last executing test programs: 12.987596849s ago: executing program 2 (id=658): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000140)="0200000009800089", 0x8) 12.086018919s ago: executing program 2 (id=659): openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(:2', 0x0) r2 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f0000000080)='%,,c\xbe\xfb\\:\xfa\xb3\xce\xd0', 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x89b0, &(0x7f0000000000)={'geneve1\x00', {0x2, 0x0, @multicast1}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x200000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000080)=0x100, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) getsockopt$XDP_STATISTICS(r4, 0x11b, 0x7, 0x0, &(0x7f0000000580)) close_range(r0, 0xffffffffffffffff, 0x0) 11.884333654s ago: executing program 2 (id=660): getpid() r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$binfmt_script(r1, 0x0, 0x0) dup3(r0, r1, 0x0) 11.826009695s ago: executing program 2 (id=661): r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@fwd]}}, 0x0, 0x26}, 0x20) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10, 0x0}}, {{&(0x7f0000000240)={0x2, 0x4e21, @private}, 0x10, 0x0, 0x0, &(0x7f0000000380)=[@ip_retopts={{0x10, 0x0, 0x34}}], 0x10}}], 0x2, 0x0) 11.740169366s ago: executing program 2 (id=662): syz_memcpy_off$KVM_EXIT_HYPERCALL(0x0, 0x20, &(0x7f0000000040)="1002d7d957c9dc8dda937c7b61567297207adb3029e20544ec044c2fbb6bf865c9331165cb94d9fcb78cb57f9b40b11393c0030046c2e390f91dbd9ddf7accf1295f9abfb2b534ba", 0x0, 0x48) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000000)="2e000300010002", 0x7) setuid(0xee01) r2 = socket$inet6(0xa, 0x6, 0x0) listen(r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x4, 0xff}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r4, 0x0, 0x0}, 0x10) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x8) r5 = syz_io_uring_setup(0x16f2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x3}) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvmmsg(r8, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/27, 0x1b}], 0x1}}], 0x2, 0x0, 0x0) recvmsg(r8, &(0x7f00000003c0)={0x0, 0xfffffffffffffcea, &(0x7f0000000340)=[{&(0x7f0000000400)=""/228, 0xde}], 0x1}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000001640)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000008404"], 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x4, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r10, 0x1, 0x1}, 0x48) io_uring_enter(r5, 0x2d3e, 0x0, 0x0, 0x0, 0x0) r11 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmctl$SHM_UNLOCK(r11, 0xc) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000007800010600000000000000a8582416e21214d585"], 0x18}], 0x1}, 0x0) 11.648075272s ago: executing program 2 (id=663): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a00000000000000000000000000000900010073797a30000000003c000000090a000000000000000000000000000008000a40000000000900020073797a31000000000900010073797a3000fca4f003a128af00000008000540020000003c0000001e0a00000000000000000000020000000900020073857a31000000000900010073797a3000000000100003800c0000800800234000000000140000001000010000000000000000000084000a"], 0xc0}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x40000000) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x48090}, 0x24000800) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r4, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_freezer_state(r5, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r6, &(0x7f0000000040)='FROZEN\x00', 0x7) read(r6, &(0x7f00000000c0)=""/29, 0x1d) r7 = openat$cgroup_procs(r5, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000240), 0x12) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="8338a09201c531"]) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0xa30, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 8.191198986s ago: executing program 3 (id=685): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000001c0)={'wg1\x00', 0x0}) fcntl$getownex(r1, 0x10, &(0x7f0000000100)={0x0, 0x0}) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=@newlink={0xd4, 0x10, 0x1, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r2, 0x4008, 0x15044}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private0}]}]}, @IFLA_MTU={0x8}, @IFLA_MTU={0x8, 0x4, 0x4}, @IFLA_OPERSTATE={0x5, 0x10, 0x7}, @IFLA_WEIGHT={0x8, 0xf, 0x4}, @IFLA_CARRIER={0x5, 0x21, 0xb0}, @IFLA_MAP={0x20, 0xe, {0x2, 0x5b, 0x0, 0x4, 0x0, 0x2a}}, @IFLA_AF_SPEC={0x40, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}, @AF_MPLS={0x4}, @AF_BRIDGE={0x4}, @AF_INET6={0x30, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xb6}, @IFLA_INET6_TOKEN={0x14, 0x7, @empty}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xce}]}]}, @IFLA_NET_NS_PID={0x8, 0x13, r3}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x3e7b6}]}, 0xd4}}, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x48882, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r5 = dup(r4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 7.859555084s ago: executing program 3 (id=686): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040), 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000900)="8c85ff9fbb89ead882486b624a831ae210cd60e31dec21153558cb019dfd87da879fca91485a2832bf4536a170e8c643348555cdee358af0945bb47c8d9c0414ef6eeea465330b054a5d2f05714504dfbd63be6632a21106f63b1686d1a8d1f1fee83ef81eed580434821e652c38b693aa4b44191734c4a5229d0ddf687bea7cbbd0401458443ba109bf6709504c080e5972a52ae8bf94c8d2", 0x37db, r0}, 0x38) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000700)={r0}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x10, &(0x7f0000000880)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a}, 0x90) 7.72003313s ago: executing program 3 (id=687): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ppoll(&(0x7f0000000180)=[{r1}], 0x1, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000080), 0x40) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$SNDCTL_DSP_GETISPACE(r1, 0x8010500d, &(0x7f0000000300)) 6.787592464s ago: executing program 3 (id=690): getpid() r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$binfmt_script(r1, 0x0, 0x0) dup3(r0, r1, 0x0) 6.669470692s ago: executing program 3 (id=691): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) 6.590260319s ago: executing program 3 (id=692): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x1) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x2000000000000001) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c000000060000000000000002000006040000000400004e"], &(0x7f0000002040)=""/4099, 0x3a, 0x1003, 0x1}, 0x20) write$cgroup_pid(r5, &(0x7f00000001c0), 0x12) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) writev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f00000015c0)="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", 0x173}, {&(0x7f00000005c0)="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", 0x1000}, {&(0x7f00000001c0)="09659f80f89b900f6397f6d6d0f7580b8e052a0bc70c1fe5fd14334fac48ff0dfe3f9a76cc143514def120d360b17f50383c18890cf2ab5e2dae80888cfc2224d9b5", 0x42}, {&(0x7f0000000140)="f55a425c9a78cacf5751b5bd7fd8e1aff89e7b807dd10e003f982a1edcb2e6562804851d9bd1c0e8c9e4419c7b5c4c649c28556d3d835183dd78c16180d2271e83d6120e0e0b6eb3feeab72131df0af9e7e76ed7aa0e624660cfbb324c08f9", 0x5f}], 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x1, 0x2, 0x201}, 0x14}}, 0x0) 1.636692009s ago: executing program 0 (id=706): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000a50000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r2, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) 1.520075259s ago: executing program 0 (id=709): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) 1.430191448s ago: executing program 0 (id=710): openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000380)={'trans=virtio,', {[{@dfltuid={'dfltuid', 0x3d, r1}}]}}) 1.335276064s ago: executing program 0 (id=711): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffca1}, 0x90) keyctl$restrict_keyring(0x3, 0xfffffffffffffffb, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x0) request_key(&(0x7f0000000400)='asymmetric\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000040)='\x00\xb2\xd1)\xda\xff|\xd1\x85b\xad77\x00\fJ\xfc\xb4\x1e\xae\xe8:`\xe9\x9ew\xf5l\xee\x8dg\xc2\'\x88\xe9\xf3\x05\xe02\xe6\v_\xe9\x89\x86s\x8dh#$\xe4\xb1\xd0\x93\xe6h\xfcsP)\xd9\xce\x19+?\xc6\xf7\xc0[G\x15\xde-x\xa9\xe5,\xec\xf6@M\xfb\xc9~2\xa1\xeb\xb3Pp\x93\x90\x17\xb2\x95\xe7\r\xae^\x92n\xbd\xf3\xb1\xac\xe3sf\xc9X\x05j:\xb6~\xa6#\xad\x06t\xf2\xb5gd\xd7\xcc\"A_\xecu\xe8\x84\xe3\x92J\xaa!\xae\xa2\xd7\xf3\xc6J\xb9i\x9d\xb4>EM\xea\x8ep0\xb0\xfe\x12\xa0\xbb\xecY\x0f \xa3\xba?#\x90\x8c,nNQ', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000340)='flush_foreign\x00', r2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000000300)=[{&(0x7f0000000940)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}, {&(0x7f0000000600)=""/95, 0xc1}], 0x3, &(0x7f0000000580), 0x5, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) sendto$packet(r4, &(0x7f00000000c0)="3f033608260812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c152bfdf9435e3ffe46", 0xe90c, 0xa0c4, &(0x7f0000000540)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_dev$usbfs(0x0, 0x12, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000002c0), 0x4) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000044000000080075956d01e06892334bf74a780300", @ANYRES32=r9, @ANYBLOB="0c00990000000000630000000a001800030303030303000008000c0064000000"], 0x3c}}, 0x4000811) syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$vcsa(&(0x7f0000000100), 0x1ff, 0x142) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) 1.303269715s ago: executing program 1 (id=712): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f00000000c0)={@private0}, 0x14) 1.19867884s ago: executing program 1 (id=713): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x17, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x3}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r4, @ANYBLOB="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"], 0x1c8}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000001c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000880)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240), 0x0, 0x51, &(0x7f0000000340)=[{}, {}], 0x10, 0x10, &(0x7f0000000380), &(0x7f00000003c0), 0xffffffffffffff2e, 0xc3, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) write$cgroup_subtree(r5, &(0x7f00000002c0)=ANY=[], 0x7) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x20, &(0x7f00000006c0)={&(0x7f0000000640)=""/52, 0x34, 0x0, &(0x7f0000000680)=""/43, 0x2b}}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000200)='kmem_cache_free\x00', r8}, 0x10) bind$inet6(r5, &(0x7f0000000840)={0xa, 0x4e24, 0x14000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r10, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x72) connect$pppl2tp(r9, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r10, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r9, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) r11 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000001800000035000000c686357da0e32d21c73bd3cb7333813300000000"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd0c}, 0x64) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x0, 0x0, &(0x7f0000000480)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, 0x0, 0x36, 0x10, 0x0, 0x0, r6, r11}, 0x90) getpid() clock_gettime(0x0, &(0x7f00000005c0)={0x0, 0x0}) futimesat(r5, &(0x7f0000000540)='./file0\x00', &(0x7f0000000600)={{0x0, 0xea60}, {r12, r13/1000+10000}}) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x9, 0x7fe2, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r14, &(0x7f0000000180), 0x20000000}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000000)={r14, &(0x7f0000000180), 0x0}, 0x20) 1.040163495s ago: executing program 1 (id=714): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x3, 0x3}}]}}}]}, 0x40}}, 0x0) 829.959359ms ago: executing program 0 (id=715): syz_emit_ethernet(0x82, &(0x7f0000000140)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@rand_addr=0x64010132}, {@private}, {@local}, {@remote}, {@private}, {@dev}, {@private}]}]}}}}}}}, 0x0) 812.970749ms ago: executing program 0 (id=716): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a00000000000000000000000000000900010073797a30000000003c000000090a000000000000000000000000000008000a40000000000900020073797a31000000000900010073797a3000fca4f003a128af00000008000540020000003c0000001e0a00000000000000000000020000000900020073857a31000000000900010073797a3000000000100003800c0000800800234000000000140000001000010000000000000000000084000a"], 0xc0}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x40000000) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x48090}, 0x24000800) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) copy_file_range(0xffffffffffffffff, 0x0, r4, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_freezer_state(r5, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r6, &(0x7f0000000040)='FROZEN\x00', 0x7) read(r6, &(0x7f00000000c0)=""/29, 0x1d) r7 = openat$cgroup_procs(r5, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000240), 0x12) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="8338a09201c531"]) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0xa30, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 640.283596ms ago: executing program 1 (id=717): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000a50000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r2, 0x1, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) 499.976909ms ago: executing program 1 (id=718): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vcsn(&(0x7f00000020c0), 0x0, 0x0) madvise(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x15) 0s ago: executing program 1 (id=719): openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x42, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000380)={'trans=virtio,', {[{@dfltuid={'dfltuid', 0x3d, r1}}]}}) kernel console output (not intermixed with test programs): atman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.395437][ T5359] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.397674][ T5359] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.407930][ T5359] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.413376][ T5348] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.416443][ T5348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.428048][ T5348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.543439][ T5348] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.546030][ T5348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.556179][ T5348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.562283][ T5346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.565365][ T5346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.577139][ T5346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.592342][ T5345] hsr_slave_0: entered promiscuous mode [ 62.596112][ T5345] hsr_slave_1: entered promiscuous mode [ 62.606955][ T5346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.610087][ T5346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.621380][ T5346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.957004][ T5348] hsr_slave_0: entered promiscuous mode [ 62.961814][ T5348] hsr_slave_1: entered promiscuous mode [ 62.966196][ T5348] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.974960][ T5348] Cannot create hsr debugfs directory [ 62.985466][ T5359] hsr_slave_0: entered promiscuous mode [ 62.988717][ T5359] hsr_slave_1: entered promiscuous mode [ 62.992117][ T5359] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.995527][ T5359] Cannot create hsr debugfs directory [ 63.039624][ T5346] hsr_slave_0: entered promiscuous mode [ 63.044872][ T5346] hsr_slave_1: entered promiscuous mode [ 63.048216][ T5346] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.052825][ T5346] Cannot create hsr debugfs directory [ 63.666129][ T5345] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.674673][ T5345] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.705815][ T5345] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.718704][ T5345] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.775402][ T5348] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.783992][ T5348] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.815530][ T5348] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.825939][ T5348] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.871169][ T5359] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.882590][ T5359] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.890295][ T5359] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.923494][ T5359] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.002078][ T5346] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.031391][ T5346] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.039088][ T5346] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.051821][ T5346] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.137149][ T5345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.169916][ T5345] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.208257][ T1428] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.212165][ T1428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.231885][ T1995] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.231937][ T4773] Bluetooth: hci0: command tx timeout [ 64.232394][ T66] Bluetooth: hci1: command tx timeout [ 64.232430][ T66] Bluetooth: hci2: command tx timeout [ 64.232474][ T66] Bluetooth: hci3: command tx timeout [ 64.235089][ T1995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.335785][ T5359] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.351081][ T5348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.400232][ T5348] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.420867][ T5346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.431749][ T5359] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.459117][ T5390] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.462652][ T5390] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.500747][ T1995] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.504358][ T1995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.510360][ T1995] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.513525][ T1995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.519085][ T1995] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.526078][ T1995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.545393][ T5346] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.584159][ T5391] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.587525][ T5391] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.593506][ T5391] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.596882][ T5391] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.630399][ T5348] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.647277][ T5348] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.718243][ T5346] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.822545][ T5345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.872417][ T5345] veth0_vlan: entered promiscuous mode [ 64.883276][ T5345] veth1_vlan: entered promiscuous mode [ 64.928616][ T5346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.966345][ T5345] veth0_macvtap: entered promiscuous mode [ 64.977969][ T5348] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.992543][ T5359] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.996534][ T5345] veth1_macvtap: entered promiscuous mode [ 65.011543][ T5345] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.045551][ T5345] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.053444][ T5345] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.058822][ T5345] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.065536][ T5345] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.069417][ T5345] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.099212][ T5348] veth0_vlan: entered promiscuous mode [ 65.115396][ T5346] veth0_vlan: entered promiscuous mode [ 65.164405][ T5348] veth1_vlan: entered promiscuous mode [ 65.214611][ T5346] veth1_vlan: entered promiscuous mode [ 65.293296][ T5359] veth0_vlan: entered promiscuous mode [ 65.307555][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.311331][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.342320][ T5348] veth0_macvtap: entered promiscuous mode [ 65.353441][ T5348] veth1_macvtap: entered promiscuous mode [ 65.373576][ T5348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.378396][ T5348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.383597][ T5348] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.397352][ T5359] veth1_vlan: entered promiscuous mode [ 65.407304][ T5348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.407680][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.412105][ T5348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.416050][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.422068][ T5348] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.447171][ T5346] veth0_macvtap: entered promiscuous mode [ 65.470344][ T5346] veth1_macvtap: entered promiscuous mode [ 65.496434][ T5348] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.501237][ T5348] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.504815][ T5348] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.507988][ T5348] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.550294][ T5346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.554838][ T5346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.588416][ T5346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.594872][ T5346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.602120][ T5346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.627127][ T5346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.631828][ T5346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.635998][ T5346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.641340][ T5346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.647724][ T5346] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.671798][ T5346] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.676287][ T5346] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.691529][ T5346] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.696159][ T5346] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.752499][ T5359] veth0_macvtap: entered promiscuous mode [ 65.771072][ T5359] veth1_macvtap: entered promiscuous mode [ 65.799692][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.804829][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.844907][ T5359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.850851][ T5359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.855839][ T5359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.861574][ T5359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.865572][ T5359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.869897][ T5359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.877120][ T5359] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.894199][ T1107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.894687][ T5359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.897600][ T1107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.902228][ T5359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.910191][ T5359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.914288][ T5359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.918108][ T5359] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.922956][ T5359] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.928983][ T5359] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.949695][ T5359] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.953769][ T5359] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.959012][ T5359] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.969447][ T5359] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.992233][ T1107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.997217][ T1107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.169452][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.173090][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.194948][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.198207][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.274407][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.280111][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.311062][ T4773] Bluetooth: hci2: command tx timeout [ 66.314549][ T5357] Bluetooth: hci0: command tx timeout [ 66.315921][ T5358] Bluetooth: hci3: command tx timeout [ 66.333254][ T66] Bluetooth: hci1: command tx timeout [ 66.657415][ T5357] Bluetooth: Unexpected continuation frame (len 24) [ 67.305761][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 67.612148][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 68.389592][ T5357] Bluetooth: hci3: command tx timeout [ 68.390238][ T66] Bluetooth: hci2: command tx timeout [ 68.390266][ T5358] Bluetooth: hci0: command tx timeout [ 68.390297][ T5358] Bluetooth: hci1: command tx timeout [ 68.629901][ T0] NOHZ tick-stop error: local softirq work is pending, handler #04!!! [ 68.707210][ T0] NOHZ tick-stop error: local softirq work is pending, handler #01!!! [ 68.862559][ T5468] program syz.1.21 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 68.909596][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 68.957456][ T5474] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 69.047668][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 69.052051][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 69.146502][ T1289] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.147765][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 69.151395][ T1289] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.168939][ T1289] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.188542][ T1289] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.193396][ T1289] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.202573][ T1289] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.205938][ T1289] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.209163][ T1289] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.215075][ T1289] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.222900][ T1289] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.226180][ T1289] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.230427][ T1289] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.233878][ T1289] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.237209][ T1289] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.241709][ T1289] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.251775][ T1289] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.255020][ T1289] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.258188][ T1289] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.262025][ T1289] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.265603][ T1289] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.269187][ T1289] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.282667][ T1289] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.286568][ T1289] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.292688][ T1289] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.296010][ T1289] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.299784][ T1289] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.303196][ T1289] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.306470][ T1289] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.311299][ T1289] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.314505][ T1289] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.317744][ T1289] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.321458][ T1289] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.324674][ T1289] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.327600][ T1289] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.330988][ T1289] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.334060][ T1289] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.337363][ T1289] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.340944][ T1289] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.344205][ T1289] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.347455][ T1289] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.351157][ T1289] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.355569][ T1289] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.358815][ T1289] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.379406][ T1289] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.382715][ T1289] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.385947][ T1289] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.389206][ T1289] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.399927][ T1289] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.414877][ T5357] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.415824][ T1289] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [syz0] on syz1 [ 69.429279][ T5357] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.434950][ T5357] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.439572][ T25] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 69.454519][ T5357] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.467707][ T5357] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 69.471985][ T5357] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 69.678022][ T25] usb 7-1: config 0 has no interfaces? [ 69.680623][ T25] usb 7-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 69.684211][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.691826][ T25] usb 7-1: config 0 descriptor?? [ 69.781577][ T5488] chnl_net:caif_netlink_parms(): no params data found [ 70.000510][ T5488] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.003742][ T5488] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.007135][ T5488] bridge_slave_0: entered allmulticast mode [ 70.012285][ T5488] bridge_slave_0: entered promiscuous mode [ 70.019577][ T5488] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.024188][ T5488] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.029411][ T5488] bridge_slave_1: entered allmulticast mode [ 70.036397][ T5488] bridge_slave_1: entered promiscuous mode [ 70.074272][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 70.168915][ T5488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.176754][ T5390] usb 7-1: USB disconnect, device number 2 [ 70.178533][ T5488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.256351][ T5488] team0: Port device team_slave_0 added [ 70.270020][ T5488] team0: Port device team_slave_1 added [ 70.329877][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.402496][ T5488] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.405718][ T5488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.422183][ T5488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.458052][ T1100] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.475086][ T5488] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.478323][ T5488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.492593][ T5488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.602825][ T5488] hsr_slave_0: entered promiscuous mode [ 70.612508][ T5488] hsr_slave_1: entered promiscuous mode [ 70.616020][ T5488] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.618907][ T5488] Cannot create hsr debugfs directory [ 70.718458][ T1100] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.812994][ T66] Bluetooth: Unexpected continuation frame (len 24) [ 70.827019][ T1100] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.996380][ T1100] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.119768][ T5508] netlink: 'syz.0.33': attribute type 33 has an invalid length. [ 71.123648][ T5508] netlink: 152 bytes leftover after parsing attributes in process `syz.0.33'. [ 71.339815][ T1100] bridge_slave_1: left allmulticast mode [ 71.342560][ T1100] bridge_slave_1: left promiscuous mode [ 71.345903][ T1100] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.360117][ T1100] bridge_slave_0: left allmulticast mode [ 71.362505][ T1100] bridge_slave_0: left promiscuous mode [ 71.366541][ T1100] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.511016][ T66] Bluetooth: hci4: command tx timeout [ 72.003212][ T1100] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.025206][ T1100] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.063056][ T1100] bond0 (unregistering): Released all slaves [ 72.438086][ T66] Bluetooth: Unexpected continuation frame (len 24) [ 72.644737][ T5488] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.724949][ T1100] hsr_slave_0: left promiscuous mode [ 