syzkaller login: qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0xce000) [ 96.786172][ T1026] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 96.788859][ T1026] ata1: failed to read log page 10h (errno=-5) [ 96.791558][ T1026] ata1.00: exception Emask 0x1 SAct 0x4000 SErr 0x0 action 0x0 [ 96.822678][ T1026] ata1.00: irq_stat 0x41000008 [ 96.830850][ T1026] ata1.00: failed command: WRITE FPDMA QUEUED [ 96.845485][ T1026] ata1.00: cmd 61/70:70:3e:9b:04/06:00:00:00:00/40 tag 14 ncq dma 843776 out [ 96.845485][ T1026] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 96.867211][ T1026] ata1.00: status: { DRDY } [ 96.871907][ T1026] ata1.00: error: { ABRT } [ 96.876730][ T1026] ata1.00: configured for UDMA/100 [ 96.886156][ T1026] ata1: EH complete qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x400000) [ 97.047073][ T1026] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 97.057279][ T1026] ata1: failed to read log page 10h (errno=-5) [ 97.073791][ T1026] ata1.00: exception Emask 0x1 SAct 0xc000 SErr 0x0 action 0x0 [ 97.090305][ T1026] ata1.00: irq_stat 0x41000000 [ 97.103243][ T1026] ata1.00: failed command: WRITE FPDMA QUEUED [ 97.109317][ T1026] ata1.00: cmd 61/00:70:36:f1:04/20:00:00:00:00/40 tag 14 ncq dma 4194304 ou [ 97.109317][ T1026] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 97.138829][ T1026] ata1.00: status: { DRDY } [ 97.141014][ T1026] ata1.00: failed command: WRITE FPDMA QUEUED [ 97.143670][ T1026] ata1.00: cmd 61/98:78:36:11:05/19:00:00:00:00/40 tag 15 ncq dma 3354624 ou [ 97.143670][ T1026] res 50/00:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 97.168798][ T1026] ata1.00: status: { DRDY } [ 97.176401][ T1026] ata1.00: configured for UDMA/100 [ 97.186144][ T1026] ata1: EH complete qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x333000) [ 102.340963][ T9] cfg80211: failed to load regulatory.db [ 127.315196][ T1026] ata1.00: NCQ disabled due to excessive errors [ 127.317984][ T1026] ata1.00: exception Emask 0x0 SAct 0x800 SErr 0x0 action 0x6 frozen [ 127.321504][ T1026] ata1.00: failed command: WRITE FPDMA QUEUED [ 127.324329][ T1026] ata1.00: cmd 61/98:58:36:11:05/19:00:00:00:00/40 tag 11 ncq dma 3354624 ou [ 127.324329][ T1026] res 40/00:00:00:00:00/00:00:00:00:00/00 Emask 0x4 (timeout) [ 127.332190][ T1026] ata1.00: status: { DRDY } [ 127.334510][ T1026] ata1: hard resetting link [ 127.656973][ T1026] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 127.663180][ T1026] ata1.00: configured for UDMA/100 [ 127.665972][ T1026] ata1: EH complete Warning: Permanently added '[localhost]:24749' (ED25519) to the list of known hosts. 2026/04/29 07:43:18 parsed 1 programs [ 136.953659][ T5308] cgroup: Unknown subsys name 'net' [ 137.033446][ T5308] cgroup: Unknown subsys name 'cpuset' [ 137.040209][ T5308] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 138.914208][ T5308] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 143.307222][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 143.310471][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 145.272960][ T5314] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 146.673216][ T5320] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.678814][ T5320] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.682627][ T5320] bridge_slave_0: entered allmulticast mode [ 146.687730][ T5320] bridge_slave_0: entered promiscuous mode [ 146.697582][ T5320] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.701289][ T5320] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.704782][ T5320] bridge_slave_1: entered allmulticast mode [ 146.710240][ T5320] bridge_slave_1: entered promiscuous mode [ 146.745688][ T5320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.752069][ T5320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.789137][ T5320] team0: Port device team_slave_0 added [ 146.794419][ T5320] team0: Port device team_slave_1 added [ 146.822999][ T5320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.826786][ T5320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 146.840200][ T5320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.849551][ T5320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.852698][ T5320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 146.866109][ T5320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.918627][ T5320] hsr_slave_0: entered promiscuous mode [ 146.922969][ T5320] hsr_slave_1: entered promiscuous mode [ 147.132583][ T5320] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 147.158115][ T5320] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 147.174439][ T5320] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 147.194585][ T5320] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 147.204282][ T5320] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 147.213870][ T5320] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 147.219500][ T5320] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 147.231990][ T5320] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 147.279664][ T5320] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.283058][ T5320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.287807][ T5320] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.291399][ T5320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.381234][ T5320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.400902][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.407015][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.426391][ T5320] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.445673][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.448970][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.461433][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.464959][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.910346][ T5320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.969658][ T5320] veth0_vlan: entered promiscuous mode [ 147.981196][ T5320] veth1_vlan: entered promiscuous mode [ 148.023875][ T5320] veth0_macvtap: entered promiscuous mode [ 148.032502][ T5320] veth1_macvtap: entered promiscuous mode [ 148.119433][ T5320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.159566][ T5320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 148.212713][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.257770][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.276885][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.300153][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 148.794149][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.015954][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.129973][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.745847][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.488265][ T12] bridge_slave_1: left allmulticast mode [ 151.498147][ T12] bridge_slave_1: left promiscuous mode [ 151.508812][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.531985][ T12] bridge_slave_0: left allmulticast mode [ 151.534327][ T12] bridge_slave_0: left promiscuous mode [ 151.553299][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.852456][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.864782][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.874146][ T12] bond0 (unregistering): Released all slaves [ 152.038975][ T12] hsr_slave_0: left promiscuous mode [ 152.048365][ T12] hsr_slave_1: left promiscuous mode [ 152.062277][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.079235][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.107876][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.122488][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.251203][ T12] veth1_macvtap: left promiscuous mode [ 152.269367][ T12] veth0_macvtap: left promiscuous mode [ 152.280325][ T12] veth1_vlan: left promiscuous mode [ 152.289859][ T12] veth0_vlan: left promiscuous mode [ 152.437892][ T4655] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 152.444378][ T4655] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 152.448880][ T4655] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 152.453514][ T4655] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 152.459617][ T4655] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 152.873854][ T12] team0 (unregistering): Port device team_slave_1 removed [ 152.892169][ T12] team0 (unregistering): Port device team_slave_0 removed [ 153.099725][ T5001] 8021q: adding VLAN 0 to HW filter on device eth2 [ 154.522242][ T5001] 8021q: adding VLAN 0 to HW filter on device eth3 [ 155.952800][ T5001] 8021q: adding VLAN 0 to HW filter on device eth4 [ 156.678298][ T5001] 8021q: adding VLAN 0 to HW filter on device eth5 [ 157.752337][ T129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.764805][ T129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.816986][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.821011][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/04/29 07:43:44 executed programs: 0 [ 160.856955][ T44] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 160.864384][ T44] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 160.874066][ T44] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 160.878153][ T44] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 160.882203][ T44] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 161.479232][ T5465] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.483264][ T5465] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.487214][ T5465] bridge_slave_0: entered allmulticast mode [ 161.492037][ T5465] bridge_slave_0: entered promiscuous mode [ 161.497548][ T5465] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.501259][ T5465] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.504557][ T5465] bridge_slave_1: entered allmulticast mode [ 161.509565][ T5465] bridge_slave_1: entered promiscuous mode [ 161.540447][ T5465] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.548792][ T5465] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.578118][ T5465] team0: Port device team_slave_0 added [ 161.585510][ T5465] team0: Port device team_slave_1 added [ 161.606846][ T5465] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.609721][ T5465] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 161.624641][ T5465] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.635569][ T5465] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.640114][ T5465] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 161.656935][ T5465] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.706026][ T5465] hsr_slave_0: entered promiscuous mode [ 161.710561][ T5465] hsr_slave_1: entered promiscuous mode [ 162.584451][ T5465] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 162.601874][ T5465] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 162.618053][ T5465] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 162.630176][ T5465] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 162.640999][ T5465] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 162.678943][ T5465] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 162.682900][ T5465] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 162.709136][ T5465] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 162.900966][ T5465] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.938142][ T5465] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.961169][ T1157] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.965385][ T1157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.977384][ T44] Bluetooth: hci0: command tx timeout [ 162.996933][ T129] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.000731][ T129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.904416][ T5465] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.007124][ T5465] veth0_vlan: entered promiscuous mode [ 164.029205][ T5465] veth1_vlan: entered promiscuous mode [ 164.090016][ T5465] veth0_macvtap: entered promiscuous mode [ 164.118002][ T5465] veth1_macvtap: entered promiscuous mode [ 