config 0 has no interfaces? [ 123.526775][ T64] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 123.536340][ T64] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.543266][ T64] usb 8-1: Product: syz [ 123.545030][ T64] usb 8-1: Manufacturer: syz [ 123.547816][ T64] usb 8-1: SerialNumber: syz [ 123.553202][ T64] usb 8-1: config 0 descriptor?? [ 123.641801][ T6747] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 123.658826][ T6747] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 123.691855][ T6813] hsr_slave_0: entered promiscuous mode [ 123.696530][ T6813] hsr_slave_1: entered promiscuous mode [ 123.701251][ T6813] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 123.706186][ T6813] Cannot create hsr debugfs directory [ 123.786716][ T64] usb 8-1: USB disconnect, device number 7 [ 124.266322][ T6813] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.327117][ T6747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.370275][ T6747] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.528077][ T64] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 124.534559][ T6813] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.587494][ T1097] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.596889][ T1097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.664267][ T6747] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 124.686173][ T6747] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 124.728426][ T1098] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.729874][ T64] usb 8-1: Using ep0 maxpacket: 32 [ 124.750557][ T1098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.751872][ T64] usb 8-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 124.805685][ T64] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.851959][ T64] usb 8-1: config 0 descriptor?? [ 124.886103][ T64] as10x_usb: device has been detected [ 124.889172][ T64] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 124.900943][ T64] usb 8-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 124.954757][ T64] as10x_usb: error during firmware upload part1 [ 124.957724][ T64] Registered device nBox DVB-T Dongle [ 124.968333][ T6813] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.082553][ T64] usb 8-1: USB disconnect, device number 8 [ 125.093505][ T64] Unregistered device nBox DVB-T Dongle [ 125.094381][ T64] as10x_usb: device has been disconnected [ 125.324850][ T6813] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.446838][ T6747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.486808][ T6747] veth0_vlan: entered promiscuous mode [ 125.572540][ T6747] veth1_vlan: entered promiscuous mode [ 125.682363][ T6747] veth0_macvtap: entered promiscuous mode [ 125.772189][ T6747] veth1_macvtap: entered promiscuous mode [ 125.869517][ T6747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.873375][ T6747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.892909][ T6747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.920009][ T6747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.937094][ T6747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.033809][ T6747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.058194][ T6747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.062798][ T6747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.066578][ T6747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.081083][ T6747] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.086860][ T6747] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.101187][ T6747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.136091][ T6813] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 126.188689][ T6747] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.197212][ T6747] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.218998][ T6747] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.245211][ T6747] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.311340][ T6813] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 126.403518][ T6813] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 126.472195][ T6813] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 126.643788][ T6813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.655182][ T95] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.671714][ T6813] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.678381][ T95] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.733571][ T1097] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.735952][ T1097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.758404][ T95] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.800400][ T1097] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.811015][ T95] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.816372][ T1097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.858045][ T39] audit: type=1800 audit(1728158248.961:17): pid=6906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.479" name="file2" dev="overlay" ino=855 res=0 errno=0 [ 126.984074][ T6813] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 127.357258][ T6813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.488256][ T6813] veth0_vlan: entered promiscuous mode [ 127.518830][ T6813] veth1_vlan: entered promiscuous mode [ 127.586839][ T6813] veth0_macvtap: entered promiscuous mode [ 127.593297][ T6813] veth1_macvtap: entered promiscuous mode [ 127.644233][ T6813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.650003][ T6813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.655887][ T6813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.661424][ T6813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.666011][ C0] vkms_vblank_simulate: vblank timer overrun [ 127.668274][ T6813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.675612][ T6813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.682472][ T6813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.688668][ T6813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.694894][ T6813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.699719][ T6813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.704756][ T6813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.710491][ T6813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.715095][ T6813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.720380][ T6813] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.725697][ T6813] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.730550][ T6813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.737100][ T6813] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.743224][ T6813] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.747834][ T6813] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.752783][ T6813] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.934012][ C0] vkms_vblank_simulate: vblank timer overrun [ 128.173282][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.193544][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.330064][ C0] vkms_vblank_simulate: vblank timer overrun [ 128.458101][ T1097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.463167][ T1097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.519421][ C0] vkms_vblank_simulate: vblank timer overrun [ 128.713999][ C0] vkms_vblank_simulate: vblank timer overrun [ 128.844301][ C0] vkms_vblank_simulate: vblank timer overrun [ 128.966765][ T6945] netlink: 'syz.0.463': attribute type 9 has an invalid length. [ 128.994133][ T6945] netlink: 8 bytes leftover after parsing attributes in process `syz.0.463'. [ 129.069063][ T6943] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.072965][ T6943] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.146344][ T6950] bridge_slave_1: left allmulticast mode [ 129.148231][ T6950] bridge_slave_1: left promiscuous mode [ 129.151380][ T6950] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.299385][ T6950] bridge_slave_0: left allmulticast mode [ 129.301735][ T6950] bridge_slave_0: left promiscuous mode [ 129.305691][ T6950] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.494075][ C0] vkms_vblank_simulate: vblank timer overrun [ 129.570467][ C0] vkms_vblank_simulate: vblank timer overrun [ 129.843930][ C0] vkms_vblank_simulate: vblank timer overrun [ 129.899287][ T5363] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 130.027198][ C0] vkms_vblank_simulate: vblank timer overrun [ 130.068156][ C0] vkms_vblank_simulate: vblank timer overrun [ 130.142140][ C0] vkms_vblank_simulate: vblank timer overrun [ 130.412403][ T39] audit: type=1800 audit(1728158252.511:18): pid=6977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.498" name="/" dev="fuse" ino=1 res=0 errno=0 [ 130.546046][ C0] vkms_vblank_simulate: vblank timer overrun [ 131.219789][ T6983] netlink: 'syz.3.501': attribute type 9 has an invalid length. [ 131.238387][ T6983] netlink: 8 bytes leftover after parsing attributes in process `syz.3.501'. [ 131.464359][ C0] vkms_vblank_simulate: vblank timer overrun [ 131.574005][ C0] vkms_vblank_simulate: vblank timer overrun [ 131.577494][ T6108] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 131.625981][ C0] vkms_vblank_simulate: vblank timer overrun [ 131.714004][ C0] vkms_vblank_simulate: vblank timer overrun [ 131.836174][ T6108] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 