last executing test programs: 1.119968061s ago: executing program 2 (id=2026): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000020000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}}, 0x0) 1.119775293s ago: executing program 2 (id=2027): futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 433.721506ms ago: executing program 3 (id=2054): r0 = socket(0x10, 0x3, 0x6) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r2=>0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4]}}}}]}, 0x88}}, 0x20000000) 327.477905ms ago: executing program 3 (id=2056): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f000057a000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x1c0000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 327.380945ms ago: executing program 1 (id=2057): setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) r0 = socket$inet6(0xa, 0x2, 0x3a) r1 = dup(r0) bind$unix(r1, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) 264.286556ms ago: executing program 1 (id=2059): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000040)={r2, 0xfffd}, 0x8) 263.904722ms ago: executing program 3 (id=2061): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x4, <r2=>r0}) ioctl$DMA_BUF_SET_NAME_A(r2, 0x40086203, 0x0) 263.62215ms ago: executing program 3 (id=2063): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fanotify_mark(0xffffffffffffffff, 0x7a8, 0x0, 0xffffffffffffffff, 0x0) 263.54761ms ago: executing program 1 (id=2064): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x80042, 0x0) r1 = dup(r0) read$msr(r1, &(0x7f00000001c0)=""/134, 0x86) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) 128.591128ms ago: executing program 0 (id=2067): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', <r1=>0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001d00d78d40150724e490000007000000", @ANYRES32=r1, @ANYBLOB="8000a6000a000200d82ea1bc01700000060005"], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 128.389347ms ago: executing program 0 (id=2068): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) setpriority(0x1, 0xffffffffffffffff, 0x1) 127.322818ms ago: executing program 2 (id=2069): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c00)={0x1b, 0x0, 0x0, 0x40000, 0x0, r0, 0xc3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b9af8ff0000000026090200760000007b9af0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb50200000800000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000001400000076000000bf910000000000007b080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 61.496749ms ago: executing program 1 (id=2070): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000f40)=@raw={'raw\x00', 0x3c1, 0x3, 0x258, 0xc4, 0x6c, 0x200, 0xc4, 0x0, 0x1b4, 0x2e8, 0x2e8, 0x1b4, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0xa4, 0xc4}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@local, @local, [], [0xffffffff], 'ip6_vti0\x00', 'veth0\x00', {}, {0xff}, 0x4, 0x0, 0x0, 0x22}, 0x0, 0xa4, 0xcc}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x3}, {0x0, 0x0, 0x4}}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x2b4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 61.324647ms ago: executing program 0 (id=2071): r0 = socket$inet(0xa, 0x801, 0x84) sendto$inet(r0, &(0x7f0000000080)='w', 0x34000, 0x0, &(0x7f00000000c0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 61.104585ms ago: executing program 1 (id=2072): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x18}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x28, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x5da0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 60.896707ms ago: executing program 2 (id=2073): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) 60.693226ms ago: executing program 0 (id=2074): r0 = add_key$user(&(0x7f0000001580), &(0x7f00000015c0)={'syz', 0x1}, &(0x7f0000001600)='2', 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000016c0), &(0x7f0000001700)={'syz', 0x0}, &(0x7f0000001740)="fd66fae0f514a44fd593f5b4e1fac1a62733cf482a170e2ecee013280bb6b2def958182db5a4b87c1af0b59cb1f3a41f0edcff8267847bb5ab8830d073399ed7fcdac0c3467893f1817eed7650d4b2346557b3d6026be0e72a2ff1bf6f9dac765642cca648be8e68e2cdbd1fa0efe634b09945e0ce8dba8601529b5123cf398dd1840287b27c9c42a4aebf88918f7a60584befd2aaa65c8e198abcccca70d19a1db8a17ddc131a3b5677196a16a0b30b681b0dbf2f23268fc6dbe058eca0a046", 0xc0, 0xfffffffffffffffc) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="b1", 0x1, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000001840)={r0, r1, r2}, &(0x7f0000001880)=""/130, 0x82, &(0x7f00000019c0)={&(0x7f0000001940)={'sha512-generic\x00'}}) 34.228305ms ago: executing program 0 (id=2075): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="04"], 0x10) close(r0) 32.15924ms ago: executing program 1 (id=2076): bpf$PROG_LOAD(0x5, 0x0, 0x0) add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$clear(0x3, 0xffffffffffffffff) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVix:De', 0x0) 32.047336ms ago: executing program 2 (id=2077): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r0, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f0000000380)={0xa, 0x0, 0xfffffffd, @loopback}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xe0}}], 0x1, 0xff00) 30.309184ms ago: executing program 3 (id=2083): r0 = socket$kcm(0x21, 0x2, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b70300000000000085000000b000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='rxrpc_local\x00', r1}, 0x10) sendmsg$inet(r0, &(0x7f0000002780)={0x0, 0x0, 0x0}, 0x0) 3.483089ms ago: executing program 0 (id=2078): r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.log\x00', 0xfbb117f1681e82cb, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r1, r0, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x1, 0x0, &(0x7f0000000180)) 3.27504ms ago: executing program 2 (id=2079): r0 = socket$packet(0x11, 0x3, 0x300) bpf$ENABLE_STATS(0x20, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x30, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x8) syz_emit_ethernet(0x19, &(0x7f0000000280)={@broadcast, @broadcast, @val, {@llc_tr={0x11, {@llc={0x0, 0x0, "ff"}}}}}, 0x0) 0s ago: executing program 3 (id=2087): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="04"], 0x10) close(r0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:39867' (ED25519) to the list of known hosts. [ 42.463880][ T5883] cgroup: Unknown subsys name 'net' [ 42.581108][ T5883] cgroup: Unknown subsys name 'cpuset' [ 42.584856][ T5883] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 43.377373][ T5883] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 45.911555][ T5957] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 45.914294][ T5958] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 45.914621][ T5961] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 45.918244][ T5958] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 45.920354][ T5961] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 45.921963][ T5960] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 45.922540][ T5958] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 45.923100][ T5959] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 45.923108][ T5958] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 45.923710][ T5958] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 45.923860][ T5958] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 45.924440][ T5961] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 45.924530][ T5958] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 45.929294][ T5960] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 45.932016][ T5948] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 45.932816][ T5960] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 45.935525][ T5948] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 45.937706][ T5960] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 45.939961][ T5948] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 45.942481][ T5961] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 45.943370][ T5960] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 45.943574][ T5960] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 45.943703][ T5960] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 45.968983][ T5961] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.116347][ T5950] chnl_net:caif_netlink_parms(): no params data found [ 46.122916][ T5944] chnl_net:caif_netlink_parms(): no params data found [ 46.146125][ T5943] chnl_net:caif_netlink_parms(): no params data found [ 46.155132][ T5951] chnl_net:caif_netlink_parms(): no params data found [ 46.276338][ T5944] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.279527][ T5944] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.282395][ T5944] bridge_slave_0: entered allmulticast mode [ 46.285338][ T5944] bridge_slave_0: entered promiscuous mode [ 46.289025][ T5950] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.291173][ T5950] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.293569][ T5950] bridge_slave_0: entered allmulticast mode [ 46.295787][ T5950] bridge_slave_0: entered promiscuous mode [ 46.298251][ T5943] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.300240][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.302182][ T5943] bridge_slave_0: entered allmulticast mode [ 46.304215][ T5943] bridge_slave_0: entered promiscuous mode [ 46.306553][ T5943] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.308464][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.310734][ T5943] bridge_slave_1: entered allmulticast mode [ 46.312851][ T5943] bridge_slave_1: entered promiscuous mode [ 46.324409][ T5944] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.327148][ T5944] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.330030][ T5944] bridge_slave_1: entered allmulticast mode [ 46.332762][ T5944] bridge_slave_1: entered promiscuous mode [ 46.335395][ T5950] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.337539][ T5950] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.339810][ T5950] bridge_slave_1: entered allmulticast mode [ 46.342045][ T5950] bridge_slave_1: entered promiscuous