last executing test programs: 1.990124339s ago: executing program 1 (id=3244): fsopen(0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14, 0x20, [0x0, 0x0, 0xffffffff]}, @TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @empty}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 1.900197012s ago: executing program 1 (id=3245): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1005c, '\x00', 0x0, @cgroup_sock=0x300, 0xffffffffffffffff, 0x8, 0x0, 0x31, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1b}, 0xa1) unlinkat(r1, &(0x7f00000001c0)='./file1\x00', 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4048aecb, &(0x7f0000000100)=ANY=[@ANYBLOB="050000000000000002"]) 1.900028474s ago: executing program 0 (id=3246): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000080), 0x12) 1.899845052s ago: executing program 1 (id=3247): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x9000000, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100040000002c00048005000300010000000500030080ffffff05000300000000000500030080ffffff0500030080ffffff0800020003"], 0x50}}, 0x0) mkdir(&(0x7f0000000380)='./file0\x00', 0x7f18fac015175e18) r3 = syz_open_dev$usbfs(&(0x7f00000002c0), 0x7f, 0x40040) ioctl$USBDEVFS_CLEAR_HALT(r3, 0x80045515, &(0x7f0000000340)={0x9, 0x1}) dup(0xffffffffffffffff) r4 = open(&(0x7f0000000380)='./bus\x00', 0x40, 0x0) r5 = creat(&(0x7f0000000200)='./bus\x00', 0x84) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r5, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r4], 0x2b) sendfile(r6, r4, 0x0, 0x4000000053d2) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) r7 = fsopen(&(0x7f0000000040)='tracefs\x00', 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0x0, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x400d3eb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xfffffe01}, @TCA_RATE={0x6, 0x5, {0x9, 0x8}}]}, 0x48}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x8, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) r11 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x3, 0xbc01) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r11, 0x80dc5521, &(0x7f0000000180)=""/135) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0xa00, 0x0) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000003c0)={0x40, 0x10, 0x8, 0xa4, 0x0, 0x2, 0x0}) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x100) 1.040619748s ago: executing program 0 (id=3257): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00'}) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) 1.040282551s ago: executing program 0 (id=3258): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x5, 0x4, 0x9, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) clock_gettime(0x0, &(0x7f0000000800)) 950.842346ms ago: executing program 0 (id=3259): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="e400", @ANYRES16=r2, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r3, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 950.529986ms ago: executing program 0 (id=3260): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) 891.136145ms ago: executing program 0 (id=3261): socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_submit(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 804.281864ms ago: executing program 3 (id=3264): openat$nullb(0xffffffffffffff9c, 0x0, 0x169802, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000280), 0x8}, 0x94) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0xa08000, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) read$FUSE(r0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=']) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) openat$dir(0xffffff9c, 0x0, 0x101200, 0x8) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x50) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0x2, 0xc9}}}, 0x6) 728.382154ms ago: executing program 3 (id=3265): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000802000000180000660000000800", @ANYRES32=r2, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x9c, r3, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}, @NL80211_ATTR_FRAME={0x77, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @device_a, @initial, {0xf, 0x5}}, 0xffffffffffffffff, @default, 0x1000, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1, 0x2c}, @void, @val={0x6, 0x2, 0x1ff}, @val={0x5, 0x6, {0x5, 0x97, 0x5, "840713"}}, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x400, 0x2, 0x5, 0x0, {0x2, 0xb7b, 0x0, 0x347, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x100, 0x1}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x69, 0x0, 0x1, 0x0, 0xfd, 0x7, 0x20}}, @val={0x76, 0x6, {0x3, 0x0, 0x2f, 0x6}}}}]}, 0x9c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 703.734305ms ago: executing program 1 (id=3266): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000240), 0x0) 703.3064ms ago: executing program 3 (id=3267): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x9f) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/19, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010067656e65766500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x2c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, 0x500}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008004}, 0x8000) 631.146881ms ago: executing program 2 (id=3268): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x5, 0x4, 0x9, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) clock_gettime(0x0, &(0x7f0000000800)) 631.005377ms ago: executing program 2 (id=3269): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cb00f631f27b59014ec44307"], 0x1c}, 0x1, 0x0, 0x0, 0x4801}, 0x800) recvmmsg$unix(r0, 0x0, 0x0, 0x34000, 0x0) 630.839796ms ago: executing program 1 (id=3270): openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/key-users\x00', 0x0, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1}, 0x18) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000100)={'icmp\x00'}, &(0x7f0000000140)=0x1e) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r2], 0x3c}, 0x1, 0x0, 0x0, 0x801}, 0x0) 570.207501ms ago: executing program 2 (id=3271): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) socket$packet(0x11, 0x3, 0x300) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x5ccc6e75, @rand_addr, 0x3}, 0x1c) listen(r0, 0x3) mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB]) close_range(r0, r0, 0x0) 569.732456ms ago: executing program 3 (id=3272): fsopen(0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x5c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xf}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14, 0x20, [0x0, 0x0, 0xffffffff]}, @TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @empty}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 569.385454ms ago: executing program 1 (id=3273): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000440)={0x20, 0xd, 0x2, "0018"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000680)={0x1, 0x2, 0x3, &(0x7f0000000400)={0x1b, "65c28678ec59b73ade02da39a66f440cfa56ec4319a52702236bf319b49de48232"}}) 569.15609ms ago: executing program 2 (id=3274): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0xec}}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 394.449691ms ago: executing program 2 (id=3275): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000000180)="100000000000000029000000", 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0xfd, 0x9, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r1}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x0}, 0x94) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x48}, {0x20, 0x0, 0x8, 0xfffff034}, {0x6, 0x0, 0xd}]}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="bd", 0x1}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)) r5 = gettid() kcmp$KCMP_EPOLL_TFD(r5, r5, 0x7, r4, &(0x7f0000000040)={r2, r3, 0xfffffffe}) r6 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r6, &(0x7f0000000080), 0x10) shutdown(r6, 0x1) sendmmsg$inet6(r6, &(0x7f0000000880)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000000) 394.250043ms ago: executing program 3 (id=3276): prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sched_setscheduler(0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000140)=0x86) 307.790505ms ago: executing program 3 (id=3277): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000a0000000000000000000000180100002020000000000000000000007b1af8ff0000000007010000f8ffffffb702000008000000b7030000000000008500000006000000950000003b00000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x18) mkdirat(0xffffffffffffff9c, 0x0, 0x0) connect$unix(r2, &(0x7f0000001080)=@file={0x0, './file0\x00'}, 0x6e) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2000000, 0x0) chdir(&(0x7f0000000280)='./file0\x00') creat(&(0x7f0000000440)='./bus\x00', 0x11d) r4 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) r5 = open(&(0x7f0000000000)='./file0\x00', 0x143042, 0xfe) sendfile(r4, r5, 0x0, 0x80000001) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_buf(r7, 0x29, 0x30, 0x0, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x20000045, &(0x7f00000002c0)={0xa, 0x2, 0x395, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f00000000c0)='highspeed\x00', 0xa) shutdown(r6, 0x1) fcntl$addseals(0xffffffffffffffff, 0x409, 0x3f) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x1) 0s ago: executing program 2 (id=3278): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x5, 0x4, 0x9, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) clock_gettime(0x0, &(0x7f0000000800)) kernel console output (not intermixed with test programs): 8639] netlink: 40 bytes leftover after parsing attributes in process `syz.3.988'. [ 133.787793][ T8663] lo speed is unknown, defaulting to 1000 [ 133.790395][ T8663] lo speed is unknown, defaulting to 1000 [ 134.430071][ T8693] lo speed is unknown, defaulting to 1000 [ 134.436120][ T8693] lo speed is unknown, defaulting to 1000 [ 135.662546][ T40] audit: type=1326 audit(1750952452.913:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8725 comm="syz.3.1022" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 135.672069][ T40] audit: type=1326 audit(1750952452.913:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8725 comm="syz.3.1022" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf704e598 code=0x7ffc0000 [ 135.678751][ T40] audit: type=1326 audit(1750952452.913:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8725 comm="syz.3.1022" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf704e598 code=0x7ffc0000 [ 135.685468][ T40] audit: type=1326 audit(1750952452.913:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8725 comm="syz.3.1022" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf704e598 code=0x7ffc0000 [ 135.692977][ T40] audit: type=1326 audit(1750952452.913:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8725 comm="syz.3.1022" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf704e598 code=0x7ffc0000 [ 135.699969][ T40] audit: type=1326 audit(1750952452.913:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8725 comm="syz.3.1022" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf704e598 code=0x7ffc0000 [ 135.708123][ T40] audit: type=1326 audit(1750952452.913:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8725 comm="syz.3.1022" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf704e598 code=0x7ffc0000 [ 135.717068][ T40] audit: type=1326 audit(1750952452.913:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8725 comm="syz.3.1022" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf704e598 code=0x7ffc0000 [ 135.724799][ T40] audit: type=1326 audit(1750952452.913:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8725 comm="syz.3.1022" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf704e598 code=0x7ffc0000 [ 136.288571][ T8765] IPVS: length: 86 != 24 [ 136.478567][ T8783] lo speed is unknown, defaulting to 1000 [ 136.481168][ T8783] lo speed is unknown, defaulting to 1000 [ 139.381202][ T8827] lo speed is unknown, defaulting to 1000 [ 139.383678][ T8827] lo speed is unknown, defaulting to 1000 [ 141.076305][ T8892] __nla_validate_parse: 2 callbacks suppressed [ 141.076320][ T8892] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1084'. [ 141.891301][ T8926] hsr0: entered promiscuous mode [ 142.049650][ T8928] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1099'. [ 142.175783][ T8938] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 142.462291][ T40] kauditd_printk_skb: 115 callbacks suppressed [ 142.462303][ T40] audit: type=1800 audit(1750952459.713:184): pid=8954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1111" name="file0" dev="tmpfs" ino=1601 res=0 errno=0 [ 142.590271][ T8958] IPVS: sync thread started: state = BACKUP, mcast_ifn = netdevsim0, syncid = 67108897, id = 0 [ 143.686066][ T8977] lo speed is unknown, defaulting to 1000 [ 143.689057][ T8977] lo speed is unknown, defaulting to 1000 [ 146.758137][ T40] audit: type=1326 audit(1750952464.013:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9034 comm="syz.1.1140" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf705e598 code=0x7ffc0000 [ 146.772174][ T40] audit: type=1326 audit(1750952464.013:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9034 comm="syz.1.1140" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 146.781491][ T40] audit: type=1326 audit(1750952464.013:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9034 comm="syz.1.1140" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf705e598 code=0x7ffc0000 [ 146.790073][ T40] audit: type=1326 audit(1750952464.013:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9034 comm="syz.1.1140" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf705e598 code=0x7ffc0000 [ 146.797370][ T40] audit: type=1326 audit(1750952464.013:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9034 comm="syz.1.1140" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf705e598 code=0x7ffc0000 [ 146.804734][ T40] audit: type=1326 audit(1750952464.013:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9034 comm="syz.1.1140" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf705e598 code=0x7ffc0000 [ 146.815140][ T40] audit: type=1326 audit(1750952464.013:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9034 comm="syz.1.1140" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x7ffc0000 [ 146.822370][ T40] audit: type=1326 audit(1750952464.013:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9034 comm="syz.1.1140" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf705e598 code=0x7ffc0000 [ 146.829126][ T40] audit: type=1326 audit(1750952464.013:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9034 comm="syz.1.1140" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf705e598 code=0x7ffc0000 [ 147.117896][ T9043] tipc: Resetting bearer [ 147.173936][ T9043] tipc: Disabling bearer [ 147.184682][ T9043] team0 (unregistering): Port device team_slave_0 removed [ 147.189824][ T9043] team0 (unregistering): Port device team_slave_1 removed [ 147.585515][ T9052] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1147'. [ 147.981765][ T9071] netdevsim netdevsim3: Direct firmware load for @ failed with error -2 [ 147.984546][ T9071] netdevsim netdevsim3: Falling back to sysfs fallback for: @ [ 148.196618][ T9074] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1154'. [ 148.354798][ T9080] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1157'. [ 148.736126][ T9097] vcan0: tx drop: invalid sa for name 0x0000000200000000 [ 148.821831][ T9105] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1169'. [ 148.869232][ T9115] lo speed is unknown, defaulting to 1000 [ 148.872245][ T9115] lo speed is unknown, defaulting to 1000 [ 149.742642][ T9143] lo speed is unknown, defaulting to 1000 [ 149.745430][ T9143] lo speed is unknown, defaulting to 1000 [ 150.008851][ T9150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 