72.730782][ T1100] hsr_slave_1: left promiscuous mode [ 72.736128][ T1100] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.739298][ T1100] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.766379][ T1100] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.773926][ T1100] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.824919][ T1100] veth1_macvtap: left promiscuous mode [ 72.828067][ T1100] veth0_macvtap: left promiscuous mode [ 72.832464][ T1100] veth1_vlan: left promiscuous mode [ 72.837180][ T1100] veth0_vlan: left promiscuous mode [ 73.592615][ T66] Bluetooth: hci4: command tx timeout [ 74.079103][ T5557] capability: warning: `syz.2.48' uses deprecated v2 capabilities in a way that may be insecure [ 74.307953][ T1100] team0 (unregistering): Port device team_slave_1 removed [ 74.398982][ T1100] team0 (unregistering): Port device team_slave_0 removed [ 75.384781][ T5488] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.411877][ T5488] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.421830][ T5555] Zero length message leads to an empty skb [ 75.440981][ T5488] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.472338][ T5572] netlink: 'syz.2.52': attribute type 33 has an invalid length. [ 75.475557][ T5572] netlink: 152 bytes leftover after parsing attributes in process `syz.2.52'. [ 75.657090][ T5488] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.675750][ T5488] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.680354][ T66] Bluetooth: hci4: command tx timeout [ 75.686167][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.689003][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.710763][ T1995] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.713803][ T1995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.845746][ T5574] 9pnet_fd: Insufficient options for proto=fd [ 76.118892][ T5488] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.196585][ T5488] veth0_vlan: entered promiscuous mode [ 76.221997][ T5488] veth1_vlan: entered promiscuous mode [ 76.263406][ T5488] veth0_macvtap: entered promiscuous mode [ 76.271585][ T5488] veth1_macvtap: entered promiscuous mode [ 76.298827][ T5488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.304043][ T5488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.308500][ T5488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.316843][ T5488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.321330][ T5488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.326286][ T5488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.333207][ T5488] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.345903][ T5488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.351295][ T5488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.355769][ T5488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.360348][ T5488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.364615][ T5488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.375559][ T5488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.381919][ T5488] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.393515][ T5488] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.397337][ T5488] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.405946][ T5488] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.418731][ T5488] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.573268][ T98] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.580682][ T98] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.644338][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.647894][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.815327][ T1378] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.818544][ T1378] ieee802154 phy1 wpan1: encryption failed: -22 [ 77.554385][ T5516] hid (null): invalid report_size 201338983 [ 77.574270][ T5516] hid-generic 0000:0000:0000.0003: invalid report_size 201338983 [ 77.577747][ T5516] hid-generic 0000:0000:0000.0003: item 0 4 1 7 parsing failed [ 77.583369][ T5516] hid-generic 0000:0000:0000.0003: probe with driver hid-generic failed with error -22 [ 77.749858][ T66] Bluetooth: hci4: command tx timeout [ 78.662775][ T5631] netlink: 'syz.1.67': attribute type 33 has an invalid length. [ 78.671966][ T5631] netlink: 152 bytes leftover after parsing attributes in process `syz.1.67'. [ 79.492467][ T5636] netlink: 8 bytes leftover after parsing attributes in process `syz.3.68'. [ 80.037576][ T4800] hid (null): invalid report_size 201338983 [ 80.062258][ T4800] hid-generic 0000:0000:0000.0004: invalid report_size 201338983 [ 80.065426][ T4800] hid-generic 0000:0000:0000.0004: item 0 4 1 7 parsing failed [ 80.069114][ T4800] hid-generic 0000:0000:0000.0004: probe with driver hid-generic failed with error -22 [ 82.364517][ T5675] netlink: 8 bytes leftover after parsing attributes in process `syz.2.80'. [ 82.480220][ T5680] netlink: 28 bytes leftover after parsing attributes in process `syz.0.84'. [ 82.849561][ T5691] warning: `syz.3.88' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 83.019754][ T5516] hid (null): invalid report_size 201338983 [ 83.028195][ T5516] hid-generic 0000:0000:0000.0005: invalid report_size 201338983 [ 83.039537][ T5516] hid-generic 0000:0000:0000.0005: item 0 4 1 7 parsing failed [ 83.050005][ T5516] hid-generic 0000:0000:0000.0005: probe with driver hid-generic failed with error -22 [ 83.100762][ T5692] input: syz0 as /devices/virtual/input/input5 [ 83.635215][ T39] audit: type=1326 audit(1722546208.703:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5699 comm="syz.0.91" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f4f579 code=0x0 [ 84.494306][ T5728] netlink: 44 bytes leftover after parsing attributes in process `syz.1.99'. [ 84.498855][ T5728] netlink: 43 bytes leftover after parsing attributes in process `syz.1.99'. [ 84.504798][ T5728] netlink: 'syz.1.99': attribute type 6 has an invalid length. [ 84.509869][ T5728] netlink: 'syz.1.99': attribute type 5 has an invalid length. [ 84.513646][ T5728] netlink: 43 bytes leftover after parsing attributes in process `syz.1.99'. [ 84.954466][ T5746] input: syz0 as /devices/virtual/input/input6 [ 84.974821][ T39] audit: type=1326 audit(1722546210.043:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5744 comm="syz.3.106" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f20579 code=0x0 [ 86.782452][ T5784] kAFS: unparsable volume name [ 87.120002][ T8] cfg80211: failed to load regulatory.db [ 87.897488][ T5797] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 89.465816][ T5833] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 90.058058][ T5856] input: syz0 as /devices/virtual/input/input7 [ 91.563538][ T5884] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 92.210880][ C0] hrtimer: interrupt took 5284212 ns [ 92.278757][ T5896] syzkaller0: entered promiscuous mode [ 92.312112][ T5896] syzkaller0: entered allmulticast mode [ 94.079434][ T39] audit: type=1326 audit(1722546219.143:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5909 comm="syz.1.159" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf745e579 code=0x0 [ 94.479930][ T5914] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 94.493705][ T5914] CIFS: Unable to determine destination address [ 95.029785][ T39] audit: type=1326 audit(1722546220.093:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5919 comm="syz.2.163" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73ae579 code=0x0 [ 96.013899][ T5941] syzkaller0: entered promiscuous mode [ 96.016350][ T5941] syzkaller0: entered allmulticast mode [ 96.056409][ T5945] CIFS: Unable to determine destination address [ 98.328735][ T5973] CIFS: Unable to determine destination address [ 100.864828][ T6020] CIFS: Unable to determine destination address [ 101.021507][ T6022] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.429006][ T6050] misc userio: Can't change port type on an already running userio instance [ 103.459477][ T6061] xt_recent: Unsupported userspace flags (00000063) [ 103.684411][ T6065] netlink: 12 bytes leftover after parsing attributes in process `syz.0.215'. [ 104.108361][ T6070] input: syz0 as /devices/virtual/input/input9 [ 104.874492][ T39] audit: type=1326 audit(1722546229.943:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6083 comm="syz.0.221" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f4f579 code=0x0 [ 105.071327][ T6091] xt_recent: Unsupported userspace flags (00000063) [ 106.447035][ T6099] netlink: 12 bytes leftover after parsing attributes in process `syz.0.225'. [ 108.166280][ T6118] xt_recent: Unsupported userspace flags (00000063) [ 108.289473][ T1428] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 108.424127][ T39] audit: type=1326 audit(1722546233.493:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6119 comm="syz.3.233" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f20579 code=0x0 [ 108.519399][ T1428] usb 5-1: Using ep0 maxpacket: 8 [ 108.525497][ T1428] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 108.530248][ T1428] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 108.534226][ T1428] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 108.537959][ T1428] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 108.572937][ T1428] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 108.625269][ T1428] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.762388][ T6129] netlink: 4 bytes leftover after parsing attributes in process `syz.1.236'. [ 108.862630][ T1428] usb 5-1: GET_CAPABILITIES returned 0 [ 108.864663][ T6132] ======================================================= [ 108.864663][ T6132] WARNING: The mand mount option has been deprecated and [ 108.864663][ T6132] and is ignored by this kernel. Remove the mand [ 108.864663][ T6132] option from the mount to silence this warning. [ 108.864663][ T6132] ======================================================= [ 108.865047][ T1428] usbtmc 5-1:16.0: can't read capabilities [ 108.892781][ T6132] fuse: Unknown parameter '000000000000000000000050xffffffffffffffff' [ 109.340471][ T1428] usb 5-1: USB disconnect, device number 2 [ 109.680454][ T39] audit: type=1326 audit(1722546234.743:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6146 comm="syz.3.237" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f20579 code=0x7ffc0000 [ 109.723778][ T39] audit: type=1326 audit(1722546234.743:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6146 comm="syz.3.237" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f20579 code=0x7ffc0000 [ 109.759503][ T39] audit: type=1326 audit(1722546234.773:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6146 comm="syz.3.237" exe="/syz-executor" sig=0 arch=40000003 syscall=144 compat=1 ip=0xf7f20579 code=0x7ffc0000 [ 109.768583][ T39] audit: type=1326 audit(1722546234.773:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6146 comm="syz.3.237" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f20579 code=0x7ffc0000 [ 109.790138][ T39] audit: type=1326 audit(1722546234.773:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6146 comm="syz.3.237" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f20579 code=0x7ffc0000 [ 109.948647][ T6158] netlink: 12 bytes leftover after parsing attributes in process `syz.0.242'. [ 110.748999][ T39] audit: type=1326 audit(1722546235.803:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6144 comm="syz.1.238" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf745e579 code=0x0 [ 111.653868][ T39] audit: type=1326 audit(1722546236.723:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6174 comm="syz.0.246" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f4f579 code=0x0 [ 112.140252][ T6182] fuse: root generation should be zero [ 112.949005][ T6186] netlink: 24 bytes leftover after parsing attributes in process `syz.0.248'. [ 113.826469][ T39] audit: type=1326 audit(1722546238.893:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6200 comm="syz.3.253" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f20579 code=0x0 [ 114.527848][ T39] audit: type=1326 audit(1722546239.593:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6212 comm="syz.2.257" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ae579 code=0x7ffc0000 [ 114.543572][ T39] audit: type=1326 audit(1722546239.593:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6212 comm="syz.2.257" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ae579 code=0x7ffc0000 [ 114.589463][ T39] audit: type=1326 audit(1722546239.603:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6212 comm="syz.2.257" exe="/syz-executor" sig=0 arch=40000003 syscall=144 compat=1 ip=0xf73ae579 code=0x7ffc0000 [ 114.599697][ T39] audit: type=1326 audit(1722546239.603:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6212 comm="syz.2.257" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ae579 code=0x7ffc0000 [ 114.615139][ T39] audit: type=1326 audit(1722546239.603:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6212 comm="syz.2.257" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73ae579 code=0x7ffc0000 [ 115.131522][ T6223] kAFS: No cell specified [ 115.581120][ T5357] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 115.585164][ T5357] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 115.589884][ T5357] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 115.618149][ T5357] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 115.669193][ T5357] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 115.677353][ T5357] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 116.164158][ C0] vkms_vblank_simulate: vblank timer overrun [ 116.298605][ T39] audit: type=1326 audit(1722546241.353:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6236 comm="syz.1.265" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf745e579 code=0x0 [ 116.313979][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.333665][ T6232] chnl_net:caif_netlink_parms(): no params data found [ 116.486689][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.650171][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.671712][ T6232] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.676892][ T6232] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.689729][ T6232] bridge_slave_0: entered allmulticast mode [ 116.693584][ T6232] bridge_slave_0: entered promiscuous mode [ 116.699850][ T6232] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.703085][ T6232] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.706121][ T6232] bridge_slave_1: entered allmulticast mode [ 116.726553][ T6232] bridge_slave_1: entered promiscuous mode [ 116.804116][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.862881][ T6232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.881185][ T6232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.948670][ T6232] team0: Port device team_slave_0 added [ 116.957254][ T6232] team0: Port device team_slave_1 added [ 117.069736][ T6232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.074263][ T6232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.087530][ T6232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.102007][ T6232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.106272][ T6232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.123775][ T6232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.278582][ T6232] hsr_slave_0: entered promiscuous mode [ 117.304391][ T6232] hsr_slave_1: entered promiscuous mode [ 117.307771][ T6232] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 117.326239][ T6232] Cannot create hsr debugfs directory [ 117.352934][ T11] bridge_slave_1: left allmulticast mode [ 117.355684][ T11] bridge_slave_1: left promiscuous mode [ 117.364468][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.387969][ T11] bridge_slave_0: left allmulticast mode [ 117.391556][ T11] bridge_slave_0: left promiscuous mode [ 117.394231][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.742576][ T6254] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 117.749501][ T66] Bluetooth: hci3: command tx timeout [ 117.877124][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 117.897316][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 117.910055][ T11] bond0 (unregistering): Released all slaves [ 118.312806][ C0] vkms_vblank_simulate: vblank timer overrun [ 118.550579][ T11] hsr_slave_0: left promiscuous mode [ 118.557319][ T11] hsr_slave_1: left promiscuous mode [ 118.563598][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.577981][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.595075][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.608469][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.714679][ T11] veth1_macvtap: left promiscuous mode [ 118.717465][ T11] veth0_macvtap: left promiscuous mode [ 118.721669][ T11] veth1_vlan: left promiscuous mode [ 118.724478][ T11] veth0_vlan: left promiscuous mode [ 119.276475][ T6265] kAFS: No cell specified [ 119.829510][ T66] Bluetooth: hci3: command tx timeout [ 120.234828][ T11] team0 (unregistering): Port device team_slave_1 removed [ 120.394695][ T6272] slcan: can't register candev [ 120.397136][ T6272] Falling back ldisc for ttyprintk. [ 120.439744][ T11] team0 (unregistering): Port device team_slave_0 removed [ 120.639000][ T39] audit: type=1326 audit(1722546245.703:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6278 comm="syz.2.272" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf73ae579 code=0x0 [ 121.717988][ T6298] dvmrp1: entered allmulticast mode [ 121.871250][ T6232] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 121.891341][ T6232] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 121.914482][ T66] Bluetooth: hci3: command tx timeout [ 121.930478][ T6232] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 121.961403][ T6232] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 122.072249][ T6232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.106025][ T6232] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.124159][ T5265] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.126941][ T5265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.166295][ T5265] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.169462][ T5265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.276526][ T6232] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 122.305411][ T6232] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 122.325324][ T6322] netlink: 8 bytes leftover after parsing attributes in process `syz.0.285'. [ 122.474300][ T39] audit: type=1326 audit(1722546247.543:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6325 comm="syz.1.286" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf745e579 code=0x0 [ 122.513902][ T6335] dvmrp1: left allmulticast mode [ 122.645371][ T6336] dvmrp1: entered allmulticast mode [ 122.796467][ T6232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.858642][ T6232] veth0_vlan: entered promiscuous mode [ 122.865976][ T39] audit: type=1326 audit(1722546247.923:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6340 comm="syz.0.288" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f4f579 code=0x7ffc0000 [ 122.871056][ T6232] veth1_vlan: entered promiscuous mode [ 122.887275][ T39] audit: type=1326 audit(1722546247.923:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6340 comm="syz.0.288" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f4f579 code=0x7ffc0000 [ 122.900948][ T39] audit: type=1326 audit(1722546247.923:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6340 comm="syz.0.288" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f4f579 code=0x7ffc0000 [ 122.910795][ T39] audit: type=1326 audit(1722546247.923:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6340 comm="syz.0.288" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f4f579 code=0x7ffc0000 [ 122.919804][ T6232] veth0_macvtap: entered promiscuous mode [ 122.921567][ T39] audit: type=1326 audit(1722546247.923:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6340 comm="syz.0.288" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f4f579 code=0x7ffc0000 [ 122.927818][ T6232] veth1_macvtap: entered promiscuous mode [ 122.933635][ T39] audit: type=1326 audit(1722546247.923:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6340 comm="syz.0.288" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f4f579 code=0x7ffc0000 [ 122.944357][ T39] audit: type=1326 audit(1722546247.923:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6340 comm="syz.0.288" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f4f579 code=0x7ffc0000 [ 122.963142][ T6232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.967847][ T6232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.973190][ T6232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.974454][ T39] audit: type=1326 audit(1722546248.043:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6340 comm="syz.0.288" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f4f579 code=0x7ffc0000 [ 122.977553][ T6232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.988923][ T6232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.993052][ T6232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.998246][ T6232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.007260][ T6232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.012059][ T6232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.016371][ T6232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.020537][ T6232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.024866][ T6232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 123.029913][ T6232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 123.035205][ T6232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.047981][ T6232] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.056585][ T6232] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.060731][ T6232] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.064264][ T6232] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.078269][ T39] audit: type=1326 audit(1722546248.143:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6340 comm="syz.0.288" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f4f579 code=0x7ffc0000 [ 123.152640][ T5265] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 123.194484][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.199174][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.225103][ T1100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.228343][ T1100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.323712][ T6347] mmap: syz.2.291 (6347) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 123.356407][ T5265] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 123.361712][ T5265] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 123.377765][ T5265] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 123.384273][ T5265] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.393008][ T6341] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 123.402916][ T5265] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 123.479708][ T6355] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 123.483172][ T6355] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 123.487461][ T6355] vhci_hcd vhci_hcd.0: Device attached [ 123.626477][ T6341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.637784][ T6341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.737700][ T35] usb 5-1: USB disconnect, device number 3 [ 123.804730][ T8] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 123.829612][ T5265] usb 20-1: SetAddress Request (2) to port 0 [ 123.832618][ T5265] usb 20-1: new SuperSpeed USB device number 2 using vhci_hcd [ 123.999449][ T8] usb 8-1: Using ep0 maxpacket: 8 [ 124.008077][ T8] usb 8-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=62.0d [ 124.009144][ T66] Bluetooth: hci3: command tx timeout [ 124.020875][ T8] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.027672][ T8] usb 8-1: Product: syz [ 124.036502][ T8] usb 8-1: Manufacturer: syz [ 124.038392][ T8] usb 8-1: SerialNumber: syz [ 124.045101][ T8] usb 8-1: config 0 descriptor?? [ 124.055913][ T8] cytherm 8-1:0.0: Cypress thermometer device now attached [ 124.078800][ C0] vkms_vblank_simulate: vblank timer overrun [ 124.277181][ T6357] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 1 [ 124.315299][ T1100] vhci_hcd: stop threads [ 124.317438][ T1100] vhci_hcd: release socket [ 124.320717][ T1100] vhci_hcd: disconnect device [ 124.328657][ C0] vkms_vblank_simulate: vblank timer overrun [ 125.449931][ T8] usb 8-1: USB disconnect, device number 2 [ 125.453110][ T8] cytherm 8-1:0.0: Cypress thermometer now disconnected [ 126.012467][ T5357] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 126.032238][ T5357] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 126.037441][ T5357] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 126.042376][ T5357] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 126.047551][ T5357] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 126.054542][ T5357] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 126.315395][ T6402] chnl_net:caif_netlink_parms(): no params data found [ 126.404994][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.621558][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.693340][ T6421] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 126.764631][ T6402] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.777597][ T6402] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.783845][ T6402] bridge_slave_0: entered allmulticast mode [ 126.788535][ T6402] bridge_slave_0: entered promiscuous mode [ 126.820171][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.864459][ T6402] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.867232][ T6402] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.870882][ T6402] bridge_slave_1: entered allmulticast mode [ 126.874647][ T6402] bridge_slave_1: entered promiscuous mode [ 127.167759][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.252034][ T6402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.283990][ T6402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.467645][ T6402] team0: Port device team_slave_0 added [ 127.512786][ T6402] team0: Port device team_slave_1 added [ 127.561450][ T6431] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 127.564482][ T6431] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 127.568116][ T6431] vhci_hcd vhci_hcd.0: Device attached [ 127.653909][ T6402] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.658425][ T6402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.669703][ T6402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.677558][ T6402] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.680624][ T6402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.691933][ T6402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.835477][ T11] bridge_slave_1: left allmulticast mode [ 127.839963][ T11] bridge_slave_1: left promiscuous mode [ 127.842515][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.849177][ T11] bridge_slave_0: left allmulticast mode [ 127.854574][ T11] bridge_slave_0: left promiscuous mode [ 127.857375][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.859407][ T57] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 127.881073][ T35] usb 18-1: SetAddress Request (2) to port 0 [ 127.883794][ T35] usb 18-1: new SuperSpeed USB device number 2 using vhci_hcd [ 128.039500][ T57] usb 7-1: Using ep0 maxpacket: 8 [ 128.055293][ T57] usb 7-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=62.0d [ 128.066388][ T57] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.070230][ T57] usb 7-1: Product: syz [ 128.072188][ T57] usb 7-1: Manufacturer: syz [ 128.074125][ T57] usb 7-1: SerialNumber: syz [ 128.078084][ T57] usb 7-1: config 0 descriptor?? [ 128.080705][ T66] Bluetooth: hci4: command tx timeout [ 128.087432][ T57] cytherm 7-1:0.0: Cypress thermometer device now attached [ 128.319234][ T6432] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 1 [ 128.325271][ T45] vhci_hcd: stop threads [ 128.328513][ T45] vhci_hcd: release socket [ 128.331274][ T45] vhci_hcd: disconnect device [ 128.358786][ T39] kauditd_printk_skb: 71 callbacks suppressed [ 128.358801][ T39] audit: type=1326 audit(1722546253.429:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6439 comm="syz.3.319" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x0 [ 128.384926][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.391534][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.397371][ T11] bond0 (unregistering): Released all slaves [ 128.452558][ T6402] hsr_slave_0: entered promiscuous mode [ 128.456821][ T6402] hsr_slave_1: entered promiscuous mode [ 128.464216][ T6402] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 128.467416][ T6402] Cannot create hsr debugfs directory [ 128.834538][ T11] hsr_slave_0: left promiscuous mode [ 128.837687][ T11] hsr_slave_1: left promiscuous mode [ 128.843180][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.846186][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.850725][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.854061][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.874945][ T5265] usb 20-1: device descriptor read/8, error -110 [ 128.884317][ T11] veth1_macvtap: left promiscuous mode [ 128.887006][ T11] veth0_macvtap: left promiscuous mode [ 128.891010][ T11] veth1_vlan: left promiscuous mode [ 128.893636][ T11] veth0_vlan: left promiscuous mode [ 129.311230][ T5265] usb usb20-port1: attempt power cycle [ 129.523655][ T25] usb 7-1: USB disconnect, device number 3 [ 129.531433][ T25] cytherm 7-1:0.0: Cypress thermometer now disconnected [ 129.890477][ T11] team0 (unregistering): Port device team_slave_1 removed [ 130.003148][ T11] team0 (unregistering): Port device team_slave_0 removed [ 130.021514][ T5265] usb usb20-port1: unable to enumerate USB device [ 130.159626][ T66] Bluetooth: hci4: command tx timeout [ 131.083903][ T6451] netlink: 4 bytes leftover after parsing attributes in process `syz.3.320'. [ 131.087922][ T6451] netlink: 'syz.3.320': attribute type 11 has an invalid length. [ 131.103031][ T6451] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.107618][ T6451] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.112204][ T6451] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.116355][ T6451] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 131.121527][ T6451] vxlan0: entered promiscuous mode [ 131.346272][ T6467] netlink: 4 bytes leftover after parsing attributes in process `syz.3.325'. [ 131.523309][ T6476] netlink: 4 bytes leftover after parsing attributes in process `syz.3.327'. [ 131.647012][ T6481] netlink: 224 bytes leftover after parsing attributes in process `syz.2.330'. [ 131.656642][ T6402] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 131.733889][ T6402] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 131.749416][ T6402] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 131.762378][ T6402] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 131.869168][ T6402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.891009][ T6402] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.902615][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.906314][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.922763][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.926068][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.936833][ T39] audit: type=1326 audit(1722546256.979:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6478 comm="syz.3.329" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x0 [ 131.973052][ T6402] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 131.977872][ T6402] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 132.029641][ T58] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 132.175164][ T6402] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.226482][ T6402] veth0_vlan: entered promiscuous mode [ 132.227453][ T58] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.234534][ T58] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.239150][ T58] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 132.242192][ T6402] veth1_vlan: entered promiscuous mode [ 132.242553][ T66] Bluetooth: hci4: command tx timeout [ 132.246856][ T58] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 132.255433][ T58] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.261551][ T58] usb 7-1: config 0 descriptor?? [ 132.278880][ T6402] veth0_macvtap: entered promiscuous mode [ 132.285879][ T6402] veth1_macvtap: entered promiscuous mode [ 132.301862][ T6402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.306307][ T6402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.310732][ T6402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.315101][ T6402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.319699][ T6402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.324297][ T6402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.330792][ T6402] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.340836][ T6402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.345794][ T6402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.350992][ T6402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.355557][ T6402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.359913][ T6402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.364605][ T6402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.372654][ T6402] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.387069][ T6402] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.392189][ T6402] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.396106][ T6402] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.400598][ T6402] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.456316][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.460290][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.504603][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.508180][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.724728][ T6487] random: crng reseeded on system resumption [ 132.827312][ T58] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 132.832981][ T58] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 132.837785][ T58] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 132.856314][ T58] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 132.952073][ T35] usb 18-1: device descriptor read/8, error -110 [ 133.064864][ T58] usb 7-1: USB disconnect, device number 4 [ 133.124917][ T6515] syz.3.336 uses obsolete (PF_INET,SOCK_PACKET) [ 133.214443][ T6516] evm: overlay not supported [ 133.381956][ T35] usb usb18-port1: attempt power cycle [ 133.521298][ T39] audit: type=1326 audit(1722546258.579:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6519 comm="syz.1.338" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f1f579 code=0x0 [ 134.040493][ T35] usb usb18-port1: unable to enumerate USB device [ 134.102421][ T6538] input: syz0 as /devices/virtual/input/input10 [ 134.321143][ T66] Bluetooth: hci4: command tx timeout [ 134.881991][ T6552] random: crng reseeded on system resumption [ 134.903686][ T6552] Restarting kernel threads ... done. [ 134.961471][ T5357] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 134.967152][ T5357] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 134.978084][ T5357] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 134.993677][ T5357] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 135.001279][ T5357] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 135.004817][ T5357] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 135.335894][ T6555] chnl_net:caif_netlink_parms(): no params data found [ 135.370966][ T39] audit: type=1326 audit(1722546260.429:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6564 comm="syz.3.349" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f43579 code=0x0 [ 135.552790][ T6555] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.560325][ T6555] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.569720][ T6555] bridge_slave_0: entered allmulticast mode [ 135.575335][ T6555] bridge_slave_0: entered promiscuous mode [ 135.589813][ T6555] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.606509][ T6555] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.610622][ T6555] bridge_slave_1: entered allmulticast mode [ 135.617800][ T6555] bridge_slave_1: entered promiscuous mode [ 135.704926][ T6555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.717234][ T6555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.778204][ T6573] netlink: 24 bytes leftover after parsing attributes in process `syz.2.350'. [ 135.847643][ T6555] team0: Port device team_slave_0 added [ 135.855497][ T6555] team0: Port device team_slave_1 added [ 135.981984][ T6555] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.984950][ T6555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.015998][ T6555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.048374][ T6555] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.051753][ T6555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.063128][ T6555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.299229][ T6555] hsr_slave_0: entered promiscuous mode [ 136.308853][ T6555] hsr_slave_1: entered promiscuous mode [ 136.325516][ T6555] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 136.332153][ T6555] Cannot create hsr debugfs directory [ 136.726510][ T6555] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.807574][ T6555] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.903834][ T6555] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.986739][ T6555] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.042045][ T5357] Bluetooth: hci1: command tx timeout [ 137.131571][ T6555] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 137.137763][ T6555] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 137.147074][ T6555] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 137.154229][ T6555] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 137.245849][ T6555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.265707][ T6555] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.276272][ T5411] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.279664][ T5411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.312854][ T5411] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.316069][ T5411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.574282][ T6555] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.758559][ T6555] veth0_vlan: entered promiscuous mode [ 137.776056][ T6555] veth1_vlan: entered promiscuous mode [ 137.860837][ T6555] veth0_macvtap: entered promiscuous mode [ 137.875534][ T6555] veth1_macvtap: entered promiscuous mode [ 137.929738][ T6555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.933928][ T6555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.938219][ T6555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.943529][ T6555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.947775][ T6555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.953935][ T6555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.958150][ T6555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.964253][ T6555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.985102][ T6555] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.003356][ T6555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.007799][ T6555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.017261][ T6555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.022099][ T6555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.026218][ T6555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.033801][ T6555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.038048][ T6555] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.042703][ T6555] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.052196][ T6555] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.070668][ T6555] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.078303][ T6555] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.083753][ T6555] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.090804][ T6555] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.194593][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.201241][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.227760][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.232742][ T1378] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.235361][ T1378] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.239173][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.707022][ T6601] process 'syz.1.356' launched './file2' with NULL argv: empty string added [ 139.084365][ T6603] vivid-003: ================= START STATUS ================= [ 139.090747][ T6603] vivid-003: Radio HW Seek Mode: Bounded [ 139.095079][ T6603] vivid-003: Radio Programmable HW Seek: false [ 139.097605][ T6603] vivid-003: RDS Rx I/O Mode: Block I/O [ 139.105161][ T6603] vivid-003: Generate RBDS Instead of RDS: false [ 139.107810][ T6603] vivid-003: RDS Reception: true [ 139.112746][ T6603] vivid-003: RDS Program Type: 0 inactive [ 139.115781][ T6603] vivid-003: RDS PS Name: inactive [ 139.118499][ T6603] vivid-003: RDS Radio Text: inactive [ 139.122499][ T6603] vivid-003: RDS Traffic Announcement: false inactive [ 139.129777][ T5357] Bluetooth: hci1: command tx timeout [ 139.149247][ T6603] vivid-003: RDS Traffic Program: false inactive [ 139.152523][ T6603] vivid-003: RDS Music: false inactive [ 139.159432][ T6603] vivid-003: ================== END STATUS ================== [ 140.954422][ T6631] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 140.957571][ T6631] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 140.961577][ T6631] vhci_hcd vhci_hcd.0: Device attached [ 141.201528][ T5357] Bluetooth: hci1: command tx timeout [ 141.240157][ T57] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 141.295531][ T980] usb 14-1: SetAddress Request (2) to port 0 [ 141.298835][ T980] usb 14-1: new SuperSpeed USB device number 2 using vhci_hcd [ 141.430965][ T57] usb 5-1: Using ep0 maxpacket: 8 [ 141.438500][ T57] usb 5-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=62.0d [ 141.442907][ T57] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.446430][ T57] usb 5-1: Product: syz [ 141.448362][ T57] usb 5-1: Manufacturer: syz [ 141.456614][ T57] usb 5-1: SerialNumber: syz [ 141.470374][ T57] usb 5-1: config 0 descriptor?? [ 141.490674][ T57] cytherm 5-1:0.0: Cypress thermometer device now attached [ 141.605170][ T39] audit: type=1326 audit(1722546266.669:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6640 comm="syz.1.371" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f1f579 code=0x0 [ 141.722873][ T6632] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 1 [ 141.728270][ T13] vhci_hcd: stop threads [ 141.730981][ T13] vhci_hcd: release socket [ 141.734075][ T13] vhci_hcd: disconnect device [ 142.609296][ T6664] can0: slcan on ttyprintk. [ 142.955700][ T8] usb 5-1: USB disconnect, device number 4 [ 142.958965][ T8] cytherm 5-1:0.0: Cypress thermometer now disconnected [ 143.279477][ T5357] Bluetooth: hci1: command tx timeout [ 143.673956][ T6663] can0 (unregistered): slcan off ttyprintk. [ 143.818510][ T8] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 144.013372][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.018932][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.042509][ T8] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 144.061019][ T8] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 144.075943][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.084215][ T8] usb 5-1: config 0 descriptor?? [ 144.543913][ T6687] random: crng reseeded on system resumption [ 144.645182][ T8] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 144.648679][ T8] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 144.653106][ T8] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 144.663902][ T8] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 144.847225][ T8] usb 5-1: USB disconnect, device number 5 [ 145.105327][ T6724] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 145.108685][ T6724] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 145.114037][ T6724] vhci_hcd vhci_hcd.0: Device attached [ 145.429527][ T5265] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 145.455234][ T25] usb 18-1: SetAddress Request (6) to port 0 [ 145.458366][ T25] usb 18-1: new SuperSpeed USB device number 6 using vhci_hcd [ 145.545651][ T6732] smc: net device lo applied user defined pnetid SYZ2 [ 145.572486][ T6734] can0: slcan on ttyprintk. [ 145.629764][ T5265] usb 7-1: Using ep0 maxpacket: 8 [ 145.643060][ T5265] usb 7-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=62.0d [ 145.648876][ T5265] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.658768][ T5265] usb 7-1: Product: syz [ 145.662207][ T5265] usb 7-1: Manufacturer: syz [ 145.664030][ T5265] usb 7-1: SerialNumber: syz [ 145.678974][ T5265] usb 7-1: config 0 descriptor?? [ 145.684704][ T5265] cytherm 7-1:0.0: Cypress thermometer device now attached [ 145.875117][ T6743] random: crng reseeded on system resumption [ 145.892818][ T6743] Restarting kernel threads ... done. [ 146.052911][ T6725] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 2 [ 146.056740][ T1204] vhci_hcd: stop threads [ 146.069233][ T1204] vhci_hcd: release socket [ 146.071650][ T1204] vhci_hcd: disconnect device [ 146.393319][ T980] usb 14-1: device descriptor read/8, error -110 [ 146.549668][ T6733] can0 (unregistered): slcan off ttyprintk. [ 146.854805][ T980] usb usb14-port1: attempt power cycle [ 146.869762][ T66] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 146.877229][ T66] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 146.889798][ T66] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 146.895269][ T66] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 146.900915][ T66] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 146.904455][ T66] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 146.973253][ T1995] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 147.117025][ T6765] chnl_net:caif_netlink_parms(): no params data found [ 147.117133][ T5411] usb 7-1: USB disconnect, device number 5 [ 147.123002][ T5411] cytherm 7-1:0.0: Cypress thermometer now disconnected [ 147.169708][ T1995] usb 5-1: Using ep0 maxpacket: 8 [ 147.182773][ T1995] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 147.186512][ T1995] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 147.191596][ T1995] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 147.196141][ T1995] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 147.200791][ T1995] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 147.206118][ T1995] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 147.229478][ T1995] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.350395][ T6765] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.353213][ T6765] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.356619][ T6765] bridge_slave_0: entered allmulticast mode [ 147.361661][ T6765] bridge_slave_0: entered promiscuous mode [ 147.370192][ T6765] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.373733][ T6765] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.376619][ T6765] bridge_slave_1: entered allmulticast mode [ 147.386749][ T6765] bridge_slave_1: entered promiscuous mode [ 147.451631][ T6765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.458003][ T1995] usb 5-1: usb_control_msg returned -32 [ 147.460994][ T6765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.465742][ T1995] usbtmc 5-1:16.0: can't read capabilities [ 147.510742][ T980] usb usb14-port1: unable to enumerate USB device [ 147.538534][ T6765] team0: Port device team_slave_0 added [ 147.543443][ T6765] team0: Port device team_slave_1 added [ 147.569491][ T56] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 147.616404][ T6765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.619429][ T6765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.630538][ T6765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.637138][ T6765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.640374][ T6765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.651268][ T6765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.726748][ T6765] hsr_slave_0: entered promiscuous mode [ 147.736042][ T6765] hsr_slave_1: entered promiscuous mode [ 147.744071][ T6765] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 147.747516][ T6765] Cannot create hsr debugfs directory [ 147.769946][ T56] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.779743][ T56] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.789396][ T56] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 147.795132][ T56] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 147.807690][ T56] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.820223][ T56] usb 6-1: config 0 descriptor?? [ 147.956311][ T6765] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.961191][ T6765] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.086792][ T6765] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 148.091923][ T6765] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.183666][ T6765] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 148.189469][ T6765] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.250433][ T6793] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 