164.163579][ T5465] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.192604][ T5465] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.219008][ T129] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.231186][ T129] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.249288][ T129] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.257715][ T129] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.465995][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.469533][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.608358][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.617766][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.055664][ T44] Bluetooth: hci0: command tx timeout [ 165.416927][ T5535] infiniband syz1: set down [ 165.419850][ T5535] infiniband syz1: added ipvlan0 [ 165.492083][ T5535] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 165.515238][ T5535] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 165.531126][ T5535] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 165.691164][ T5535] RDS/IB: syz1: added [ 165.693648][ T5535] smc: adding ib device syz1 with port count 1 [ 165.717457][ T5535] smc: ib device syz1 port 1 has no pnetid [ 165.996545][ T5549] syz1: rxe_newlink: already configured on ipvlan0 2026/04/29 07:43:50 executed programs: 3 [ 166.110021][ T5551] syz1: rxe_newlink: already configured on ipvlan0 [ 166.192687][ T5553] syz1: rxe_newlink: already configured on ipvlan0 [ 166.240995][ T5555] syz1: rxe_newlink: already configured on ipvlan0 [ 166.294196][ T5557] syz1: rxe_newlink: already configured on ipvlan0 [ 166.340065][ T5559] syz1: rxe_newlink: already configured on ipvlan0 [ 166.382959][ T5561] syz1: rxe_newlink: already configured on ipvlan0 [ 166.426540][ T5563] syz1: rxe_newlink: already configured on ipvlan0 [ 166.463449][ T5565] syz1: rxe_newlink: already configured on ipvlan0 [ 166.514004][ T5567] syz1: rxe_newlink: already configured on ipvlan0 [ 167.136918][ T44] Bluetooth: hci0: command tx timeout [ 169.219681][ T44] Bluetooth: hci0: command tx timeout [ 171.026906][ T5803] rxe_newlink: 117 callbacks suppressed [ 171.027074][ T5803] syz1: rxe_newlink: already configured on ipvlan0 [ 171.062643][ T5805] syz1: rxe_newlink: already configured on ipvlan0 2026/04/29 07:43:55 executed programs: 131 [ 171.101029][ T5807] syz1: rxe_newlink: already configured on ipvlan0 [ 171.140398][ T5809] syz1: rxe_newlink: already configured on ipvlan0 [ 171.183561][ T5811] syz1: rxe_newlink: already configured on ipvlan0 [ 171.224765][ T5813] syz1: rxe_newlink: already configured on ipvlan0 [ 171.262691][ T5815] syz1: rxe_newlink: already configured on ipvlan0 [ 171.299505][ T5817] syz1: rxe_newlink: already configured on ipvlan0 [ 171.342071][ T5819] syz1: rxe_newlink: already configured on ipvlan0 [ 171.380356][ T5821] syz1: rxe_newlink: already configured on ipvlan0 [ 176.060181][ T6077] rxe_newlink: 127 callbacks suppressed [ 176.060210][ T6077] syz1: rxe_newlink: already configured on ipvlan0 [ 176.109511][ T6079] syz1: rxe_newlink: already configured on ipvlan0 2026/04/29 07:44:00 executed programs: 268 [ 176.153284][ T6081] syz1: rxe_newlink: already configured on ipvlan0 [ 176.189182][ T6083] syz1: rxe_newlink: already configured on ipvlan0 [ 176.222174][ T6085] syz1: rxe_newlink: already configured on ipvlan0 [ 176.268826][ T6087] syz1: rxe_newlink: already configured on ipvlan0 [ 176.307307][ T6089] syz1: rxe_newlink: already configured on ipvlan0 [ 176.350836][ T6091] syz1: rxe_newlink: already configured on ipvlan0 [ 176.391110][ T6093] syz1: rxe_newlink: already configured on ipvlan0 [ 176.429832][ T6095] syz1: rxe_newlink: already configured on ipvlan0 [ 181.085681][ T6435] rxe_newlink: 169 callbacks suppressed [ 181.085715][ T6435] syz1: rxe_newlink: already configured on ipvlan0 [ 181.111463][ T6437] syz1: rxe_newlink: already configured on ipvlan0 [ 181.133139][ T6439] syz1: rxe_newlink: already configured on ipvlan0 2026/04/29 07:44:05 executed programs: 447 [ 181.157470][ T6441] syz1: rxe_newlink: already configured on ipvlan0 [ 181.175653][ T6443] syz1: rxe_newlink: already configured on ipvlan0 [ 181.207261][ T6445] syz1: rxe_newlink: already configured on ipvlan0 [ 181.236057][ T6447] syz1: rxe_newlink: already configured on ipvlan0 [ 181.254388][ T6449] syz1: rxe_newlink: already configured on ipvlan0 [ 181.278236][ T6451] syz1: rxe_newlink: already configured on ipvlan0 [ 181.298376][ T6453] syz1: rxe_newlink: already configured on ipvlan0 [ 184.498543][ T4655] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 184.510470][ T4655] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 184.516285][ T4655] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 184.520120][ T4655] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 184.523655][ T4655] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 184.709162][ T1157] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.807957][ T1157] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.890432][ T1157] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.996859][ T1157] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.356193][ T1157] bridge_slave_1: left allmulticast mode [ 185.359516][ T1157] bridge_slave_1: left promiscuous mode [ 185.362875][ T1157] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.393063][ T1157] bridge_slave_0: left allmulticast mode [ 185.405976][ T1157] bridge_slave_0: left promiscuous mode [ 185.416140][ T1157] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.849413][ T1157] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 185.863376][ T1157] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 185.871363][ T1157] bond0 (unregistering): Released all slaves [ 185.885548][ T5001] 8021q: adding VLAN 0 to HW filter on device eth2 [ 186.576126][ T4655] Bluetooth: hci1: command tx timeout [ 186.607181][ T1157] hsr_slave_0: left promiscuous mode [ 186.618093][ T1157] hsr_slave_1: left promiscuous mode [ 186.629026][ T1157] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.645264][ T1157] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.650607][ T1157] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.661927][ T1157] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.690372][ T1157] veth1_macvtap: left promiscuous mode [ 186.693489][ T1157] veth0_macvtap: left promiscuous mode [ 186.705297][ T1157] veth1_vlan: left promiscuous mode [ 186.716825][ T1157] veth0_vlan: left promiscuous mode [ 186.918930][ T12] smc: removing ib device syz1 [ 187.038242][ T1157] team0 (unregistering): Port device team_slave_1 removed [ 187.060438][ T1157] team0 (unregistering): Port device team_slave_0 removed [ 187.203168][ T5001] 8021q: adding VLAN 0 to HW filter on device eth3 [ 187.523752][ T12] smbdirect: ib_dev[syz1] removed [ 187.940553][ T6747] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.953819][ T6747] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.966937][ T6747] bridge_slave_0: entered allmulticast mode [ 187.980935][ T6747] bridge_slave_0: entered promiscuous mode [ 188.001131][ T6747] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.019124][ T6747] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.036893][ T6747] bridge_slave_1: entered allmulticast mode [ 188.047542][ T6747] bridge_slave_1: entered promiscuous mode [ 188.184178][ T6747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.209496][ T5001] 8021q: adding VLAN 0 to HW filter on device eth4 [ 188.230210][ T6747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.338093][ T6747] team0: Port device team_slave_0 added [ 188.353166][ T6747] team0: Port device team_slave_1 added [ 188.426958][ T6747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.430250][ T6747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.455067][ T6747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.463474][ T6747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.475381][ T6747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.505509][ T6747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.597166][ T6747] hsr_slave_0: entered promiscuous mode [ 188.600725][ T6747] hsr_slave_1: entered promiscuous mode [ 188.657220][ T4655] Bluetooth: hci1: command tx timeout [ 188.792687][ T5001] 8021q: adding VLAN 0 to HW filter on device eth5 [ 189.538727][ T6747] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 189.568613][ T6747] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 189.579440][ T6747] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 189.591068][ T6747] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 189.603888][ T6747] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 189.621236][ T6747] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 189.637114][ T6747] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 189.643008][ T6747] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 189.838454][ T6747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.872535][ T6747] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.892910][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.896192][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.918310][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.921525][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.700052][ T6747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.737547][ T4655] Bluetooth: hci1: command tx timeout [ 190.799660][ T6747] veth0_vlan: entered promiscuous mode [ 190.838938][ T6747] veth1_vlan: entered promiscuous mode [ 190.920962][ T6747] veth0_macvtap: entered promiscuous mode [ 190.938691][ T6747] veth1_macvtap: entered promiscuous mode [ 190.973861][ T6747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.998955][ T6747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.026063][ T129] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.041066][ T129] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.055372][ T129] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.059878][ T129] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.276736][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.287729][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.382857][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.390995][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/04/29 07:44:15 executed programs: 602 [ 191.715648][ T6842] infiniband syz1: set down [ 191.717833][ T6842] infiniband syz1: added ipvlan0 [ 191.733510][ T6842] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 191.740518][ T6842] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 191.749520][ T6842] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 191.779874][ T6842] RDS/IB: syz1: added [ 191.791192][ T6842] smc: adding ib device syz1 with port count 1 [ 191.797880][ T6842] smc: ib device syz1 port 1 has no pnetid [ 192.101209][ T6845] rxe_newlink: 146 callbacks suppressed [ 192.101224][ T6845] syz1: rxe_newlink: already configured on ipvlan0 [ 192.167946][ T6847] syz1: rxe_newlink: already configured on ipvlan0 [ 192.203929][ T6849] syz1: rxe_newlink: already configured on ipvlan0 [ 192.224364][ T6851] syz1: rxe_newlink: already configured on ipvlan0 [ 192.250578][ T6853] syz1: rxe_newlink: already configured on ipvlan0 [ 192.274301][ T6855] syz1: rxe_newlink: already configured on ipvlan0 [ 192.300937][ T6857] syz1: rxe_newlink: already configured on ipvlan0 [ 192.321390][ T6859] syz1: rxe_newlink: already configured on ipvlan0 [ 192.340908][ T6861] syz1: rxe_newlink: already configured on ipvlan0 [ 192.367890][ T6863] syz1: rxe_newlink: already configured on ipvlan0 [ 192.815229][ T4655] Bluetooth: hci1: command tx timeout 2026/04/29 07:44:20 executed programs: 808 [ 197.107642][ T7315] rxe_newlink: 225 callbacks suppressed [ 197.107772][ T7315] syz1: rxe_newlink: already configured on ipvlan0 [ 197.138503][ T7317] syz1: rxe_newlink: already configured on ipvlan0 [ 197.159121][ T7319] syz1: rxe_newlink: already configured on ipvlan0 [ 197.178670][ T7321] syz1: rxe_newlink: already