151.191676][ T9185] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1196'. [ 151.195051][ T9185] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1196'. [ 152.064371][ T9238] lo speed is unknown, defaulting to 1000 [ 152.069237][ T9238] lo speed is unknown, defaulting to 1000 [ 153.517609][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 153.517619][ T40] audit: type=1326 audit(1750952470.773:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9263 comm="syz.0.1225" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 153.527444][ T40] audit: type=1326 audit(1750952470.773:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9263 comm="syz.0.1225" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 153.534125][ T40] audit: type=1326 audit(1750952470.773:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9263 comm="syz.0.1225" exe="/syz-executor" sig=0 arch=40000003 syscall=330 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 153.541493][ T40] audit: type=1326 audit(1750952470.773:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9263 comm="syz.0.1225" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 153.549472][ T40] audit: type=1326 audit(1750952470.773:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9263 comm="syz.0.1225" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x7ffc0000 [ 154.116437][ T9276] IPVS: set_ctl: invalid protocol: 59 0.0.0.0:20000 [ 154.804413][ T9293] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1235'. [ 154.994885][ T9299] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1238'. [ 154.998286][ T9299] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1238'. [ 155.779587][ T9316] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1242'. [ 155.783514][ T9316] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1242'. [ 156.723321][ T9331] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1248'. [ 157.234872][ C3] vcan0: j1939_tp_rxtimer: 0xffff88806be36800: rx timeout, send abort [ 157.237381][ T9336] lo speed is unknown, defaulting to 1000 [ 157.240025][ C3] vcan0: j1939_xtp_rx_abort_one: 0xffff88806be36800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 157.241040][ T9336] lo speed is unknown, defaulting to 1000 [ 157.488599][ T9341] lo speed is unknown, defaulting to 1000 [ 157.491126][ T9341] lo speed is unknown, defaulting to 1000 [ 157.615363][ T5953] Bluetooth: hci3: command 0x0405 tx timeout [ 157.727014][ T9351] xt_hashlimit: size too large, truncated to 1048576 [ 157.729475][ T9351] xt_hashlimit: overflow, try lower: 9223336852482686975/36028797018968064 [ 157.758086][ T9351] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 157.763124][ T9351] batman_adv: batadv0: Adding interface: gretap1 [ 157.765417][ T9351] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.774495][ T9351] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 158.419697][ T40] audit: type=1326 audit(1750952475.673:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9358 comm="syz.3.1257" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 158.435355][ T40] audit: type=1326 audit(1750952475.673:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9358 comm="syz.3.1257" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 158.442021][ T40] audit: type=1326 audit(1750952475.673:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9358 comm="syz.3.1257" exe="/syz-executor" sig=0 arch=40000003 syscall=330 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 158.451142][ T40] audit: type=1326 audit(1750952475.673:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9358 comm="syz.3.1257" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x7ffc0000 [ 158.519424][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806be37000: rx timeout, send abort [ 158.522340][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88806be37000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 158.606890][ T9372] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1260'. [ 159.456327][ T9403] af_packet: tpacket_rcv: packet too big, clamped from 122 to 4294967286. macoff=82 [ 159.527830][ T9409] tipc: Can't bind to reserved service type 0 [ 159.691995][ T9424] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1280'. [ 159.695182][ T9424] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1280'. [ 161.176578][ T9455] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1288'. [ 161.447300][ T9463] netlink: 'syz.0.1292': attribute type 10 has an invalid length. [ 161.452090][ T9463] netlink: 'syz.0.1292': attribute type 10 has an invalid length. [ 161.455199][ T9463] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1292'. [ 163.130433][ T9504] IPVS: sync thread started: state = BACKUP, mcast_ifn = netdevsim0, syncid = 67108897, id = 0 [ 164.141520][ T9524] lo speed is unknown, defaulting to 1000 [ 164.144024][ T9524] lo speed is unknown, defaulting to 1000 [ 164.302381][ T9535] xt_TCPMSS: Only works on TCP SYN packets [ 164.648795][ T9552] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 164.651794][ T9552] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 164.654583][ T9552] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 164.657484][ T9552] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 164.660736][ T9552] geneve2: entered promiscuous mode [ 164.662461][ T9552] geneve2: entered allmulticast mode [ 164.667374][ T9552] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 164.670346][ T9552] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 164.673206][ T9552] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 164.676288][ T9552] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 165.185327][ T9572] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1331'. [ 165.191616][ T9572] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1331'. [ 166.650984][ T9615] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1348'. [ 167.500364][ T5953] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 167.613194][ T9671] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1362'. [ 168.290441][ T6008] IPVS: starting estimator thread 0... [ 168.325579][ T5949] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 168.395393][ T9711] IPVS: using max 44 ests per chain, 105600 per kthread [ 170.176815][ T5949] Bluetooth: hci0: command 0x0406 tx timeout [ 170.180010][ T5949] Bluetooth: hci1: command 0x0406 tx timeout [ 170.182354][ T5949] Bluetooth: hci2: command 0x0406 tx timeout [ 170.184533][ T5300] Bluetooth: hci3: command 0x0405 tx timeout [ 170.314183][ T9761] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1400'. [ 171.369971][ T9822] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1418'. [ 171.373562][ T9822] netlink: 'syz.3.1418': attribute type 30 has an invalid length. [ 171.424393][ T9827] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1418'. [ 171.428978][ T9827] netlink: 'syz.3.1418': attribute type 30 has an invalid length. [ 171.480664][ T9822] netlink: 'syz.3.1418': attribute type 10 has an invalid length. [ 171.497670][ T9822] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.501254][ T9822] bond0: (slave team0): Enslaving as an active interface with an up link [ 171.924404][ T9840] netlink: 'syz.2.1430': attribute type 10 has an invalid length. [ 171.927014][ T9840] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1430'. [ 171.932016][ T9840] bridge0: port 3(dummy0) entered blocking state [ 171.934088][ T9840] bridge0: port 3(dummy0) entered disabled state [ 171.936569][ T9840] dummy0: entered allmulticast mode [ 171.942877][ T9840] dummy0: entered promiscuous mode [ 171.945565][ T9840] bridge0: port 3(dummy0) entered blocking state [ 171.947567][ T9840] bridge0: port 3(dummy0) entered forwarding state [ 171.956082][ T40] audit: type=1326 audit(1750952489.213:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9841 comm="syz.0.1432" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf712e579 code=0x0 [ 172.443325][ T40] audit: type=1326 audit(1750952489.693:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9865 comm="syz.2.1444" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 172.451250][ T40] audit: type=1326 audit(1750952489.693:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9865 comm="syz.2.1444" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 172.461653][ T40] audit: type=1326 audit(1750952489.693:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9865 comm="syz.2.1444" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 172.468621][ T40] audit: type=1326 audit(1750952489.693:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9865 comm="syz.2.1444" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf710e598 code=0x7ffc0000 [ 172.476261][ T40] audit: type=1326 audit(1750952489.693:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9865 comm="syz.2.1444" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 172.482974][ T40] audit: type=1326 audit(1750952489.693:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9865 comm="syz.2.1444" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf710e598 code=0x7ffc0000 [ 172.489799][ T40] audit: type=1326 audit(1750952489.693:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9865 comm="syz.2.1444" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 172.500211][ T40] audit: type=1326 audit(1750952489.693:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9865 comm="syz.2.1444" exe="/syz-executor" sig=0 arch=40000003 syscall=119 compat=1 ip=0xf710e598 code=0x7ffc0000 [ 172.513624][ T40] audit: type=1326 audit(1750952489.693:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9865 comm="syz.2.1444" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 173.011068][ T5944] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 173.064316][ T9906] netlink: 452 bytes leftover after parsing attributes in process `syz.3.1459'. [ 173.070191][ T9906] netlink: 452 bytes leftover after parsing attributes in process `syz.3.1459'. [ 173.090841][ T9906] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1459'. [ 173.215772][ T5948] Bluetooth: hci2: command 0x0406 tx timeout [ 174.831712][T10039] lo speed is unknown, defaulting to 1000 [ 174.834204][T10039] lo speed is unknown, defaulting to 1000 [ 175.398865][T10080] overlayfs: failed to clone upperpath [ 175.786690][ T5948] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 176.255515][ T5944] Bluetooth: hci1: command 0x0406 tx timeout [ 176.688081][T10146] overlayfs: failed to clone upperpath [ 177.868535][T10233] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1603'. [ 177.920271][T10241] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 178.060706][T10253] bridge0: port 4(vlan0) entered blocking state [ 178.063337][T10253] bridge0: port 4(vlan0) entered disabled state [ 178.065551][T10253] vlan0: entered allmulticast mode [ 178.067169][T10253] bond0: entered allmulticast mode [ 178.068794][T10253] bond_slave_0: entered allmulticast mode [ 178.070666][T10253] bond_slave_1: entered allmulticast mode [ 178.073586][T10253] vlan0: entered promiscuous mode [ 178.075168][T10253] bond0: entered promiscuous mode [ 178.078875][T10253] bond_slave_0: entered promiscuous mode [ 178.080815][T10253] bond_slave_1: entered promiscuous mode [ 178.112609][T10255] fuse: Bad value for 'fd' [ 179.068544][ T5948] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 179.152576][T10299] overlayfs: failed to clone upperpath [ 179.628711][ T5948] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 179.695540][ T5944] Bluetooth: hci2: unexpected event for opcode 0x0c05 [ 179.771307][T10353] Illegal XDP return value 3545245310 on prog (id 93) dev syz_tun, expect packet loss! [ 179.822599][ T5944] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 179.838822][ T40] kauditd_printk_skb: 111 callbacks suppressed [ 179.838832][ T40] audit: type=1326 audit(1750952497.093:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10360 comm="syz.0.1659" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf712e579 code=0x0 [ 179.935775][ T5948] Bluetooth: hci0: command 0x0406 tx timeout [ 180.141572][T10376] overlayfs: failed to clone upperpath [ 180.192402][ T5948] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 180.206084][T10384] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1670'. [ 180.300312][ T5948] Bluetooth: hci3: unexpected event for opcode 0x1407 [ 180.587710][T10413] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1684'. [ 180.593017][T10413] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1684'. [ 180.596685][T10413] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1684'. [ 180.600172][T10413] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1684'. [ 180.706548][T10419] netlink: zone id is out of range [ 180.708422][T10419] netlink: zone id is out of range [ 180.721330][T10419] netlink: set zone limit has 4 unknown bytes [ 180.822217][T10432] bridge0: port 3(vlan0) entered blocking state [ 180.824440][T10432] bridge0: port 3(vlan0) entered disabled state [ 180.827746][T10432] vlan0: entered allmulticast mode [ 180.829422][T10432] bond0: entered allmulticast mode [ 180.831081][T10432] bond_slave_0: entered allmulticast mode [ 180.832996][T10432] bond_slave_1: entered allmulticast mode [ 180.836199][T10432] vlan0: entered promiscuous mode [ 180.837832][T10432] bond0: entered promiscuous mode [ 180.839425][T10432] bond_slave_0: entered promiscuous mode [ 180.841295][T10432] bond_slave_1: entered promiscuous mode [ 180.927458][T10438] futex_wake_op: syz.2.1696 tries to shift op by -33; fix this program [ 181.014321][T10448] fuse: Bad value for 'group_id' [ 181.015676][T10447] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 181.017052][T10448] fuse: Bad value for 'group_id' [ 181.023698][T10448] overlayfs: failed to clone upperpath [ 181.056645][T10450] @: renamed from vlan0 [ 181.141538][T10462] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1708'. [ 181.908288][T10506] overlayfs: failed to clone lowerpath [ 181.911449][T10506] overlayfs: failed to clone upperpath [ 182.549858][ T5948] Bluetooth: hci1: unexpected event for opcode 0x2011 [ 182.678625][T10550] IPv6: NLM_F_CREATE should be specified when creating new route [ 182.681287][T10550] IPv6: Can't replace route, no match found [ 182.898055][T10566] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1757'. [ 184.862887][ T5948] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 185.102710][ T5944] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 185.135519][T10683] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1810'. [ 185.139324][T10683] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1810'. [ 185.278461][T10701] bridge0: port 3(vlan0) entered blocking state [ 185.281293][T10701] bridge0: port 3(vlan0) entered disabled state [ 185.284046][T10701] vlan0: entered allmulticast mode [ 185.291791][T10701] bond0: entered allmulticast mode [ 185.293938][T10701] bond_slave_0: entered allmulticast mode [ 185.297849][T10701] bond_slave_1: entered allmulticast mode [ 185.300785][T10701] team0: entered allmulticast mode [ 185.303116][T10701] team_slave_0: entered allmulticast mode [ 185.308414][T10701] team_slave_1: entered allmulticast mode [ 185.313580][T10701] vlan0: entered promiscuous mode [ 185.316563][T10701] bond0: entered promiscuous mode [ 185.318320][T10701] bond_slave_0: entered promiscuous mode [ 185.320418][T10701] bond_slave_1: entered promiscuous mode [ 185.322316][T10701] team0: entered promiscuous mode [ 185.324018][T10701] team_slave_0: entered promiscuous mode [ 185.326877][T10701] team_slave_1: entered promiscuous mode [ 185.697213][T10747] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1836'. [ 185.821182][T10761] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 186.450606][T10804] netlink: 'syz.0.1862': attribute type 1 has an invalid length. [ 186.473150][T10804] 8021q: adding VLAN 0 to HW filter on device bond1 [ 186.491274][T10804] veth3: entered