148.266167][ T6777] random: crng reseeded on system resumption [ 148.307586][ T6765] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 148.312551][ T6765] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.347733][ T56] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 148.351483][ T56] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 148.355549][ T56] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 148.366364][ T56] plantronics 0003:047F:FFFF.0008: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 148.401735][ T58] usb 5-1: USB disconnect, device number 6 [ 148.506053][ T6765] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 148.532970][ T6765] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 148.547893][ T6765] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 148.571166][ T1428] usb 6-1: USB disconnect, device number 2 [ 148.577654][ T6765] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 148.688135][ T6765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.704841][ T6765] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.716926][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.720097][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.741286][ T5411] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.744014][ T5411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.918906][ T6765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.959526][ T5357] Bluetooth: hci5: command tx timeout [ 148.977185][ T6765] veth0_vlan: entered promiscuous mode [ 148.989272][ T6765] veth1_vlan: entered promiscuous mode [ 149.020741][ T6765] veth0_macvtap: entered promiscuous mode [ 149.036047][ T6765] veth1_macvtap: entered promiscuous mode [ 149.054191][ T6765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.058880][ T6765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.062971][ T6765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.067700][ T6765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.072576][ T6765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.076703][ T6765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.089440][ T6765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.093783][ T6765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.105131][ T6765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.124964][ T6765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.131931][ T6765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.141154][ T6765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.145342][ T6765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.149247][ T6765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.157030][ T6765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.161822][ T6765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.166031][ T6765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.170677][ T6765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.174946][ T6765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.178744][ T6765] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.183095][ T6765] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.189064][ T6765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.195974][ T6765] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.204583][ T6765] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.214540][ T6765] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.218647][ T6765] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.403972][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.412521][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.511226][ T1204] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.523546][ T1204] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.554747][ T6814] netlink: 4 bytes leftover after parsing attributes in process `syz.0.414'. [ 149.559265][ T6814] bridge_slave_1: left allmulticast mode [ 149.569791][ T6814] bridge_slave_1: left promiscuous mode [ 149.573923][ T6814] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.690316][ T6814] bridge_slave_0: left allmulticast mode [ 149.692840][ T6814] bridge_slave_0: left promiscuous mode [ 149.698689][ T6814] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.143575][ T6826] overlayfs: workdir and upperdir must reside under the same mount [ 150.549872][ T25] usb 18-1: device descriptor read/8, error -110 [ 150.604269][ T58] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 150.779764][ T58] usb 5-1: Using ep0 maxpacket: 8 [ 150.785525][ T58] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 150.790431][ T58] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 150.795068][ T58] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 150.799106][ T58] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 150.803612][ T58] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 150.808896][ T58] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 150.813290][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.975637][ T25] usb usb18-port1: attempt power cycle [ 151.030493][ T5357] Bluetooth: hci5: command tx timeout [ 151.053624][ T58] usb 5-1: usb_control_msg returned -32 [ 151.056335][ T58] usbtmc 5-1:16.0: can't read capabilities [ 151.680616][ T25] usb usb18-port1: unable to enumerate USB device [ 151.771950][ T6853] overlayfs: workdir and upperdir must reside under the same mount [ 151.832364][ T6854] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 151.848454][ T6857] syz.1.427[6857] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 151.848604][ T6857] syz.1.427[6857] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 151.889208][ T6857] hub 6-0:1.0: USB hub found [ 151.897820][ T6857] hub 6-0:1.0: 1 port detected [ 151.991751][ T5393] usb 5-1: USB disconnect, device number 7 [ 152.027787][ T6861] netlink: 32 bytes leftover after parsing attributes in process `syz.1.429'. [ 152.028743][ T6859] smc: net device lo applied user defined pnetid SYZ2 [ 152.575033][ T6881] syz.0.438[6881] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 152.575185][ T6881] syz.0.438[6881] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 152.623828][ T6881] hub 6-0:1.0: USB hub found [ 152.631469][ T6881] hub 6-0:1.0: 1 port detected [ 153.109970][ T5357] Bluetooth: hci5: command tx timeout [ 153.138576][ T6899] vivid-001: ================= START STATUS ================= [ 153.142947][ T6899] vivid-001: Radio HW Seek Mode: Bounded [ 153.146495][ T6899] vivid-001: Radio Programmable HW Seek: false [ 153.155930][ T6899] vivid-001: RDS Rx I/O Mode: Block I/O [ 153.161334][ T6899] vivid-001: Generate RBDS Instead of RDS: false [ 153.166244][ T6899] vivid-001: RDS Reception: true [ 153.171418][ T6899] vivid-001: RDS Program Type: 0 inactive [ 153.175049][ T6899] vivid-001: RDS PS Name: inactive [ 153.177920][ T6899] vivid-001: RDS Radio Text: inactive [ 153.186892][ T6899] vivid-001: RDS Traffic Announcement: false inactive [ 153.194721][ T6899] vivid-001: RDS Traffic Program: false inactive [ 153.197803][ T6899] vivid-001: RDS Music: false inactive [ 153.200542][ T6899] vivid-001: ================== END STATUS ================== [ 153.360791][ T6905] netlink: 4 bytes leftover after parsing attributes in process `syz.1.446'. [ 153.364518][ T6905] bridge_slave_1: left allmulticast mode [ 153.367465][ T6905] bridge_slave_1: left promiscuous mode [ 153.370171][ T6905] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.412009][ T6905] bridge_slave_0: left allmulticast mode [ 153.414651][ T6905] bridge_slave_0: left promiscuous mode [ 153.417321][ T6905] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.843795][ T6915] syz.1.450[6915] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 153.843950][ T6915] syz.1.450[6915] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 153.910563][ T6915] hub 6-0:1.0: USB hub found [ 153.919005][ T6915] hub 6-0:1.0: 1 port detected [ 154.313443][ T6920] kvm: pic: non byte read [ 154.317694][ T6920] kvm: pic: level sensitive irq not supported [ 154.318110][ T6920] kvm: pic: non byte read [ 154.870622][ T58] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 155.059588][ T58] usb 6-1: Using ep0 maxpacket: 32 [ 155.064763][ T58] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 155.068806][ T58] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 155.077511][ T58] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 155.084704][ T58] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.088296][ T58] usb 6-1: Product: syz [ 155.093251][ T58] usb 6-1: Manufacturer: syz [ 155.095774][ T58] usb 6-1: SerialNumber: syz [ 155.189462][ T5357] Bluetooth: hci5: command tx timeout [ 155.330026][ T6931] netlink: 4 bytes leftover after parsing attributes in process `syz.1.456'. [ 155.335846][ T6931] netlink: 4 bytes leftover after parsing attributes in process `syz.1.456'. [ 155.344509][ T6931] netlink: 4 bytes leftover after parsing attributes in process `syz.1.456'. [ 155.570050][ T58] cdc_ncm 6-1:1.0: bind() failure [ 155.577415][ T58] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 155.596775][ T58] cdc_ncm 6-1:1.1: bind() failure [ 155.621058][ T58] usb 6-1: USB disconnect, device number 3 [ 155.775715][ T6940] tmpfs: Bad value for 'mpol' [ 155.855887][ T6942] overlayfs: workdir and upperdir must reside under the same mount [ 156.093622][ T6947] syz.3.461[6947] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 156.093754][ T6947] syz.3.461[6947] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 156.134240][ T6947] hub 6-0:1.0: USB hub found [ 156.140551][ T6947] hub 6-0:1.0: 1 port detected [ 156.530222][ T6955] random: crng reseeded on system resumption [ 156.552775][ T6955] Restarting kernel threads ... done. [ 156.579470][ T57] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 156.769610][ T57] usb 6-1: Using ep0 maxpacket: 8 [ 156.781347][ T57] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 156.784674][ T57] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 156.792444][ T57] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 156.807134][ T57] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 156.816991][ T57] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 156.827621][ T57] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 156.832152][ T57] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 156.837425][ T57] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 156.843114][ T57] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 156.849023][ T57] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 156.855944][ T57] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 156.860262][ T57] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 156.865529][ T57] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 156.872643][ T57] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 156.878429][ T57] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 156.888172][ T57] usb 6-1: string descriptor 0 read error: -22 [ 156.891355][ T57] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 156.895779][ T57] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.907262][ T57] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 157.299940][ T5411] usb 6-1: USB disconnect, device number 4 [ 157.440304][ T6973] netlink: 4 bytes leftover after parsing attributes in process `syz.0.470'. [ 157.546752][ T6975] kvm: kvm [6974]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x4000005c) = 0x0 [ 158.311092][ T6997] vivid-002: ================= START STATUS ================= [ 158.322365][ T6997] vivid-002: Radio HW Seek Mode: Bounded [ 158.325036][ T6997] vivid-002: Radio Programmable HW Seek: false [ 158.327707][ T6997] vivid-002: RDS Rx I/O Mode: Block I/O [ 158.331457][ T6997] vivid-002: Generate RBDS Instead of RDS: false [ 158.335661][ T6997] vivid-002: RDS Reception: true [ 158.342209][ T6997] vivid-002: RDS Program Type: 0 inactive [ 158.345631][ T6997] vivid-002: RDS PS Name: inactive [ 158.348877][ T6997] vivid-002: RDS Radio Text: inactive [ 158.355445][ T6997] vivid-002: RDS Traffic Announcement: false inactive [ 158.359686][ T6997] vivid-002: RDS Traffic Program: false inactive [ 158.372851][ T6997] vivid-002: RDS Music: false inactive [ 158.384072][ T6997] vivid-002: ================== END STATUS ================== [ 158.464376][ T6990] random: crng reseeded on system resumption [ 158.493765][ T6990] Restarting kernel threads ... done. [ 158.518783][ T66] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 158.531329][ T66] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 158.535357][ T66] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 158.575938][ T66] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 158.584153][ T66] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 158.591892][ T66] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 158.980744][ T7002] chnl_net:caif_netlink_parms(): no params data found [ 159.257289][ T7002] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.260546][ T7002] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.264415][ T7002] bridge_slave_0: entered allmulticast mode [ 159.268700][ T7002] bridge_slave_0: entered promiscuous mode [ 159.277820][ T7002] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.283714][ T7002] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.288077][ T7002] bridge_slave_1: entered allmulticast mode [ 159.295673][ T7002] bridge_slave_1: entered promiscuous mode [ 159.438530][ T7002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.445831][ T7002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.519500][ T7036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.482'. [ 159.555799][ T7002] team0: Port device team_slave_0 added [ 159.560568][ T7031] kvm: kvm [7030]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x4000005c) = 0x0 [ 159.561532][ T7002] team0: Port device team_slave_1 added [ 159.645934][ T7002] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.649165][ T7002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.664119][ T7002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.674363][ T7002] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.677706][ T7002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.691654][ T7002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.837804][ T7002] hsr_slave_0: entered promiscuous mode [ 159.850510][ T7002] hsr_slave_1: entered promiscuous mode [ 159.854183][ T7002] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 159.857483][ T7002] Cannot create hsr debugfs directory [ 159.860914][ T7041] cgroup: noprefix used incorrectly [ 160.055021][ T5357] Bluetooth: hci1: ACL packet for unknown connection handle 2248 [ 160.352533][ T7002] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.515817][ T7002] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.629044][ T7002] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.639849][ T5357] Bluetooth: hci6: command tx timeout [ 160.773637][ T7002] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.952558][ T7002] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 160.968085][ T7002] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 160.981970][ T1428] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 161.006211][ T7002] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 161.020990][ T7002] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 161.134210][ T7002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.161726][ T7002] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.174540][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.177693][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.179765][ T1428] usb 6-1: Using ep0 maxpacket: 32 [ 161.199158][ T5411] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.202889][ T5411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.202931][ T1428] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 161.216967][ T1428] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 161.225372][ T1428] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 161.230556][ T1428] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.234094][ T1428] usb 6-1: Product: syz [ 161.235783][ T1428] usb 6-1: Manufacturer: syz [ 161.237702][ T1428] usb 6-1: SerialNumber: syz [ 161.295524][ T7002] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 161.524428][ T7053] netlink: 4 bytes leftover after parsing attributes in process `syz.1.489'. [ 161.534271][ T7053] netlink: 4 bytes leftover after parsing attributes in process `syz.1.489'. [ 161.541987][ T7053] netlink: 4 bytes leftover after parsing