configured on ipvlan0 [ 197.209011][ T7323] syz1: rxe_newlink: already configured on ipvlan0 [ 197.229499][ T7325] syz1: rxe_newlink: already configured on ipvlan0 [ 197.251241][ T7327] syz1: rxe_newlink: already configured on ipvlan0 [ 197.274624][ T7329] syz1: rxe_newlink: already configured on ipvlan0 [ 197.297323][ T7331] syz1: rxe_newlink: already configured on ipvlan0 [ 197.319003][ T7333] syz1: rxe_newlink: already configured on ipvlan0 2026/04/29 07:44:25 executed programs: 1056 [ 202.129159][ T7813] rxe_newlink: 239 callbacks suppressed [ 202.129197][ T7813] syz1: rxe_newlink: already configured on ipvlan0 [ 202.153412][ T7815] syz1: rxe_newlink: already configured on ipvlan0 [ 202.182644][ T7817] syz1: rxe_newlink: already configured on ipvlan0 [ 202.211163][ T7819] syz1: rxe_newlink: already configured on ipvlan0 [ 202.232548][ T7821] syz1: rxe_newlink: already configured on ipvlan0 [ 202.257971][ T7823] syz1: rxe_newlink: already configured on ipvlan0 [ 202.280670][ T7825] syz1: rxe_newlink: already configured on ipvlan0 [ 202.306766][ T7827] syz1: rxe_newlink: already configured on ipvlan0 [ 202.329193][ T7829] syz1: rxe_newlink: already configured on ipvlan0 [ 202.351859][ T7831] syz1: rxe_newlink: already configured on ipvlan0 [ 204.570410][ T44] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 204.584744][ T44] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 204.594212][ T44] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 204.600748][ T44] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 204.605816][ T44] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 204.738462][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.741418][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.804597][ T68] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.905905][ T68] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.010181][ T68] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.135411][ T68] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.428404][ T68] bridge_slave_1: left allmulticast mode [ 205.435726][ T68] bridge_slave_1: left promiscuous mode [ 205.447707][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.465289][ T68] bridge_slave_0: left allmulticast mode [ 205.473016][ T68] bridge_slave_0: left promiscuous mode [ 205.482790][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.862600][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 205.874755][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 205.887443][ T68] bond0 (unregistering): Released all slaves [ 205.958935][ T5001] 8021q: adding VLAN 0 to HW filter on device eth2 [ 206.576543][ T68] hsr_slave_0: left promiscuous mode [ 206.590665][ T68] hsr_slave_1: left promiscuous mode [ 206.599319][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.614600][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.631395][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.640806][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.656478][ T44] Bluetooth: hci0: command tx timeout [ 206.667624][ T68] veth1_macvtap: left promiscuous mode [ 206.675169][ T68] veth0_macvtap: left promiscuous mode [ 206.687203][ T68] veth1_vlan: left promiscuous mode [ 206.689891][ T68] veth0_vlan: left promiscuous mode [ 206.861906][ T82] smc: removing ib device syz1 [ 206.968002][ T68] team0 (unregistering): Port device team_slave_1 removed [ 206.981479][ T68] team0 (unregistering): Port device team_slave_0 removed [ 207.106554][ T5001] 8021q: adding VLAN 0 to HW filter on device eth3 [ 207.148414][ T82] smbdirect: ib_dev[syz1] removed [ 207.542432][ T8043] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.553939][ T8043] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.568155][ T8043] bridge_slave_0: entered allmulticast mode [ 207.587458][ T8043] bridge_slave_0: entered promiscuous mode [ 207.605088][ T8043] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.616538][ T8043] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.627942][ T8043] bridge_slave_1: entered allmulticast mode [ 207.652684][ T8043] bridge_slave_1: entered promiscuous mode [ 207.803064][ T8043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.833062][ T8043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.889319][ T8043] team0: Port device team_slave_0 added [ 207.901610][ T8043] team0: Port device team_slave_1 added [ 207.964739][ T8043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.971408][ T8043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.005894][ T8043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.013638][ T8043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.025117][ T8043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.043626][ T8043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.054606][ T5001] 8021q: adding VLAN 0 to HW filter on device eth4 [ 208.111925][ T8043] hsr_slave_0: entered promiscuous mode [ 208.115471][ T8043] hsr_slave_1: entered promiscuous mode [ 208.735045][ T44] Bluetooth: hci0: command tx timeout [ 208.998750][ T8043] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 209.012938][ T8043] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 209.020241][ T8043] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 209.037673][ T8043] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 209.048810][ T8043] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 209.069268][ T8043] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 209.076560][ T8043] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 209.089665][ T8043] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 209.281573][ T8043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.321970][ T8043] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.343112][ T129] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.348746][ T129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.384364][ T129] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.388575][ T129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.212184][ T8043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.267932][ T8043] veth0_vlan: entered promiscuous mode [ 210.277261][ T8043] veth1_vlan: entered promiscuous mode [ 210.310083][ T8043] veth0_macvtap: entered promiscuous mode [ 210.318770][ T8043] veth1_macvtap: entered promiscuous mode [ 210.342921][ T8043] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.359752][ T8043] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.371948][ T1157] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.384439][ T1157] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.393218][ T1157] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.411255][ T1157] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.551563][ T129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.561974][ T129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.613033][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.617351][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/04/29 07:44:34 executed programs: 1202 [ 210.815444][ T44] Bluetooth: hci0: command tx timeout [ 210.828239][ T8125] infiniband syz1: set down [ 210.830421][ T8125] infiniband syz1: added ipvlan0 [ 210.843898][ T8125] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 210.851099][ T8125] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 210.859497][ T8125] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 210.893804][ T8125] RDS/IB: syz1: added [ 210.903007][ T8125] smc: adding ib device syz1 with port count 1 [ 210.908847][ T8125] smc: ib device syz1 port 1 has no pnetid [ 211.119292][ T8128] rxe_newlink: 105 callbacks suppressed [ 211.119313][ T8128] syz1: rxe_newlink: already configured on ipvlan0 [ 211.158867][ T8130] syz1: rxe_newlink: already configured on ipvlan0 [ 211.189101][ T8132] syz1: rxe_newlink: already configured on ipvlan0 [ 211.229629][ T8134] syz1: rxe_newlink: already configured on ipvlan0 [ 211.252858][ T8136] syz1: rxe_newlink: already configured on ipvlan0 [ 211.271805][ T8138] syz1: rxe_newlink: already configured on ipvlan0 [ 211.293221][ T8140] syz1: rxe_newlink: already configured on ipvlan0 [ 211.314696][ T8142] syz1: rxe_newlink: already configured on ipvlan0 [ 211.338300][ T8144] syz1: rxe_newlink: already configured on ipvlan0 [ 211.360141][ T8146] syz1: rxe_newlink: already configured on ipvlan0 [ 212.895549][ T44] Bluetooth: hci0: command tx timeout 2026/04/29 07:44:39 executed programs: 1418 [ 216.137048][ T8604] rxe_newlink: 228 callbacks suppressed [ 216.137063][ T8604] syz1: rxe_newlink: already configured on ipvlan0 [ 216.159799][ T8606] syz1: rxe_newlink: already configured on ipvlan0 [ 216.181886][ T8608] syz1: rxe_newlink: already configured on ipvlan0 [ 216.203486][ T8610] syz1: rxe_newlink: already configured on ipvlan0 [ 216.223792][ T8612] syz1: rxe_newlink: already configured on ipvlan0 [ 216.244687][ T8614] syz1: rxe_newlink: already configured on ipvlan0 [ 216.271350][ T8616] syz1: rxe_newlink: already configured on ipvlan0 [ 216.290338][ T8618] syz1: rxe_newlink: already configured on ipvlan0 [ 216.309760][ T8620] syz1: rxe_newlink: already configured on ipvlan0 [ 216.331690][ T8622] syz1: rxe_newlink: already configured on ipvlan0 2026/04/29 07:44:44 executed programs: 1667 [ 221.162706][ T9102] rxe_newlink: 239 callbacks suppressed [ 221.162961][ T9102] syz1: rxe_newlink: already configured on ipvlan0 [ 221.183602][ T9104] syz1: rxe_newlink: already configured on ipvlan0 [ 221.202714][ T9106] syz1: rxe_newlink: already configured on ipvlan0 [ 221.223515][ T9108] syz1: rxe_newlink: already configured on ipvlan0 [ 221.247251][ T9110] syz1: rxe_newlink: already configured on ipvlan0 [ 221.269880][ T9112] syz1: rxe_newlink: already configured on ipvlan0 [ 221.292368][ T9114] syz1: rxe_newlink: already configured on ipvlan0 [ 221.313446][ T9116] syz1: rxe_newlink: already configured on ipvlan0 [ 221.334756][ T9118] syz1: rxe_newlink: already configured on ipvlan0 [ 221.358485][ T9120] syz1: rxe_newlink: already configured on ipvlan0 [ 223.623049][ T4655] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 223.634217][ T4655] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 223.640978][ T4655] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 223.656729][ T4655] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 223.661811][ T4655] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 223.819438][ T68] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.912138][ T68] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.036261][ T68] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.158883][ T68] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.544575][ T68] bridge_slave_1: left allmulticast mode [ 224.551695][ T68] bridge_slave_1: left promiscuous mode [ 224.562371][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.580221][ T68] bridge_slave_0: left allmulticast mode [ 224.584544][ T68] bridge_slave_0: left promiscuous mode [ 224.605388][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.972818][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.979583][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.987276][ T68] bond0 (unregistering): Released all slaves [ 225.003969][ T5001] 8021q: adding VLAN 0 to HW filter on device eth2 [ 225.695295][ T4655] Bluetooth: hci0: command tx timeout [ 225.711063][ T68] hsr_slave_0: left promiscuous mode [ 225.723329][ T68] hsr_slave_1: left promiscuous mode [ 225.737577][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.749082][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.762298][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.774766][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.799755][ T68] veth1_macvtap: left promiscuous mode [ 225.806432][ T68] veth0_macvtap: left promiscuous mode [ 225.815204][ T68] veth1_vlan: left promiscuous mode [ 225.818157][ T68] veth0_vlan: left promiscuous mode [ 226.029024][ T12] smc: removing ib device syz1 [ 226.140292][ T68] team0 (unregistering): Port device team_slave_1 