promiscuous mode [ 186.496300][T10804] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 186.586457][ T5948] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 186.589894][ T5948] Bluetooth: hci1: Injecting HCI hardware error event [ 186.593184][ T5948] Bluetooth: hci1: hardware error 0x00 [ 186.706446][T10831] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1872'. [ 186.709386][T10831] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1872'. [ 186.738874][T10833] overlayfs: failed to clone upperpath [ 186.929763][ T5944] Bluetooth: hci1: unexpected event for opcode 0x0005 [ 187.913970][T10933] overlayfs: failed to clone upperpath [ 188.665498][ T5948] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 188.907610][T10986] dummy0: left allmulticast mode [ 188.909883][T10986] dummy0: left promiscuous mode [ 188.911557][T10986] bridge0: port 3(dummy0) entered disabled state [ 188.921948][T10986] bridge_slave_0: left allmulticast mode [ 188.923825][T10986] bridge_slave_0: left promiscuous mode [ 188.925804][T10986] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.029462][T10996] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1948'. [ 189.064212][T10986] bridge_slave_1: left allmulticast mode [ 189.066259][T10986] bridge_slave_1: left promiscuous mode [ 189.068188][T10986] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.074063][T10986] vlan0: left promiscuous mode [ 189.076542][T10986] bond0: left promiscuous mode [ 189.078205][T10986] bond_slave_0: left promiscuous mode [ 189.080101][T10986] bond_slave_1: left promiscuous mode [ 189.085168][T10986] bond0: (slave bond_slave_0): Releasing backup interface [ 189.089635][T10986] bond_slave_0: left allmulticast mode [ 189.094223][T10986] bond0: (slave bond_slave_1): Releasing backup interface [ 189.097806][T10986] bond_slave_1: left allmulticast mode [ 189.109944][T10986] team0: Port device team_slave_0 removed [ 189.119189][T10986] team0: Port device team_slave_1 removed [ 189.121479][T10986] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.123878][T10986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.127522][T10986] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.129930][T10986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.136920][T10986] vlan0: left allmulticast mode [ 189.138880][T10986] bond0: left allmulticast mode [ 189.141379][T10986] bridge0: port 4(vlan0) entered disabled state [ 189.182752][T10989] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.270007][T10989] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.343466][T10989] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.405389][T10989] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.489844][T10989] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.498448][T10989] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.510637][T10989] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.518832][T10989] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.749286][ T40] audit: type=1326 audit(1750952507.003:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11016 comm="syz.3.1958" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf704e579 code=0x0 [ 190.937179][T11072] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1984'. [ 190.990292][T11074] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 190.993897][T11074] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.071824][T11074] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.076038][T11074] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.126720][T11074] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.130149][T11074] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.185109][T11074] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 191.188476][T11074] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.270162][T11074] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.273621][T11074] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.284786][T11074] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.288192][T11074] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.300185][T11074] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.303523][T11074] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.315887][T11074] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.319366][T11074] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.571034][T11096] overlayfs: failed to clone upperpath [ 191.823499][T11110] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2001'. [ 192.605077][ T5948] Bluetooth: hci0: Malformed Event: 0x02 [ 192.664334][ T40] audit: type=1800 audit(1750952509.913:342): pid=11153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2020" name="nullb0" dev="tmpfs" ino=2401 res=0 errno=0 [ 192.902188][T11189] netlink: 'syz.0.2037': attribute type 5 has an invalid length. [ 193.590131][T11213] lo speed is unknown, defaulting to 1000 [ 193.592755][T11213] lo speed is unknown, defaulting to 1000 [ 193.637110][ T6021] IPVS: starting estimator thread 0... [ 193.697313][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.699350][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.725418][T11216] IPVS: using max 44 ests per chain, 105600 per kthread [ 194.270194][T11232] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2053'. [ 194.282072][T11232] bond2: entered promiscuous mode [ 194.283848][T11232] bond2: entered allmulticast mode [ 194.289597][T11232] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2053'. [ 194.293012][T11232] bond2: left promiscuous mode [ 194.294673][T11232] bond2: left allmulticast mode [ 194.297936][T11232] 8021q: adding VLAN 0 to HW filter on device bond2 [ 194.732721][ T40] audit: type=1326 audit(1750952511.983:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11244 comm="syz.2.2059" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 194.741411][ T40] audit: type=1326 audit(1750952511.983:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11244 comm="syz.2.2059" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 194.749172][ T40] audit: type=1326 audit(1750952511.983:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11244 comm="syz.2.2059" exe="/syz-executor" sig=0 arch=40000003 syscall=16 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 194.756076][ T40] audit: type=1326 audit(1750952511.983:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11244 comm="syz.2.2059" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 194.762723][ T40] audit: type=1326 audit(1750952511.983:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11244 comm="syz.2.2059" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7ffc0000 [ 194.875003][T11255] bond0: (slave team0): Releasing backup interface [ 194.878500][T11255] team0: left promiscuous mode [ 194.880570][T11255] team_slave_0: left promiscuous mode [ 194.882987][T11255] team_slave_1: left promiscuous mode [ 194.886306][T11255] team0: left allmulticast mode [ 194.888349][T11255] team_slave_0: left allmulticast mode [ 194.890091][T11255] team_slave_1: left allmulticast mode [ 194.897810][T11255] bridge_slave_0: left allmulticast mode [ 194.899665][T11255] bridge_slave_0: left promiscuous mode [ 194.901742][T11255] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.023142][T11260] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2066'. [ 195.041235][T11255] bridge_slave_1: left allmulticast mode [ 195.043043][T11255] bridge_slave_1: left promiscuous mode [ 195.044851][T11255] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.053987][T11255] bond0: (slave bond_slave_0): Releasing backup interface [ 195.056831][T11255] bond_slave_0: left promiscuous mode [ 195.058645][T11255] bond_slave_0: left allmulticast mode [ 195.063339][T11255] bond0: (slave bond_slave_1): Releasing backup interface [ 195.068057][T11255] bond_slave_1: left promiscuous mode [ 195.069942][T11255] bond_slave_1: left allmulticast mode [ 195.080459][T11255] team0: Port device team_slave_0 removed [ 195.087241][T11255] team0: Port device team_slave_1 removed [ 195.089666][T11255] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.092150][T11255] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.097305][T11255] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.099730][T11255] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.105642][T11255] batman_adv: batadv0: Interface deactivated: wlan0 [ 195.107829][T11255] batman_adv: batadv0: Removing interface: wlan0 [ 195.110898][T11255] batman_adv: batadv0: Removing interface: gretap1 [ 195.113480][T11255] vlan0: left allmulticast mode [ 195.115110][T11255] bond0: left allmulticast mode [ 195.117238][T11255] vlan0: left promiscuous mode [ 195.118830][T11255] bond0: left promiscuous mode [ 195.120635][T11255] bridge0: port 3(vlan0) entered disabled state [ 195.185598][T11270] bridge_slave_0: left allmulticast mode [ 195.187906][T11270] bridge_slave_0: left promiscuous mode [ 195.189791][T11270] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.321907][T11270] bridge_slave_1: left allmulticast mode [ 195.324443][T11270] bridge_slave_1: left promiscuous mode [ 195.327176][T11270] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.333955][T11270] @: left promiscuous mode [ 195.336124][T11270] bond0: left promiscuous mode [ 195.337757][T11270] bond_slave_0: left promiscuous mode [ 195.339616][T11270] bond_slave_1: left promiscuous mode [ 195.344709][T11270] bond0: (slave bond_slave_0): Releasing backup interface [ 195.347525][T11270] bond_slave_0: left allmulticast mode [ 195.352721][T11270] bond0: (slave bond_slave_1): Releasing backup interface [ 195.357105][T11270] bond_slave_1: left allmulticast mode [ 195.362956][T11270] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.365808][T11270] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.373736][T11270] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.376209][T11270] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 195.384182][T11270] @: left allmulticast mode [ 195.385840][T11270] bond0: left allmulticast mode [ 195.388218][T11270] bridge0: port 3(@) entered disabled state [ 195.393536][T11270] bond1: (slave veth3): Releasing backup interface [ 195.694112][T11283] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2076'. [ 195.880577][T11289] infiniband syz1: set active [ 195.882526][T11289] infiniband syz1: added bond0 [ 195.902442][T11289] RDS/IB: syz1: added [ 195.903837][T11289] smc: adding ib device syz1 with port count 1 [ 195.906152][T11289] smc: ib device syz1 port 1 has pnetid [ 196.350585][ T5948] Bluetooth: hci2: Malformed Event: 0x02 [ 196.354939][ T5948] Bluetooth: hci2: unexpected event for opcode 0x0428 [ 196.655927][ T5948] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 196.658702][ T5948] Bluetooth: hci0: Injecting HCI hardware error event [ 196.661994][ T5948] Bluetooth: hci0: hardware error 0x00 [ 197.104099][T11349] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2105'. [ 197.176874][T11360] netlink: 'syz.1.2110': attribute type 5 has an invalid length. [ 197.980112][ T40] audit: type=1326 audit(1750952515.233:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11373 comm="syz.3.2117" exe="/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf704e579 code=0x0 [ 198.197496][T11388] bridge0: entered promiscuous mode [ 198.200419][T11388] bond0: entered promiscuous mode [ 198.202582][T11388] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 198.207049][T11388] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 198.211015][T11388] hsr1: entered allmulticast mode [ 198.213258][T11388] bridge0: entered allmulticast mode [ 198.216911][T11388] bond0: entered allmulticast mode [ 198.358344][T11397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2127'. [ 198.735609][ T5948] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 199.468403][T11450] netlink: 'syz.1.2150': attribute type 5 has an invalid length. [ 200.416424][ T5948] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 200.419119][ T5948] Bluetooth: hci2: Injecting HCI hardware error event [ 200.422580][ T5944] Bluetooth: hci2: hardware error 0x00 [ 200.903817][T11503] netlink: 'syz.1.2174': attribute type 5 has an invalid length. [ 201.266308][ T5948] Bluetooth: hci3: Malformed Event: 0x02 [ 201.395940][T11539] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2191'. [ 201.961155][T11561] netlink: 'syz.3.2200': attribute type 10 has an invalid length. [ 201.963964][T11561] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2200'. [ 201.968521][T11561] batadv0: entered promiscuous mode [ 201.970556][T11561] batadv0: entered allmulticast mode [ 201.972855][T11561] bridge0: port 1(batadv0) entered blocking state [ 201.976106][T11561] bridge0: port 1(batadv0) entered disabled state [ 201.982994][T11561] bridge0: port 1(batadv0) entered blocking state [ 201.985534][T11561] bridge0: port 1(batadv0) entered forwarding state [ 201.994115][T11561] batman_adv: batadv0: Adding interface: dummy0 [ 201.996636][T11561] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.005763][T11561] batman_adv: batadv0: Interface activated: dummy0 [ 202.025159][T11561] batadv0: mtu less than device minimum [ 202.028882][T11561] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-64) [ 202.032818][T11561] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-64) [ 202.036672][T11561] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-64) [ 202.040386][T11561] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-64) [ 202.044194][T11561] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-64) [ 202.047923][T11561] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-64) [ 202.051685][T11561] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-64) [ 202.055411][T11561] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-64) [ 202.059126][T11561] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-64) [ 202.187089][ T13] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 202.190228][ T13] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 202.206108][T11575] netlink: 'syz.0.2207': attribute type 7 has an invalid length. [ 202.270068][T11584] netlink: 'syz.0.2211': attribute type 5 has an invalid length. [ 202.495377][ T5944] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 202.674748][T11610] bond0: (slave bridge0): Releasing backup interface [ 202.679031][T11610] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.681835][T11610] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.687621][T11610] bridge_slave_0: left allmulticast mode [ 202.689509][T11610] bridge_slave_0: left promiscuous mode [ 202.691355][T11610] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.694897][T11610] bridge_slave_1: left allmulticast mode [ 202.697156][T11610] bridge_slave_1: left promiscuous mode [ 202.699115][T11610] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.703632][T11610] bond0: (slave bond_slave_0): Releasing backup interface [ 202.708198][T11610] bond0: (slave bond_slave_1): Releasing backup interface [ 202.718425][T11610] team0: Port device team_slave_0 removed [ 202.723683][T11610] team0: Port device team_slave_1 removed [ 202.726661][T11610] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.729778][T11610] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.732851][T11610] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.735699][T11610] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.741455][T11610] bond0: (slave netdevsim0): Releasing backup interface [ 202.813591][T11620] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2227'. [ 203.710077][T11646] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2237'. [ 203.872099][ T5948] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 203.873143][T11663] raw_sendmsg: syz.3.2245 forgot to set AF_INET. Fix it! [ 203.877126][ T5948] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 203.880318][ T5948] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 