attributes in process `syz.1.489'. [ 161.606157][ T7002] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.692797][ T7069] netlink: 4 bytes leftover after parsing attributes in process `syz.0.493'. [ 161.704702][ T5357] Bluetooth: hci1: unexpected event for opcode 0x202d [ 161.711150][ T7002] veth0_vlan: entered promiscuous mode [ 161.727383][ T7002] veth1_vlan: entered promiscuous mode [ 161.769063][ T1428] cdc_ncm 6-1:1.0: bind() failure [ 161.770827][ T7002] veth0_macvtap: entered promiscuous mode [ 161.781713][ T1428] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 161.783679][ T7002] veth1_macvtap: entered promiscuous mode [ 161.797521][ T1428] cdc_ncm 6-1:1.1: bind() failure [ 161.809882][ T1428] usb 6-1: USB disconnect, device number 5 [ 161.817725][ T7002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.825014][ T7002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.832108][ T7002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.837284][ T7002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.842800][ T7002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.847707][ T7002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.852231][ T7002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.857017][ T7002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.862130][ T7002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.867181][ T7002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.872600][ T7002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.877262][ T7002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.884281][ T7002] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.921680][ T7002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.928646][ T7002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.940181][ T7002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.946507][ T7002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.965790][ T7002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.977365][ T7002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.989166][ T7002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.993301][ T7002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.997021][ T7002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.003842][ T7002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.008104][ T7002] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.017644][ T7002] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.027352][ T7002] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.037208][ T7002] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.043020][ T7002] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.062027][ T7002] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.065378][ T7002] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.258086][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.269682][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.312003][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.315206][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.713927][ T66] Bluetooth: hci6: command tx timeout [ 163.132883][ T7096] netlink: 4 bytes leftover after parsing attributes in process `syz.1.502'. [ 163.159765][ T7099] netlink: 23 bytes leftover after parsing attributes in process `syz.0.503'. [ 163.365185][ T7102] xt_CT: You must specify a L4 protocol and not use inversions on it [ 163.839434][ T56] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 164.019515][ T56] usb 5-1: Using ep0 maxpacket: 32 [ 164.027325][ T56] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 164.031945][ T56] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 164.043006][ T56] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 164.048008][ T56] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.052315][ T56] usb 5-1: Product: syz [ 164.055201][ T56] usb 5-1: Manufacturer: syz [ 164.058460][ T56] usb 5-1: SerialNumber: syz [ 164.362696][ T7109] netlink: 4 bytes leftover after parsing attributes in process `syz.0.506'. [ 164.381777][ T7109] netlink: 4 bytes leftover after parsing attributes in process `syz.0.506'. [ 164.400851][ T7109] netlink: 4 bytes leftover after parsing attributes in process `syz.0.506'. [ 164.630031][ T56] cdc_ncm 5-1:1.0: bind() failure [ 164.637968][ T56] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 164.641332][ T56] cdc_ncm 5-1:1.1: bind() failure [ 164.651386][ T56] usb 5-1: USB disconnect, device number 8 [ 164.789956][ T66] Bluetooth: hci6: command tx timeout [ 165.354261][ T7126] netlink: 4 bytes leftover after parsing attributes in process `syz.2.513'. [ 165.751560][ T66] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 165.755640][ T66] Bluetooth: hci1: Injecting HCI hardware error event [ 165.760600][ T5357] Bluetooth: hci1: hardware error 0x00 [ 165.880183][ T35] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 166.050278][ T39] audit: type=1326 audit(1722546291.119:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7143 comm="syz.1.521" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f1f579 code=0x0 [ 166.094341][ T35] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 166.099119][ T35] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.104722][ T35] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.109220][ T35] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 166.119012][ T35] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 166.124379][ T35] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 166.127793][ T35] usb 5-1: Manufacturer: syz [ 166.133679][ T35] usb 5-1: config 0 descriptor?? [ 166.592053][ T35] appleir 0003:05AC:8243.0009: unknown main item tag 0x0 [ 166.596893][ T35] appleir 0003:05AC:8243.0009: No inputs registered, leaving [ 166.604644][ T35] appleir 0003:05AC:8243.0009: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 166.810507][ T7166] netlink: 9412 bytes leftover after parsing attributes in process `syz.2.530'. [ 167.190340][ T66] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 167.190438][ T66] Bluetooth: hci4: Injecting HCI hardware error event [ 167.192191][ T66] Bluetooth: hci4: hardware error 0x00 [ 167.418204][ T7182] block device autoloading is deprecated and will be removed. [ 167.634910][ T7187] vivid-003: ================= START STATUS ================= [ 167.635035][ T7187] vivid-003: Radio HW Seek Mode: Bounded [ 167.635088][ T7187] vivid-003: Radio Programmable HW Seek: false [ 167.639421][ T7187] vivid-003: RDS Rx I/O Mode: Block I/O [ 167.639449][ T7187] vivid-003: Generate RBDS Instead of RDS: false [ 167.639471][ T7187] vivid-003: RDS Reception: true [ 167.639930][ T7187] vivid-003: RDS Program Type: 0 inactive [ 167.639959][ T7187] vivid-003: RDS PS Name: inactive [ 167.640097][ T7187] vivid-003: RDS Radio Text: inactive [ 167.640122][ T7187] vivid-003: RDS Traffic Announcement: false inactive [ 167.640148][ T7187] vivid-003: RDS Traffic Program: false inactive [ 167.640267][ T7187] vivid-003: RDS Music: false inactive [ 167.640294][ T7187] vivid-003: ================== END STATUS ================== [ 167.843451][ T5357] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 168.020127][ T5393] usb 5-1: reset high-speed USB device number 9 using dummy_hcd [ 168.136303][ T7213] netlink: 4 bytes leftover after parsing attributes in process `syz.3.548'. [ 168.189675][ T5393] usb 5-1: device descriptor read/64, error -32 [ 168.374751][ T7221] netlink: 9412 bytes leftover after parsing attributes in process `syz.3.549'. [ 168.469655][ T5393] usb 5-1: reset high-speed USB device number 9 using dummy_hcd [ 168.639617][ T5393] usb 5-1: device descriptor read/64, error -32 [ 169.269762][ T66] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 169.432523][ T66] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 169.437105][ T66] Bluetooth: hci6: Injecting HCI hardware error event [ 169.442275][ T5357] Bluetooth: hci6: hardware error 0x00 [ 169.682676][ T8] usb 5-1: USB disconnect, device number 9 [ 169.863227][ T7264] xt_CT: You must specify a L4 protocol and not use inversions on it [ 170.280110][ T8] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 170.454499][ T7278] sock: sock_timestamping_bind_phc: sock not bind to device [ 170.489458][ T6436] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 170.494547][ T8] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 170.499209][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.542872][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.547108][ T8] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 170.570107][ T8] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 170.577593][ T8] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 170.587377][ T7280] Illegal XDP return value 4294967274 on prog (id 158) dev N/A, expect packet loss! [ 170.587688][ T8] usb 5-1: Manufacturer: syz [ 170.613755][ T8] usb 5-1: config 0 descriptor?? [ 170.695044][ T6436] usb 7-1: Using ep0 maxpacket: 32 [ 170.702112][ T6436] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 170.706487][ T6436] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 170.721655][ T6436] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 170.728654][ T6436] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.735493][ T6436] usb 7-1: Product: syz [ 170.737073][ T6436] usb 7-1: Manufacturer: syz [ 170.738682][ T6436] usb 7-1: SerialNumber: syz [ 171.017964][ T7273] netlink: 4 bytes leftover after parsing attributes in process `syz.2.569'. [ 171.042845][ T7273] netlink: 4 bytes leftover after parsing attributes in process `syz.2.569'. [ 171.053061][ T7273] netlink: 4 bytes leftover after parsing attributes in process `syz.2.569'. [ 171.272647][ T6436] cdc_ncm 7-1:1.0: bind() failure [ 171.278622][ T6436] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 171.281816][ T6436] cdc_ncm 7-1:1.1: bind() failure [ 171.286599][ T6436] usb 7-1: USB disconnect, device number 6 [ 171.379775][ T8] appleir 0003:05AC:8243.000A: unknown main item tag 0x0 [ 171.383728][ T8] appleir 0003:05AC:8243.000A: No inputs registered, leaving [ 171.402237][ T8] appleir 0003:05AC:8243.000A: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 171.520240][ T5357] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 172.571167][ T7326] can0: slcan on pts0. [ 172.611619][ T7328] serio: Serial port ptm1 [ 172.691031][ T7326] can0 (unregistered): slcan off pts0. [ 173.597225][ T5392] usb 5-1: USB disconnect, device number 10 [ 173.628404][ T7364] sock: sock_timestamping_bind_phc: sock not bind to device [ 173.678525][ T66] Bluetooth: hci7: sending frame failed (-49) [ 173.683359][ T5357] Bluetooth: hci7: Opcode 0x1003 failed: -49 [ 174.119954][ T8] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 174.322604][ T8] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 174.327060][ T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.337495][ T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.342072][ T8] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 174.368330][ T8] usb 7-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 174.373552][ T8] usb 7-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 174.377021][ T8] usb 7-1: Manufacturer: syz [ 174.381942][ T8] usb 7-1: config 0 descriptor?? [ 174.657018][ T11] Bluetooth: hci7: Frame reassembly failed (-84) [ 174.708708][ T66] Bluetooth: hci7: Received unexpected HCI Event 0x00 [ 174.771600][ T7403] serio: Serial port ptm1 [ 174.923967][ T8] appleir 0003:05AC:8243.000B: unknown main item tag 0x0 [ 174.931569][ T8] appleir 0003:05AC:8243.000B: No inputs registered, leaving [ 174.940680][ T8] appleir 0003:05AC:8243.000B: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 176.312742][ T7422] netlink: 12 bytes leftover after parsing attributes in process `syz.0.618'. [ 176.418680][ T7423] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.426685][ T7423] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.432405][ T7423] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.436432][ T7423] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 176.719620][ T66] Bluetooth: hci7: command 0x1003 tx timeout [ 176.719665][ T5357] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 177.000680][ T5393] usb 7-1: USB disconnect, device number 7 [ 177.457379][ T7436] vivid-002: ================= START STATUS ================= [ 177.460596][ T7436] vivid-002: Radio HW Seek Mode: Bounded [ 177.478543][ T7436] vivid-002: Radio Programmable HW Seek: false [ 177.481942][ T7436] vivid-002: RDS Rx I/O Mode: Block I/O [ 177.484352][ T7436] vivid-002: Generate RBDS Instead of RDS: false [ 177.509264][ T7436] vivid-002: RDS Reception: true [ 177.517428][ T7436] vivid-002: RDS Program Type: 0 inactive [ 177.536108][ T7436] vivid-002: RDS PS Name: inactive [ 177.544837][ T7436] vivid-002: RDS Radio Text: inactive [ 177.548702][ T7436] vivid-002: RDS Traffic Announcement: false inactive [ 177.554376][ T7436] vivid-002: RDS Traffic Program: false inactive [ 177.557152][ T7436] vivid-002: RDS Music: false inactive [ 177.560186][ T7436] vivid-002: ================== END STATUS ================== [ 177.594892][ T39] audit: type=1326 audit(1722546302.659:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7454 comm="syz.1.627" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f1f579 code=0x7ffc0000 [ 177.604620][ T39] audit: type=1326 audit(1722546302.659:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7454 comm="syz.1.627" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f1f579 code=0x7ffc0000 [ 177.618206][ T39] audit: type=1326 audit(1722546302.669:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7454 comm="syz.1.627" exe="/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f1f579 code=0x7ffc0000 [ 177.621614][ T66] Bluetooth: hci7: Received unexpected HCI Event 0x00 [ 177.628797][ T39] audit: type=1326 audit(1722546302.669:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7454 comm="syz.1.627" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f1f579 code=0x7ffc0000 [ 177.641008][ T39] audit: type=1326 audit(1722546302.669:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7454 comm="syz.1.627" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f1f579 code=0x7ffc0000 [ 177.652174][ T39] audit: type=1326 audit(1722546302.669:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7454 comm="syz.1.627" exe="/syz-executor" sig=0 arch=40000003 syscall=245 compat=1 ip=0xf7f1f579 code=0x7ffc0000 [ 177.661584][ T39] audit: type=1326 audit(1722546302.669:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7454 comm="syz.1.627" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f1f579 code=0x7ffc0000 [ 177.671814][ T39] audit: type=1326 audit(1722546302.669:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7454 comm="syz.1.627" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f1f579 code=0x7ffc0000 [ 177.688781][ T39] audit: type=1326 audit(1722546302.669:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7454 comm="syz.1.627" exe="/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f1f579 code=0x7ffc0000 [ 177.700974][ T39] audit: type=1326 audit(1722546302.669:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7454 comm="syz.1.627" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f1f579 code=0x7ffc0000 [ 178.282154][ T7467] netlink: 9412 bytes leftover after parsing attributes in process `syz.0.632'. [ 179.356666][ T7485] netlink: 'syz.3.639': attribute type 4 has an invalid length. [ 179.398609][ T7485] netlink: 'syz.3.639': attribute type 4 has an invalid length. [ 179.431052][ T7485] syz.3.639 (7485) used greatest stack depth: 21408 bytes left [ 179.530742][ T7491] netlink: 'syz.0.642': attribute type 4 has an invalid length. [ 179.669506][ T5357] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 179.670628][ T66] Bluetooth: hci7: command 0x1003 tx timeout [ 180.328230][ T1100] Bluetooth: hci7: Frame reassembly failed (-84) [ 180.332379][ T1100] Bluetooth: hci7: Frame reassembly failed (-84) [ 180.376526][ T66] Bluetooth: hci7: Received unexpected HCI Event 0x00 [ 182.264301][ T7546] Bluetooth: MGMT ver 1.23 [ 182.389646][ T5357] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 182.390974][ T66] Bluetooth: hci7: command 0x1003 tx timeout [ 184.515129][ T7580] serio: Serial port ptm0 [ 185.494917][ T39] kauditd_printk_skb: 49 callbacks suppressed [ 185.494926][ T39] audit: type=1800 audit(1722546310.559:169): pid=7592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.676" name="/" dev="fuse" ino=1 res=0 errno=0 [ 185.836202][ T7608] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 