131.842244][ T6108] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 131.855281][ T6108] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 131.876427][ C0] vkms_vblank_simulate: vblank timer overrun [ 131.898056][ T6108] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 131.931094][ T6108] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 131.937068][ T6108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.946571][ T6108] usb 5-1: config 0 descriptor?? [ 132.310587][ T1377] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.431610][ T6108] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 132.502394][ T6108] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 133.307379][ T6108] usb 5-1: USB disconnect, device number 4 [ 135.550817][ T5363] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 135.743281][ T7062] netlink: 4 bytes leftover after parsing attributes in process `syz.0.529'. [ 135.746472][ T7062] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.768250][ T7062] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 135.836080][ T7062] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.840559][ T7062] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.516216][ T7069] netlink: 24 bytes leftover after parsing attributes in process `syz.1.530'. [ 138.814645][ T39] audit: type=1800 audit(1728158260.891:19): pid=7108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.545" name="/" dev="fuse" ino=1 res=0 errno=0 [ 138.928142][ T5363] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 139.223358][ T7131] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 139.580466][ T5363] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 139.584736][ T5363] Bluetooth: hci2: Injecting HCI hardware error event [ 139.590537][ T5363] Bluetooth: hci2: hardware error 0x00 [ 140.827757][ T39] audit: type=1804 audit(1728158262.931:20): pid=7157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.563" name="/newroot/164/bus/file0" dev="overlay" ino=1025 res=1 errno=0 [ 141.674783][ T5363] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 142.981212][ T7181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.572'. [ 143.013716][ T7181] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.018221][ T7181] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.085396][ T7181] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.088493][ T7181] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.267321][ T7185] netlink: 24 bytes leftover after parsing attributes in process `syz.3.573'. [ 144.409831][ T7219] netlink: 24 bytes leftover after parsing attributes in process `syz.0.585'. [ 145.163908][ T7228] netlink: 12 bytes leftover after parsing attributes in process `syz.0.588'. [ 148.018437][ T7277] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.022986][ T7277] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.034331][ T7278] bridge_slave_1: left allmulticast mode [ 148.036534][ T7278] bridge_slave_1: left promiscuous mode [ 148.038784][ T7278] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.121572][ T7278] bridge_slave_0: left allmulticast mode [ 148.125903][ T7278] bridge_slave_0: left promiscuous mode [ 148.129350][ T7278] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.404070][ T7283] can0: slcan on pts0. [ 149.015945][ T7285] can0 (unregistered): slcan off pts0. [ 149.526209][ T57] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 149.720191][ T57] usb 5-1: Using ep0 maxpacket: 32 [ 149.769346][ T57] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 149.773693][ T57] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 149.790471][ T57] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 149.795039][ T57] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 149.815714][ T57] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 149.828438][ T57] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 149.838102][ T57] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 149.857278][ T57] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.862384][ T57] usb 5-1: config 0 descriptor?? [ 150.073121][ T57] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 150.359289][ T7325] vivid-000: disconnect [ 150.363629][ T7311] vivid-000: reconnect [ 150.369274][ T30] usb 5-1: USB disconnect, device number 5 [ 150.378410][ T30] usblp0: removed [ 151.175500][ T7339] ------------[ cut here ]------------ [ 151.180385][ T7339] kmem_cache of name '9p-fcall-cache' already exists [ 151.183138][ T7339] WARNING: CPU: 3 PID: 7339 at mm/slab_common.c:107 __kmem_cache_create_args+0xb0/0x3c0 [ 151.186650][ T7339] Modules linked in: [ 151.205232][ T7339] CPU: 3 UID: 0 PID: 7339 Comm: syz.3.627 Not tainted 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0 [ 151.224443][ T7339] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 151.233129][ T7339] RIP: 0010:__kmem_cache_create_args+0xb0/0x3c0 [ 151.235552][ T7339] Code: 98 48 3d 10 bb f1 8d 74 25 48 8b 7b 60 48 89 ee e8 c5 68 34 09 85 c0 75 e0 90 48 c7 c7 e8 1f 58 8d 48 89 ee e8 41 b1 7e ff 90 <0f> 0b 90 90 be 20 00 00 00 48 89 ef e8 4f 6a 34 09 48 85 c0 0f 85 [ 151.261916][ T7339] RSP: 0018:ffffc900030d78f0 EFLAGS: 00010286 [ 151.264172][ T7339] RAX: 0000000000000000 RBX: ffff888029a62dc0 RCX: ffffc900033e9000 [ 151.267331][ T7339] RDX: 0000000000040000 RSI: ffffffff814e28c6 RDI: 0000000000000001 [ 151.270175][ T7339] RBP: ffffffff8ca1e320 R08: 0000000000000001 R09: 0000000000000000 [ 151.274626][ T7339] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 151.277550][ T7339] R13: 0000000000020018 R14: ffffc900030d79e0 R15: 0000000000020018 [ 151.281436][ T7339] FS: 0000000000000000(0000) GS:ffff88802b700000(0063) knlGS:00000000f56a6b40 [ 151.285736][ T7339] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 151.289147][ T7339] CR2: 0000000020001000 CR3: 0000000063b1a000 CR4: 0000000000352ef0 [ 151.293983][ T7339] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 151.301340][ T7339] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 151.306178][ T7339] Call Trace: [ 151.308060][ T7339] [ 151.309796][ T7339] ? __warn+0xea/0x3d0 [ 151.312711][ T7339] ? __kmem_cache_create_args+0xb0/0x3c0 [ 151.316312][ T7339] ? report_bug+0x3c0/0x580 [ 151.319334][ T7339] ? handle_bug+0x54/0xa0 [ 151.322095][ T7339] ? exc_invalid_op+0x17/0x50 [ 151.324625][ T7339] ? asm_exc_invalid_op+0x1a/0x20 [ 151.327538][ T7339] ? __warn_printk+0x1a6/0x350 [ 151.331234][ T7339] ? __kmem_cache_create_args+0xb0/0x3c0 [ 151.334429][ T7339] p9_client_create+0xe04/0x1150 [ 151.336754][ T7339] ? __pfx_p9_client_create+0x10/0x10 [ 151.339534][ T7339] ? __raw_spin_lock_init+0x3a/0x110 [ 151.342835][ T7339] v9fs_session_init+0x1f8/0x1a80 [ 151.345433][ T7339] ? __pfx_v9fs_session_init+0x10/0x10 [ 151.348130][ T7339] ? kasan_save_track+0x14/0x30 [ 151.350704][ T7339] v9fs_mount+0xc6/0xa50 [ 151.353727][ T7339] ? __pfx_v9fs_mount+0x10/0x10 [ 151.362329][ T7339] ? __pfx_v9fs_mount+0x10/0x10 [ 151.364862][ T7339] legacy_get_tree+0x109/0x220 [ 151.368131][ T7339] vfs_get_tree+0x8f/0x380 [ 151.371068][ T7339] path_mount+0x6e1/0x1f10 [ 151.373425][ T7339] ? kmem_cache_free+0x152/0x4b0 [ 151.375931][ T7339] ? __pfx_path_mount+0x10/0x10 [ 151.378466][ T7339] ? putname+0x12e/0x170 [ 151.384310][ T7339] __ia32_sys_mount+0x292/0x310 [ 151.387682][ T7339] ? __pfx___ia32_sys_mount+0x10/0x10 [ 151.390828][ T7339] __do_fast_syscall_32+0x73/0x120 [ 151.393576][ T7339] do_fast_syscall_32+0x32/0x80 [ 151.396281][ T7339] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 151.400972][ T7339] RIP: 0023:0xf7f24579 [ 151.403454][ T7339] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 151.430639][ T7339] RSP: 002b:00000000f56a656c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 151.434374][ T7339] RAX: ffffffffffffffda RBX: 00000000200001c0 RCX: 0000000020000480 [ 151.439669][ T7339] RDX: 00000000200004c0 RSI: 0000000000000000 RDI: 0000000020000840 [ 151.444171][ T7339] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 151.448581][ T7339] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 151.453894][ T7339] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 151.457621][ T7339] [ 151.459079][ T7339] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 151.462877][ T7339] CPU: 3 UID: 0 PID: 7339 Comm: syz.3.627 Not tainted 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0 [ 151.468394][ T7339] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 151.473988][ T7339] Call Trace: [ 151.475927][ T7339] [ 151.479107][ T7339] dump_stack_lvl+0x3d/0x1f0 [ 151.481743][ T7339] panic+0x71d/0x800 [ 151.483714][ T7339] ? __pfx_panic+0x10/0x10 [ 151.486004][ T7339] ? show_trace_log_lvl+0x29d/0x3d0 [ 151.488767][ T7339] ? __kmem_cache_create_args+0xb0/0x3c0 [ 151.492217][ T7339] check_panic_on_warn+0xab/0xb0 [ 151.495866][ T7339] __warn+0xf6/0x3d0 [ 151.498007][ T7339] ? __kmem_cache_create_args+0xb0/0x3c0 [ 151.501873][ T7339] report_bug+0x3c0/0x580 [ 151.504497][ T7339] handle_bug+0x54/0xa0 [ 151.508037][ T7339] exc_invalid_op+0x17/0x50 [ 151.510484][ T7339] asm_exc_invalid_op+0x1a/0x20 [ 151.513084][ T7339] RIP: 0010:__kmem_cache_create_args+0xb0/0x3c0 [ 151.516606][ T7339] Code: 98 48 3d 10 bb f1 8d 74 25 48 8b 7b 60 48 89 ee e8 c5 68 34 09 85 c0 75 e0 90 48 c7 c7 e8 1f 58 8d 48 89 ee e8 41 b1 7e ff 90 <0f> 0b 90 90 be 