203.884128][ T5948] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 203.890513][ T5948] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 203.918860][T11660] lo speed is unknown, defaulting to 1000 [ 203.921489][T11660] lo speed is unknown, defaulting to 1000 [ 204.146788][ T91] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.220336][ T91] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.229037][T11660] chnl_net:caif_netlink_parms(): no params data found [ 204.291116][ T91] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.333544][T11660] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.336364][T11660] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.338674][T11660] bridge_slave_0: entered allmulticast mode [ 204.341519][T11660] bridge_slave_0: entered promiscuous mode [ 204.344879][T11660] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.347585][T11660] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.349953][T11660] bridge_slave_1: entered allmulticast mode [ 204.352882][T11660] bridge_slave_1: entered promiscuous mode [ 204.361919][ T91] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.413367][T11660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.420271][T11660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.471231][T11660] team0: Port device team_slave_0 added [ 204.477294][T11660] team0: Port device team_slave_1 added [ 204.528557][T11660] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.531399][T11660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.541982][T11660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.553489][T11660] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.556415][T11660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.564327][T11660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.155047][T11701] netlink: 'syz.2.2259': attribute type 1 has an invalid length. [ 205.192200][ T91] bond0 (unregistering): Released all slaves [ 205.252625][ T91] bond1 (unregistering): Released all slaves [ 205.262215][T11696] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 205.329239][T11660] hsr_slave_0: entered promiscuous mode [ 205.331386][T11660] hsr_slave_1: entered promiscuous mode [ 205.333542][T11660] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 205.337893][T11660] Cannot create hsr debugfs directory [ 205.343786][ T91] tipc: Disabling bearer [ 205.347780][ T91] tipc: Left network mode [ 205.385803][ T91] IPVS: stopping backup sync thread 9504 ... [ 205.563665][T11734] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2270'. [ 205.870460][ T91] hsr_slave_0: left promiscuous mode [ 205.873431][ T91] hsr_slave_1: left promiscuous mode [ 205.903426][ T91] veth1_macvtap: left promiscuous mode [ 205.906319][ T91] veth0_macvtap: left promiscuous mode [ 205.935376][ T5944] Bluetooth: hci4: command tx timeout [ 206.788008][ T93] smc: removing ib device sz1 [ 206.791375][T11765] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2279'. [ 206.857732][T11660] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 206.872230][T11660] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 206.881845][T11660] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 206.894608][T11660] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 206.954601][T11800] trusted_key: syz.3.2285 sent an empty control message without MSG_MORE. [ 206.960013][T11660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.973707][T11660] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.979497][ T1184] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.981803][ T1184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.989241][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.991941][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.086894][T11809] batman_adv: batadv0: Interface deactivated: dummy0 [ 207.089040][T11809] batman_adv: batadv0: Removing interface: dummy0 [ 207.092040][T11809] bridge0: port 1(batadv0) entered disabled state [ 207.171757][T11660] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.192551][T11660] veth0_vlan: entered promiscuous mode [ 207.204754][T11660] veth1_vlan: entered promiscuous mode [ 207.223586][T11815] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2289'. [ 207.227966][T11815] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 207.231688][T11660] veth0_macvtap: entered promiscuous mode [ 207.242584][T11660] veth1_macvtap: entered promiscuous mode [ 207.251421][T11660] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.261048][T11660] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.267633][T11660] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.270324][T11660] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.273003][T11660] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.276033][T11660] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.297278][ T29] net_ratelimit: 15 callbacks suppressed [ 207.297293][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.313121][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.315959][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.334598][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.338058][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.622227][ T1462] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.742340][T11837] netlink: 'syz.2.2298': attribute type 5 has an invalid length. [ 207.826694][ T5948] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 207.831117][ T5948] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 207.835774][ T5948] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 207.839734][ T5948] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 207.843612][ T5948] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 207.889315][T11840] lo speed is unknown, defaulting to 1000 [ 208.015750][ T5944] Bluetooth: hci4: command tx timeout [ 208.104407][T11840] chnl_net:caif_netlink_parms(): no params data found [ 208.122619][ T46] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.126569][ T46] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.205175][ T46] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.209964][ T46] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.218409][T11840] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.220941][T11840] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.223270][T11840] bridge_slave_0: entered allmulticast mode [ 208.229549][T11840] bridge_slave_0: entered promiscuous mode [ 208.234221][T11840] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.236979][T11840] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.239239][T11840] bridge_slave_1: entered allmulticast mode [ 208.241929][T11840] bridge_slave_1: entered promiscuous mode [ 208.285876][T11840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.291211][ T46] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.294265][ T46] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.301678][T11840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.336803][ T3226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.349961][T11840] team0: Port device team_slave_0 added [ 208.354912][T11840] team0: Port device team_slave_1 added [ 208.387084][ T46] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.390093][ T46] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.423063][T11840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.425446][T11840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.433605][T11840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.446447][T11840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.448758][T11840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.457322][T11840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.462091][T11862] tipc: Started in network mode [ 208.463890][T11862] tipc: Node identity , cluster identity 4711 [ 208.513635][T11840] hsr_slave_0: entered promiscuous mode [ 208.516197][T11840] hsr_slave_1: entered promiscuous mode [ 208.518253][T11840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 208.520744][T11840] Cannot create hsr debugfs directory [ 208.984014][ T46] bond0 (unregistering): Released all slaves [ 208.990309][ T46] bond1 (unregistering): Released all slaves [ 209.049283][ T46] bond2 (unregistering): Released all slaves [ 209.120230][ T46] : left promiscuous mode [ 209.144909][T11877] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2312'. [ 209.222907][ T46] tipc: Left network mode [ 209.375501][ T3226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.494121][ T46] hsr_slave_0: left promiscuous mode [ 209.499048][ T46] hsr_slave_1: left promiscuous mode [ 209.527182][ T46] veth1_macvtap: left promiscuous mode [ 209.531934][ T46] veth0_macvtap: left promiscuous mode [ 209.771520][T11907] netlink: 'syz.2.2319': attribute type 16 has an invalid length. [ 209.774558][T11907] netlink: 'syz.2.2319': attribute type 17 has an invalid length. [ 209.777545][T11907] netlink: 'syz.2.2319': attribute type 27 has an invalid length. [ 209.810820][T11911] netlink: 'syz.2.2321': attribute type 11 has an invalid length. [ 209.856764][ T5944] Bluetooth: hci1: command tx timeout [ 210.105369][ T5944] Bluetooth: hci4: command tx timeout [ 210.415465][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.500844][ T837] lo speed is unknown, defaulting to 1000 [ 210.502700][ T837] syz0: Port: 1 Link DOWN [ 210.566284][ T6025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.584403][T11840] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 210.589887][T11840] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 210.600112][T11840] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 210.610713][T11840] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 210.657739][T11840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.658842][ T1462] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.673500][T11840] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.681004][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.684107][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.691825][ T93] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.694828][ T93] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.816454][T11840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.826465][ T46] IPVS: stop unused estimator thread 0... [ 210.840823][T11840] veth0_vlan: entered promiscuous mode [ 210.846998][T11840] veth1_vlan: entered promiscuous mode [ 210.869169][T11840] veth0_macvtap: entered promiscuous mode [ 210.873298][T11840] veth1_macvtap: entered promiscuous mode [ 210.883400][T11840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.888981][T11840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.894554][T11840] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.896084][ T6025] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.897620][T11840] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.902524][T11840] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.905554][T11840] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.932476][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.935349][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.947077][ T93] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.950194][ T93] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.456705][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.478833][T11966] bridge0: port 1(syz_tun) entered blocking state [ 211.481920][T11966] bridge0: port 1(syz_tun) entered disabled state [ 211.484286][T11966] syz_tun: entered allmulticast mode [ 211.487622][T11966] syz_tun: entered promiscuous mode [ 211.490431][T11966] bridge0: port 1(syz_tun) entered blocking state [ 211.492765][T11966] bridge0: port 1(syz_tun) entered forwarding state [ 211.854209][T11977] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 211.858337][T11977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.906474][ T40] audit: type=1326 audit(1750952529.163:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11975 comm="syz.1.2340" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf705e579 code=0x0 [ 211.935551][ T5944] Bluetooth: hci1: command tx timeout [ 212.175606][ T5944] Bluetooth: hci4: command tx timeout [ 212.496059][ T5942] net_ratelimit: 1 callbacks suppressed [ 212.496071][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.675379][ T1462] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 212.832972][ T1462] usb 8-1: New USB device found, idVendor=046d, idProduct=08b7, bcdDevice=ca.8e [ 212.845434][ T1462] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.852030][ T1462] pwc: Logitech ViewPort AV 100 webcam detected. [ 213.055188][T11996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.058970][T11996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.062168][T11996] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2348'. [ 213.073136][ T1462] pwc: Failed to set LED on/off time (-71) [ 213.076008][ T1462] pwc: send_video_command error -71 [ 213.077661][ T1462] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 213.080107][ T1462] Philips webcam 8-1:127.0: probe with driver Philips webcam failed with error -71 [ 213.087449][ T1462] usb 8-1: USB disconnect, device number 3 [ 213.535839][ T3226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.592351][T12055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2374'. [ 213.683012][ T40] audit: type=1326 audit(1750952530.933:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12058 comm="syz.2.2376" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7fc00000 [ 213.695453][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.705492][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.708647][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.743176][ T40] audit: type=1326 audit(1750952530.993:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12058 comm="syz.2.2376" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7fc00000 [ 214.025418][ T5944] Bluetooth: hci1: command tx timeout [ 214.264453][T12092] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2389'. [ 214.312203][T12097] netlink: 'syz.1.2391': attribute type 1 has an invalid length. [ 214.355733][T12097] 8021q: adding VLAN 0 to HW filter on device bond1 [ 214.409092][T12097] bond1: (slave geneve2): making interface the new active one [ 214.416280][T12097] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.426005][T12097] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.432159][T12097] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 214.446311][ T13] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.463134][ T40] audit: type=1326 audit(1750952531.713:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12058 comm="syz.2.2376" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf710e579 code=0x7fc00000 [ 214.468711][T12097] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.477714][T12097] bond1: entered promiscuous mode [ 214.479453][T12097] geneve2: entered promiscuous mode [ 214.545337][ T6025] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 214.575884][ T3226] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.705724][ T6025] usb 8-1: Using ep0 maxpacket: 16 [ 214.709942][ T6025] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 214.714893][ T6025] usb 8-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 214.718405][ T6025] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.723205][ T6025] usb 8-1: config 0 descriptor?? [ 214.731834][ T6025] input: bcm5974 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input9 [ 214.933414][ T5334] bcm5974 8-1:0.0: could not read from device [ 214.944296][ T6025] bcm5974 8-1:0.0: could not read from device [ 214.951172][ T5334] bcm5974 8-1:0.0: could not read from device [ 214.957147][ T6025] input: failed to attach handler mousedev to device input9, error: -5 [ 214.969660][ T5334] bcm5974 8-1:0.0: could not read from device [ 214.974701][ T5334] bcm5974 