mode [ 46.373132][ T5951] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.375278][ T5951] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.377430][ T5951] bridge_slave_0: entered allmulticast mode [ 46.379814][ T5951] bridge_slave_0: entered promiscuous mode [ 46.399088][ T5943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.402673][ T5951] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.404861][ T5951] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.407014][ T5951] bridge_slave_1: entered allmulticast mode [ 46.409438][ T5951] bridge_slave_1: entered promiscuous mode [ 46.421995][ T5950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.425461][ T5943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.443721][ T5944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.447234][ T5950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.467434][ T5951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.471774][ T5951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.475247][ T5944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.494352][ T5943] team0: Port device team_slave_0 added [ 46.519646][ T5950] team0: Port device team_slave_0 added [ 46.522977][ T5943] team0: Port device team_slave_1 added [ 46.534852][ T5951] team0: Port device team_slave_0 added [ 46.537850][ T5944] team0: Port device team_slave_0 added [ 46.541505][ T5950] team0: Port device team_slave_1 added [ 46.558396][ T5944] team0: Port device team_slave_1 added [ 46.562577][ T5951] team0: Port device team_slave_1 added [ 46.571692][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.573791][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.581411][ T5943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.608355][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.610974][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.618534][ T5943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.631230][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.633917][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.644927][ T5944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.656857][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.660515][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.668094][ T5951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.672073][ T5950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.673968][ T5950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.680932][ T5950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.686410][ T5944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.689217][ T5944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.699221][ T5944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.703789][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.705872][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.713512][ T5951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.719089][ T5950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.721208][ T5950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.728971][ T5950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.753373][ T5943] hsr_slave_0: entered promiscuous mode [ 46.755264][ T5943] hsr_slave_1: entered promiscuous mode [ 46.789522][ T5951] hsr_slave_0: entered promiscuous mode [ 46.792100][ T5951] hsr_slave_1: entered promiscuous mode [ 46.794633][ T5951] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.797657][ T5951] Cannot create hsr debugfs directory [ 46.814738][ T5950] hsr_slave_0: entered promiscuous mode [ 46.816724][ T5950] hsr_slave_1: entered promiscuous mode [ 46.818526][ T5950] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.822039][ T5950] Cannot create hsr debugfs directory [ 46.851051][ T5944] hsr_slave_0: entered promiscuous mode [ 46.853163][ T5944] hsr_slave_1: entered promiscuous mode [ 46.855163][ T5944] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.857451][ T5944] Cannot create hsr debugfs directory [ 47.001599][ T5943] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.005881][ T5943] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.009235][ T5943] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.015252][ T5943] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.027980][ T5950] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.031787][ T5950] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.036051][ T5950] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.039544][ T5950] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.050683][ T5943] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.052880][ T5943] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.055292][ T5943] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.057419][ T5943] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.067332][ T5951] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.071331][ T5951] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.075088][ T5951] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.081962][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.085484][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.100119][ T5951] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.126415][ T5944] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.130395][ T5944] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.136908][ T5944] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.140539][ T5944] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.177596][ T5943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.191104][ T5951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.204306][ T5943] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.211120][ T5951] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.214911][ T5950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.225848][ T5944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.230011][ T1134] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.232044][ T1134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.234788][ T1134] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.236921][ T1134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.240682][ T1134] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.242835][ T1134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.252251][ T1134] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.254399][ T1134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.262099][ T5950] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.273281][ T5944] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.278552][ T1134] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.280760][ T1134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.284100][ T1134] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.286545][ T1134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.293533][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.295689][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.300783][ T5951] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 47.305883][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.308625][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.388162][ T5951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.401247][ T5944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.405949][ T5943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.420219][ T5950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.436031][ T5951] veth0_vlan: entered promiscuous mode [ 47.441206][ T5944] veth0_vlan: entered promiscuous mode [ 47.448195][ T5951] veth1_vlan: entered promiscuous mode [ 47.456167][ T5943] veth0_vlan: entered promiscuous mode [ 47.461535][ T5944] veth1_vlan: entered promiscuous mode [ 47.465517][ T5943] veth1_vlan: entered promiscuous mode [ 47.484966][ T5951] veth0_macvtap: entered promiscuous mode [ 47.491461][ T5944] veth0_macvtap: entered promiscuous mode [ 47.495407][ T5951] veth1_macvtap: entered promiscuous mode [ 47.499412][ T5944] veth1_macvtap: entered promiscuous mode [ 47.501827][ T5950] veth0_vlan: entered promiscuous mode [ 47.506721][ T5943] veth0_macvtap: entered promiscuous mode [ 47.512242][ T5943] veth1_macvtap: entered promiscuous mode [ 47.519123][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.523119][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.527450][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.532180][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.536451][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.541267][ T5944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.545265][ T5944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.549681][ T5944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.553567][ T5950] veth1_vlan: entered promiscuous mode [ 47.557715][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.561057][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.563976][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.567068][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.570995][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.573564][ T5951] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.576268][ T5951] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.578780][ T5951] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.581370][ T5951] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.584652][ T5944] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.587291][ T5944] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.590201][ T5944] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.592844][ T5944] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.607260][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.610440][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.613354][ T5943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.616463][ T5943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.620001][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.625084][ T5943] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.627713][ T5943] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.630444][ T5943] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.633059][ T5943] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.655596][ T5950] veth0_macvtap: entered promiscuous mode [ 47.660742][ T5950] veth1_macvtap: entered promiscuous mode [ 47.682835][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.686073][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.687755][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.692295][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.694881][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.697601][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.700490][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 47.703288][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.706840][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 47.711505][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.714296][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.716895][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.720098][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.722675][ T5950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 47.725408][ T5950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 47.728447][ T5950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 47.734720][ T5950] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.737348][ T5950] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.740163][ T5950] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.742890][ T5950] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 47.746292][ T1134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.748650][ T1134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.757481][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.760608][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.773074][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.776266][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.782867][ T1134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.785929][ T1134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.797089][ T5944] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 47.800326][ T1134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.804667][ T1134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.812050][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.815726][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.817763][ T1134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.822684][ T1134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.848242][ T6013] sctp: [Deprecated]: syz.3.4 (pid 6013) Use of int in max_burst socket option deprecated. [ 47.848242][ T6013] Use struct sctp_assoc_value instead [ 47.886266][ T6018] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 47.960358][ T5961] Bluetooth: hci1: command tx timeout [ 47.962485][ T5961] Bluetooth: hci2: command tx timeout [ 47.964376][ T5961] Bluetooth: hci3: command tx timeout [ 48.049418][ T66] Bluetooth: hci0: command tx timeout [ 48.168462][ T6054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21'. [ 48.305317][ T6064] netlink: 12 bytes leftover after parsing attributes in process `syz.0.26'. [ 48.311050][ T6066] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.314150][ T6066] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.477144][ T6081] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 48.759024][ T5989] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 48.912462][ T5989] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 48.916877][ T5989] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 48.921175][ T5989] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 48.926866][ T5989] usb 7-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 48.930799][ T5989] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.944020][ T5989] usb 7-1: config 0 descriptor?? [ 48.950644][ T6109] netlink: 4 bytes leftover after parsing attributes in process `syz.0.44'. [ 49.003917][ T6113] binder: 6112:6113 ioctl 40046205 0 returned -22 [ 49.156049][ T5989] usbhid 7-1:0.0: can't add hid device: -71 [ 49.158117][ T5989] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 49.163155][ T5989] usb 7-1: USB disconnect, device number 2 [ 49.366176][ T6116] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 49.373267][ T6116] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.432893][ T6120] netlink: 8 bytes leftover after parsing attributes in process `syz.1.49'. [ 49.600492][ T6129] capability: warning: `syz.1.53' uses deprecated v2 capabilities in a way that may be insecure [ 49.606498][ T6131] netlink: 11 bytes leftover after parsing attributes in process `syz.3.54'. [ 49.666764][ T6139] batadv_slave_1: entered promiscuous mode [ 49.668744][ T6138] warning: `syz.1.57' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 49.686670][ T6137] batadv_slave_1: left promiscuous mode [ 49.715681][ T6143] netlink: 'syz.1.60': attribute type 1 has an invalid length. [ 49.719364][ T6143] netlink: 24 bytes leftover after parsing attributes in process `syz.1.60'. [ 50.039253][ T66] Bluetooth: hci3: command tx timeout [ 50.041175][ T66] Bluetooth: hci2: command tx timeout [ 50.043119][ T5961] Bluetooth: hci1: command tx timeout [ 50.119065][ T66] Bluetooth: hci0: command tx timeout [ 50.547592][ T6236] netlink: 4 bytes leftover after parsing attributes in process `syz.1.102'. [ 50.603285][ T6243] netlink: 428 bytes leftover after parsing attributes in process `syz.1.105'. [ 50.630719][ T6247] Driver unsupported XDP return value 0 on prog (id 18) dev N/A, expect packet loss! [ 51.017961][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 51.047379][ T6283] netlink: 28 bytes leftover after parsing attributes in process `syz.1.124'. [ 51.225200][ T6299] netlink: 12 bytes leftover after parsing attributes in process `syz.1.131'. [ 51.267728][ T6305] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 51.739272][ T6342] netdevsim netdevsim3 netdevsim0: Unsupported IPsec algorithm [ 51.966214][ T6364] netlink: 'syz.0.160': attribute type 12 has an invalid length. [ 52.120287][ T66] Bluetooth: hci2: command tx timeout [ 52.122502][ T66] Bluetooth: hci3: command tx timeout [ 52.124156][ T66] Bluetooth: hci1: command tx timeout [ 52.200295][ T66] Bluetooth: hci0: command tx timeout [ 52.428873][ T5989] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 52.578880][ T5989] usb 6-1: Using ep0 maxpacket: 8 [ 52.581885][ T5989] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 52.584426][ T5989] usb 6-1: config 179 has no interface number 0 [ 52.586393][ T5989] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 52.589902][ T5989] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 52.593248][ T5989] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 52.596739][ T5989] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 52.600549][ T5989] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 52.604479][ T5989] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 52.607234][ T5989] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.611769][ T6391] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 52.652295][ T6423] XFS (nullb0): Invalid superblock magic number [ 52.874406][ T6440] netlink: 'syz.2.184': attribute type 4 has an invalid length. [ 53.022175][ T6007] usb 6-1: USB disconnect, device number 2 [ 53.022270][ C2] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 53.026910][ C2] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 53.157150][ T6445] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 53.159800][ T6445] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 53.173231][ T6445] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 53.180926][ T6445] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 53.182921][ T6445] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 53.189395][ T6445] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 53.193555][ T6445] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 53.195400][ T6445] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 53.198531][ T6445] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 53.204328][ T6445] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 53.206163][ T6445] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 53.209809][ T6445] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 53.365585][ T6465] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 53.451372][ T6486] __nla_validate_parse: 1 callbacks suppressed [ 53.451383][ T6486] netlink: 4 bytes leftover after parsing attributes in process `syz.0.204'. [ 53.456946][ T6486] netlink: 277 bytes leftover after parsing attributes in process `syz.0.204'. [ 53.460333][ T6486] netlink: 277 bytes leftover after parsing attributes in process `syz.0.204'. [ 53.825228][ T6544] netlink: 12 bytes leftover after parsing attributes in process `syz.1.230'. [ 53.828205][ T6544] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 53.900767][ T6553] netlink: 12 bytes leftover after parsing attributes in process `syz.1.235'. [ 53.915716][ T6555] netlink: 188 bytes leftover after parsing attributes in process `syz.2.236'. [ 54.017674][ T6571] netlink: 79 bytes leftover after parsing attributes in process `syz.0.244'. [ 54.309952][ T6593] /dev/sr0: Can't open blockdev [ 54.417763][ T39] audit: type=1326 audit(1735949407.089:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6510 comm="syz.3.218" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6579 code=0x7fc00000 [ 54.591880][ T6628] Bluetooth: MGMT ver 1.23 [ 54.681879][ T6634] netlink: 'syz.3.269': attribute type 10 has an invalid length. [ 54.695540][ T6634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.698706][ T6634] team0: Port device bond0 added [ 54.926515][ T6640] input: syz0 as /devices/virtual/input/input6 [ 55.158919][ T66] Bluetooth: hci0: command 0x0c1a tx timeout [ 55.239339][ T66] Bluetooth: hci3: command 0x0405 tx timeout [ 55.249063][ T66] Bluetooth: hci2: command 0x0c1a tx timeout [ 55.249108][ T5948] Bluetooth: hci1: command 0x0c1a tx timeout [ 55.358910][ T5989] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 55.529778][ T5989] usb 8-1: Using ep0 maxpacket: 8 [ 55.534705][ T5989] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 55.537196][ T5989] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 55.540252][ T5989] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 