20 00 00 00 48 89 ef e8 4f 6a 34 09 48 85 c0 0f 85 [ 151.530375][ T7339] RSP: 0018:ffffc900030d78f0 EFLAGS: 00010286 [ 151.533490][ T7339] RAX: 0000000000000000 RBX: ffff888029a62dc0 RCX: ffffc900033e9000 [ 151.537374][ T7339] RDX: 0000000000040000 RSI: ffffffff814e28c6 RDI: 0000000000000001 [ 151.542568][ T7339] RBP: ffffffff8ca1e320 R08: 0000000000000001 R09: 0000000000000000 [ 151.547770][ T7339] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 151.552178][ T7339] R13: 0000000000020018 R14: ffffc900030d79e0 R15: 0000000000020018 [ 151.557821][ T7339] ? __warn_printk+0x1a6/0x350 [ 151.560453][ T7339] p9_client_create+0xe04/0x1150 [ 151.562784][ T7339] ? __pfx_p9_client_create+0x10/0x10 [ 151.565109][ T7339] ? __raw_spin_lock_init+0x3a/0x110 [ 151.567511][ T7339] v9fs_session_init+0x1f8/0x1a80 [ 151.569879][ T7339] ? __pfx_v9fs_session_init+0x10/0x10 [ 151.572756][ T7339] ? kasan_save_track+0x14/0x30 [ 151.574539][ T7339] v9fs_mount+0xc6/0xa50 [ 151.576467][ T7339] ? __pfx_v9fs_mount+0x10/0x10 [ 151.578773][ T7339] ? __pfx_v9fs_mount+0x10/0x10 [ 151.581243][ T7339] legacy_get_tree+0x109/0x220 [ 151.584147][ T7339] vfs_get_tree+0x8f/0x380 [ 151.586613][ T7339] path_mount+0x6e1/0x1f10 [ 151.588712][ T7339] ? kmem_cache_free+0x152/0x4b0 [ 151.591154][ T7339] ? __pfx_path_mount+0x10/0x10 [ 151.594204][ T7339] ? putname+0x12e/0x170 [ 151.596890][ T7339] __ia32_sys_mount+0x292/0x310 [ 151.599246][ T7339] ? __pfx___ia32_sys_mount+0x10/0x10 [ 151.601989][ T7339] __do_fast_syscall_32+0x73/0x120 [ 151.604397][ T7339] do_fast_syscall_32+0x32/0x80 [ 151.606815][ T7339] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 151.610567][ T7339] RIP: 0023:0xf7f24579 [ 151.614790][ T7339] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 151.625369][ T7339] RSP: 002b:00000000f56a656c EFLAGS: 00000296 ORIG_RAX: 0000000000000015 [ 151.630766][ T7339] RAX: ffffffffffffffda RBX: 00000000200001c0 RCX: 0000000020000480 [ 151.635224][ T7339] RDX: 00000000200004c0 RSI: 0000000000000000 RDI: 0000000020000840 [ 151.642178][ T7339] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 151.647349][ T7339] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 151.651282][ T7339] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 151.655200][ T7339] [ 151.657497][ T7339] Kernel Offset: disabled [ 151.659870][ T7339] Rebooting in 86400 seconds.. VM DIAGNOSIS: 19:57:53 Registers: info registers vcpu 0 CPU#0 EAX=81d2e8f1 EBX=ffffffff ECX=ffffffff EDX=81d2e8f1 ESI=00000000 EDI=ffffffff EBP=f6afeb58 ESP=ffe5baf0 EIP=f70ffbcd EFL=00000246 [---Z-P-] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0023 00000000 ffffffff 00c0fb00 DPL=3 CS32 [-RA] SS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 00000000 ffffffff 00c00000 GS =0063 57cd6440 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 00000000 ffffffff 00c00000 TR =0040 00003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c34dc48 CR3=0000000000984000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000014000000000 0000000400000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffff88802b7467a0 RCX=ffffffff81809a7c RDX=ffff88801e3aa440 RSI=ffffffff81809a56 RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc900006bf9a0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffffed10056e8cf5 R13=0000000000000001 R14=ffff88802b7467a8 R15=ffff88802b540100 RIP=ffffffff81809a58 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b500000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000005787199c CR3=000000000db7c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=dffffc0000000000 RBX=ffff88802a135900 RCX=ffffffff81cad27a RDX=1ffff1100bd66c0a RSI=0000000020000000 RDI=0000000000000000 RBP=0000000020000000 RSP=ffffc90000e8f6d8 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000400 R11=0000000000000000 R12=ffff88805eb36000 R13=ffffc90000e8f870 R14=0000000000000002 R15=ffff8880404de000 RIP=ffffffff818caa30 RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f73e6108 CR3=0000000063b1a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000050000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000000006c RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85034e45 RDI=ffffffff9a63a220 RBP=ffffffff9a63a1e0 RSP=ffffc900030d7258 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=000000000000006c R14=ffffffff85034de0 R15=0000000000000000 RIP=ffffffff85034e6f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b700000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020001000 CR3=0000000063b1a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000050000000000 0000000100000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000