8-1:0.0: could not read from device [ 214.976155][ T6025] usb 8-1: USB disconnect, device number 4 [ 215.632291][T12159] netlink: 'syz.3.2418': attribute type 1 has an invalid length. [ 216.105488][ T5944] Bluetooth: hci1: command tx timeout [ 217.484842][ T5948] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 217.488879][ T5948] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 217.493065][ T5948] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 217.510530][ T8629] bridge0: port 1(syz_tun) entered disabled state [ 217.515500][ T5948] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 217.519029][ T5948] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 217.523907][ T8629] syz_tun (unregistering): left allmulticast mode [ 217.526718][ T8629] syz_tun (unregistering): left promiscuous mode [ 217.529451][ T8629] bridge0: port 1(syz_tun) entered disabled state [ 217.678993][T12315] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2486'. [ 217.695718][ T29] net_ratelimit: 9 callbacks suppressed [ 217.695729][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 217.769963][T12300] chnl_net:caif_netlink_parms(): no params data found [ 217.841739][T12300] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.844232][T12300] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.846731][T12300] bridge_slave_0: entered allmulticast mode [ 217.849340][T12300] bridge_slave_0: entered promiscuous mode [ 217.852622][T12300] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.855029][T12300] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.858364][T12300] bridge_slave_1: entered allmulticast mode [ 217.861571][T12300] bridge_slave_1: entered promiscuous mode [ 217.917757][T12300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.922730][T12300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.932573][T12326] hub 8-0:1.0: USB hub found [ 217.934563][T12326] hub 8-0:1.0: 1 port detected [ 217.960054][T12300] team0: Port device team_slave_0 added [ 217.964981][T12300] team0: Port device team_slave_1 added [ 217.999278][T12300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.001453][T12300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.009592][T12300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.013746][T12300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.016304][T12300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.024465][T12300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.062643][T12300] hsr_slave_0: entered promiscuous mode [ 218.064859][T12300] hsr_slave_1: entered promiscuous mode [ 218.067037][T12300] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 218.069774][T12300] Cannot create hsr debugfs directory [ 218.186962][T12300] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.262089][T12300] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.345708][T12300] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.426940][T12300] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.541862][T12300] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 218.546432][T12300] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 218.550573][T12300] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 218.555120][T12300] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 218.578841][T12300] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.581853][T12300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.585167][T12300] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.588272][T12300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.601823][ T93] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.605084][ T93] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.664854][T12300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.678221][T12300] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.683903][ T91] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.686634][ T91] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.699375][ T93] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.702421][ T93] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.735531][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.815171][T12300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.837240][T12300] veth0_vlan: entered promiscuous mode [ 218.843342][T12300] veth1_vlan: entered promiscuous mode [ 218.857911][T12300] veth0_macvtap: entered promiscuous mode [ 218.861372][T12300] veth1_macvtap: entered promiscuous mode [ 218.873793][T12300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.879929][T12300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.884752][T12300] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.888407][T12300] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.890907][T12300] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.893653][T12300] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.934070][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.942205][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.957036][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.959544][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.044412][ C3] Unknown status report in ack skb [ 219.253610][T12387] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2509'. [ 219.335355][ T5984] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 219.498655][ T5984] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 219.503188][ T5984] usb 7-1: config 0 has no interface number 0 [ 219.505195][ T5984] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.508616][ T5984] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.511654][ T5984] usb 7-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 219.514446][ T5984] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.518518][ T5984] usb 7-1: config 0 descriptor?? [ 219.535509][ T5944] Bluetooth: hci3: command tx timeout [ 219.775628][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.778258][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.930486][ T5984] prodikeys 0003:041E:2801.0005: unknown main item tag 0x0 [ 219.933747][ T5984] prodikeys 0003:041E:2801.0005: unknown main item tag 0x0 [ 219.937077][ T5984] prodikeys 0003:041E:2801.0005: unknown main item tag 0x0 [ 219.939522][ T5984] prodikeys 0003:041E:2801.0005: unknown main item tag 0x0 [ 219.941878][ T5984] prodikeys 0003:041E:2801.0005: unknown main item tag 0x0 [ 219.944147][ T5984] prodikeys 0003:041E:2801.0005: unknown main item tag 0x0 [ 219.946602][ T5984] prodikeys 0003:041E:2801.0005: unknown main item tag 0x0 [ 219.953528][ T5984] prodikeys 0003:041E:2801.0005: hidraw1: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.2-1/input1 [ 219.957978][ T5984] hid_prodikeys: hid-prodikeys: failed to find output report [ 219.957978][ T5984] [ 220.196760][T12393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 220.200207][T12393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 220.565411][ T6021] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 220.727772][ T6021] usb 5-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.731222][ T6021] usb 5-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.734375][ T6021] usb 5-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 220.738521][ T6021] usb 5-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 220.741311][ T6021] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.815787][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.153119][ T6021] megaworld 0003:07B5:0312.0006: item fetching failed at offset 1/5 [ 221.156153][ T6021] megaworld 0003:07B5:0312.0006: parse failed [ 221.158295][ T6021] megaworld 0003:07B5:0312.0006: probe with driver megaworld failed with error -22 [ 221.356263][ T6021] usb 5-1: USB disconnect, device number 4 [ 221.600745][T12415] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2518'. [ 221.625469][ T5944] Bluetooth: hci3: command tx timeout [ 221.646599][T12417] netlink: 'syz.1.2519': attribute type 1 has an invalid length. [ 221.660581][T12417] 8021q: adding VLAN 0 to HW filter on device bond2 [ 221.856182][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.866693][ T837] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.922958][T12425] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2522'. [ 221.953758][T12428] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2523'. [ 222.122754][ T5984] usb 7-1: USB disconnect, device number 6 [ 222.126884][T12435] netlink: 'syz.3.2526': attribute type 10 has an invalid length. [ 222.129917][T12435] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2526'. [ 222.132719][T12435] batadv0: entered promiscuous mode [ 222.134485][T12435] bridge0: port 3(batadv0) entered blocking state [ 222.137756][T12435] bridge0: port 3(batadv0) entered disabled state [ 222.139998][T12435] batadv0: entered allmulticast mode [ 222.143979][T12435] bridge0: port 3(batadv0) entered blocking state [ 222.145310][ T40] audit: type=1400 audit(1750952539.393:353): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=262620E7 pid=12437 comm="syz.2.2527" [ 222.146131][T12435] bridge0: port 3(batadv0) entered forwarding state [ 222.173740][T12440] netlink: 'syz.2.2528': attribute type 1 has an invalid length. [ 222.367455][T12453] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2533'. [ 222.456763][ T91] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 222.460625][ T91] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 222.615509][T12458] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2535'. [ 222.618462][T12458] netlink: 'syz.1.2535': attribute type 1 has an invalid length. [ 222.770469][T12466] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.773908][T12466] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.778175][T12465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.782590][T12465] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.815602][ T1462] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.901462][ T5942] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.033395][T12484] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2546'. [ 223.036833][T12484] bridge_slave_1: left allmulticast mode [ 223.038601][T12484] bridge_slave_1: left promiscuous mode [ 223.040520][T12484] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.046000][T12484] bridge_slave_0: left allmulticast mode [ 223.047820][T12484] bridge_slave_0: left promiscuous mode [ 223.049684][T12484] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.695775][ T5944] Bluetooth: hci3: command tx timeout [ 223.727742][T12500] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2553'. [ 223.971607][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.982320][T12514] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2558'. [ 224.323980][T12533] __nla_validate_parse: 1 callbacks suppressed [ 224.323990][T12533] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2567'. [ 224.788214][T12556] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2577'. [ 224.936569][T12566] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2580'. [ 224.977827][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.116515][T12573] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2583'. [ 225.230497][T12579] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2586'. [ 225.261765][ T46] tipc: Subscription rejected, illegal request [ 225.775747][ T5944] Bluetooth: hci3: command tx timeout [ 225.855379][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.866480][T12602] syzkaller1: entered promiscuous mode [ 225.868361][T12602] syzkaller1: entered allmulticast mode [ 226.025518][ T9519] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.249583][T12615] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2601'. [ 226.409349][ T5948] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 226.423841][ T5948] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 226.427820][ T5948] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 226.439359][ T5948] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 226.442470][ T5948] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 226.474079][T12630] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2607'. [ 226.710873][T12626] chnl_net:caif_netlink_parms(): no params data found [ 226.798284][ T60] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.869052][ T60] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.885373][T12626] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.887815][T12626] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.890134][T12626] bridge_slave_0: entered allmulticast mode [ 226.892869][T12626] bridge_slave_0: entered promiscuous mode [ 226.896906][T12626] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.899214][T12626] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.901614][T12626] bridge_slave_1: entered allmulticast mode [ 226.915785][T12626] bridge_slave_1: entered promiscuous mode [ 226.966707][T12626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.993361][ T60] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.004425][T12626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.009141][T12657] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2615'. [ 227.049131][T12626] team0: Port device team_slave_0 added [ 227.052629][T12626] team0: Port device team_slave_1 added [ 227.075750][ T60] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.117292][T12626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.120308][T12626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.133573][T12626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.140579][T12626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.143385][T12626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.156714][T12626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.216390][T12626] hsr_slave_0: entered promiscuous mode [ 227.219292][T12626] hsr_slave_1: entered promiscuous mode [ 227.221892][T12626] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.224896][T12626] Cannot create hsr debugfs directory [ 227.361645][T12664] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2617'. [ 227.431356][ T60] bond1 (unregistering): (slave geneve2): Releasing active interface [ 227.434382][ T60] geneve2 (unregistering): left promiscuous mode [ 227.489459][T12668] tipc: Failed to remove unknown binding: 66,1,1/0:1260519042/1260519044 [ 227.548839][T12670] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2620'. [ 227.623065][ T1184] smc: removing ib device syz1 [ 227.623125][ T60] bond0 (unregistering): Released all slaves [ 227.687161][ T60] bond1 (unregistering): Released all slaves [ 227.753314][ T60] bond2 (unregistering): Released all slaves [ 228.138015][T12688] syzkaller1: entered promiscuous mode [ 228.140971][T12688] syzkaller1: entered allmulticast mode [ 228.289876][ T60] IPVS: stopping backup sync thread 8958 ... [ 228.434384][T12626] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 228.449458][T12626] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 228.460999][T12626] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 228.490557][T12626] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 228.496458][ T5944] Bluetooth: hci0: command tx timeout [ 228.538492][T12626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.552911][ T60] hsr_slave_0: left promiscuous mode [ 228.555720][ T60] hsr_slave_1: left promiscuous mode [ 228.571111][ T60] veth1_to_batadv: left promiscuous mode [ 228.572990][ T60] veth1_macvtap: left promiscuous mode [ 228.574740][ T60] veth0_macvtap: left promiscuous mode [ 229.603439][T12746] __nla_validate_parse: 1 callbacks suppressed [ 229.603450][T12746] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2641'. [ 229.686989][T12626] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.693781][ T73] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.696131][ T73] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.702790][ T91] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.705024][ T91] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.848029][T12626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.884776][T12626] veth0_vlan: entered promiscuous mode [ 229.896058][T12626] veth1_vlan: entered promiscuous mode [ 229.913523][T12626] veth0_macvtap: entered promiscuous mode [ 229.919011][T12626] veth1_macvtap: entered promiscuous mode [ 229.929183][T12626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.938057][T12626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.943880][T12626] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.947733][T12626] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.950594][T12626] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.953342][T12626] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.987579][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.990233][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.997270][T12754] netlink: 'syz.2.2643': attribute type 1 has an invalid length. [ 230.013028][T12754] 8021q: adding VLAN 0 to HW filter on device bond1 [ 230.018280][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.020851][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.038730][ T60] IPVS: stop unused estimator thread 0... [ 230.070313][T12759] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2603'. [ 230.074047][T12759] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2603'. [ 230.104482][T12761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2645'. [ 230.303911][T12768] macsec0: entered promiscuous mode [ 230.305583][T12768] macsec0: entered allmulticast mode [ 230.307086][T12768] veth1_macvtap: entered allmulticast mode [ 230.575640][ T5944] Bluetooth: hci0: command tx timeout [ 230.695382][ T837] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 230.877225][ T837] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.881837][ T837] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.886116][ T837] usb 6-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 230.890386][ T837] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.895527][ T837] usb 6-1: config 0 descriptor?? [ 231.008901][T12779] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2652'. [ 231.166478][T12782] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2653'. [ 231.170535][T12782] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2653'. [ 231.318645][ T837] hid-thrustmaster 0003:044F:B65D.0007: unknown main item tag 0x0 [ 231.330125][ T837] hid-thrustmaster 0003:044F:B65D.0007: hidraw1: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.1-1/input0 [ 231.333902][ T837] hid-thrustmaster 0003:044F:B65D.0007: Wrong number of endpoints? [ 231.394255][T12803] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2658'. [ 231.394675][T12802] syzkaller1: entered promiscuous mode [ 231.401783][T12803] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2658'. [ 231.403977][T12802] syzkaller1: entered allmulticast mode [ 231.534481][T12805] overlayfs: failed to resolve './file0': -2 [ 231.589729][ C0] hid-thrustmaster 0003:044F:B65D.0007: URB to get model id failed with error -71 [ 231.593241][ T837] usb 6-1: USB disconnect, device number 8 [ 232.242171][T12825] syzkaller1: entered promiscuous mode [ 232.243941][T12825] syzkaller1: entered allmulticast mode [ 232.655466][ T5948] Bluetooth: hci0: command tx timeout [ 233.279821][T12842] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2676'. [ 233.455364][ T5948] Bluetooth: hci1: command 0x0406 tx timeout [ 234.738275][ T5944] Bluetooth: hci0: command tx timeout [ 235.105509][T12900] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2695'. [ 235.110265][T12900] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2695'. [ 235.207963][T12912] syzkaller1: entered promiscuous mode [ 235.210175][T12912] syzkaller1: entered allmulticast mode [ 235.325774][T12917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2702'. [ 235.702471][T12928] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2706'. [ 235.706533][T12928] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2706'. [ 235.890075][T12939] netlink: 'syz.3.2711': attribute type 72 has an invalid length. [ 236.473406][T12963] netlink: 'syz.1.2721': attribute type 1 has an invalid length. [ 236.845102][T12969] virtio-fs: tag not found [ 237.795360][ T6025] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 237.868180][T12993] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2730'. [ 237.956985][ T6025] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 237.961061][ T6025] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 237.965174][ T6025] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 237.975970][ T6025] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.985995][T12989] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 237.993923][ T6025] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 238.129592][T13001] syz_tun: entered allmulticast mode [ 238.135432][T13000] syz_tun: left allmulticast mode [ 238.194013][ T9519] usb 6-1: USB disconnect, device number 9 [ 239.574387][T13028] Bluetooth: MGMT ver 1.23 [ 241.223962][T13098] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2770'. [ 241.259575][T13100] netlink: 200 bytes leftover after parsing attributes in process `syz.0.2771'. [ 241.622929][ T5944] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 241.626449][ T5944] Bluetooth: hci0: command 0x0c1a tx timeout [ 241.795043][T13124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2779'. [ 241.915969][T13128] netlink: 200 bytes leftover after parsing attributes in process `syz.2.2781'. [ 242.052053][T13133] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2782'. [ 242.122735][T13139] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2785'. [ 242.352725][T13148] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2789'. [ 242.392281][T13153] syzkaller1: entered promiscuous mode [ 242.394087][T13153] syzkaller1: entered allmulticast mode [ 242.635384][ T5984] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 242.755355][ T838] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 242.795334][ T5984] usb 6-1: Using ep0 maxpacket: 32 [ 242.801575][ T5984] usb 6-1: config index 0 descriptor too short (expected 156, got 27) [ 242.804242][ T5984] usb 6-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 242.807768][ T5984] usb 6-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 242.811321][ T5984] usb 6-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 242.815424][ T5984] usb 6-1: config 0 interface 0 has no altsetting 0 [ 242.820112][ T5984] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 242.823024][ T5984] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 242.826367][ T5984] usb 6-1: Product: syz [ 242.827720][ T5984] usb 6-1: Manufacturer: syz [ 242.829236][ T5984] usb 6-1: SerialNumber: syz [ 242.833896][ T5984] usb 6-1: config 0 descriptor?? [ 242.838202][ T5984] ldusb 6-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 242.842426][ T5984] ldusb 6-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 242.907906][ T838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.911639][ T838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.915190][ T838] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 242.919007][ T838] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.925072][ T838] usb 5-1: config 0 descriptor?? [ 242.929381][T13184] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2805'. [ 243.099240][ T6025] usb 6-1: USB disconnect, device number 10 [ 243.099803][T13155] ldusb 6-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 243.101804][ C0] ldusb 6-1:0.0: usb_submit_urb failed (-19) [ 243.109887][ T6025] ldusb 6-1:0.0: LD USB Device #0 now disconnected [ 243.335137][ T838] hid-thrustmaster 0003:044F:B65D.0008: unknown main item tag 0x0 [ 243.346140][ T838] hid-thrustmaster 0003:044F:B65D.0008: hidraw1: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.0-1/input0 [ 243.358235][ T838] hid-thrustmaster 0003:044F:B65D.0008: Wrong number of endpoints? [ 243.590232][ C3] hid-thrustmaster 0003:044F:B65D.0008: URB to get model id failed with error -71 [ 243.593440][ T838] usb 5-1: USB disconnect, device number 5 [ 243.785963][T13204] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2811'. [ 244.281762][T13232] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2821'. [ 244.485381][ T9519] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 244.615390][ T1462] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 244.666702][ T9519] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.670722][ T9519] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.674185][ T9519] usb 8-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 244.677798][ T9519] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.682287][ T9519] usb 8-1: config 0 descriptor?? [ 244.777350][ T1462] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.780949][ T1462] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.784069][ T1462] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 244.786981][ T1462] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.791594][ T1462] usb 5-1: config 0 descriptor?? [ 245.039173][T13249] syzkaller1: entered promiscuous mode [ 245.040909][T13249] syzkaller1: entered allmulticast mode [ 245.092501][ T9519] cm6533_jd 0003:0D8C:0022.0009: unknown main item tag 0x0 [ 245.094958][ T9519] cm6533_jd 0003:0D8C:0022.0009: unknown main item tag 0x0 [ 245.101128][ T9519] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:0D8C:0022.0009/input/input11 [ 245.123430][ T9519] cm6533_jd 0003:0D8C:0022.0009: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 245.203271][ T1462] hid-thrustmaster 0003:044F:B65D.000A: unknown main item tag 0x0 [ 245.208142][ T1462] hid-thrustmaster 0003:044F:B65D.000A: hidraw2: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.0-1/input0 [ 245.215400][ T1462] hid-thrustmaster 0003:044F:B65D.000A: Wrong number of endpoints? [ 245.297878][ T1462] usb 8-1: USB disconnect, device number 5 [ 245.453785][ C2] hid-thrustmaster 0003:044F:B65D.000A: URB to get model id failed with error -71 [ 245.453968][ T6025] usb 5-1: USB disconnect, device number 6 [ 245.935498][ T5944] Bluetooth: hci4: command 0x0406 tx timeout [ 246.177761][T13281] netlink: 'syz.0.2841': attribute type 10 has an invalid length. [ 246.191279][T13281] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 246.436537][T13290] syzkaller1: entered promiscuous mode [ 246.438337][T13290] syzkaller1: entered allmulticast mode [ 246.495479][ T6025] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 246.583222][T13294] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2847'. [ 246.666615][ T6025] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 246.669510][ T6025] usb 5-1: config 0 has no interface number 0 [ 246.671485][ T6025] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.674851][ T6025] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.679425][ T6025] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 246.682358][ T6025] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.686427][ T6025] usb 5-1: config 0 descriptor?? [ 247.101404][ T6025] prodikeys 0003:041E:2801.000B: unknown main item tag 0x0 [ 247.103706][ T6025] prodikeys 0003:041E:2801.000B: unknown main item tag 0x0 [ 247.106142][ T6025] prodikeys 0003:041E:2801.000B: unknown main item tag 0x0 [ 247.109241][ T6025] prodikeys 0003:041E:2801.000B: unknown main item tag 0x0 [ 247.111622][ T6025] prodikeys 0003:041E:2801.000B: unknown main item tag 0x0 [ 247.114037][ T6025] prodikeys 0003:041E:2801.000B: unknown main item tag 0x0 [ 247.116445][ T6025] prodikeys 0003:041E:2801.000B: unknown main item tag 0x0 [ 247.122487][ T6025] prodikeys 0003:041E:2801.000B: hidraw1: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.0-1/input1 [ 247.128428][ T6025] hid_prodikeys: hid-prodikeys: failed to find output report [ 247.128428][ T6025] [ 247.261221][T13314] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2854'. [ 247.302698][ T29] usb 5-1: USB disconnect, device number 7 [ 247.694028][T13331] syzkaller1: entered promiscuous mode [ 247.697110][T13331] syzkaller1: entered allmulticast mode [ 247.847178][T13337] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2864'. [ 247.973640][T13349] fuse: Bad value for 'fd' [ 248.083133][T13359] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2874'. [ 248.295355][ T1462] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 248.456888][ T1462] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 248.459818][ T1462] usb 8-1: config 0 has no interface number 0 [ 248.461842][ T1462] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.465182][ T1462] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.475297][ T1462] usb 8-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 248.478803][ T1462] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.486592][ T1462] usb 8-1: config 0 descriptor?? [ 248.893942][ T1462] prodikeys 0003:041E:2801.000C: unknown main item tag 0x0 [ 248.896432][ T1462] prodikeys 0003:041E:2801.000C: unknown main item tag 0x0 [ 248.898679][ T1462] prodikeys 0003:041E:2801.000C: unknown main item tag 0x0 [ 248.901041][ T1462] prodikeys 0003:041E:2801.000C: unknown main item tag 0x0 [ 248.903338][ T1462] prodikeys 0003:041E:2801.000C: unknown main item tag 0x0 [ 248.905676][ T1462] prodikeys 0003:041E:2801.000C: unknown main item tag 0x0 [ 248.908055][ T1462] prodikeys 0003:041E:2801.000C: unknown main item tag 0x0 [ 248.912069][ T1462] prodikeys 0003:041E:2801.000C: hidraw1: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.3-1/input1 [ 248.916385][ T1462] hid_prodikeys: hid-prodikeys: failed to find output report [ 248.916385][ T1462] [ 249.102106][ T29] usb 8-1: USB disconnect, device number 6 [ 249.858360][T13417] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2897'. [ 249.885859][T13419] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2898'. [ 249.907241][T13422] fuse: Bad value for 'fd' [ 249.995881][T13427] syzkaller1: entered promiscuous mode [ 249.998214][T13427] syzkaller1: entered allmulticast mode [ 250.285983][T13444] fuse: Bad value for 'fd' [ 250.407865][ T93] bridge0 (unregistering): left promiscuous mode [ 250.617117][T13453] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2912'. [ 250.735490][ T93] bond0 (unregistering): left promiscuous mode [ 250.745895][ T93] bond0 (unregistering): Released all slaves [ 250.989675][T13463] syzkaller1: entered promiscuous mode [ 250.991663][T13463] syzkaller1: entered allmulticast mode [ 251.038775][ T93] hsr_slave_0: left promiscuous mode [ 251.041581][ T93] hsr_slave_1: left promiscuous mode [ 251.056522][ T93] veth1_macvtap: left promiscuous mode [ 251.058689][ T93] veth0_macvtap: left promiscuous mode [ 251.385335][ T838] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 251.525333][ T838] usb 8-1: device descriptor read/64, error -71 [ 251.576816][T13476] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22) [ 251.785512][ T838] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 251.918087][ T838] usb 8-1: device descriptor read/64, error -71 [ 252.027455][ T838] usb usb8-port1: attempt power cycle [ 252.228599][T13487] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2924'. [ 252.375472][ T838] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 252.405872][ T838] usb 8-1: device descriptor read/8, error -71 [ 252.645341][ T838] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 252.665821][ T838] usb 8-1: device descriptor read/8, error -71 [ 252.775576][ T838] usb usb8-port1: unable to enumerate USB device [ 252.958262][T13521] 9pnet_fd: p9_fd_create_tcp (13521): problem connecting socket to 127.0.0.1 [ 253.123596][T13529] fuse: Bad value for 'fd' [ 253.627536][T13538] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2945'. [ 253.693847][T13542] 