186.400916][ T66] Bluetooth: hci2: command 0x0406 tx timeout [ 186.402950][ T5358] Bluetooth: hci0: command 0x0406 tx timeout [ 186.525404][ T7620] serio: Serial port ptm0 [ 190.514646][ T7662] serio: Serial port ptm0 [ 191.533380][ T7670] netlink: 12 bytes leftover after parsing attributes in process `syz.0.704'. [ 192.660761][ T5358] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 192.667955][ T5358] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 192.673140][ T5358] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 192.678853][ T5358] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 192.683890][ T5358] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 192.687586][ T5358] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 192.995579][ T7685] chnl_net:caif_netlink_parms(): no params data found [ 193.322048][ T7685] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.325168][ T7685] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.328276][ T7685] bridge_slave_0: entered allmulticast mode [ 193.352373][ T7685] bridge_slave_0: entered promiscuous mode [ 193.358073][ T7685] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.362818][ T7685] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.366182][ T7685] bridge_slave_1: entered allmulticast mode [ 193.370804][ T7685] bridge_slave_1: entered promiscuous mode [ 193.432342][ T7685] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.441276][ T7685] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.566049][ T7685] team0: Port device team_slave_0 added [ 193.574344][ T7685] team0: Port device team_slave_1 added [ 193.649660][ T7685] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.652919][ T7685] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.664892][ T7685] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.672219][ T7685] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.675256][ T7685] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.687227][ T7685] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.763888][ T7685] hsr_slave_0: entered promiscuous mode [ 193.789883][ T7685] hsr_slave_1: entered promiscuous mode [ 193.793424][ T7685] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 193.805685][ T7685] Cannot create hsr debugfs directory [ 194.036641][ T7685] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.053994][ T7719] 9pnet: Tag 65535 still in use [ 194.057372][ C0] ------------[ cut here ]------------ [ 194.060369][ C0] refcount_t: underflow; use-after-free. [ 194.063000][ C0] WARNING: CPU: 0 PID: 4800 at lib/refcount.c:28 refcount_warn_saturate+0x14a/0x210 [ 194.067610][ C0] Modules linked in: [ 194.069093][ C0] CPU: 0 UID: 0 PID: 4800 Comm: kworker/0:2 Not tainted 6.11.0-rc1-syzkaller-00154-gc0ecd6388360 #0 [ 194.074560][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 194.079090][ C0] Workqueue: events linkwatch_event [ 194.081324][ C0] RIP: 0010:refcount_warn_saturate+0x14a/0x210 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 194.084542][ C0] Code: ff 89 de e8 b8 54 0c fd 84 db 0f 85 66 ff ff ff e8 0b 5a 0c fd c6 05 83 1e 7b 0b 01 90 48 c7 c7 e0 e6 af 8b e8 b7 0a cf fc 90 <0f> 0b 90 90 e9 43 ff ff ff e8 e8 59 0c fd 0f b6 1d 5e 1e 7b 0b 31 [ 194.107326][ C0] RSP: 0018:ffffc90000007d90 EFLAGS: 00010082 [ 194.115908][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff814dc409 [ 194.119405][ C0] RDX: ffff88801e440000 RSI: ffffffff814dc416 RDI: 0000000000000001 [ 194.122578][ C0] RBP: ffff888011d42778 R08: 0000000000000001 R09: 0000000000000000 [ 194.125653][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 194.128833][ C0] R13: ffff888011d42778 R14: ffff88805964a400 R15: 0000000000000000 [ 194.148446][ C0] FS: 0000000000000000(0000) GS:ffff88802c000000(0000) knlGS:0000000000000000 [ 194.152335][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 194.154644][ C0] CR2: 000000002c309ff8 CR3: 000000001c5ea000 CR4: 0000000000350ef0 [ 194.157857][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 194.161292][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 194.180862][ C0] Call Trace: [ 194.182359][ C0] [ 194.183643][ C0] ? show_regs+0x8c/0xa0 [ 194.185580][ C0] ? __warn+0xe5/0x3c0 [ 194.187463][ C0] ? __wake_up_klogd.part.0+0x99/0xf0 [ 194.189578][ C0] ? refcount_warn_saturate+0x14a/0x210 [ 194.191717][ C0] ? report_bug+0x3c0/0x580 [ 194.193643][ C0] ? handle_bug+0x3d/0x70 [ 194.195081][ C0] ? exc_invalid_op+0x17/0x50 [ 194.197118][ C0] ? asm_exc_invalid_op+0x1a/0x20 [ 194.199341][ C0] ? __warn_printk+0x199/0x350 [ 194.201503][ C0] ? __warn_printk+0x1a6/0x350 [ 194.203630][ C0] ? refcount_warn_saturate+0x14a/0x210 [ 194.206130][ C0] p9_req_put+0x1f4/0x250 [ 194.208080][ C0] req_done+0x1e7/0x2f0 [ 194.210166][ C0] ? __pfx_req_done+0x10/0x10 [ 194.212350][ C0] ? __pfx_req_done+0x10/0x10 [ 194.214178][ C0] vring_interrupt+0x31b/0x400 [ 194.216034][ C0] ? __pfx_vring_interrupt+0x10/0x10 [ 194.218050][ C0] __handle_irq_event_percpu+0x229/0x7c0 [ 194.220253][ C0] handle_irq_event+0xab/0x1e0 [ 194.222067][ C0] handle_edge_irq+0x263/0xd10 [ 194.223936][ C0] __common_interrupt+0xdf/0x250 [ 194.226277][ C0] common_interrupt+0xab/0xd0 [ 194.228328][ C0] [ 194.229515][ C0] [ 194.230656][ C0] asm_common_interrupt+0x26/0x40 [ 194.232634][ C0] RIP: 0010:lock_acquire+0x1f2/0x560 [ 194.234849][ C0] Code: c1 05 0a 45 99 7e 83 f8 01 0f 85 ea 02 00 00 9c 58 f6 c4 02 0f 85 d5 02 00 00 48 85 ed 74 01 fb 48 b8 00 00 00 00 00 fc ff df <48> 01 c3 48 c7 03 00 00 00 00 48 c7 43 08 00 00 00 00 48 8b 84 24 [ 194.242296][ C0] RSP: 0018:ffffc900043bf990 EFLAGS: 00000206 [ 194.244856][ C0] RAX: dffffc0000000000 RBX: 1ffff92000877f34 RCX: 0000000000000001 [ 194.248253][ C0] RDX: 0000000000000001 RSI: ffffffff8b4cd360 RDI: ffffffff8bb04160 [ 194.251587][ C0] RBP: 0000000000000200 R08: 00000000001da588 R09: fffffbfff28e999a [ 194.254683][ C0] R10: ffffffff9474ccd7 R11: 0000000000000031 R12: 0000000000000001 [ 194.257833][ C0] R13: 0000000000000000 R14: ffff8880592b0908 R15: 0000000000000000 [ 194.261260][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 194.263404][ C0] ? dev_reset_queue+0xb9/0x1d0 [ 194.273026][ C0] ? mark_held_locks+0x9f/0xe0 [ 194.275662][ C0] _raw_spin_lock_bh+0x33/0x40 [ 194.278525][ C0] ? dev_reset_queue+0xa9/0x1d0 [ 194.281591][ C0] dev_reset_queue+0xa9/0x1d0 [ 194.284496][ C0] dev_deactivate_many+0x364/0xb20 [ 194.287560][ C0] dev_deactivate+0xf9/0x1c0 [ 194.290425][ C0] ? __pfx_dev_deactivate+0x10/0x10 [ 194.293226][ C0] ? veth_get_iflink+0x11b/0x2c0 [ 194.295554][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 194.298343][ C0] linkwatch_do_dev+0x11e/0x160 [ 194.301583][ C0] __linkwatch_run_queue+0x233/0x690 [ 194.305157][ C0] ? __pfx___linkwatch_run_queue+0x10/0x10 [ 194.309206][ C0] ? __pfx_lock_release+0x10/0x10 [ 194.312617][ C0] linkwatch_event+0x8f/0xc0 [ 194.315414][ C0] ? __pfx_linkwatch_event+0x10/0x10 [ 194.318422][ C0] ? rcu_is_watching+0x12/0xc0 [ 194.320728][ C0] process_one_work+0x958/0x1ad0 [ 194.322979][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 194.325240][ C0] ? __pfx_process_one_work+0x10/0x10 [ 194.327770][ C0] ? assign_work+0x1a0/0x250 [ 194.330006][ C0] worker_thread+0x6c8/0xf20 [ 194.332131][ C0] ? __pfx_worker_thread+0x10/0x10 [ 194.334507][ C0] kthread+0x2c1/0x3a0 [ 194.336453][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 194.339001][ C0] ? __pfx_kthread+0x10/0x10 [ 194.341676][ C0] ret_from_fork+0x45/0x80 [ 194.344189][ C0] ? __pfx_kthread+0x10/0x10 [ 194.347178][ C0] ret_from_fork_asm+0x1a/0x30 [ 194.349927][ C0] [ 194.351361][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 194.355374][ C0] CPU: 0 UID: 0 PID: 4800 Comm: kworker/0:2 Not tainted 6.11.0-rc1-syzkaller-00154-gc0ecd6388360 #0 [ 194.361012][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 194.366184][ C0] Workqueue: events linkwatch_event [ 194.368750][ C0] Call Trace: [ 194.370750][ C0] [ 194.372215][ C0] dump_stack_lvl+0x3d/0x1f0 [ 194.374941][ C0] panic+0x6f5/0x7a0 [ 194.377464][ C0] ? __pfx_panic+0x10/0x10 [ 194.379696][ C0] ? show_trace_log_lvl+0x363/0x500 [ 194.382078][ C0] ? check_panic_on_warn+0x1f/0xb0 [ 194.384483][ C0] ? refcount_warn_saturate+0x14a/0x210 [ 194.386941][ C0] check_panic_on_warn+0xab/0xb0 [ 194.389166][ C0] __warn+0xf1/0x3c0 [ 194.391035][ C0] ? __wake_up_klogd.part.0+0x99/0xf0 [ 194.394017][ C0] ? refcount_warn_saturate+0x14a/0x210 [ 194.397045][ C0] report_bug+0x3c0/0x580 [ 194.399176][ C0] handle_bug+0x3d/0x70 [ 194.401102][ C0] exc_invalid_op+0x17/0x50 [ 194.403357][ C0] asm_exc_invalid_op+0x1a/0x20 [ 194.405910][ C0] RIP: 0010:refcount_warn_saturate+0x14a/0x210 [ 194.409396][ C0] Code: ff 89 de e8 b8 54 0c fd 84 db 0f 85 66 ff ff ff e8 0b 5a 0c fd c6 05 83 1e 7b 0b 01 90 48 c7 c7 e0 e6 af 8b e8 b7 0a cf fc 90 <0f> 0b 90 90 e9 43 ff ff ff e8 e8 59 0c fd 0f b6 1d 5e 1e 7b 0b 31 [ 194.419554][ C0] RSP: 0018:ffffc90000007d90 EFLAGS: 00010082 [ 194.423113][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff814dc409 [ 194.426916][ C0] RDX: ffff88801e440000 RSI: ffffffff814dc416 RDI: 0000000000000001 [ 194.431240][ C0] RBP: ffff888011d42778 R08: 0000000000000001 R09: 0000000000000000 [ 194.436619][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: dffffc0000000000 [ 194.441601][ C0] R13: ffff888011d42778 R14: ffff88805964a400 R15: 0000000000000000 [ 194.446476][ C0] ? __warn_printk+0x199/0x350 [ 194.449382][ C0] ? __warn_printk+0x1a6/0x350 [ 194.452673][ C0] p9_req_put+0x1f4/0x250 [ 194.455417][ C0] req_done+0x1e7/0x2f0 [ 194.458132][ C0] ? __pfx_req_done+0x10/0x10 [ 194.461002][ C0] ? __pfx_req_done+0x10/0x10 [ 194.465205][ C0] vring_interrupt+0x31b/0x400 [ 194.467518][ C0] ? __pfx_vring_interrupt+0x10/0x10 [ 194.470495][ C0] __handle_irq_event_percpu+0x229/0x7c0 [ 194.473907][ C0] handle_irq_event+0xab/0x1e0 [ 194.478088][ C0] handle_edge_irq+0x263/0xd10 [ 194.480807][ C0] __common_interrupt+0xdf/0x250 [ 194.483679][ C0] common_interrupt+0xab/0xd0 [ 194.486657][ C0] [ 194.488442][ C0] [ 194.490210][ C0] asm_common_interrupt+0x26/0x40 [ 194.493258][ C0] RIP: 0010:lock_acquire+0x1f2/0x560 [ 194.496007][ C0] Code: c1 05 0a 45 99 7e 83 f8 01 0f 85 ea 02 00 00 9c 58 f6 c4 02 0f 85 d5 02 00 00 48 85 ed 74 01 fb 48 b8 00 00 00 00 00 fc ff df <48> 01 c3 48 c7 03 00 00 00 00 48 c7 43 08 00 00 00 00 48 8b 84 24 [ 194.506409][ C0] RSP: 0018:ffffc900043bf990 EFLAGS: 00000206 [ 194.510649][ C0] RAX: dffffc0000000000 RBX: 1ffff92000877f34 RCX: 0000000000000001 [ 194.514540][ C0] RDX: 0000000000000001 RSI: ffffffff8b4cd360 RDI: ffffffff8bb04160 [ 194.518335][ C0] RBP: 0000000000000200 R08: 00000000001da588 R09: fffffbfff28e999a [ 194.522802][ C0] R10: ffffffff9474ccd7 R11: 0000000000000031 R12: 0000000000000001 [ 194.527077][ C0] R13: 0000000000000000 R14: ffff8880592b0908 R15: 0000000000000000 [ 194.530895][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 194.533372][ C0] ? dev_reset_queue+0xb9/0x1d0 [ 194.535843][ C0] ? mark_held_locks+0x9f/0xe0 [ 194.538561][ C0] _raw_spin_lock_bh+0x33/0x40 [ 194.541450][ C0] ? dev_reset_queue+0xa9/0x1d0 [ 194.546481][ C0] dev_reset_queue+0xa9/0x1d0 [ 194.549721][ C0] dev_deactivate_many+0x364/0xb20 [ 194.553116][ C0] dev_deactivate+0xf9/0x1c0 [ 194.555470][ C0] ? __pfx_dev_deactivate+0x10/0x10 [ 194.557649][ C0] ? veth_get_iflink+0x11b/0x2c0 [ 194.559601][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 194.563722][ C0] linkwatch_do_dev+0x11e/0x160 [ 194.567060][ C0] __linkwatch_run_queue+0x233/0x690 [ 194.570705][ C0] ? __pfx___linkwatch_run_queue+0x10/0x10 [ 194.574376][ C0] ? __pfx_lock_release+0x10/0x10 [ 194.577902][ C0] linkwatch_event+0x8f/0xc0 [ 194.581288][ C0] ? __pfx_linkwatch_event+0x10/0x10 [ 194.586432][ C0] ? rcu_is_watching+0x12/0xc0 [ 194.588954][ C0] process_one_work+0x958/0x1ad0 [ 194.590923][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 194.593027][ C0] ? __pfx_process_one_work+0x10/0x10 [ 194.595619][ C0] ? assign_work+0x1a0/0x250 [ 194.598026][ C0] worker_thread+0x6c8/0xf20 [ 194.599990][ C0] ? __pfx_worker_thread+0x10/0x10 [ 194.602341][ C0] kthread+0x2c1/0x3a0 [ 194.604153][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 194.607076][ C0] ? __pfx_kthread+0x10/0x10 [ 194.609833][ C0] ret_from_fork+0x45/0x80 [ 194.612182][ C0] ? __pfx_kthread+0x10/0x10 [ 194.614680][ C0] ret_from_fork_asm+0x1a/0x30 [ 194.616973][ C0] [ 194.619151][ C0] Kernel Offset: disabled [ 194.621695][ C0] Rebooting in 86400 seconds.. VM DIAGNOSIS: 21:05:19 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000050 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff84fa2db5 RDI=ffffffff9511a3c0 RBP=ffffffff9511a380 RSP=ffffc90000007770 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000050 R14=ffffffff84fa2d50 R15=0000000000000000 RIP=ffffffff84fa2ddf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c000000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002c309ff8 CR3=000000001c5ea000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000001 Opmask01=0000000000000000 Opmask02=0000000006000000 Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff88e0d630 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6565656565656565 6565656565656565 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffff0000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 21746e6573657270 2079646165726c61 2027727368272074 6e65726170206800 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2174646573657270 2073646165726661 2027727362272074 6465726170206200 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6564616320393720 3330303030303034 3d6820313d20303d 676963202234323d ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2034353420000020 332f223030303020 223720202e202e37 6720222022343220 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2a3e3f3e3d0a0024 676f666865787a2a 6f627e2a6f7c6665 792a6e667f657d2a ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 66666b697973792a 393a3a3a3a3a3a3e 376269786b2a3a37 6d63792a2878657e ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 EAX=8133b919 EBX=ffffffff ECX=ffffffff EDX=813c7249 ESI=ffffffff EDI=ffffffff EBP=f6af4bd0 ESP=ffd86eb0 EIP=f710d5c3 EFL=00000292 [--S-A--] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0023 00000000 ffffffff 00c0fb00 DPL=3 CS32 [-RA] SS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 00000000 ffffffff 00c00000 GS =0063 57ec9440 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 00000000 ffffffff 00c00000 TR =0040 0004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000002c315ff8 CR3=000000006b3a4000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000007000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000016811f RBX=0000000000000002 RCX=ffffffff8b05fa19 RDX=0000000000000000 RSI=ffffffff8b4cd060 RDI=ffffffff8bb04160 RBP=ffffed1002cfb000 RSP=ffffc90000487e08 R8 =0000000000000001 R9 =ffffed1005846fd9 R10=ffff88802c237ecb R11=0000000000000000 R12=0000000000000002 R13=ffff8880167d8000 R14=ffffffff90110158 R15=0000000000000000 RIP=ffffffff8b060e0f RFL=00000242 [---Z---] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c200000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000002d5feff8 CR3=000000005cc36000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000001 RDX=0000000000000001 RSI=ffffffff8b4cd360 RDI=ffffffff8bb04160 RBP=ffff88801d614808 RSP=ffffc90000e0f710 R8 =0000000000000000 R9 =fffffbfff28b66d8 R10=ffffffff945b36c7 R11=0000000000000000 R12=ffff88801d614808 R13=ffff888017af6000 R14=0000000000000000 R15=ffff888017af6000 RIP=ffffffff8b05ecd6 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c300000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f455110c CR3=000000000db7c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3555bfcb5823d716 cd4ac44d075a7076 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 096cf475ec62a476 c9f765027095c102 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 d5f7a4f3ba885790 3e8813b673101cc3 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f6f2e3fdc63c184e 04c76c0667fa8603 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000002a40 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000076707670bb5f 000000007670c75a ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a4d2b86c1e008001 6c0080017670d797 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000096008001 7670ae51c99f5200 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2200800100000000 000000008113ec00 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 45f89bd22cde6b0f e87456cf928306fd ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 17b602c55361f058 602d744d3a84c352 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000