removed [ 226.153467][ T68] team0 (unregistering): Port device team_slave_0 removed [ 226.321719][ T5001] 8021q: adding VLAN 0 to HW filter on device eth3 [ 226.337511][ T1246] ================================================================== [ 226.342028][ T1246] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x5e/0x170 [ 226.346953][ T1246] Read of size 8 at addr ffff8880126a22f0 by task kworker/0:3/1246 [ 226.351443][ T1246] [ 226.352570][ T1246] CPU: 0 UID: 0 PID: 1246 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT(full) [ 226.352585][ T1246] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 226.352593][ T1246] Workqueue: events smc_ib_port_event_work [ 226.352618][ T1246] Call Trace: [ 226.352627][ T1246] [ 226.352633][ T1246] dump_stack_lvl+0xe8/0x150 [ 226.352647][ T1246] print_address_description+0x55/0x1e0 [ 226.352659][ T1246] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 226.352676][ T1246] print_report+0x58/0x70 [ 226.352684][ T1246] kasan_report+0x117/0x150 [ 226.352700][ T1246] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 226.352714][ T1246] __ethtool_get_link_ksettings+0x5e/0x170 [ 226.352730][ T1246] ib_get_eth_speed+0x180/0x7f0 [ 226.352747][ T1246] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 226.352765][ T1246] ? do_raw_spin_unlock+0x4d/0x210 [ 226.352783][ T1246] rxe_query_port+0x93/0x3d0 [ 226.352801][ T1246] ib_query_port+0x170/0x830 [ 226.352813][ T1246] smc_ib_port_event_work+0x15a/0x940 [ 226.352831][ T1246] ? process_scheduled_works+0xa70/0x1860 [ 226.352841][ T1246] ? process_scheduled_works+0xa70/0x1860 [ 226.352852][ T1246] process_scheduled_works+0xb5d/0x1860 [ 226.352870][ T1246] ? __pfx_process_scheduled_works+0x10/0x10 [ 226.352883][ T1246] ? assign_work+0x3d5/0x5e0 [ 226.352894][ T1246] worker_thread+0xa53/0xfc0 [ 226.352911][ T1246] kthread+0x388/0x470 [ 226.352926][ T1246] ? __pfx_worker_thread+0x10/0x10 [ 226.352935][ T1246] ? __pfx_kthread+0x10/0x10 [ 226.352948][ T1246] ret_from_fork+0x514/0xb70 [ 226.352960][ T1246] ? __pfx_ret_from_fork+0x10/0x10 [ 226.352972][ T1246] ? __switch_to+0xc79/0x1410 [ 226.352987][ T1246] ? __pfx_kthread+0x10/0x10 [ 226.353000][ T1246] ret_from_fork_asm+0x1a/0x30 [ 226.353017][ T1246] [ 226.353021][ T1246] [ 226.441560][ T1246] Allocated by task 8043: [ 226.443519][ T1246] kasan_save_track+0x3e/0x80 [ 226.445784][ T1246] __kasan_kmalloc+0x93/0xb0 [ 226.447942][ T1246] __kvmalloc_node_noprof+0x528/0x8a0 [ 226.450469][ T1246] alloc_netdev_mqs+0xa8/0x1210 [ 226.453364][ T1246] rtnl_create_link+0x31f/0xd70 [ 226.456416][ T1246] rtnl_newlink_create+0x277/0xb70 [ 226.458912][ T1246] rtnl_newlink+0x166a/0x1bb0 [ 226.461040][ T1246] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 226.463379][ T1246] netlink_rcv_skb+0x232/0x4b0 [ 226.465974][ T1246] netlink_unicast+0x75c/0x8e0 [ 226.468534][ T1246] netlink_sendmsg+0x813/0xb40 [ 226.471074][ T1246] __sys_sendto+0x672/0x710 [ 226.473314][ T1246] __x64_sys_sendto+0xde/0x100 [ 226.475647][ T1246] do_syscall_64+0x15f/0xf80 [ 226.477991][ T1246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.481237][ T1246] [ 226.482655][ T1246] Freed by task 68: [ 226.484825][ T1246] kasan_save_track+0x3e/0x80 [ 226.487122][ T1246] kasan_save_free_info+0x46/0x50 [ 226.489541][ T1246] __kasan_slab_free+0x5c/0x80 [ 226.491802][ T1246] kfree+0x1c5/0x640 [ 226.493819][ T1246] device_release+0xc4/0x1f0 [ 226.496383][ T1246] kobject_put+0x228/0x560 [ 226.498680][ T1246] netdev_run_todo+0xc75/0xde0 [ 226.500953][ T1246] default_device_exit_batch+0x986/0xa00 [ 226.503593][ T1246] ops_undo_list+0x52b/0x940 [ 226.505994][ T1246] cleanup_net+0x56b/0x800 [ 226.508060][ T1246] process_scheduled_works+0xb5d/0x1860 [ 226.510647][ T1246] worker_thread+0xa53/0xfc0 [ 226.512964][ T1246] kthread+0x388/0x470 [ 226.515005][ T1246] ret_from_fork+0x514/0xb70 [ 226.517100][ T1246] ret_from_fork_asm+0x1a/0x30 [ 226.519375][ T1246] [ 226.520520][ T1246] The buggy address belongs to the object at ffff8880126a2000 [ 226.520520][ T1246] which belongs to the cache kmalloc-cg-4k of size 4096 [ 226.527952][ T1246] The buggy address is located 752 bytes inside of [ 226.527952][ T1246] freed 4096-byte region [ffff8880126a2000, ffff8880126a3000) [ 226.534288][ T1246] [ 226.535705][ T1246] The buggy address belongs to the physical page: [ 226.539492][ T1246] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x126a0 [ 226.543971][ T1246] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 226.547866][ T1246] memcg:ffff8880126a1011 [ 226.549823][ T1246] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 226.553514][ T1246] page_type: f5(slab) [ 226.555868][ T1246] raw: 00fff00000000040 ffff88801ac58500 dead000000000100 dead000000000122 [ 226.560197][ T1246] raw: 0000000000000000 0000200000040004 00000000f5000000 ffff8880126a1011 [ 226.564169][ T1246] head: 00fff00000000040 ffff88801ac58500 dead000000000100 dead000000000122 [ 226.568563][ T1246] head: 0000000000000000 0000200000040004 00000000f5000000 ffff8880126a1011 [ 226.573356][ T1246] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 226.576886][ T1246] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 226.581008][ T1246] page dumped because: kasan: bad access detected [ 226.583764][ T1246] page_owner tracks the page as allocated [ 226.586498][ T1246] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 8043, tgid 8043 (syz-executor), ts 208149309926, free_ts 199472081341 [ 226.596301][ T1246] post_alloc_hook+0x231/0x280 [ 226.599091][ T1246] get_page_from_freelist+0x24ba/0x2540 [ 226.602238][ T1246] __alloc_frozen_pages_noprof+0x18d/0x380 [ 226.604798][ T1246] allocate_slab+0x77/0x660 [ 226.606839][ T1246] refill_objects+0x339/0x3d0 [ 226.608991][ T1246] __pcs_replace_empty_main+0x321/0x720 [ 226.611905][ T1246] __kmalloc_node_track_caller_noprof+0x572/0x7b0 [ 226.615819][ T1246] kmemdup_noprof+0x2b/0x70 [ 226.618248][ T1246] __addrconf_sysctl_register+0xa7/0x4d0 [ 226.620792][ T1246] addrconf_sysctl_register+0x168/0x1c0 [ 226.623336][ T1246] ipv6_add_dev+0xd26/0x13a0 [ 226.625514][ T1246] addrconf_notify+0x771/0x1050 [ 226.627659][ T1246] notifier_call_chain+0x1ad/0x3d0 [ 226.630206][ T1246] register_netdevice+0x18c9/0x1ec0 [ 226.633390][ T1246] veth_newlink+0x67b/0xb70 [ 226.635875][ T1246] rtnl_newlink_create+0x329/0xb70 [ 226.638251][ T1246] page last free pid 7550 tgid 7550 stack trace: [ 226.640998][ T1246] __free_frozen_pages+0xbc7/0xd30 [ 226.643365][ T1246] __slab_free+0x274/0x2c0 [ 226.645686][ T1246] qlist_free_all+0x99/0x100 [ 226.648350][ T1246] kasan_quarantine_reduce+0x148/0x160 [ 226.651109][ T1246] __kasan_slab_alloc+0x22/0x80 [ 226.653135][ T1246] __kmalloc_noprof+0x316/0x760 [ 226.655313][ T1246] tomoyo_encode+0x28b/0x550 [ 226.657468][ T1246] tomoyo_path_perm+0x318/0x560 [ 226.659728][ T1246] tomoyo_path_symlink+0xab/0xf0 [ 226.662201][ T1246] security_path_symlink+0x16f/0x360 [ 226.665058][ T1246] filename_symlinkat+0x134/0x410 [ 226.667373][ T1246] __se_sys_symlinkat+0x4e/0x2b0 [ 226.669578][ T1246] do_syscall_64+0x15f/0xf80 [ 226.671730][ T1246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.675088][ T1246] [ 226.676458][ T1246] Memory state around the buggy address: [ 226.679076][ T1246] ffff8880126a2180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 226.682571][ T1246] ffff8880126a2200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 226.686161][ T1246] >ffff8880126a2280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 226.690179][ T1246] ^ [ 226.694247][ T1246] ffff8880126a2300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 226.697830][ T1246] ffff8880126a2380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 226.701699][ T1246] ================================================================== [ 226.737133][ T1246] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 226.740764][ T1246] CPU: 0 UID: 0 PID: 1246 Comm: kworker/0:3 Not tainted syzkaller #0 PREEMPT(full) [ 226.745433][ T1246] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 226.749916][ T1246] Workqueue: events smc_ib_port_event_work [ 226.752899][ T1246] Call Trace: [ 226.754727][ T1246] [ 226.756324][ T1246] vpanic+0x56c/0xa60 [ 226.758372][ T1246] ? __pfx_vpanic+0x10/0x10 [ 226.760657][ T1246] ? __pfx___schedule+0x10/0x10 [ 226.763057][ T1246] panic+0xc5/0xd0 [ 226.764813][ T1246] ? __pfx_panic+0x10/0x10 [ 226.767248][ T1246] ? preempt_schedule_common+0x82/0xd0 [ 226.770447][ T1246] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 226.773684][ T1246] check_panic_on_warn+0x89/0xb0 [ 226.775991][ T1246] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 226.778735][ T1246] end_report+0x73/0x170 [ 226.780710][ T1246] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 226.783668][ T1246] kasan_report+0x128/0x150 [ 226.786316][ T1246] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 226.789563][ T1246] __ethtool_get_link_ksettings+0x5e/0x170 [ 226.792412][ T1246] ib_get_eth_speed+0x180/0x7f0 [ 226.794806][ T1246] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 226.797331][ T1246] ? do_raw_spin_unlock+0x4d/0x210 [ 226.799654][ T1246] rxe_query_port+0x93/0x3d0 [ 226.801728][ T1246] ib_query_port+0x170/0x830 [ 226.804378][ T1246] smc_ib_port_event_work+0x15a/0x940 [ 226.807209][ T1246] ? process_scheduled_works+0xa70/0x1860 [ 226.809686][ T1246] ? process_scheduled_works+0xa70/0x1860 [ 226.812217][ T1246] process_scheduled_works+0xb5d/0x1860 [ 226.814851][ T1246] ? __pfx_process_scheduled_works+0x10/0x10 [ 226.817641][ T1246] ? assign_work+0x3d5/0x5e0 [ 226.819983][ T1246] worker_thread+0xa53/0xfc0 [ 226.822086][ T1246] kthread+0x388/0x470 [ 226.824028][ T1246] ? __pfx_worker_thread+0x10/0x10 [ 226.826369][ T1246] ? __pfx_kthread+0x10/0x10 [ 226.828559][ T1246] ret_from_fork+0x514/0xb70 [ 226.830932][ T1246] ? __pfx_ret_from_fork+0x10/0x10 [ 226.833521][ T1246] ? __switch_to+0xc79/0x1410 [ 226.835779][ T1246] ? __pfx_kthread+0x10/0x10 [ 226.837891][ T1246] ret_from_fork_asm+0x1a/0x30 [ 226.839940][ T1246] [ 226.841582][ T1246] Kernel Offset: disabled [ 226.843495][ T1246] Rebooting in 86400 seconds.. VM DIAGNOSIS: 07:44:50 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000064 RBX=0000000000000064 RCX=0000000000000000 RDX=00000000000003f8 RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90001cff1f0 R8 =ffff888034f60237 R9 =1ffff110069ec046 R10=dffffc0000000000 R11=ffffffff85464520 R12=dffffc0000000000 R13=ffffffff9a48e9cc R14=ffffffff9a7a7b80 R15=0000000000000000 RIP=ffffffff8546459c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88808c888000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055d7764ed138 CR3=0000000040aae000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000000000c1 Opmask01=0000000000000001 Opmask02=0000000000040000 Opmask03=0000000000000000 Opmask04=00000000fffffffd Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc2aff5e8b 00007ffc2aff5e8b ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc2aff6390 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc2aff6390 0000003000000018 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 70207466656c203a 6e616c765f316874 6576205d38365420 00006465766f6d00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7020746665662030 6461667655316274 6576205732365420 0000646576656700 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4c5620676e696464 61203a7131323038 205d313030355420 5b5d393137313233 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 32333d6567735f76 6365725f78616d20 32333d6567735f64 6e65735f78616d20 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 363735383430313d 72775f70715f7861 6d2037363732333d 6571635f78616d20 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 32333d64725f6567 735f78616d20303d 64725f6c67735f78 616d203832313d6d ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f74615f64725f74 696e695f70715f78 616d203832313d6d 6f74615f64725f70 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65746e656d676172 66206562206c6c69 7720656361667265 746e692073696874 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000