55.543144][ T5989] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 55.546065][ T5989] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 55.550499][ T5989] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 55.554346][ T5989] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.764016][ T5989] usb 8-1: GET_CAPABILITIES returned 0 [ 55.766539][ T5989] usbtmc 8-1:16.0: can't read capabilities [ 55.968212][ T6652] usbtmc 8-1:16.0: usbtmc488_ioctl_trigger returned -90 [ 55.971841][ T8] usb 8-1: USB disconnect, device number 2 [ 56.042431][ T39] audit: type=1400 audit(1735949408.719:3): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=6731 comm="syz.2.302" [ 56.334956][ T6759] netlink: 4 bytes leftover after parsing attributes in process `syz.2.315'. [ 56.560345][ T6784] netlink: 176 bytes leftover after parsing attributes in process `syz.3.327'. [ 56.563137][ T6784] ip6gretap0: entered promiscuous mode [ 56.565112][ T6784] Zero length message leads to an empty skb [ 56.718255][ T6811] openvswitch: netlink: Message has 1275 unknown bytes. [ 56.720604][ T6811] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 56.924740][ T6837] netlink: 'syz.2.349': attribute type 10 has an invalid length. [ 56.927094][ T6837] netlink: 2 bytes leftover after parsing attributes in process `syz.2.349'. [ 56.929797][ T6837] team0: entered promiscuous mode [ 56.931828][ T6837] team_slave_0: entered promiscuous mode [ 56.934371][ T6837] team_slave_1: entered promiscuous mode [ 56.936978][ T6837] bridge0: port 3(team0) entered blocking state [ 56.940086][ T6837] bridge0: port 3(team0) entered disabled state [ 56.942379][ T6837] team0: entered allmulticast mode [ 56.943918][ T6837] team_slave_0: entered allmulticast mode [ 56.945606][ T6837] team_slave_1: entered allmulticast mode [ 56.948195][ T6837] bridge0: port 3(team0) entered blocking state [ 56.950548][ T6837] bridge0: port 3(team0) entered forwarding state [ 56.959998][ T6839] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.962316][ T6839] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.970127][ T6839] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 57.006419][ T6844] delete_channel: no stack [ 57.092541][ T6858] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.194131][ T6875] process 'syz.0.369' launched '/dev/fd/3' with NULL argv: empty string added [ 57.239180][ T5948] Bluetooth: hci0: command 0x0c1a tx timeout [ 57.324011][ T5948] Bluetooth: hci3: unexpected event for opcode 0x0403 [ 57.328937][ T5948] Bluetooth: hci2: command 0x0c1a tx timeout [ 57.331447][ T66] Bluetooth: hci1: command 0x0c1a tx timeout [ 57.434627][ T6929] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 57.480526][ T6937] ======================================================= [ 57.480526][ T6937] WARNING: The mand mount option has been deprecated and [ 57.480526][ T6937] and is ignored by this kernel. Remove the mand [ 57.480526][ T6937] option from the mount to silence this warning. [ 57.480526][ T6937] ======================================================= [ 57.547419][ T6949] overlay: Unknown parameter ' [ 57.547419][ T6949] time [ 57.547419][ T6949] string [ 57.547419][ T6949] statistic [ 57.547419][ T6949] state [ 57.547419][ T6949] realm [ 57.547419][ T6949] rateest [ 57.547419][ T6949] quota [ 57.547419][ T6949] pkttype [ 57.547419][ T6949] physdev [ 57.547419][ T6949] cgroup [ 57.547419][ T6949] cgroup [ 57.547419][ T6949] cgroup [ 57.547419][ T6949] owner [ 57.547419][ T6949] nfacct [ 57.547419][ T6949] nfacct [ 57.547419][ T6949] mac [ 57.547419][ T6949] limit [ 57.547419][ T6949] ipvs [ 57.547419][ T6949] helper [ 57.547419][ T6949] devgroup [ 57.547419][ T6949] cpu [ 57.547419][ T6949] conntrack [ 57.547419][ T6949] conntrack [ 57.547419][ T6949] conntrack [ 57.547419][ T6949] connlabel [ 57.547419][ T6949] connbytes [ 57.547419][ T6949] comment [ 57.547419][ T6949] bpf [ 57.547419][ T6949] bpf [ 57.547419][ T6949] connmark [ 57.547419][ T6949] mark [ 57.547419][ T6949] rpfilter [ 57.547419][ T6949] ah [ 57.547419][ T6949] tcpmss [ 57.547419][ T6949] socket [ 57.547419][ T6949] socket [ 57.547419][ T6949] socket [ 57.547419][ T6949] socket [ 57.547419][ T6949] sctp [ 57.547419][ T6949] recent [ 57.547419][ T6949] recent [ 57.547419][ T6949] policy [ 57.547419][ T6949] osf [ 57.547419][ T6949] multiport [ 57.547419][ T6949] length [ 57.547419][ T6949] l2tp [ 57.547419][ T6949] iprange [ 57.547419][ T6949] ipcomp [ 57.547419][ T6949] ttl [ 57.547419][ T6949] hashlimit [ 57.547419][ T6949] hashlimit [ 57.547419][ T6949] hashlimit [ 57.547419][ T6949] esp [ 57.547419][ T6949] ecn [ 57.547419][ T6949] tos [ 57.547419][ T6949] dscp [ 57.547419][ T6949] dccp [ 57.547419][ T6949] connlimit [ 57.547419][ T6949] cluster [ 57.547419][ T6949] addrtype [ 57.547419][ T6949] addrtype [ 57.547419][ T6949] set [ 57.547419][ T6949] set [ 57.547419][ T6949] set [ 57.547419][ T6949] set [ 57.547419][ T6949] set [ 57.547419][ T6949] icmp [ 58.138424][ T7001] binder_alloc: binder_alloc_mmap_handler: 7000 200a0000-200a2000 already mapped failed -16 [ 58.435564][ T7016] syz.2.431 uses obsolete (PF_INET,SOCK_PACKET) [ 58.555751][ T7028] netem: incorrect ge model size [ 58.557399][ T7028] netem: change failed [ 58.934702][ T7064] netlink: 'syz.1.452': attribute type 9 has an invalid length. [ 59.144096][ T7083] mmap: syz.0.461 (7083) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 59.319090][ T5948] Bluetooth: hci0: command 0x0c1a tx timeout [ 59.339922][ T7095] block nbd0: shutting down sockets [ 59.369459][ T7097] syzkaller0: tun_chr_ioctl cmd 1074025676 [ 59.371290][ T7097] syzkaller0: owner set to 823 [ 59.400338][ T5948] Bluetooth: hci1: command 0x0c1a tx timeout [ 59.409441][ T5948] Bluetooth: hci2: command 0x0c1a tx timeout [ 59.547455][ T7103] __nla_validate_parse: 6 callbacks suppressed [ 59.547466][ T7103] netlink: 24 bytes leftover after parsing attributes in process `syz.3.469'. [ 59.807279][ T7135] netlink: 'syz.0.483': attribute type 1 has an invalid length. [ 60.143645][ T7181] veth0_to_team: entered promiscuous mode [ 60.145472][ T7181] veth0_to_team: entered allmulticast mode [ 60.313914][ T7219] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 60.316156][ T7219] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 60.469498][ T7231] tun0: tun_chr_ioctl cmd 1074025675 [ 60.471316][ T7231] tun0: persist disabled [ 60.539790][ T7237] netlink: 40 bytes leftover after parsing attributes in process `syz.2.525'. [ 60.593141][ T7245] netlink: 228 bytes leftover after parsing attributes in process `syz.1.529'. [ 60.642273][ T39] audit: type=1326 audit(1735949926.319:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7252 comm="syz.1.532" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x0 [ 61.190591][ T7282] misc userio: Can't change port type on an already running userio instance [ 62.065536][ T7363] netlink: 12 bytes leftover after parsing attributes in process `syz.2.581'. [ 62.127735][ T7373] atomic_op ffff88804c13e198 conn xmit_atomic 0000000000000000 [ 62.339165][ T833] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 62.367966][ T7397] netlink: 12 bytes leftover after parsing attributes in process `syz.2.598'. [ 62.498900][ T833] usb 8-1: Using ep0 maxpacket: 8 [ 62.505778][ T833] usb 8-1: unable to get BOS descriptor or descriptor too short [ 62.508688][ T833] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 62.512373][ T833] usb 8-1: can't read configurations, error -71 [ 62.527755][ T7417] netlink: 'syz.2.608': attribute type 1 has an invalid length. [ 62.530706][ T7417] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.608'. [ 62.780471][ T5948] Bluetooth: hci2: ISO packet too small [ 63.418460][ T7518] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.421451][ T7518] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.423836][ T7518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.502273][ T7533] netlink: 44 bytes leftover after parsing attributes in process `syz.0.660'. [ 63.562966][ T7545] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 63.565202][ T7545] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 63.573149][ T7545] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 63.590544][ T7548] netlink: 4 bytes leftover after parsing attributes in process `syz.3.667'. [ 63.723152][ T7571] netlink: 12 bytes leftover after parsing attributes in process `syz.3.677'. [ 63.843312][ T7592] Mount JFS Failure: -22 [ 63.844728][ T7592] jfs_mount failed w/return code = -22 [ 64.011287][ T7625] netlink: 8 bytes leftover after parsing attributes in process `syz.3.700'. [ 64.706778][ T7661] __nla_validate_parse: 2 callbacks suppressed [ 64.706788][ T7661] netlink: 4 bytes leftover after parsing attributes in process `syz.3.715'. [ 64.711961][ T7661] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.714303][ T7661] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.014680][ T7681] netlink: 4 bytes leftover after parsing attributes in process `syz.0.725'. [ 66.691038][ T7837] binder: 7836:7837 ioctl 400c620e 20000140 returned -22 [ 66.700763][ T7839] netlink: 4 bytes leftover after parsing attributes in process `syz.0.793'. [ 66.760861][ T7852] netlink: 'syz.3.799': attribute type 3 has an invalid length. [ 67.739728][ T7927] netlink: 40 bytes leftover after parsing attributes in process `syz.1.831'. [ 67.988897][ T6009] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 68.019216][ T833] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 68.138856][ T6009] usb 7-1: Using ep0 maxpacket: 8 [ 68.142748][ T6009] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 68.145279][ T6009] usb 7-1: config 0 has no interface number 0 [ 68.148763][ T6009] usb 7-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=f7.92 [ 68.151617][ T6009] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.154089][ T6009] usb 7-1: Product: syz [ 68.155456][ T6009] usb 7-1: Manufacturer: syz [ 68.156927][ T6009] usb 7-1: SerialNumber: syz [ 68.159303][ T6009] usb 7-1: config 0 descriptor?? [ 68.164272][ T6009] usb 7-1: selecting invalid altsetting 2 [ 68.166129][ T6009] i2c-cp2615 7-1:0.1: probe with driver i2c-cp2615 failed with error -22 [ 68.169141][ T833] usb 8-1: Using ep0 maxpacket: 