8021q: adding VLAN 0 to HW filter on device bond1 [ 253.703462][T13545] 9pnet_fd: p9_fd_create_tcp (13545): problem connecting socket to 127.0.0.1 [ 253.716178][T13542] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 253.723721][T13542] bond1: entered promiscuous mode [ 253.725659][T13542] geneve2: entered promiscuous mode [ 254.025371][ T838] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 254.045308][T13560] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2955'. [ 254.185380][ T838] usb 5-1: Using ep0 maxpacket: 8 [ 254.189150][ T838] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 254.192747][ T838] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.208943][ T838] pvrusb2: Hardware description: Terratec Grabster AV400 [ 254.211751][ T838] pvrusb2: ********** [ 254.213687][ T838] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 254.218450][ T838] pvrusb2: Important functionality might not be entirely working. [ 254.221689][ T838] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 254.225872][ T838] pvrusb2: ********** [ 254.412218][ T2483] pvrusb2: Invalid write control endpoint [ 254.446917][ T2483] pvrusb2: Invalid write control endpoint [ 254.448929][ T2483] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 254.451864][ T2483] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 254.454196][ T2483] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 254.458318][ T2483] pvrusb2: Device being rendered inoperable [ 254.462218][ T2483] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 254.465119][ T2483] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 254.470753][ T2483] pvrusb2: Attached sub-driver cx25840 [ 254.472982][ T2483] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 254.478047][ T2483] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 254.616066][ T838] usb 5-1: USB disconnect, device number 8 [ 255.147623][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.150225][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.336336][T13599] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2967'. [ 255.472416][T13604] hub 8-0:1.0: USB hub found [ 255.474201][T13604] hub 8-0:1.0: 1 port detected [ 256.950348][T13645] 9pnet_fd: p9_fd_create_tcp (13645): problem connecting socket to 127.0.0.1 [ 257.637276][ T837] IPVS: starting estimator thread 0... [ 257.648865][T13669] pimreg3: entered allmulticast mode [ 257.708692][T13672] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 257.725414][T13666] IPVS: using max 44 ests per chain, 105600 per kthread [ 258.735879][T13630] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 259.055382][ T5944] Bluetooth: hci3: command 0x0406 tx timeout [ 259.486826][T13701] fuse: Bad value for 'fd' [ 259.665476][T13710] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3005'. [ 261.665377][ T837] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 261.795341][ T837] usb 7-1: device descriptor read/64, error -71 [ 262.035568][ T838] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 262.045396][ T837] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 262.185339][ T837] usb 7-1: device descriptor read/64, error -71 [ 262.195313][ T838] usb 6-1: Using ep0 maxpacket: 32 [ 262.198529][ T838] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.201658][ T838] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 262.206195][ T838] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 262.209060][ T838] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.211509][ T838] usb 6-1: Product: syz [ 262.212848][ T838] usb 6-1: Manufacturer: syz [ 262.214320][ T838] usb 6-1: SerialNumber: syz [ 262.217885][ T838] usb 6-1: config 0 descriptor?? [ 262.296856][ T837] usb usb7-port1: attempt power cycle [ 262.510027][ T6008] usb 6-1: USB disconnect, device number 11 [ 262.635399][ T837] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 262.656180][ T837] usb 7-1: device descriptor read/8, error -71 [ 262.840213][T13856] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3059'. [ 262.905320][ T837] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 262.926433][ T837] usb 7-1: device descriptor read/8, error -71 [ 263.035525][ T837] usb usb7-port1: unable to enumerate USB device [ 263.226013][T13878] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3069'. [ 264.123181][T13906] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3078'. [ 264.811592][T13939] fuse: Bad value for 'group_id' [ 264.813731][T13939] fuse: Bad value for 'group_id' [ 265.095664][ T837] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 265.225993][ T837] usb 8-1: device descriptor read/64, error -71 [ 265.235376][ T1462] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 265.393648][ T1462] usb 6-1: Using ep0 maxpacket: 8 [ 265.396562][ T1462] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 265.399528][ T1462] usb 6-1: config 179 has no interface number 0 [ 265.401521][ T1462] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 265.404838][ T1462] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 265.408692][ T1462] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 265.412247][ T1462] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 265.416904][ T1462] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 265.419956][ T1462] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.425658][T13955] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 265.485374][ T837] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 265.615480][ T837] usb 8-1: device descriptor read/64, error -71 [ 265.640676][ T1462] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:179.65/input/input12 [ 265.725468][ T837] usb usb8-port1: attempt power cycle [ 265.752217][T13978] netlink: 'syz.2.3105': attribute type 72 has an invalid length. [ 265.754811][T13978] netlink: 'syz.2.3105': attribute type 1 has an invalid length. [ 265.757442][T13978] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3105'. [ 265.835186][ T1462] usb 6-1: USB disconnect, device number 12 [ 265.837254][ C2] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 265.839887][ C2] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 265.846168][ T1462] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 266.085447][ T837] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 266.106219][ T837] usb 8-1: device descriptor read/8, error -71 [ 266.345389][ T837] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 266.366288][ T837] usb 8-1: device descriptor read/8, error -71 [ 266.476225][ T837] usb usb8-port1: unable to enumerate USB device [ 267.101655][T14004] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3116'. [ 267.169345][T14011] 9pnet_fd: p9_fd_create_tcp (14011): problem connecting socket to 127.0.0.1 [ 267.314839][T14025] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3125'. [ 267.569462][T14045] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3135'. [ 267.959265][T14059] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3140'. [ 268.076633][T14072] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3146'. [ 268.150498][T14077] netlink: 200 bytes leftover after parsing attributes in process `syz.1.3148'. [ 268.345349][ T6025] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 268.485513][ T6025] usb 5-1: device descriptor read/64, error -71 [ 268.631608][T14101] netlink: 200 bytes leftover after parsing attributes in process `syz.2.3158'. [ 268.725431][ T6025] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 268.865342][ T6025] usb 5-1: device descriptor read/64, error -71 [ 268.985952][ T6025] usb usb5-port1: attempt power cycle [ 269.175383][ T1462] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 269.327033][ T1462] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.331478][ T1462] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.335393][ T6025] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 269.338681][ T1462] usb 8-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 269.341848][ T1462] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.346837][ T1462] usb 8-1: config 0 descriptor?? [ 269.355737][ T6025] usb 5-1: device descriptor read/8, error -71 [ 269.596154][ T6025] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 269.626208][ T6025] usb 5-1: device descriptor read/8, error -71 [ 269.736143][ T6025] usb usb5-port1: unable to enumerate USB device [ 269.819210][ T1462] usbhid 8-1:0.0: can't add hid device: -71 [ 269.821167][ T1462] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 269.824584][ T1462] usb 8-1: USB disconnect, device number 15 [ 269.894695][T14128] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3168'. [ 269.996575][ T837] IPVS: starting estimator thread 0... [ 269.998255][T14131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 270.095421][T14132] IPVS: using max 44 ests per chain, 105600 per kthread [ 270.429180][T14142] syzkaller1: entered promiscuous mode [ 270.431172][T14142] syzkaller1: entered allmulticast mode [ 270.795461][ T1462] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 270.946413][ T1462] usb 8-1: Using ep0 maxpacket: 16 [ 270.950033][ T1462] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.953407][ T1462] usb 8-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 270.956374][ T1462] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.959977][ T1462] usb 8-1: config 0 descriptor?? [ 271.370227][ T1462] sunplus 0003:04FC:05D8.000D: reserved main item tag 0xd [ 271.372558][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.374790][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.377469][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.379819][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.381949][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.384193][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.386762][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.389133][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.391492][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.394480][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.402656][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.412509][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.414824][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.417417][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.419629][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.421837][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.423984][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.426435][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.428609][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.430839][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.433026][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.435221][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.439880][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.442160][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.444340][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.446767][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.449087][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.451266][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.453418][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.456031][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.459028][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.461329][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.463521][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.465864][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.468066][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.470251][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.486294][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.488442][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.490594][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.492736][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.498238][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.500611][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.502815][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.504957][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.507808][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.510042][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.512216][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.514383][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.516661][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.518832][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.521079][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.524209][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.526673][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.528871][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.531065][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.533320][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.535825][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.537956][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.540180][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.542619][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.544830][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.547072][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.549186][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.551293][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.553417][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.555631][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.557748][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.559908][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.562029][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.564130][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.566352][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.568420][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.571664][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.574160][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.577259][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.581301][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.583495][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.587888][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.590047][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.595677][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.599029][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.601246][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.604645][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.606959][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.609101][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.611374][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.613496][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.616291][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.619748][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.621976][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.625565][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.629951][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.633285][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.636635][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.640712][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.645127][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.649094][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.652402][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.655753][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.659065][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.662413][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.669149][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.672452][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.675975][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.680289][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