16 [ 68.171900][ T833] usb 8-1: config index 0 descriptor too short (expected 16456, got 72) [ 68.174397][ T833] usb 8-1: config 0 has an invalid interface number: 125 but max is 1 [ 68.176761][ T833] usb 8-1: config 0 has an invalid interface number: 125 but max is 1 [ 68.179650][ T833] usb 8-1: config 0 has an invalid descriptor of length 52, skipping remainder of the config [ 68.182690][ T833] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 68.185316][ T833] usb 8-1: config 0 has no interface number 0 [ 68.187150][ T833] usb 8-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 68.190701][ T833] usb 8-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 68.193597][ T833] usb 8-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 68.196490][ T833] usb 8-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 68.200714][ T833] usb 8-1: config 0 interface 125 has no altsetting 0 [ 68.204816][ T833] usb 8-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 68.207522][ T833] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.210243][ T833] usb 8-1: Product: syz [ 68.211521][ T833] usb 8-1: Manufacturer: syz [ 68.212903][ T833] usb 8-1: SerialNumber: syz [ 68.215426][ T833] usb 8-1: config 0 descriptor?? [ 68.238905][ T5989] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 68.364068][ T6009] usb 7-1: USB disconnect, device number 3 [ 68.418909][ T5989] usb 6-1: Using ep0 maxpacket: 8 [ 68.421773][ T5989] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 68.424515][ T833] usb 8-1: USB disconnect, device number 5 [ 68.425071][ T5989] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1040, setting to 1024 [ 68.430215][ T5989] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 68.433168][ T5989] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 68.436025][ T5989] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 68.440829][ T5989] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 68.443546][ T5989] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.445933][ T5989] usb 6-1: Product: syz [ 68.447279][ T5989] usb 6-1: Manufacturer: syz [ 68.448692][ T5989] usb 6-1: SerialNumber: syz [ 68.658384][ T5989] cdc_ncm 6-1:1.0: bind() failure [ 68.661752][ T5989] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 68.663815][ T5989] cdc_ncm 6-1:1.1: bind() failure [ 68.666732][ T5989] usb 6-1: USB disconnect, device number 3 [ 68.671191][ T7483] udevd[7483]: setting mode of /dev/bus/usb/006/003 to 020664 failed: No such file or directory [ 68.674582][ T7483] udevd[7483]: setting owner of /dev/bus/usb/006/003 to uid=0, gid=0 failed: No such file or directory [ 68.941896][ T8] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 68.947912][ T8] hid-generic 0000:0000:0000.0002: hidraw1: <UNKNOWN> HID v0.00 Device [syz1] on syz0 [ 69.188897][ T30] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 69.350901][ T30] usb 7-1: unable to get BOS descriptor or descriptor too short [ 69.353818][ T30] usb 7-1: no configurations [ 69.355663][ T30] usb 7-1: can't read configurations, error -22 [ 70.220968][ T8061] netlink: 12 bytes leftover after parsing attributes in process `syz.3.889'. [ 70.564817][ T8114] netlink: 4 bytes leftover after parsing attributes in process `syz.2.913'. [ 70.921535][ T1413] ieee802154 phy0 wpan0: encryption failed: -22 [ 70.923639][ T1413] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.016461][ T8164] bridge0: port 4(syz_tun) entered blocking state [ 71.018537][ T8164] bridge0: port 4(syz_tun) entered disabled state [ 71.021554][ T8164] syz_tun: entered allmulticast mode [ 71.024202][ T8164] syz_tun: entered promiscuous mode [ 71.026134][ T8164] bridge0: port 4(syz_tun) entered blocking state [ 71.028244][ T8164] bridge0: port 4(syz_tun) entered forwarding state [ 71.300686][ T8191] xt_CT: You must specify a L4 protocol and not use inversions on it [ 71.467483][ T8201] sp0: Synchronizing with TNC [ 71.752734][ T39] audit: type=1326 audit(1735949937.429:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8156 comm="syz.3.933" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6579 code=0x7fc00000 [ 71.802138][ T8218] netlink: 'syz.3.959': attribute type 19 has an invalid length. [ 71.868859][ T8222] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 72.006326][ T5948] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 72.049805][ T8251] netlink: 8 bytes leftover after parsing attributes in process `syz.1.973'. [ 72.083424][ T8261] syz.2.978[8261] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 72.083474][ T8261] syz.2.978[8261] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 72.086894][ T8261] syz.2.978[8261] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 72.427187][ T5948] Bluetooth: hci2: unexpected event for opcode 0x040d [ 72.469210][ T6008] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 72.598929][ T30] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 72.620303][ T6008] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 72.622922][ T6008] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 72.625905][ T6008] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 72.628616][ T6008] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 72.633872][ T6008] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 72.636607][ T6008] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 72.639318][ T6008] usb 8-1: Product: syz [ 72.640583][ T6008] usb 8-1: Manufacturer: syz [ 72.644481][ T6008] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 72.699605][ T39] audit: type=1326 audit(1735949938.379:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8308 comm="syz.1.1001" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 72.705931][ T39] audit: type=1326 audit(1735949938.379:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8308 comm="syz.1.1001" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 72.712295][ T39] audit: type=1326 audit(1735949938.379:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8308 comm="syz.1.1001" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 72.718578][ T39] audit: type=1326 audit(1735949938.379:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8308 comm="syz.1.1001" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 72.724914][ T39] audit: type=1326 audit(1735949938.379:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8308 comm="syz.1.1001" exe="/syz-executor" sig=0 arch=40000003 syscall=278 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 72.731329][ T39] audit: type=1326 audit(1735949938.379:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8308 comm="syz.1.1001" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 72.737643][ T39] audit: type=1326 audit(1735949938.379:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8308 comm="syz.1.1001" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 72.758889][ T30] usb 7-1: Using ep0 maxpacket: 16 [ 72.762885][ T30] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 72.766136][ T30] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 72.770162][ T30] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 72.772941][ T30] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.776395][ T30] usb 7-1: config 0 descriptor?? [ 72.848682][ T5989] usb 8-1: USB disconnect, device number 6 [ 73.566571][ T8369] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1025'. [ 73.571531][ T8369] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1025'. [ 73.575008][ T8369] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1025'. [ 73.678050][ T8379] af_packet: tpacket_rcv: packet too big, clamped from 58 to 4294967286. macoff=82 [ 73.748126][ T8384] input: syz0 as /devices/virtual/input/input9 [ 73.948045][ T8395] netlink: 'syz.0.1037': attribute type 1 has an invalid length. [ 74.112125][ T8403] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1041'. [ 74.140220][ T8405] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1042'. [ 74.250683][ T5948] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 74.440655][ T94] wlan1: Trigger new scan to find an IBSS to join [ 75.048965][ T6009] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 75.193529][ T8487] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1078'. [ 75.208864][ T6009] usb 5-1: Using ep0 maxpacket: 8 [ 75.211577][ T6009] usb 5-1: config 0 has no interfaces? [ 75.214684][ T6009] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 75.217393][ T6009] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.220489][ T6009] usb 5-1: Product: syz [ 75.222000][ T6009] usb 5-1: Manufacturer: syz [ 75.223405][ T6009] usb 5-1: SerialNumber: syz [ 75.225570][ T6009] usb 5-1: config 0 descriptor?? [ 75.378888][ T30] usbhid 7-1:0.0: can't add hid device: -71 [ 75.380804][ T30] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 75.383852][ T30] usb 7-1: USB disconnect, device number 6 [ 75.432173][ T8] usb 5-1: USB disconnect, device number 2 [ 75.620121][ T8524] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1091'. [ 75.623135][ T8526] netlink: 'syz.2.1092': attribute type 10 has an invalid length. [ 75.630301][ T8526] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 75.705147][ T8537] block device autoloading is deprecated and will be removed. [ 75.858627][ T8559] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1107'. [ 76.134149][ T8602] hsr_slave_0: left promiscuous mode [ 76.136183][ T8602] hsr_slave_1: left promiscuous mode [ 76.308180][ T8611] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1131'. [ 76.592892][ T8653] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 76.595013][ T8653] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 76.598130][ T8653] vhci_hcd vhci_hcd.0: Device attached [ 76.605027][ T8653] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(5) [ 76.606995][ T8653] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 76.609984][ T8653] vhci_hcd vhci_hcd.0: Device attached [ 76.612848][ T8653] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(7) [ 76.614839][ T8653] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 76.617190][ T8653] vhci_hcd vhci_hcd.0: Device attached [ 76.620079][ T8653] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(9) [ 76.622065][ T8653] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 76.624418][ T8653] vhci_hcd vhci_hcd.0: Device attached [ 76.626396][ T8662] vhci_hcd: connection closed [ 76.626452][ T8660] vhci_hcd: connection closed [ 76.626515][ T8658] vhci_hcd: connection closed [ 76.628062][ T8654] vhci_hcd: connection closed [ 76.629351][ T12] vhci_hcd: stop threads [ 76.629727][ T12] vhci_hcd: release socket [ 76.635190][ T12] vhci_hcd: disconnect device [ 76.636744][ T12] vhci_hcd: stop threads [ 76.638044][ T12] vhci_hcd: release socket [ 76.639532][ T12] vhci_hcd: disconnect device [ 76.642487][ T12] vhci_hcd: stop threads [ 76.643803][ T12] vhci_hcd: release socket [ 76.645309][ T12] vhci_hcd: disconnect device [ 76.648894][ T12] vhci_hcd: stop threads [ 76.650848][ T12] vhci_hcd: release socket [ 76.652192][ T12] vhci_hcd: disconnect device [ 77.034875][ T8694] bridge_slave_0: default FDB implementation only supports local addresses [ 77.154764][ T8708] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1174'. [ 77.292889][ T8718] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1178'. [ 77.295600][ T8718] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 77.309740][ T5989] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 77.346643][ T8724] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 78.410235][ T8755] devtmpfs: Cannot change global quota limit on remount [ 78.528660][ T8764] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1200'. [ 78.834107][ T8789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1211'. [ 78.836850][ T8789] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1211'. [ 79.330811][ T62] wlan1: Trigger new scan to find an IBSS to join [ 79.497759][ T8806] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1219'. [ 79.506167][ T6009] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 80.297530][ T62] wlan1: Creating new IBSS network, BSSID 5a:22:33:43:19:4f [ 81.297028][ T63] cfg80211: failed to load regulatory.db [ 89.837351][ T8853] netlink: 596 bytes leftover after parsing attributes in process `syz.2.1227'. [ 89.877872][ T5948] Bluetooth: hci3: unexpected Set CIG Parameters response data [ 89.881898][ T5948] Bluetooth: hci3: unexpected event for opcode 0x2062 [ 89.895654][ T8867] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 89.900428][ T6009] IPVS: starting estimator thread 0... [ 90.004850][ T8869] IPVS: using max 41 ests per chain, 98400 per kthread [ 90.007909][ T8880] block nbd3: shutting down sockets [ 90.269970][ T8937] macvlan0: entered allmulticast mode [ 90.271672][ T8937] veth1_vlan: entered allmulticast mode [ 90.277051][ T8937] pim6reg: entered allmulticast mode [ 90.398759][ T8963] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1279'. [ 90.551150][ T8994] trusted_key: syz.0.1294 sent an empty control message without MSG_MORE. [ 90.773526][ T9030] sch_tbf: burst 63600 is lower than device lo mtu (65550) ! [ 90.937322][ T9053] netlink: 'syz.2.1321': attribute type 2 has an invalid length. [ 90.939767][ T9053] netlink: 'syz.2.1321': attribute type 4 has an invalid length. [ 91.964997][ T9078] veth3: entered promiscuous mode [ 92.106239][ T9111] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1346'. [ 92.155561][ T9116] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1349'. [ 92.429253][ T9155] kernel read not supported for file /.pending_reads (pid: 9155 comm: syz.1.1367) [ 92.432948][ T39] audit: type=1800 audit(1735949957.278:13): pid=9155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1367" name=".pending_reads" dev="mqueue" ino=22876 res=0 errno=0 [ 92.490552][ T9162] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1370'. [ 92.498817][ T9166] macvlan0: entered allmulticast mode [ 92.500502][ T9166] veth1_vlan: entered allmulticast mode [ 92.504196][ T9166] pim6reg: entered allmulticast mode [ 92.822202][ T9191] sch_tbf: burst 63600 is lower than device lo mtu (65550) ! [ 92.924670][ T9215] fuse: Bad value for 'fd' [ 93.042391][ T9235] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1402'. [ 93.056697][ T9235] bond1 (unregistering): Released all slaves [ 93.147328][ T9250] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1408'. [ 93.191553][ T9258] input: syz1 as /devices/virtual/input/input10 [ 93.275704][ T9278] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1422'. [ 93.278618][ T9278] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1422'. [ 93.281510][ T9278] netlink: 'syz.3.1422': attribute type 6 has an invalid length. [ 93.283846][ T9278] netlink: 'syz.3.1422': attribute type 5 has an invalid length. [ 93.286842][ T9278] netlink: 43 bytes leftover after parsing attributes in process `syz.3.1422'. [ 93.586803][ T9305] bond1: entered promiscuous mode [ 93.588630][ T9305] bond1: entered allmulticast mode [ 93.590920][ T9305] 8021q: adding VLAN 0 to HW filter on device bond1 [ 93.677535][ T9305] bond1 (unregistering): Released all slaves [ 93.970258][ T5986] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 94.130613][ T5986] usb 8-1: Using ep0 maxpacket: 8 [ 94.133979][ T5986] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 94.136464][ T5986] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 94.139393][ T5986] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 94.144032][ T5986] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 94.146951][ T5986] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 94.150769][ T5986] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 94.154124][ T5986] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.206561][ T5948] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 94.209177][ T5948] Bluetooth: hci3: Injecting HCI hardware error event [ 94.212111][ T5948] Bluetooth: hci3: hardware error 0x00 [ 94.380598][ T5986] usb 8-1: GET_CAPABILITIES returned 0 [ 94.382319][ T5986] usbtmc 8-1:16.0: can't read capabilities [ 94.560691][ T66] Bluetooth: hci3: unexpected event for opcode 0x040d [ 94.603448][ T1321] usb 8-1: USB disconnect, device number 7 [ 95.166070][ T66] Bluetooth: hci1: unexpected event for opcode 0x040d [ 95.185638][ T9426] tipc: Started in network mode [ 95.187161][ T9426] tipc: Node identity ac14140f, cluster identity 4711 [ 95.190009][ T9426] tipc: New replicast peer: 255.255.255.255 [ 95.192451][ T9426] tipc: Enabled bearer <udp:syz2>, priority 10 [ 95.237164][ T9434] netlink: 'syz.3.1492': attribute type 12 has an invalid length. [ 95.351545][ T9448] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.363921][ T9455] __nla_validate_parse: 5 callbacks suppressed [ 95.363930][ T9455] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1504'. [ 95.678250][ T9503] netlink: 'syz.3.1525': attribute type 1 has an invalid length. [ 95.710849][ T9507] netlink: 'syz.3.1527': attribute type 2 has an invalid length. [ 95.739726][ T39] audit: type=1326 audit(1735949960.364:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9512 comm="syz.2.1529" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf713e579 code=0x0 [ 95.874884][ T9536] syz.3.1539: attempt to access beyond end of device [ 95.874884][ T9536] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 95.879557][ T9536] SQUASHFS error: Failed to read block 0x0: -5 [ 95.881435][ T9536] unable to read squashfs_super_block [ 96.143323][ T39] audit: type=1326 audit(1735950216.740:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9553 comm="syz.1.1547" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 96.149731][ T39] audit: type=1326 audit(1735950216.740:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9553 comm="syz.1.1547" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 96.156913][ T39] audit: type=1326 audit(1735950216.740:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9553 comm="syz.1.1547" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 96.163707][ T39] audit: type=1326 audit(1735950216.740:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9553 comm="syz.1.1547" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 96.169926][ T39] audit: type=1326 audit(1735950216.740:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9553 comm="syz.1.1547" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 96.176704][ T39] audit: type=1326 audit(1735950216.759:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9553 comm="syz.1.1547" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 96.183265][ T39] audit: type=1326 audit(1735950216.759:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9553 comm="syz.1.1547" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 96.189331][ T39] audit: type=1326 audit(1735950216.759:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9553 comm="syz.1.1547" exe="/syz-executor" sig=0 arch=40000003 syscall=302 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 96.398322][ T833] tipc: Node number set to 2886997007 [ 96.418190][ T5948] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 96.482308][ T9577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1558'. [ 96.485035][ T9577] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1558'. [ 96.584717][ T9595] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1567'. [ 96.652348][ T9600] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1569'. [ 96.729784][ T9600] nbd: socks must be embedded in a SOCK_ITEM attr [ 97.027510][ T63] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 97.189995][ T63] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 97.193319][ T63] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 97.196317][ T63] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 97.199127][ T63] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.202942][ T9604] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 97.207879][ T63] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 97.480626][ T5989] usb 7-1: USB disconnect, device number 7 [ 97.518974][ T9616] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 97.544956][ T9620] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1575'. [ 98.309105][ T9637] netlink: 'syz.2.1583': attribute type 2 has an invalid length. [ 98.311828][ T9637] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1583'. [ 98.512384][ T9652] netlink: 'syz.2.1590': attribute type 18 has an invalid length. [ 98.517061][ T9652] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.519919][ T9652] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.522531][ T9652] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.525311][ T9652] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.696884][ T39] kauditd_printk_skb: 3 callbacks suppressed [ 98.696894][ T39] audit: type=1326 audit(1735950219.135:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9658 comm="syz.3.1593" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6579 code=0x7ffc0000 [ 98.705162][ T39] audit: type=1326 audit(1735950219.135:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9658 comm="syz.3.1593" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6579 code=0x7ffc0000 [ 98.711887][ T39] audit: type=1326 audit(1735950219.135:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9658 comm="syz.3.1593" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7ff6579 code=0x7ffc0000 [ 98.718660][ T39] audit: type=1326 audit(1735950219.135:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9658 comm="syz.3.1593" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6579 code=0x7ffc0000 [ 98.725182][ T39] audit: type=1326 audit(1735950219.135:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9658 comm="syz.3.1593" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6579 code=0x7ffc0000 [ 98.733321][ T39] audit: type=1326 audit(1735950219.135:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9658 comm="syz.3.1593" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7ff6579 code=0x7ffc0000 [ 98.740859][ T39] audit: type=1326 audit(1735950219.144:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9658 comm="syz.3.1593" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6579 code=0x7ffc0000 [ 98.747137][ T39] audit: type=1326 audit(1735950219.144:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9658 comm="syz.3.1593" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6579 code=0x7ffc0000 [ 98.753899][ T39] audit: type=1326 audit(1735950219.154:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9658 comm="syz.3.1593" exe="/syz-executor" sig=0 arch=40000003 syscall=302 compat=1 ip=0xf7ff6579 code=0x7ffc0000 [ 98.764931][ T39] audit: type=1326 audit(1735950219.154:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9658 comm="syz.3.1593" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7ff6579 code=0x7ffc0000 [ 98.792974][ T9661] wireguard0: entered promiscuous mode [ 98.794652][ T9661] wireguard0: entered allmulticast mode [ 98.824681][ T9668] netlink: 'syz.1.1596': attribute type 2 has an invalid length. [ 98.827026][ T9668] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1596'. [ 99.579610][ T9711] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1615'. [ 100.753419][ T9740] wireguard0: entered promiscuous mode [ 100.755215][ T9740] wireguard0: entered allmulticast mode [ 101.143288][ T9777] sch_tbf: peakrate 6 is lower than or equals to rate 705765376 ! [ 102.664250][ T9845] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1676'. [ 103.144660][ T9868] wireguard0: entered promiscuous mode [ 103.147032][ T9868] wireguard0: entered allmulticast mode [ 103.959216][ T9889] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1696'. [ 104.327904][ T9903] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1703'. [ 104.361984][ T9908] wireguard0: entered promiscuous mode [ 104.363686][ T9908] wireguard0: entered allmulticast mode [ 104.396775][ T9912] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1705'. [ 104.771114][ T9965] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1732'. [ 104.851788][ T9978] netlink: 'syz.2.1739': attribute type 4 has an invalid length. [ 105.238367][ T1321] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 105.350733][T10016] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1755'. [ 105.387228][T10022] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1757'. [ 105.410187][ T1321] usb 7-1: Using ep0 maxpacket: 8 [ 105.413129][ T1321] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 105.416810][ T1321] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 105.421746][ T1321] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 105.424769][ T1321] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 105.428607][ T1321] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 105.432166][ T1321] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.652172][ T1321] usb 7-1: GET_CAPABILITIES returned 0 [ 105.653915][ T1321] usbtmc 7-1:16.0: can't read capabilities [ 105.817419][T10044] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1767'. [ 105.869086][ T6009] usb 7-1: USB disconnect, device number 8 [ 106.914768][T10155] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1817'. [ 106.936060][T10155] bond1 (unregistering): Released all slaves [ 107.201559][T10185] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1831'. [ 107.401151][T10216] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 107.403074][T10216] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 107.405978][T10217] overlayfs: failed to clone lowerpath [ 107.406063][T10216] vhci_hcd vhci_hcd.0: Device attached [ 107.414757][T10216] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(5) [ 107.416686][T10216] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 107.419324][T10216] vhci_hcd vhci_hcd.0: Device attached [ 107.423881][T10216] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(7) [ 107.425842][T10216] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 107.428051][T10216] vhci_hcd vhci_hcd.0: Device attached [ 107.432649][T10216] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(9) [ 107.434594][T10216] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 107.436792][T10216] vhci_hcd vhci_hcd.0: Device attached [ 107.439335][T10226] vhci_hcd: connection closed [ 107.439560][T10223] vhci_hcd: connection closed [ 107.439615][T10221] vhci_hcd: connection closed [ 107.439816][ T62] vhci_hcd: stop threads [ 107.439827][ T62] vhci_hcd: release socket [ 107.439834][ T62] vhci_hcd: disconnect device [ 107.441969][ T62] vhci_hcd: stop threads [ 107.442960][T10218] vhci_hcd: connection closed [ 107.444423][ T62] vhci_hcd: release socket [ 107.444433][ T62] vhci_hcd: disconnect device [ 107.451720][ T62] vhci_hcd: stop threads [ 107.455948][ T62] vhci_hcd: release socket [ 107.457292][ T62] vhci_hcd: disconnect device [ 107.458919][ T62] vhci_hcd: stop threads [ 107.460308][ T62] vhci_hcd: release socket [ 107.462039][ T62] vhci_hcd: disconnect device [ 107.595542][T10232] netlink: 'syz.0.1857': attribute type 6 has an invalid length. [ 107.597888][T10232] netlink: 'syz.0.1857': attribute type 5 has an invalid length. [ 107.600332][T10235] input: syz1 as /devices/virtual/input/input11 [ 108.292875][T10312] bond1: entered promiscuous mode [ 108.294417][T10312] bond1: entered allmulticast mode [ 108.298194][T10312] 8021q: adding VLAN 0 to HW filter on device bond1 [ 108.358114][T10312] bond1 (unregistering): Released all slaves [ 108.363433][T10317] __nla_validate_parse: 4 callbacks suppressed [ 108.363443][T10317] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1897'. [ 108.791572][T10364] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1911'. [ 108.847144][T10370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1914'. [ 108.849881][T10370] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1914'. [ 108.891410][T10376] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1917'. [ 108.894171][T10376] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1917'. [ 108.943026][T10382] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1919'. [ 109.160182][T10406] netlink: 596 bytes leftover after parsing attributes in process `syz.0.1935'. [ 109.192449][T10413] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1932'. [ 110.621411][T10536] veth1_vlan: left allmulticast mode [ 110.627407][T10536] netlink: 'syz.0.1989': attribute type 2 has an invalid length. [ 110.902417][T10584] netlink: 'syz.2.2011': attribute type 12 has an invalid length. [ 110.926635][T10586] netlink: 'syz.1.2012': attribute type 1 has an invalid length. [ 110.971137][T10591] netlink: 'syz.1.2021': attribute type 12 has an invalid length. [ 111.149669][T10610] sctp: [Deprecated]: syz.0.2023 (pid 10610) Use of struct sctp_assoc_value in delayed_ack socket option. [ 111.149669][T10610] Use struct sctp_sack_info instead [ 111.225941][T10616] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2026'. [ 111.834703][T10661] netlink: 'syz.3.2047': attribute type 25 has an invalid length. [ 111.837060][T10661] netlink: 'syz.3.2047': attribute type 1 has an invalid length. [ 111.839468][T10661] bridge0: port 1(bridge_slave_0) entered learning state [ 111.906631][T10669] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 111.946779][ T39] kauditd_printk_skb: 4 callbacks suppressed [ 111.946789][ T39] audit: type=1326 audit(1735950231.520:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10672 comm="syz.1.2053" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 111.955395][ T39] audit: type=1326 audit(1735950231.538:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10672 comm="syz.1.2053" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 111.962611][ T39] audit: type=1326 audit(1735950231.538:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10672 comm="syz.1.2053" exe="/syz-executor" sig=0 arch=40000003 syscall=120 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 111.982636][ T39] audit: type=1326 audit(1735950231.557:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10672 comm="syz.1.2053" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 111.989744][ T39] audit: type=1326 audit(1735950231.557:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10677 comm="syz.1.2053" exe="/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 112.003779][ T39] audit: type=1326 audit(1735950231.566:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10672 comm="syz.1.2053" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 112.010539][ T39] audit: type=1326 audit(1735950231.576:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10672 comm="syz.1.2053" exe="/syz-executor" sig=0 arch=40000003 syscall=26 