.683600][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.688027][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.692461][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.695404][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.697507][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.699637][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.709288][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.712680][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.717155][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.721670][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.724986][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.728820][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.733400][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.736912][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.740705][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.745306][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.749422][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.754040][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.757465][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.761060][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.765308][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.768765][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.773190][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.778474][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.782919][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.786377][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.790677][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.795205][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.798707][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.803215][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.810059][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.814601][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.818491][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.823036][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.829687][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.833099][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.837689][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.842226][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.845479][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.850836][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.855319][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.858806][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.863333][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.870253][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.874242][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.876422][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.878667][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.880819][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.882914][ T1462] sunplus 0003:04FC:05D8.000D: unknown main item tag 0x0 [ 271.886390][ T1462] sunplus 0003:04FC:05D8.000D: hidraw1: USB HID vff.fd Device [HID 04fc:05d8] on usb-dummy_hcd.3-1/input0 [ 271.897230][ T1462] usb 8-1: USB disconnect, device number 16 [ 271.926918][T14177] fido_id[14177]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb8/report_descriptor': No such file or directory [ 272.026980][T14182] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 272.226891][T14196] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3193'. [ 272.351579][T14202] fuse: Unknown parameter 'group_i00000000000000000000' [ 272.386291][T14204] 9pnet_virtio: no channels available for device 127.0.0.1 [ 273.217144][T14226] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3204'. [ 273.378202][T14233] 9pnet_virtio: no channels available for device 127.0.0.1 [ 273.531654][T14248] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3213'. [ 273.747094][T14267] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 273.784883][ T5948] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 274.453463][T14286] fuse: Unknown parameter 'group_id00000000000000000000' [ 274.769704][T14295] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 274.813109][T14297] syzkaller1: entered promiscuous mode [ 274.814860][T14297] syzkaller1: entered allmulticast mode [ 275.058848][T14308] fuse: Unknown parameter 'group_id00000000000000000000' [ 275.214275][T14315] overlayfs: failed to resolve './file0': -2 [ 275.993407][T14335] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3249'. [ 276.146858][T14346] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3253'. [ 276.155382][ T6021] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 276.305408][ T6021] usb 6-1: Using ep0 maxpacket: 16 [ 276.309981][ T6021] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 276.312833][ T6021] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 276.315503][ T6021] usb 6-1: Product: syz [ 276.316839][ T6021] usb 6-1: Manufacturer: syz [ 276.318406][ T6021] usb 6-1: SerialNumber: syz [ 276.321081][ T6021] usb 6-1: config 0 descriptor?? [ 276.531875][T14330] ./file0: Can't lookup blockdev [ 276.539758][ T838] usb 6-1: USB disconnect, device number 13 [ 276.858625][ T40] audit: type=1326 audit(1750952594.113:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14362 comm="syz.0.3261" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33579 code=0x7ffc0000 [ 276.865098][ T40] audit: type=1326 audit(1750952594.113:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14362 comm="syz.0.3261" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33579 code=0x7ffc0000 [ 276.872162][ T40] audit: type=1326 audit(1750952594.113:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14362 comm="syz.0.3261" exe="/syz-executor" sig=0 arch=40000003 syscall=224 compat=1 ip=0xf7f33579 code=0x7ffc0000 [ 276.880079][ T40] audit: type=1326 audit(1750952594.113:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14362 comm="syz.0.3261" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33579 code=0x7ffc0000 [ 276.888454][ T40] audit: type=1326 audit(1750952594.113:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14362 comm="syz.0.3261" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33579 code=0x7ffc0000 [ 276.895030][ T40] audit: type=1326 audit(1750952594.113:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14362 comm="syz.0.3261" exe="/syz-executor" sig=0 arch=40000003 syscall=259 compat=1 ip=0xf7f33579 code=0x7ffc0000 [ 276.899104][T14367] fuse: Bad value for 'user_id' [ 276.902942][ T40] audit: type=1326 audit(1750952594.113:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14362 comm="syz.0.3261" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33579 code=0x7ffc0000 [ 276.904212][T14367] fuse: Bad value for 'user_id' [ 276.911037][ T40] audit: type=1326 audit(1750952594.113:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14362 comm="syz.0.3261" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33579 code=0x7ffc0000 [ 276.911065][ T40] audit: type=1326 audit(1750952594.113:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14362 comm="syz.0.3261" exe="/syz-executor" sig=0 arch=40000003 syscall=260 compat=1 ip=0xf7f33579 code=0x7ffc0000 [ 276.911089][ T40] audit: type=1326 audit(1750952594.113:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14362 comm="syz.0.3261" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f33579 code=0x7ffc0000 [ 277.036389][T14373] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3265'. [ 277.094503][T14375] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3267'. [ 277.192963][T14387] 9pnet_virtio: no channels available for device 127.0.0.1 [ 277.475380][ T6025] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 277.625420][ T6025] usb 6-1: Using ep0 maxpacket: 32 [ 277.630003][ T6025] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 277.634578][ T6025] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.642190][ T6025] usb 6-1: config 0 descriptor?? [ 277.855730][ T5944] ------------[ cut here ]------------ [ 277.857575][ T5944] WARNING: CPU: 3 PID: 5944 at net/bluetooth/hci_conn.c:568 hci_conn_timeout+0x11a/0x210 [ 277.860571][ T5944] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 277.862063][ T5944] CPU: 3 UID: 0 PID: 5944 Comm: kworker/u33:3 Not tainted 6.16.0-rc3-syzkaller-00072-gee88bddf7f2f #0 PREEMPT(full) [ 277.867834][ T5944] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 277.870897][ T6025] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 277.872224][ T5944] Workqueue: hci1 hci_conn_timeout [ 277.876753][ T5944] RIP: 0010:hci_conn_timeout+0x11a/0x210 [ 277.878459][ T5944] Code: 00 e8 4a 20 44 f7 4c 89 f1 4c 89 e2 48 c7 c6 c0 e5 fa 8c 48 c7 c7 80 bb a3 90 e8 21 b2 91 fa e9 4d ff ff ff e8 27 20 44 f7 90 <0f> 0b 90 e8 1e 20 44 f7 48 8d bb f5 f6 ff ff 48 b8 00 00 00 00 00 [ 277.884154][ T5944] RSP: 0018:ffffc900035afc30 EFLAGS: 00010293 [ 277.886149][ T5944] RAX: 0000000000000000 RBX: ffff88806c2b4948 RCX: ffffffff8a776bff [ 277.889379][ T5944] RDX: ffff888025ffa440 RSI: ffffffff8a776ca9 RDI: 0000000000000005 [ 277.892710][ T5944] RBP: 00000000ffffffff R08: 0000000000000005 R09: 0000000000000000 [ 277.896100][ T5944] R10: 00000000ffffffff R11: 0000000000000001 R12: ffff88806c2b4000 [ 277.899504][ T5944] R13: 0000000000000000 R14: ffffffff90a85f24 R15: ffffc900035afd10 [ 277.902730][ T5944] FS: 0000000000000000(0000) GS:ffff888097860000(0000) knlGS:0000000000000000 [ 277.906429][ T5944] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 277.909073][ T5944] CR2: 0000000080148018 CR3: 0000000027dbf000 CR4: 0000000000352ef0 [ 277.912203][ T5944] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 277.915440][ T5944] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 277.915796][ T6025] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 277.918660][ T5944] Call Trace: [ 277.918671][ T5944] [ 277.924335][ T5944] process_one_work+0x9cc/0x1b70 [ 277.926525][ T5944] ? __pfx_process_one_work+0x10/0x10 [ 277.929338][ T5944] ? assign_work+0x1a0/0x250 [ 277.931352][ T5944] worker_thread+0x6c8/0xf10 [ 277.933321][ T5944] ? __kthread_parkme+0x19e/0x250 [ 277.935624][ T5944] ? __pfx_worker_thread+0x10/0x10 [ 277.937835][ T5944] kthread+0x3c5/0x780 [ 277.939610][ T5944] ? __pfx_kthread+0x10/0x10 [ 277.941568][ T5944] ? rcu_is_watching+0x12/0xc0 [ 277.941908][ T6025] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 277.943612][ T5944] ? __pfx_kthread+0x10/0x10 [ 277.947956][ T5944] ret_from_fork+0x5d4/0x6f0 [ 277.949139][ T6025] usb 6-1: media controller created [ 277.949896][ T5944] ? __pfx_kthread+0x10/0x10 [ 277.949924][ T5944] ret_from_fork_asm+0x1a/0x30 [ 277.949957][ T5944] [ 277.957149][ T5944] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 277.960100][ T5944] CPU: 3 UID: 0 PID: 5944 Comm: kworker/u33:3 Not tainted 6.16.0-rc3-syzkaller-00072-gee88bddf7f2f #0 PREEMPT(full) [ 277.964816][ T5944] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 277.969093][ T5944] Workqueue: hci1 hci_conn_timeout [ 277.971243][ T5944] Call Trace: [ 277.972656][ T5944] [ 277.973923][ T5944] dump_stack_lvl+0x3d/0x1f0 [ 277.975892][ T5944] panic+0x71c/0x800 [ 277.977537][ T5944] ? __pfx_panic+0x10/0x10 [ 277.979385][ T5944] ? show_trace_log_lvl+0x29b/0x3e0 [ 277.981526][ T5944] ? check_panic_on_warn+0x1f/0xb0 [ 277.983740][ T5944] ? hci_conn_timeout+0x11a/0x210 [ 277.985950][ T5944] check_panic_on_warn+0xab/0xb0 [ 277.988045][ T5944] __warn+0xf6/0x3c0 [ 277.989682][ T5944] ? hci_conn_timeout+0x11a/0x210 [ 277.991744][ T5944] report_bug+0x3c3/0x580 [ 277.993514][ T5944] ? hci_conn_timeout+0x11a/0x210 [ 277.995578][ T5944] handle_bug+0x184/0x210 [ 277.997355][ T5944] exc_invalid_op+0x17/0x50 [ 277.999222][ T5944] asm_exc_invalid_op+0x1a/0x20 [ 278.001227][ T5944] RIP: 0010:hci_conn_timeout+0x11a/0x210 [ 278.003515][ T5944] Code: 00 e8 4a 20 44 f7 4c 89 f1 4c 89 e2 48 c7 c6 c0 e5 fa 8c 48 c7 c7 80 bb a3 90 e8 21 b2 91 fa e9 4d ff ff ff e8 27 20 44 f7 90 <0f> 0b 90 e8 1e 20 44 f7 48 8d bb f5 f6 ff ff 48 b8 00 00 00 00 00 [ 278.011226][ T5944] RSP: 0018:ffffc900035afc30 EFLAGS: 00010293 [ 278.013669][ T5944] RAX: 0000000000000000 RBX: ffff88806c2b4948 RCX: ffffffff8a776bff [ 278.016848][ T5944] RDX: ffff888025ffa440 RSI: ffffffff8a776ca9 RDI: 0000000000000005 [ 278.020039][ T5944] RBP: 00000000ffffffff R08: 0000000000000005 R09: 0000000000000000 [ 278.023237][ T5944] R10: 00000000ffffffff R11: 0000000000000001 R12: ffff88806c2b4000 [ 278.026412][ T5944] R13: 0000000000000000 R14: ffffffff90a85f24 R15: ffffc900035afd10 [ 278.029044][ T5944] ? hci_conn_timeout+0x6f/0x210 [ 278.030851][ T5944] ? hci_conn_timeout+0x119/0x210 [ 278.032856][ T5944] process_one_work+0x9cc/0x1b70 [ 278.034882][ T5944] ? __pfx_process_one_work+0x10/0x10 [ 278.036593][ T5944] ? assign_work+0x1a0/0x250 [ 278.038068][ T5944] worker_thread+0x6c8/0xf10 [ 278.039586][ T5944] ? __kthread_parkme+0x19e/0x250 [ 278.041201][ T5944] ? __pfx_worker_thread+0x10/0x10 [ 278.042836][ T5944] kthread+0x3c5/0x780 [ 278.044135][ T5944] ? __pfx_kthread+0x10/0x10 [ 278.045990][ T5944] ? rcu_is_watching+0x12/0xc0 [ 278.047438][ T5944] ? __pfx_kthread+0x10/0x10 [ 278.048896][ T5944] ret_from_fork+0x5d4/0x6f0 [ 278.050363][ T5944] ? __pfx_kthread+0x10/0x10 [ 278.051818][ T5944] ret_from_fork_asm+0x1a/0x30 [ 278.053342][ T5944] [ 278.055153][ T5944] Kernel Offset: disabled [ 278.056674][ T5944] Rebooting in 86400 seconds.. VM DIAGNOSIS: 15:43:15 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffffc90004327b60 RCX=0000000000000000 RDX=0000000000000000 RSI=ffffffff850be144 RDI=ffffc90004327b60 RBP=ffffffff850be130 RSP=ffffc90000007dd0 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000000 R13=dffffc0000000000 R14=0000000000000000 R15=ffffc90004327b28 RIP=ffffffff850be16d RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff888097560000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7330730 CR3=0000000027dbf000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000007000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000009c8731 RBX=0000000000000001 RCX=ffffffff8b7cbc29 RDX=0000000000000000 RSI=ffffffff8de138db RDI=ffffffff8c1565a0 RBP=ffffed1003bdb488 RSP=ffffc9000046fdf8 R8 =0000000000000001 R9 =ffffed1005666645 R10=ffff88802b33322b R11=0000000000000001 R12=0000000000000001 R13=ffff88801deda440 R14=ffffffff90a82d50 R15=0000000000000000 RIP=ffffffff8b7ca78f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097660000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7418328 CR3=00000000504d4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000080000000 RBX=0000000000000002 RCX=ffffc90002cc0001 RDX=0000000000000000 RSI=ffffffff8df05645 RDI=ffffffff8c1565a0 RBP=0000000000000001 RSP=ffffc90002cbeff8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=000000000001070f R12=ffffffff816a8ad4 R13=0000000000000206 R14=ffff888029c18000 R15=ffffc90002cbf114 RIP=ffffffff8b7cc3dd RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097760000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7fe6e40 CR3=000000000e382000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 2e7a7973f7483ff4 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f700585858585858 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0f0e0d0c0b0a0908 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000000003a RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85582a95 RDI=ffffffff9b06ca00 RBP=ffffffff9b06c9c0 RSP=ffffc900035af5a0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=000000000000003a R14=ffffffff9b06c9c0 R15=ffffffff85582a30 RIP=ffffffff85582abf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff888097860000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000080148018 CR3=0000000027dbf000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000007000000000 0000000200000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000