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 112.017240][ T39] audit: type=1326 audit(1735950231.576:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10672 comm="syz.1.2053" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 112.023368][ T39] audit: type=1326 audit(1735950231.576:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10672 comm="syz.1.2053" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fd6579 code=0x7ffc0000 [ 112.030130][ T39] audit: type=1326 audit(1735950231.576:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10672 comm="syz.1.2053" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf7fd6598 code=0x7ffc0000 [ 112.377987][ T94] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 112.381614][ T94] ------------[ cut here ]------------ [ 112.383279][ T94] WARNING: CPU: 2 PID: 94 at net/mac80211/scan.c:1213 ieee80211_request_ibss_scan+0x7b8/0x9a0 [ 112.386320][ T94] Modules linked in: [ 112.387762][ T94] CPU: 2 UID: 0 PID: 94 Comm: kworker/u32:5 Not tainted 6.13.0-rc5-syzkaller-00161-g63676eefb7a0 #0 [ 112.392686][ T94] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 112.395821][ T94] Workqueue: events_unbound cfg80211_wiphy_work [ 112.398209][ T94] RIP: 0010:ieee80211_request_ibss_scan+0x7b8/0x9a0 [ 112.400149][ T94] Code: e9 3b fb ff ff e8 08 ce 08 f7 be 04 00 00 00 bf 06 00 00 00 41 bd 04 00 00 00 e8 33 d0 08 f7 e9 3b fd ff ff e8 e9 cd 08 f7 90 <0f> 0b 90 bb ea ff ff ff e9 6e fc ff ff 48 c7 c7 d4 1a 1d 90 e8 ef [ 112.405791][ T94] RSP: 0018:ffffc900010af988 EFLAGS: 00010293 [ 112.407556][ T94] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8a908130 [ 112.409830][ T94] RDX: ffff88801f83a440 RSI: ffffffff8a9081c7 RDI: 0000000000000005 [ 112.412425][ T94] RBP: ffff888064659720 R08: 0000000000000005 R09: 0000000000000000 [ 112.414677][ T94] R10: 0000000000000000 R11: 0000000000000003 R12: 0000000000000005 [ 112.416908][ T94] R13: 0000000000000006 R14: dffffc0000000000 R15: ffff88804ff70e40 [ 112.419148][ T94] FS: 0000000000000000(0000) GS:ffff88802b600000(0000) knlGS:0000000000000000 [ 112.421727][ T94] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 112.423636][ T94] CR2: 000000002f61bffc CR3: 000000001e3c2000 CR4: 0000000000352ef0 [ 112.425933][ T94] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 112.428199][ T94] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 112.430521][ T94] Call Trace: [ 112.431500][ T94] <TASK> [ 112.432414][ T94] ? __warn+0xea/0x3c0 [ 112.433702][ T94] ? ieee80211_request_ibss_scan+0x7b8/0x9a0 [ 112.435483][ T94] ? report_bug+0x3c0/0x580 [ 112.436825][ T94] ? handle_bug+0x54/0xa0 [ 112.438136][ T94] ? exc_invalid_op+0x17/0x50 [ 112.439516][ T94] ? asm_exc_invalid_op+0x1a/0x20 [ 112.440995][ T94] ? ieee80211_request_ibss_scan+0x720/0x9a0 [ 112.442812][ T94] ? ieee80211_request_ibss_scan+0x7b7/0x9a0 [ 112.444736][ T94] ? ieee80211_request_ibss_scan+0x7b8/0x9a0 [ 112.446552][ T94] ? ieee80211_request_ibss_scan+0x7b7/0x9a0 [ 112.448377][ T94] ieee80211_ibss_work+0x83b/0x14c0 [ 112.449951][ T94] ? __pfx___lock_acquire+0x10/0x10 [ 112.451519][ T94] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 112.453229][ T94] ? lock_acquire.part.0+0x11b/0x380 [ 112.454882][ T94] ? find_held_lock+0x2d/0x110 [ 112.456344][ T94] ? skb_dequeue+0x126/0x180 [ 112.457714][ T94] ? __pfx_lock_release+0x10/0x10 [ 112.459161][ T94] ? mark_held_locks+0x9f/0xe0 [ 112.460574][ T94] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 112.462246][ T94] ? lockdep_hardirqs_on+0x7c/0x110 [ 112.463775][ T94] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 112.465521][ T94] ieee80211_iface_work+0xd01/0xf00 [ 112.467023][ T94] cfg80211_wiphy_work+0x3de/0x560 [ 112.468530][ T94] process_one_work+0x958/0x1b30 [ 112.469985][ T94] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 112.471630][ T94] ? __pfx_process_one_work+0x10/0x10 [ 112.473209][ T94] ? rcu_is_watching+0x12/0xc0 [ 112.474627][ T94] ? assign_work+0x1a0/0x250 [ 112.476171][ T94] worker_thread+0x6c8/0xf00 [ 112.477577][ T94] ? __kthread_parkme+0x148/0x220 [ 112.479059][ T94] ? __pfx_worker_thread+0x10/0x10 [ 112.480578][ T94] kthread+0x2c1/0x3a0 [ 112.481794][ T94] ? _raw_spin_unlock_irq+0x23/0x50 [ 112.483309][ T94] ? __pfx_kthread+0x10/0x10 [ 112.484659][ T94] ret_from_fork+0x45/0x80 [ 112.486030][ T94] ? __pfx_kthread+0x10/0x10 [ 112.487517][ T94] ret_from_fork_asm+0x1a/0x30 [ 112.488950][ T94] </TASK> [ 112.489883][ T94] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 112.491986][ T94] CPU: 2 UID: 0 PID: 94 Comm: kworker/u32:5 Not tainted 6.13.0-rc5-syzkaller-00161-g63676eefb7a0 #0 [ 112.495086][ T94] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 112.498201][ T94] Workqueue: events_unbound cfg80211_wiphy_work [ 112.500020][ T94] Call Trace: [ 112.501000][ T94] <TASK> [ 112.501897][ T94] dump_stack_lvl+0x3d/0x1f0 [ 112.503242][ T94] panic+0x71d/0x800 [ 112.504388][ T94] ? __pfx_panic+0x10/0x10 [ 112.505715][ T94] ? show_trace_log_lvl+0x29d/0x3d0 [ 112.507230][ T94] ? check_panic_on_warn+0x1f/0xb0 [ 112.508720][ T94] ? ieee80211_request_ibss_scan+0x7b8/0x9a0 [ 112.510536][ T94] check_panic_on_warn+0xab/0xb0 [ 112.512063][ T94] __warn+0xf6/0x3c0 [ 112.513253][ T94] ? ieee80211_request_ibss_scan+0x7b8/0x9a0 [ 112.515057][ T94] report_bug+0x3c0/0x580 [ 112.516371][ T94] handle_bug+0x54/0xa0 [ 112.517642][ T94] exc_invalid_op+0x17/0x50 [ 112.519018][ T94] asm_exc_invalid_op+0x1a/0x20 [ 112.520491][ T94] RIP: 0010:ieee80211_request_ibss_scan+0x7b8/0x9a0 [ 112.522469][ T94] Code: e9 3b fb ff ff e8 08 ce 08 f7 be 04 00 00 00 bf 06 00 00 00 41 bd 04 00 00 00 e8 33 d0 08 f7 e9 3b fd ff ff e8 e9 cd 08 f7 90 <0f> 0b 90 bb ea ff ff ff e9 6e fc ff ff 48 c7 c7 d4 1a 1d 90 e8 ef [ 112.527962][ T94] RSP: 0018:ffffc900010af988 EFLAGS: 00010293 [ 112.529716][ T94] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8a908130 [ 112.532044][ T94] RDX: ffff88801f83a440 RSI: ffffffff8a9081c7 RDI: 0000000000000005 [ 112.534348][ T94] RBP: ffff888064659720 R08: 0000000000000005 R09: 0000000000000000 [ 112.536647][ T94] R10: 0000000000000000 R11: 0000000000000003 R12: 0000000000000005 [ 112.538937][ T94] R13: 0000000000000006 R14: dffffc0000000000 R15: ffff88804ff70e40 [ 112.541195][ T94] ? ieee80211_request_ibss_scan+0x720/0x9a0 [ 112.542930][ T94] ? ieee80211_request_ibss_scan+0x7b7/0x9a0 [ 112.544682][ T94] ? ieee80211_request_ibss_scan+0x7b7/0x9a0 [ 112.546428][ T94] ieee80211_ibss_work+0x83b/0x14c0 [ 112.547936][ T94] ? __pfx___lock_acquire+0x10/0x10 [ 112.549448][ T94] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 112.551102][ T94] ? lock_acquire.part.0+0x11b/0x380 [ 112.552668][ T94] ? find_held_lock+0x2d/0x110 [ 112.554080][ T94] ? skb_dequeue+0x126/0x180 [ 112.555429][ T94] ? __pfx_lock_release+0x10/0x10 [ 112.556906][ T94] ? mark_held_locks+0x9f/0xe0 [ 112.558328][ T94] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 112.560012][ T94] ? lockdep_hardirqs_on+0x7c/0x110 [ 112.561502][ T94] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 112.563178][ T94] ieee80211_iface_work+0xd01/0xf00 [ 112.564712][ T94] cfg80211_wiphy_work+0x3de/0x560 [ 112.566216][ T94] process_one_work+0x958/0x1b30 [ 112.567655][ T94] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 112.569279][ T94] ? __pfx_process_one_work+0x10/0x10 [ 112.570844][ T94] ? rcu_is_watching+0x12/0xc0 [ 112.572246][ T94] ? assign_work+0x1a0/0x250 [ 112.573631][ T94] worker_thread+0x6c8/0xf00 [ 112.574985][ T94] ? __kthread_parkme+0x148/0x220 [ 112.576490][ T94] ? __pfx_worker_thread+0x10/0x10 [ 112.578045][ T94] kthread+0x2c1/0x3a0 [ 112.579288][ T94] ? _raw_spin_unlock_irq+0x23/0x50 [ 112.580861][ T94] ? __pfx_kthread+0x10/0x10 [ 112.582273][ T94] ret_from_fork+0x45/0x80 [ 112.583632][ T94] ? __pfx_kthread+0x10/0x10 [ 112.585069][ T94] ret_from_fork_asm+0x1a/0x30 [ 112.586505][ T94] </TASK> [ 112.588024][ T94] Kernel Offset: disabled [ 112.589364][ T94] Rebooting in 86400 seconds.. VM DIAGNOSIS: 00:11:05 Registers: info registers vcpu 0 CPU#0 RAX=0000000080000003 RBX=0000000000000000 RCX=ffffc90003d975b0 RDX=1ffff1100464315a RSI=ffffffff8b4cd600 RDI=ffffffff8bb17100 RBP=6eb859fb660c8a52 RSP=ffffc90003d97538 R8 =0000000000000000 R9 =fffffbfff2039cfa R10=ffffffff901ce7d7 R11=0000000000000007 R12=0000000000000007 R13=0000000000000008 R14=ffff888023218ad8 R15=ffff888023218000 RIP=ffffffff8b1a5fbd RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b400000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00000000f7fc55c0 CR3=0000000049f22000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 EAX=818d5306 EBX=ffffffff ECX=ffffffff EDX=81aad546 ESI=ffffffff EDI=ffffffff EBP=f69816f8 ESP=ffd97de0 EIP=f717497b EFL=00000297 [--S-APC] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0023 00000000 ffffffff 00c0fb00 DPL=3 CS32 [-RA] SS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =002b 00000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 00000000 ffffffff 00c00000 GS =0063 574a3440 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 00000000 ffffffff 00c00000 TR =0040 0004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000002f71dff8 CR3=0000000069d14000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000000002f RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85143ef5 RDI=ffffffff9a667200 RBP=ffffffff9a6671c0 RSP=ffffc900010af2e8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000007 R12=0000000000000000 R13=000000000000002f R14=ffffffff85143e90 R15=0000000000000000 RIP=ffffffff85143f1f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000002f61bffc CR3=000000001e3c2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f7433ff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=ffffffff915d3ab6 RBX=ffffffff90a25c84 RCX=dffffc0000000000 RDX=ffffffff90a25c84 RSI=0000000000000005 RDI=ffffffff90a25c7c RBP=ffffffff90a25c7c RSP=ffffc90025757328 R8 =ffffffff915d3b0a R9 =ffffffff915d3a6c R10=ffffc900257573d8 R11=00000000000a1172 R12=ffffffff90a25c90 R13=ffffffff8b117214 R14=ffffffff90a25c7c R15=ffffffff90a25c7c RIP=ffffffff8148e4e8 RFL=00000203 [------C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b700000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=0000000020000000 CR3=000000004a28c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000