last executing test programs: 59.861009699s ago: executing program 0 (id=706): openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000000)={0x4, "f3c492ea016503000000c708bde439d9edffdd00000000e4a6d85b005900", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000140)={"9fcaa0504b38d5004b9277c079417ff857dc9b7ac770169aed764b4d2ada8bde", r2, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000200)={"fe0d1acce4a37ef94acd000200", r3, 0xffffffffffffffff}) r5 = dup(r4) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) close_range(r0, 0xffffffffffffffff, 0x0) 59.564283457s ago: executing program 0 (id=709): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000280)={@flat=@binder={0x73622a85, 0x110a, 0x1}, @ptr={0x70742a85, 0x0, 0x0, 0xfc, 0x0, 0x4}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0x25}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 59.47514543s ago: executing program 0 (id=710): openat$nullb(0xffffff9c, 0x0, 0x200003, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x10, 0x8, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) preadv(r2, &(0x7f0000000000)=[{&(0x7f0000001180)=""/4100, 0x1004}], 0x1, 0x0, 0x0) 55.092495712s ago: executing program 0 (id=725): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x1) ioctl$TIOCSETD(r1, 0x5412, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000340)=0xff) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000240)) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000001c0)) 52.80523659s ago: executing program 0 (id=748): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 52.033894438s ago: executing program 1 (id=751): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r1, &(0x7f00000000c0)="1c", 0x10002, 0x0, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) 51.940540406s ago: executing program 1 (id=752): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0, 0x19}, 0x1, 0x7}, 0x0) fsmount(0xffffffffffffffff, 0x1, 0xe) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000d80), 0x1a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000340)=0xfffffff9, 0x4) write$binfmt_aout(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="c02101"], 0x20) 42.8541061s ago: executing program 1 (id=765): fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xffffff19) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') rename(&(0x7f0000000180)='./file1\x00', &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) 42.653628519s ago: executing program 1 (id=767): socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r1}, 0x10) setitimer(0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x8}, @hci_rp_le_read_def_data_len={{}, {0x1, 0x0, 0x7}}}}, 0xb) 42.064648748s ago: executing program 1 (id=771): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r1, 0x2000009) sendfile(r0, r1, 0x0, 0x7ffff000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = socket$unix(0x1, 0x5, 0x0) r4 = dup2(r3, r2) close_range(r4, 0xffffffffffffffff, 0x0) 41.922856187s ago: executing program 1 (id=772): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x5}}, 0x10) sendmmsg$inet(r1, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f00000056c0)=[{&(0x7f0000001240)="80349c0d9e8fcc9f44658138dc4a3c4ad42f918348474a5bc38ff0e0571fc22c8eb5cb22fdf30ced1a4c1ccb5e5b35fed7db48c1a8a7132adc5623d146ddfe2254dd2579b4284b53d1cea6206864473d31bdb00c9d1462458b678827e80c94d88099e7471a58b1463086f9cdd1ccc19fa2fc4a9dd5a56fe782d15e66648c7630f1aaa7e9820460c46e292dbb8fa6f6701048ff17f46097b1ee0750ed038f18b81b2ba014bf866062c9a6f88b5d07e13b7eddd968ba9c7a53609c7b61471a51fd85bceebc0a92b2cd7c45a7f4571e693abebc3c5ff16c8128d92476", 0xdb}, {&(0x7f0000000280)="5b4ea50f20d7212327afde5e7a457cde2dff791c69fbc3", 0x17}, {&(0x7f00000002c0)="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", 0xeb}, {&(0x7f0000001440)="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", 0xb47}, {&(0x7f0000002440)="253c10cd0a56ebbb9e8b465670109c340c95f1d27d36cbeb7fa948545e9b18da346b70b5dc6ea12ad1a30e4f7038336f1af1d61b04de988f1755e9b3ba9919b2a4952ceda920a7f0e22dd239d4a74f2d1c854bc64f09f979aa3e9f5c25ff8ec189e5d809483583f648cd8870291200e428", 0x71}, {&(0x7f00000024c0)="2ba671ae8107530b978dd82841597ed8f4275ed9e6b9f7b73ee6324ddf688ad9d88125b82afd2e28aef7183086ce0dd4ee880fc56a2ca8b52ef8f5b5f3e475f49b0bcd201fe612703d680fdd1151dd32535b04d4697d472c7750d6c4c197162e9f872253b611b1ca20e79dcf40d1faf58a453f8db9a03fdd351b54ad4e77fa0fda7990bb281079ae7ba3994aef7380e1d6342305e2d12c57379fd12e784f48e4e832171df4576c8724e3bfd70ebc92fc11914cd4", 0xb4}, {&(0x7f00000025c0)="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", 0xa9b}], 0x7}}], 0x300, 0x0) 22.828644821s ago: executing program 3 (id=820): sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0xf000}, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0xc008ae88, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000e497f36c3b91ceb4a45653d1000018010040"]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 22.261811054s ago: executing program 3 (id=822): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file4/file6\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file4/file7\x00', 0x0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x3201}, 0x10, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x0, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2000, r1}, 0x0) landlock_restrict_self(r0, 0x0) landlock_restrict_self(r0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file4/file6\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file1/file4/file7/file6\x00', 0x0) 22.259449194s ago: executing program 3 (id=824): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xf1}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@nodevmap}], [], 0x6b}}) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r4 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r4, r3, 0x0, 0x80000000) 22.082874559s ago: executing program 3 (id=825): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}}) 21.539183211s ago: executing program 3 (id=827): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000001200), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)) r1 = socket$packet(0x11, 0x3, 0x300) r2 = dup(r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/65, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x0, r2}) read$rfkill(r2, &(0x7f0000000000), 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x28}}, 0x0) 21.154471498s ago: executing program 3 (id=828): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x40000, 0x0}, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0x8010aa01, 0x0) userfaultfd(0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb502000008000000b7030000000000008500000073000000850000007d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r1, 0x0, 0xe, 0x0, &(0x7f0000000480)="4a9d1efbc6a78be0b9547ed387db", 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.834496487s ago: executing program 2 (id=839): creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, &(0x7f0000000040)={[{0xc9}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0xff, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}], 0x9}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x10001, 0x0, 0x0, 0x0, 0x7, 0x2004ca, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.16440609s ago: executing program 2 (id=840): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000100b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x4b) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xfffffdf2, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60350005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@nfs_export_on}]}) 1.724571697s ago: executing program 2 (id=841): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000280)=0x7b, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000"], 0xdc}}, 0x4044080) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0x1, 0x0, 0x46, 0x407006}, 0x104) 699.555149ms ago: executing program 2 (id=842): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r4, 0xee01) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8, &(0x7f00000002c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000040)="0200ffff0000", 0x6}]) 540.203556ms ago: executing program 0 (id=766): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x209d) syz_fuse_handle_req(r0, &(0x7f000000c280)="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", 0x2000, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x0, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc000}}}, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008280)="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", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x0, {0xfffffffffffffffe}}, 0x0, 0x0, 0x0, 0x0}) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') syz_fuse_handle_req(r0, &(0x7f0000006280)="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", 0x2000, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, 0x0, 0xfffffdf9) 228.898625ms ago: executing program 2 (id=843): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x10001, 0x0, 0x0, 0x0, 0x7, 0x2004ca, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe]}) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e0a4060"], 0xd) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 2 (id=844): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f00000007c0)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x3f, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xfffff7e8, 0x0, 0x0, 0x3}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x8}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x2}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) kernel console output (not intermixed with test programs): 79650][ T5614] netlink: 'syz.3.67': attribute type 1 has an invalid length. [ 47.182670][ T5614] netlink: 224 bytes leftover after parsing attributes in process `syz.3.67'. [ 47.211914][ T92] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.212612][ T5609] kvm: kvm [5608]: vcpu0, guest rIP: 0xe3 Unhandled WRMSR(0xc1) = 0x8000 [ 47.214481][ T92] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.325143][ T1098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.327624][ T1098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.389926][ T39] audit: type=1804 audit(1728158166.904:3): pid=5622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.77" name="/newroot/16/file0/file0" dev="9p" ino=35922659 res=1 errno=0 [ 47.413487][ T1098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.416431][ T1098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.420866][ T5624] tipc: Started in network mode [ 47.423041][ T5624] tipc: Node identity cea58fb3259c, cluster identity 4711 [ 47.426044][ T5624] tipc: Enabled bearer , priority 0 [ 47.446770][ T5623] tipc: Disabling bearer [ 47.514678][ T1132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.518372][ T1132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.617492][ T1132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.619649][ T1132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.641119][ T5628] netlink: 20 bytes leftover after parsing attributes in process `syz.0.72'. [ 47.719987][ T102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.722720][ T102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.832899][ T1098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.835195][ T1098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 47.983297][ T1098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 47.985311][ T1098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.031810][ T1132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.033948][ T1132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.084844][ T5643] syz.1.76 (5643): drop_caches: 2 [ 48.140212][ T1098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.142277][ T1098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.232540][ T1132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.235832][ T1132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.333240][ T39] audit: type=1326 audit(1728158167.854:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5658 comm="syz.3.92" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fd0579 code=0x0 [ 48.690739][ T5671] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 48.692464][ T5671] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 48.697901][ T5671] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 48.705912][ T5671] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 48.707539][ T5671] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 48.711322][ T5671] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 48.713216][ T5671] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 48.716637][ T5671] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 48.721590][ T5671] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 48.723219][ T5671] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 48.726670][ T5671] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 49.392917][ T5688] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 49.510258][ T39] audit: type=1800 audit(1728158169.024:5): pid=5690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.95" name="bus" dev="overlay" ino=157 res=0 errno=0 [ 50.486101][ T5711] syz.1.100[5711] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 50.486202][ T5711] syz.1.100[5711] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 50.490710][ T5711] syz.1.100[5711] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 50.722036][ T67] Bluetooth: hci0: Opcode 0x2046 failed: -110 [ 50.726520][ T5346] Bluetooth: hci1: command 0x0c1a tx timeout [ 50.726543][ T5359] Bluetooth: hci0: command 0x0c1a tx timeout [ 50.799856][ T5346] Bluetooth: hci3: command 0x0c1a tx timeout [ 50.800255][ T67] Bluetooth: hci2: command 0x0c1a tx timeout [ 50.925231][ C3] net_ratelimit: 86 callbacks suppressed [ 50.925249][ C3] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 51.088412][ T5726] process 'syz.0.108' launched './file0' with NULL argv: empty string added [ 51.534308][ T1098] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.616219][ T1098] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.833273][ T1098] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.991351][ T1098] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 52.016344][ T67] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 52.020287][ T67] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 52.022621][ T67] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 52.024988][ T67] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 52.027577][ T67] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 52.032493][ T67] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 52.060086][ T5747] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 52.062655][ T5747] overlayfs: failed to set xattr on upper [ 52.064653][ T5747] overlayfs: ...falling back to redirect_dir=nofollow. [ 52.066802][ T5747] overlayfs: ...falling back to index=off. [ 52.067527][ T5749] netlink: 20 bytes leftover after parsing attributes in process `syz.1.115'. [ 52.068221][ T5747] overlayfs: ...falling back to uuid=null. [ 52.118523][ T5352] Bluetooth: hci3: unexpected event for opcode 0x0c05 [ 52.126901][ T1098] bridge_slave_1: left allmulticast mode [ 52.128503][ T1098] bridge_slave_1: left promiscuous mode [ 52.143360][ T1098] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.153221][ T1098] bridge_slave_0: left allmulticast mode [ 52.154700][ T1098] bridge_slave_0: left promiscuous mode [ 52.156473][ T1098] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.209861][ T5759] input: syz0 as /devices/virtual/input/input5 [ 52.565173][ T1098] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 52.580873][ T1098] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 52.585602][ T1098] bond0 (unregistering): Released all slaves [ 52.644138][ T5744] chnl_net:caif_netlink_parms(): no params data found [ 52.740027][ T5744] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.742209][ T5744] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.744064][ T5744] bridge_slave_0: entered allmulticast mode [ 52.746607][ T5744] bridge_slave_0: entered promiscuous mode [ 52.751256][ T5744] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.753171][ T5744] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.755042][ T5744] bridge_slave_1: entered allmulticast mode [ 52.757023][ T5744] bridge_slave_1: entered promiscuous mode [ 52.788974][ T5744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.791470][ T5352] Bluetooth: hci0: command 0x0c1a tx timeout [ 52.791519][ T8] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 52.800048][ T5352] Bluetooth: hci1: command 0x0c1a tx timeout [ 52.807106][ T5744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.857621][ T5744] team0: Port device team_slave_0 added [ 52.861886][ T5744] team0: Port device team_slave_1 added [ 52.890934][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 52.893150][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.903216][ T5744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 52.910930][ T5744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 52.919235][ T5744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 52.929065][ T5744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 52.938006][ T1098] hsr_slave_0: left promiscuous mode [ 52.941104][ T1098] hsr_slave_1: left promiscuous mode [ 52.944832][ T1098] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.947249][ T1098] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.949692][ T8] usb 6-1: Using ep0 maxpacket: 8 [ 52.953503][ T1098] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.956006][ T1098] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.958960][ T8] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 52.968418][ T8] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 52.971802][ T8] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 52.975090][ T8] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 52.978464][ T8] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 52.988419][ T8] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 52.988930][ T1098] veth1_macvtap: left promiscuous mode [ 52.993031][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.993750][ T1098] veth0_macvtap: left promiscuous mode [ 52.998088][ T1098] veth1_vlan: left promiscuous mode [ 52.999454][ T1098] veth0_vlan: left promiscuous mode [ 53.219294][ T8] usb 6-1: GET_CAPABILITIES returned 0 [ 53.225861][ T8] usbtmc 6-1:16.0: can't read capabilities [ 53.598447][ T5768] usbtmc 6-1:16.0: usb_control_msg returned -71 [ 53.602817][ T8] usb 6-1: USB disconnect, device number 2 [ 53.665509][ T1098] team0 (unregistering): Port device team_slave_1 removed [ 53.757902][ T1098] team0 (unregistering): Port device team_slave_0 removed [ 54.071993][ T5352] Bluetooth: hci2: command tx timeout [ 54.332778][ T5744] hsr_slave_0: entered promiscuous mode [ 54.340851][ T5744] hsr_slave_1: entered promiscuous mode [ 54.343688][ T5744] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.345902][ T5744] Cannot create hsr debugfs directory [ 54.881415][ T5352] Bluetooth: hci0: command 0x0c1a tx timeout [ 54.929984][ T5744] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.934754][ T5744] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.949098][ T5744] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.954641][ T5744] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.991630][ T5744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.003105][ T5744] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.012882][ T1098] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.014775][ T1098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.020898][ T102] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.022831][ T102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.159910][ T5744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.190397][ T5744] veth0_vlan: entered promiscuous mode [ 55.198798][ T5744] veth1_vlan: entered promiscuous mode [ 55.218741][ T5744] veth0_macvtap: entered promiscuous mode [ 55.224982][ T5744] veth1_macvtap: entered promiscuous mode [ 55.239961][ T5744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.243585][ T5744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.246866][ T5744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.259657][ T5744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.263171][ T5744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.266877][ T5744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.274258][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.279414][ T5744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.282416][ T5744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.284800][ T5744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.287374][ T5744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.290213][ T5744] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.293200][ T5744] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.301094][ T5744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.307033][ T5744] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.310448][ T5744] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.313288][ T5744] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.316246][ T5744] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.353739][ T92] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.355763][ T92] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.380538][ T92] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.382655][ T92] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.492035][ T5860] kvm: kvm [5859]: vcpu0, guest rIP: 0xe3 Unhandled WRMSR(0xc1) = 0x8000 [ 56.159989][ T5352] Bluetooth: hci2: command tx timeout [ 56.685876][ T5893] syz.1.137 (5893): drop_caches: 2 [ 56.792059][ T5899] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 56.959694][ T5352] Bluetooth: hci0: command 0x0c1a tx timeout [ 57.163313][ T39] audit: type=1800 audit(1728158176.684:6): pid=5901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.142" name="bus" dev="overlay" ino=64 res=0 errno=0 [ 58.259764][ T5352] Bluetooth: hci2: command tx timeout [ 59.049030][ T5933] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 59.140673][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 59.143996][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 59.892703][ T5941] syz.2.150 (5941): drop_caches: 2 [ 60.189667][ T5537] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 60.320091][ T5352] Bluetooth: hci2: command tx timeout [ 60.341272][ T5537] usb 7-1: Using ep0 maxpacket: 8 [ 60.343838][ T5537] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 60.346009][ T5537] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 60.348500][ T5537] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 60.351229][ T5537] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 60.353854][ T5537] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 60.357193][ T5537] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 60.359553][ T5537] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.598737][ T5537] usb 7-1: GET_CAPABILITIES returned 0 [ 60.600256][ T5537] usbtmc 7-1:16.0: can't read capabilities [ 60.989871][ T5949] usbtmc 7-1:16.0: usb_control_msg returned -71 [ 60.990783][ T5537] usb 7-1: USB disconnect, device number 2 [ 62.638037][ T5409] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 62.640186][ T5409] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 62.642191][ T5409] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 62.644108][ T5409] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 62.646079][ T5409] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 62.647993][ T5409] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 62.650022][ T5409] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 62.651941][ T5409] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 62.653880][ T5409] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 62.655749][ T39] audit: type=1800 audit(1728158182.174:7): pid=5974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.162" name="bus" dev="overlay" ino=230 res=0 errno=0 [ 62.655841][ T5409] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 62.663065][ T5409] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 62.665049][ T5409] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 62.667107][ T5409] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 62.669074][ T5409] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 62.671357][ T5409] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 62.673262][ T5409] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 62.675210][ T5409] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 62.677115][ T5409] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 62.679028][ T5409] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 62.681225][ T5409] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 62.683731][ T5409] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 62.685751][ T5409] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 62.687652][ T5409] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 62.689570][ T5409] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 62.692439][ T5409] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 62.694378][ T5409] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 62.696340][ T5409] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 62.698312][ T5409] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 62.709365][ T5409] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 62.712005][ T5409] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 62.714696][ T5409] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 62.717349][ T5409] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 62.720282][ T5409] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 62.722994][ T5409] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 62.725650][ T5409] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 62.728273][ T5409] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 62.730338][ T5409] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 62.732243][ T5409] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 62.734517][ T5409] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 62.736626][ T5409] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 62.738547][ T5409] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 62.740828][ T5409] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 62.743143][ T5409] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 62.745101][ T5409] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 62.747385][ T5409] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 62.749320][ T5409] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 62.751353][ T5409] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 62.753325][ T5409] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 62.755513][ T5409] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 62.757464][ T5409] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 62.759362][ T5409] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 62.761414][ T5409] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 62.763318][ T5409] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 62.765256][ T5409] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 62.767176][ T5409] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 62.769086][ T5409] hid-generic 0001:0000:0000.0002: unknown main item tag 0x0 [ 62.773862][ T5409] hid-generic 0001:0000:0000.0002: hidraw1: HID v0.00 Device [syz0] on syz1 [ 62.919158][ T5985] syz.0.167 (5985): drop_caches: 2 [ 63.083828][ T5998] netlink: 'syz.1.176': attribute type 1 has an invalid length. [ 63.086628][ T5998] netlink: 224 bytes leftover after parsing attributes in process `syz.1.176'. [ 63.259098][ T6002] mmap: syz.2.177 (6002) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 63.322393][ T5409] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 63.489782][ T5409] usb 8-1: Using ep0 maxpacket: 8 [ 63.511643][ T5409] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 63.513877][ T5409] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 63.516800][ T5409] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 63.529157][ T5409] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 63.532212][ T5409] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 63.535671][ T5409] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 63.538087][ T5409] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.746094][ T6017] syz.1.183 (6017): drop_caches: 2 [ 63.756186][ T5409] usb 8-1: GET_CAPABILITIES returned 0 [ 63.757761][ T5409] usbtmc 8-1:16.0: can't read capabilities [ 64.122868][ T5999] usbtmc 8-1:16.0: usb_control_msg returned -71 [ 64.125118][ T5409] usb 8-1: USB disconnect, device number 2 [ 64.910033][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 65.119776][ T58] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 65.269677][ T58] usb 7-1: Using ep0 maxpacket: 8 [ 65.272392][ T58] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 65.274642][ T58] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 65.277126][ T58] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 65.289743][ T58] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 65.292428][ T58] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 65.295776][ T58] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 65.298096][ T58] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.528254][ T58] usb 7-1: GET_CAPABILITIES returned 0 [ 65.529809][ T58] usbtmc 7-1:16.0: can't read capabilities [ 65.895914][ T57] usb 7-1: USB disconnect, device number 3 [ 65.900320][ T6034] usbtmc 7-1:16.0: usb_control_msg returned -71 [ 66.547314][ T6060] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.553232][ T6060] batadv_slave_0: entered promiscuous mode [ 66.581384][ T6058] syz.1.193 (6058): drop_caches: 2 [ 66.648379][ T57] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 66.667560][ T57] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 66.669895][ T57] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 66.671925][ T57] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 66.673852][ T57] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 66.675766][ T57] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 66.677697][ T57] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 66.681459][ T57] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 66.683401][ T57] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 66.685330][ T57] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 66.687226][ T57] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 66.689145][ T57] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 66.691279][ T57] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 66.693184][ T57] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 66.695141][ T57] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 66.697059][ T57] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 66.698892][ T57] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 66.701617][ T57] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 66.703675][ T57] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 66.705602][ T57] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 66.707682][ T57] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 66.709986][ T57] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 66.712044][ T57] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 66.713935][ T57] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 66.716772][ T57] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 66.718861][ T57] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 66.720901][ T57] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 66.722857][ T57] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 66.729753][ T57] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 66.731803][ T57] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 66.733840][ T57] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 66.739708][ T57] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 66.741860][ T57] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 66.743713][ T57] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 66.745585][ T57] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 66.747440][ T57] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 66.749711][ T57] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 66.752047][ T57] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 66.753944][ T57] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 66.759896][ T57] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 66.763568][ T57] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 66.766874][ T57] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 66.768882][ T57] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 66.771146][ T57] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 66.773151][ T57] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 66.775163][ T57] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 66.777185][ T57] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 66.779230][ T57] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 66.781273][ T57] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 66.783280][ T57] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 66.785295][ T57] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 66.787920][ T57] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 66.790619][ T57] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 66.793222][ T57] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 66.795835][ T57] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 66.798514][ T57] hid-generic 0001:0000:0000.0003: unknown main item tag 0x0 [ 66.801954][ T57] hid-generic 0001:0000:0000.0003: hidraw1: HID v0.00 Device [syz0] on syz1 [ 67.117719][ T6086] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.125115][ T6086] batadv_slave_0: entered promiscuous mode [ 67.519686][ T58] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 67.690220][ T58] usb 7-1: Using ep0 maxpacket: 8 [ 67.693386][ T58] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 67.696152][ T58] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 67.699505][ T58] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 67.703107][ T58] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 67.706417][ T58] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 67.710534][ T58] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 67.712906][ T58] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 67.928841][ T58] usb 7-1: GET_CAPABILITIES returned 0 [ 67.930424][ T58] usbtmc 7-1:16.0: can't read capabilities [ 68.297798][ T25] usb 7-1: USB disconnect, device number 4 [ 68.299478][ T6092] usbtmc 7-1:16.0: usb_control_msg returned -71 [ 68.975133][ T8] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 68.977583][ T8] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 68.979998][ T8] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 68.982372][ T8] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 68.984728][ T8] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 68.987283][ T8] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 68.989888][ T8] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 68.992510][ T8] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 68.995053][ T8] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 68.997930][ T8] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 69.001273][ T8] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 69.004405][ T8] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 69.007005][ T8] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 69.009534][ T8] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 69.012267][ T8] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 69.014796][ T8] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 69.017537][ T8] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 69.020148][ T8] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 69.022763][ T8] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 69.025409][ T8] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 69.027988][ T8] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 69.030882][ T8] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 69.033477][ T8] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 69.037876][ T8] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 69.040576][ T8] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 69.043434][ T8] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 69.046057][ T8] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 69.048606][ T8] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 69.051278][ T8] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 69.053978][ T8] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 69.056614][ T8] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 69.059159][ T8] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 69.061898][ T8] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 69.064649][ T8] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 69.067190][ T8] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 69.069833][ T8] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 69.072387][ T8] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 69.075154][ T8] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 69.077958][ T8] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 69.080782][ T8] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 69.083518][ T8] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 69.086084][ T8] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 69.088629][ T8] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 69.091344][ T8] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 69.093924][ T8] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 69.096627][ T8] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 69.099526][ T8] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 69.102238][ T8] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 69.104910][ T8] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 69.107527][ T8] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 69.110230][ T8] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 69.112800][ T8] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 69.115360][ T8] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 69.117981][ T8] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 69.120805][ T8] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 69.123537][ T8] hid-generic 0001:0000:0000.0004: unknown main item tag 0x0 [ 69.131155][ T8] hid-generic 0001:0000:0000.0004: hidraw1: HID v0.00 Device [syz0] on syz1 [ 69.227525][ T6130] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.230843][ T6130] batadv_slave_0: entered promiscuous mode [ 69.400388][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.071320][ T57] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 70.230501][ T57] usb 7-1: Using ep0 maxpacket: 8 [ 70.233077][ T57] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 70.235196][ T57] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 70.237608][ T57] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 70.249719][ T57] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 70.252323][ T57] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 70.255525][ T57] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 70.257764][ T57] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.476445][ T57] usb 7-1: GET_CAPABILITIES returned 0 [ 70.478396][ T57] usbtmc 7-1:16.0: can't read capabilities [ 70.784345][ T6164] netlink: 4 bytes leftover after parsing attributes in process `syz.3.229'. [ 70.841907][ T65] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.851872][ T25] usb 7-1: USB disconnect, device number 5 [ 70.853512][ T6148] usbtmc 7-1:16.0: usb_control_msg returned -71 [ 70.931547][ T65] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.995524][ T65] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.051173][ T65] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.110607][ T67] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.113715][ T67] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.116037][ T67] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.120756][ T67] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.123165][ T67] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 71.125134][ T67] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.204350][ T65] bridge_slave_1: left allmulticast mode [ 71.205955][ T65] bridge_slave_1: left promiscuous mode [ 71.207575][ T65] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.211573][ T65] bridge_slave_0: left allmulticast mode [ 71.213064][ T65] bridge_slave_0: left promiscuous mode [ 71.214609][ T65] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.490725][ T65] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 71.498245][ T65] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 71.504109][ T65] bond0 (unregistering): Released all slaves [ 71.599236][ T6172] chnl_net:caif_netlink_parms(): no params data found [ 71.803956][ T6172] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.805930][ T6172] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.807868][ T6172] bridge_slave_0: entered allmulticast mode [ 71.814901][ T6172] bridge_slave_0: entered promiscuous mode [ 71.823718][ T6172] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.836139][ T6172] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.841518][ T6172] bridge_slave_1: entered allmulticast mode [ 71.861630][ T6172] bridge_slave_1: entered promiscuous mode [ 71.969324][ T6172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.974947][ T6172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.034318][ T6172] team0: Port device team_slave_0 added [ 72.038963][ T6172] team0: Port device team_slave_1 added [ 72.107342][ T65] hsr_slave_0: left promiscuous mode [ 72.111466][ T65] hsr_slave_1: left promiscuous mode [ 72.114614][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.117583][ T65] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.121795][ T65] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.124730][ T65] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.151199][ T65] veth1_macvtap: left promiscuous mode [ 72.152992][ T65] veth0_macvtap: left promiscuous mode [ 72.154695][ T65] veth1_vlan: left promiscuous mode [ 72.156839][ T65] veth0_vlan: left promiscuous mode [ 72.250560][ T5342] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 72.409680][ T5342] usb 8-1: Using ep0 maxpacket: 8 [ 72.412929][ T5342] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 72.415800][ T5342] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 72.419152][ T5342] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 72.422515][ T5342] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 72.425086][ T5342] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 72.428358][ T5342] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 72.430700][ T5342] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.646567][ T5342] usb 8-1: GET_CAPABILITIES returned 0 [ 72.648043][ T5342] usbtmc 8-1:16.0: can't read capabilities [ 72.886257][ T65] team0 (unregistering): Port device team_slave_1 removed [ 72.979348][ T65] team0 (unregistering): Port device team_slave_0 removed [ 73.011801][ T5342] usb 8-1: USB disconnect, device number 3 [ 73.012158][ T6195] usbtmc 8-1:16.0: usb_control_msg returned -71 [ 73.189968][ T5352] Bluetooth: hci3: command tx timeout [ 73.532700][ T6172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.534839][ T6172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.543254][ T6172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.552236][ T6172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.554115][ T6172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.560646][ T6172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.594297][ T6172] hsr_slave_0: entered promiscuous mode [ 73.596282][ T6172] hsr_slave_1: entered promiscuous mode [ 73.598055][ T6172] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 73.600935][ T6172] Cannot create hsr debugfs directory [ 74.261446][ T6172] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.266824][ T6172] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.279212][ T6172] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.284879][ T6172] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.349435][ T6172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.374106][ T6172] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.387729][ T65] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.389654][ T65] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.403374][ T65] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.405819][ T65] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.626946][ T6172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.678146][ T6172] veth0_vlan: entered promiscuous mode [ 74.687867][ T6172] veth1_vlan: entered promiscuous mode [ 74.705912][ T6172] veth0_macvtap: entered promiscuous mode [ 74.716096][ T6172] veth1_macvtap: entered promiscuous mode [ 74.728935][ T6172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.734064][ T6172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.737408][ T6172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.742247][ T6172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.745539][ T6172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.748720][ T6172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.752512][ T6172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.756734][ T6172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.777108][ T6172] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.787473][ T6172] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.790559][ T6172] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.793467][ T6172] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.842205][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.844804][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.868452][ T102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.873543][ T102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.950037][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.962430][ T6271] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 74.969876][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 75.034637][ T39] audit: type=1804 audit(1728158194.554:8): pid=6271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.254" name="/newroot/57/bus/file0" dev="overlay" ino=35922659 res=1 errno=0 [ 75.052991][ T39] audit: type=1804 audit(1728158194.574:9): pid=6271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.254" name="/newroot/57/bus/file0" dev="overlay" ino=35922659 res=1 errno=0 [ 75.101017][ T39] audit: type=1800 audit(1728158194.614:10): pid=6282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.255" name="/" dev="fuse" ino=1 res=0 errno=0 [ 75.269859][ T5352] Bluetooth: hci3: command tx timeout [ 75.899688][ T5342] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 76.011896][ T64] cfg80211: failed to load regulatory.db [ 76.069736][ T5342] usb 8-1: Using ep0 maxpacket: 8 [ 76.080644][ T5342] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 76.084029][ T5342] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 76.087445][ T5342] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 76.091284][ T5342] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 76.094438][ T5342] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 76.098514][ T5342] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 76.101498][ T5342] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.321610][ T5342] usb 8-1: GET_CAPABILITIES returned 0 [ 76.322928][ T5342] usbtmc 8-1:16.0: can't read capabilities [ 76.357470][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 76.689256][ T6304] usbtmc 8-1:16.0: usb_control_msg returned -71 [ 76.689437][ T5537] usb 8-1: USB disconnect, device number 4 [ 77.359871][ T67] Bluetooth: hci3: command tx timeout [ 78.221392][ T6327] Bluetooth: MGMT ver 1.23 [ 78.349299][ T39] audit: type=1804 audit(1728158197.864:11): pid=6335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.265" name="/" dev="pidfs" ino=6633 res=1 errno=0 [ 78.469931][ T5352] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 79.429920][ T5352] Bluetooth: hci3: command tx timeout [ 79.445318][ T39] audit: type=1800 audit(1728158198.964:12): pid=6373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.274" name="/" dev="fuse" ino=1 res=0 errno=0 [ 82.145004][ T6382] tipc: Started in network mode [ 82.146868][ T6382] tipc: Node identity 42bbd29327ce, cluster identity 4711 [ 82.149793][ T6382] tipc: Enabled bearer , priority 0 [ 82.406108][ T6382] syzkaller0: entered promiscuous mode [ 82.408253][ T6382] syzkaller0: entered allmulticast mode [ 82.415397][ T6382] tipc: Resetting bearer [ 82.454971][ T6380] tipc: Resetting bearer [ 82.829569][ T6394] netlink: 8 bytes leftover after parsing attributes in process `syz.3.281'. [ 82.833764][ T6394] netlink: 4 bytes leftover after parsing attributes in process `syz.3.281'. [ 82.839152][ T6394] netlink: 32 bytes leftover after parsing attributes in process `syz.3.281'. [ 83.183022][ T5537] tipc: Node number set to 1702220435 [ 83.548688][ T0] NOHZ tick-stop error: local softirq work is pending, handler #210!!! [ 83.799856][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 83.802841][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 83.983427][ T6380] tipc: Disabling bearer [ 83.992292][ T6415] netlink: 191416 bytes leftover after parsing attributes in process `syz.1.290'. [ 84.244166][ T1183] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.349785][ T1183] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.364112][ T6431] netlink: 24 bytes leftover after parsing attributes in process `syz.1.299'. [ 84.424182][ T67] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.433029][ T67] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.437037][ T67] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.441411][ T67] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.454416][ T67] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 84.455176][ T1183] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.457326][ T67] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.581999][ T1183] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.592191][ T6432] chnl_net:caif_netlink_parms(): no params data found [ 84.690204][ T6432] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.692910][ T6432] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.695599][ T6432] bridge_slave_0: entered allmulticast mode [ 84.698741][ T6432] bridge_slave_0: entered promiscuous mode [ 84.703440][ T6432] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.706103][ T6432] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.708583][ T6432] bridge_slave_1: entered allmulticast mode [ 84.711436][ T6432] bridge_slave_1: entered promiscuous mode [ 84.733616][ T6432] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.737792][ T6432] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.794230][ T6432] team0: Port device team_slave_0 added [ 84.799486][ T6432] team0: Port device team_slave_1 added [ 84.821280][ T1183] bridge_slave_1: left allmulticast mode [ 84.822799][ T1183] bridge_slave_1: left promiscuous mode [ 84.824362][ T1183] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.827486][ T1183] bridge_slave_0: left allmulticast mode [ 84.828971][ T1183] bridge_slave_0: left promiscuous mode [ 84.830845][ T1183] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.184258][ T1183] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 85.188417][ T1183] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 85.194587][ T1183] bond0 (unregistering): Released all slaves [ 85.214776][ T6432] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.217379][ T6432] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.227122][ T6432] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.246363][ T6432] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.248969][ T6432] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.259118][ T6432] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.297411][ T6432] hsr_slave_0: entered promiscuous mode [ 85.300818][ T6432] hsr_slave_1: entered promiscuous mode [ 85.303332][ T6432] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.306081][ T6432] Cannot create hsr debugfs directory [ 85.545797][ T1183] hsr_slave_0: left promiscuous mode [ 85.547792][ T1183] hsr_slave_1: left promiscuous mode [ 85.549840][ T1183] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.552122][ T1183] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.554048][ T1183] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.570113][ T1183] veth1_macvtap: left promiscuous mode [ 85.571633][ T1183] veth0_macvtap: left promiscuous mode [ 85.573166][ T1183] veth1_vlan: left promiscuous mode [ 85.574578][ T1183] veth0_vlan: left promiscuous mode [ 86.233896][ T5352] Bluetooth: hci3: command tx timeout [ 86.258711][ T1183] team0 (unregistering): Port device team_slave_1 removed [ 86.374465][ T1183] team0 (unregistering): Port device team_slave_0 removed [ 86.551985][ T5352] Bluetooth: hci2: command tx timeout [ 87.322757][ T6473] tipc: Started in network mode [ 87.324173][ T6473] tipc: Node identity 6ad25f49986b, cluster identity 4711 [ 87.326151][ T6473] tipc: Enabled bearer , priority 0 [ 87.346900][ T6473] syzkaller0: entered promiscuous mode [ 87.348979][ T6473] syzkaller0: entered allmulticast mode [ 87.363850][ T6473] tipc: Resetting bearer [ 87.430598][ T6471] tipc: Resetting bearer [ 88.411553][ T64] tipc: Node number set to 4072234825 [ 88.641414][ T5352] Bluetooth: hci2: command tx timeout [ 88.715655][ T6471] tipc: Disabling bearer [ 88.756160][ T6432] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.759981][ T6432] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.771457][ T6432] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.778600][ T6432] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.826487][ T6432] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.841566][ T6432] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.847375][ T1016] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.849662][ T1016] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.856926][ T1183] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.859553][ T1183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.954451][ T39] audit: type=1800 audit(1728158208.474:13): pid=6503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.306" name="/" dev="9p" ino=2 res=0 errno=0 [ 89.004550][ T6432] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.029439][ T6432] veth0_vlan: entered promiscuous mode [ 89.037852][ T6432] veth1_vlan: entered promiscuous mode [ 89.073650][ T6432] veth0_macvtap: entered promiscuous mode [ 89.076669][ T6432] veth1_macvtap: entered promiscuous mode [ 89.084264][ T6432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.087082][ T6432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.092396][ T6432] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.096437][ T6432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.099230][ T6432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.102223][ T6432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.104744][ T6432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.107126][ T6432] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.110148][ T6432] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.113460][ T6432] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.122274][ T6432] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.124564][ T6432] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.126769][ T6432] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.128947][ T6432] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.174073][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.176195][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.187344][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.190829][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.478463][ T6527] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 89.618409][ T6530] tipc: Started in network mode [ 89.620211][ T6530] tipc: Node identity 4, cluster identity 4711 [ 89.621985][ T6530] tipc: Node number set to 4 [ 89.656555][ T6532] ALSA: seq fatal error: cannot create timer (-22) [ 90.249843][ T57] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 90.400079][ T57] usb 7-1: Using ep0 maxpacket: 32 [ 90.406579][ T57] usb 7-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 90.419667][ T57] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.426491][ T57] usb 7-1: config 0 descriptor?? [ 90.450510][ T57] as10x_usb: device has been detected [ 90.452833][ T57] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 90.477563][ T57] usb 7-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 90.502252][ T57] as10x_usb: error during firmware upload part1 [ 90.504712][ T57] Registered device nBox DVB-T Dongle [ 90.656118][ T8] usb 7-1: USB disconnect, device number 6 [ 90.690387][ T8] Unregistered device nBox DVB-T Dongle [ 90.708329][ T8] as10x_usb: device has been disconnected [ 90.715072][ T5352] Bluetooth: hci2: command tx timeout [ 90.799923][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 90.970885][ T9] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 90.975654][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 90.980261][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 90.984303][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 90.987643][ T9] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 90.990599][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.993623][ T9] usb 6-1: config 0 descriptor?? [ 90.995691][ T6546] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 91.119551][ T6566] overlayfs: overlapping lowerdir path [ 91.139750][ T58] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 91.248542][ T6568] Bluetooth: (null): Invalid header checksum [ 91.303240][ T58] usb 7-1: too many configurations: 13, using maximum allowed: 8 [ 91.310159][ T58] usb 7-1: config 0 has no interfaces? [ 91.312963][ T58] usb 7-1: config 0 has no interfaces? [ 91.320265][ T58] usb 7-1: config 0 has no interfaces? [ 91.322531][ T58] usb 7-1: config 0 has no interfaces? [ 91.324796][ T58] usb 7-1: config 0 has no interfaces? [ 91.330728][ T58] usb 7-1: config 0 has no interfaces? [ 91.342119][ T58] usb 7-1: config 0 has no interfaces? [ 91.345417][ T58] usb 7-1: config 0 has no interfaces? [ 91.349347][ T58] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 91.352988][ T58] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.355289][ T58] usb 7-1: Product: syz [ 91.356375][ T58] usb 7-1: Manufacturer: syz [ 91.357652][ T58] usb 7-1: SerialNumber: syz [ 91.366912][ T58] usb 7-1: config 0 descriptor?? [ 91.418088][ T9] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 91.420446][ T9] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 91.422981][ T9] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 91.425162][ T9] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 91.427518][ T9] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 91.429509][ T9] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 91.432287][ T9] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 91.434945][ T9] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 91.437321][ T9] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 91.439449][ T9] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 91.441454][ T9] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 91.443835][ T9] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 91.446109][ T9] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 91.448125][ T9] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 91.450475][ T9] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 91.453319][ T9] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 91.467710][ T9] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 91.584463][ T64] usb 7-1: USB disconnect, device number 7 [ 91.737514][ T6546] usb 6-1: language id specifier not provided by device, defaulting to English [ 91.965529][ T6594] Process accounting resumed [ 92.141073][ T6546] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 92.144134][ T6546] overlayfs: missing 'lowerdir' [ 92.150165][ T35] usb 6-1: USB disconnect, device number 3 [ 92.239768][ T64] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 92.399767][ T64] usb 7-1: Using ep0 maxpacket: 32 [ 92.403548][ T64] usb 7-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 92.406208][ T64] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.410234][ T64] usb 7-1: config 0 descriptor?? [ 92.416511][ T64] as10x_usb: device has been detected [ 92.418274][ T64] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 92.424039][ T64] usb 7-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 92.428309][ T64] as10x_usb: error during firmware upload part1 [ 92.431296][ T64] Registered device nBox DVB-T Dongle [ 92.621825][ T58] usb 7-1: USB disconnect, device number 8 [ 92.635592][ T58] Unregistered device nBox DVB-T Dongle [ 92.637140][ T58] as10x_usb: device has been disconnected [ 92.908874][ T6613] kvm: pic: non byte read [ 93.187032][ T6627] sp0: Synchronizing with TNC [ 93.205654][ T6627] sp0: Found TNC [ 93.709766][ T6642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.355'. [ 93.712936][ T6642] netlink: 4 bytes leftover after parsing attributes in process `syz.0.355'. [ 93.796489][ T5352] block nbd1: Receive control failed (result -107) [ 95.077849][ T5352] Bluetooth: hci0: unexpected cc 0x2007 length: 100 > 2 [ 95.082804][ T5352] Bluetooth: hci0: unexpected event for opcode 0x2007 [ 95.105989][ T6675] pim6reg1: entered promiscuous mode [ 95.108099][ T6675] pim6reg1: entered allmulticast mode [ 95.567265][ T5352] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 95.570915][ T5352] Bluetooth: hci2: Injecting HCI hardware error event [ 95.575363][ T5352] Bluetooth: hci2: hardware error 0x00 [ 95.865295][ T39] audit: type=1800 audit(1728158215.364:14): pid=6689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.373" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 96.620779][ T6701] binder: BINDER_SET_CONTEXT_MGR already set [ 96.623933][ T6701] binder: 6700:6701 ioctl 4018620d 20000040 returned -16 [ 96.751146][ T6703] netlink: 12 bytes leftover after parsing attributes in process `syz.0.379'. [ 96.973464][ C3] vkms_vblank_simulate: vblank timer overrun [ 96.991406][ T6708] capability: warning: `syz.2.382' uses deprecated v2 capabilities in a way that may be insecure [ 97.129066][ C3] vkms_vblank_simulate: vblank timer overrun [ 97.161127][ C3] vkms_vblank_simulate: vblank timer overrun [ 97.315281][ T6715] Bluetooth: MGMT ver 1.23 [ 97.318953][ T6716] 8021q: adding VLAN 0 to HW filter on device bond1 [ 97.350060][ T6715] ucma_write: process 67 (syz.3.385) changed security contexts after opening file descriptor, this is not allowed. [ 97.408616][ T6716] bond0: (slave bond1): Enslaving as an active interface with an up link [ 97.590348][ T6703] bond0: (slave bond1): Releasing backup interface [ 97.919811][ T5352] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 98.593332][ C3] vkms_vblank_simulate: vblank timer overrun [ 99.141358][ T5352] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 99.152913][ T5352] Bluetooth: hci0: Injecting HCI hardware error event [ 99.174694][ T5352] Bluetooth: hci0: hardware error 0x00 [ 99.341468][ C3] vkms_vblank_simulate: vblank timer overrun [ 99.562091][ T8] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 99.617181][ C3] vkms_vblank_simulate: vblank timer overrun [ 99.790280][ T8] usb 7-1: Using ep0 maxpacket: 32 [ 99.794515][ T8] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.798207][ T8] usb 7-1: config 0 has no interfaces? [ 99.820492][ T8] usb 7-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 99.825271][ T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.833072][ T8] usb 7-1: Product: syz [ 99.837293][ T8] usb 7-1: Manufacturer: syz [ 99.839946][ T8] usb 7-1: SerialNumber: syz [ 99.869887][ T8] usb 7-1: config 0 descriptor?? [ 100.041125][ C3] vkms_vblank_simulate: vblank timer overrun [ 100.085249][ T5384] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 100.186673][ T5342] usb 7-1: USB disconnect, device number 9 [ 100.306264][ T5384] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 100.309223][ T5384] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 100.313004][ T5384] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 100.316299][ T5384] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 100.321698][ T5384] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 100.341336][ T5384] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 100.346009][ T5384] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 100.353550][ T5384] usb 8-1: Product: syz [ 100.355611][ T5384] usb 8-1: Manufacturer: syz [ 100.366564][ T5384] cdc_wdm 8-1:1.0: skipping garbage [ 100.369537][ T5384] cdc_wdm 8-1:1.0: skipping garbage [ 100.390643][ T5384] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 100.392935][ T5384] cdc_wdm 8-1:1.0: Unknown control protocol [ 100.431110][ T8] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 100.599910][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 100.613612][ T8] usb 5-1: config index 0 descriptor too short (expected 65535, got 36) [ 100.618958][ T8] usb 5-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 100.633684][ T8] usb 5-1: config 255 has an invalid descriptor of length 32, skipping remainder of the config [ 100.648569][ T8] usb 5-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 100.665223][ T8] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 100.688373][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.701486][ T5342] usb 8-1: USB disconnect, device number 5 [ 100.701507][ C0] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 100.707925][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 100.717148][ C0] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 100.745181][ T6755] cdc_wdm 8-1:1.0: Tx URB error: -19 [ 100.914951][ C3] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 101.017242][ T8] usb 5-1: string descriptor 0 read error: -71 [ 101.022278][ T8] usb 5-1: USB disconnect, device number 2 [ 101.053105][ C3] vkms_vblank_simulate: vblank timer overrun [ 101.155209][ T6773] netfs: Couldn't get user pages (rc=-14) [ 101.157595][ T6773] netfs: Zero-sized read [R=5] [ 101.212571][ T5352] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 101.281052][ C3] vkms_vblank_simulate: vblank timer overrun [ 101.704989][ T6777] netlink: 48 bytes leftover after parsing attributes in process `syz.2.407'. [ 101.730988][ C3] vkms_vblank_simulate: vblank timer overrun [ 101.825206][ C3] vkms_vblank_simulate: vblank timer overrun [ 101.941029][ C3] vkms_vblank_simulate: vblank timer overrun [ 102.145047][ C3] vkms_vblank_simulate: vblank timer overrun [ 102.181049][ C3] vkms_vblank_simulate: vblank timer overrun [ 102.425037][ C3] vkms_vblank_simulate: vblank timer overrun [ 102.480999][ C3] vkms_vblank_simulate: vblank timer overrun [ 102.737115][ C3] vkms_vblank_simulate: vblank timer overrun [ 104.721402][ T67] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 104.757033][ T67] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 104.763441][ T67] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 104.839442][ T67] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 104.864068][ T67] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 104.871674][ T67] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 105.155622][ T6816] chnl_net:caif_netlink_parms(): no params data found [ 105.528012][ T6816] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.539860][ T6816] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.542182][ T6816] bridge_slave_0: entered allmulticast mode [ 105.544605][ T6816] bridge_slave_0: entered promiscuous mode [ 105.550627][ T6816] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.553495][ T6816] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.573286][ T6816] bridge_slave_1: entered allmulticast mode [ 105.576654][ T6816] bridge_slave_1: entered promiscuous mode [ 105.946403][ T6816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.984099][ T6816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.268929][ T6816] team0: Port device team_slave_0 added [ 106.282421][ T6816] team0: Port device team_slave_1 added [ 106.443661][ T6816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.448548][ T6816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.468295][ T6816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.479738][ T6816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.483002][ T6816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.499796][ T6816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.804472][ T6816] hsr_slave_0: entered promiscuous mode [ 106.879964][ T6816] hsr_slave_1: entered promiscuous mode [ 106.897171][ T6816] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 106.915350][ T6816] Cannot create hsr debugfs directory [ 106.953653][ T5352] Bluetooth: hci1: command tx timeout [ 107.378299][ T6816] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.579542][ T6843] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 107.673918][ T6816] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.141129][ T6816] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.465777][ T5384] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 108.467246][ T6816] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.684919][ T5384] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 108.689243][ T5384] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 108.699965][ T5384] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 108.703740][ T5384] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 108.749810][ T5384] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 108.753177][ T5384] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.790847][ T5384] usb 7-1: config 0 descriptor?? [ 108.850169][ T6816] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 108.903060][ T6816] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 108.919478][ T6816] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 108.970175][ T6816] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 109.041584][ T5352] Bluetooth: hci1: command tx timeout [ 109.093459][ T6816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.136195][ T6816] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.169949][ T102] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.179715][ T102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.212484][ T102] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.217567][ T102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.256214][ T5384] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 109.271600][ T5384] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 109.310711][ T6861] block nbd3: server does not support multiple connections per device. [ 109.316386][ T6861] block nbd3: shutting down sockets [ 109.573367][ T6816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.821133][ T6816] veth0_vlan: entered promiscuous mode [ 109.856343][ T6816] veth1_vlan: entered promiscuous mode [ 109.917898][ T6816] veth0_macvtap: entered promiscuous mode [ 109.924101][ T6816] veth1_macvtap: entered promiscuous mode [ 109.948203][ T6816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.964905][ T6816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.977763][ T6816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.994721][ T6816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.003257][ T6816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.011968][ T6816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.020273][ T6816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.025566][ T6816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.032496][ T6816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.037937][ T6816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.063106][ T6816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.076142][ T6816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.083204][ T6816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.088222][ T6816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.104411][ T6816] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.111189][ T6816] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.124497][ T6816] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.127709][ T6816] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.198107][ T64] usb 7-1: USB disconnect, device number 10 [ 110.320926][ T1132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.357397][ T1132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.490432][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.494197][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.077829][ T67] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 111.087053][ T67] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 111.091383][ T67] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 111.097244][ T67] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 111.118348][ T67] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 111.124120][ T67] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 111.148078][ T67] Bluetooth: hci1: command tx timeout [ 111.469833][ T6881] chnl_net:caif_netlink_parms(): no params data found [ 111.901275][ T6881] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.904219][ T6881] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.907412][ T6881] bridge_slave_0: entered allmulticast mode [ 111.933228][ T6881] bridge_slave_0: entered promiscuous mode [ 111.974133][ T6881] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.980896][ T6881] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.019966][ T6881] bridge_slave_1: entered allmulticast mode [ 112.023126][ T6881] bridge_slave_1: entered promiscuous mode [ 112.180647][ T6881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.210344][ T6881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.482360][ T6881] team0: Port device team_slave_0 added [ 112.487509][ T6881] team0: Port device team_slave_1 added [ 113.194233][ T5352] Bluetooth: hci1: command tx timeout [ 113.201172][ T5352] Bluetooth: hci4: command tx timeout [ 113.244876][ T6881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.247350][ T6881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.278970][ T6881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.366093][ T6881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.377577][ T6881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.399760][ T6881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.522207][ T6881] hsr_slave_0: entered promiscuous mode [ 113.535461][ T6881] hsr_slave_1: entered promiscuous mode [ 113.628388][ T6881] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 113.635961][ T6881] Cannot create hsr debugfs directory [ 113.859046][ T1183] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.008904][ T1183] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.204246][ T1183] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.355033][ T1183] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.688401][ T1183] bridge_slave_1: left allmulticast mode [ 114.690983][ T1183] bridge_slave_1: left promiscuous mode [ 114.695127][ T1183] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.718812][ T1183] bridge_slave_0: left allmulticast mode [ 114.721735][ T1183] bridge_slave_0: left promiscuous mode [ 114.725274][ T1183] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.279883][ T5352] Bluetooth: hci4: command tx timeout [ 115.784130][ T1183] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.839380][ T1183] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.868406][ T1183] bond0 (unregistering): Released all slaves [ 115.982889][ T1183] tipc: Left network mode [ 116.719340][ T1183] hsr_slave_0: left promiscuous mode [ 116.727972][ T1183] hsr_slave_1: left promiscuous mode [ 116.771475][ T1183] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.775589][ T1183] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.820421][ T1183] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.823225][ T1183] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.926068][ T1183] veth1_macvtap: left promiscuous mode [ 116.933302][ T1183] veth0_macvtap: left promiscuous mode [ 116.954518][ T1183] veth1_vlan: left promiscuous mode [ 116.957849][ T1183] veth0_vlan: left promiscuous mode [ 117.356697][ T5352] Bluetooth: hci4: command tx timeout [ 119.441964][ T5352] Bluetooth: hci4: command tx timeout [ 120.201454][ T39] audit: type=1800 audit(1728158239.714:15): pid=6938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.459" name="/" dev="fuse" ino=1 res=0 errno=0 [ 120.828609][ T1183] team0 (unregistering): Port device team_slave_1 removed [ 121.287994][ T1183] team0 (unregistering): Port device team_slave_0 removed [ 122.754565][ T39] audit: type=1800 audit(1728158242.274:16): pid=6953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.457" name="file2" dev="overlay" ino=737 res=0 errno=0 [ 124.957793][ C3] vkms_vblank_simulate: vblank timer overrun [ 125.024861][ C3] vkms_vblank_simulate: vblank timer overrun [ 125.172896][ C3] vkms_vblank_simulate: vblank timer overrun [ 125.386183][ C3] vkms_vblank_simulate: vblank timer overrun [ 125.670060][ C3] vkms_vblank_simulate: vblank timer overrun [ 126.126507][ T6963] netlink: 'syz.0.464': attribute type 10 has an invalid length. [ 126.133412][ T6963] syz_tun: entered promiscuous mode [ 126.171813][ T6963] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 126.207694][ T6965] netlink: 4 bytes leftover after parsing attributes in process `syz.3.463'. [ 126.211321][ T6965] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 126.216631][ T6965] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.267322][ T6965] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.284873][ T6965] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.322779][ T6881] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 126.350492][ T6881] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 126.368340][ T6881] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 126.391696][ T6881] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 126.430710][ C3] vkms_vblank_simulate: vblank timer overrun [ 126.543944][ T6881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 126.567930][ T6881] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.603217][ T1132] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.605568][ T1132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.633394][ T1132] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.637815][ T1132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 126.719864][ C3] vkms_vblank_simulate: vblank timer overrun [ 127.134168][ T6881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.304843][ C3] vkms_vblank_simulate: vblank timer overrun [ 127.317188][ T6881] veth0_vlan: entered promiscuous mode [ 127.387787][ T6881] veth1_vlan: entered promiscuous mode [ 127.404503][ C3] vkms_vblank_simulate: vblank timer overrun [ 127.452369][ T6881] veth0_macvtap: entered promiscuous mode [ 127.480175][ T6881] veth1_macvtap: entered promiscuous mode [ 127.517784][ T6881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 127.537254][ C3] vkms_vblank_simulate: vblank timer overrun [ 127.558799][ T6881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.563426][ T6881] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 127.589395][ T6881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.594506][ T6881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.599565][ T6881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.613987][ T6881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.633991][ T6881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.639739][ T6881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.648134][ T6881] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.655315][ T6881] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.662589][ T6881] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.668147][ T6881] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.698071][ T6881] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.937184][ T1016] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.970797][ C3] vkms_vblank_simulate: vblank timer overrun [ 127.974306][ T1016] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.070551][ T1183] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.073669][ T1183] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.172811][ C3] vkms_vblank_simulate: vblank timer overrun [ 128.319532][ C3] vkms_vblank_simulate: vblank timer overrun [ 129.582175][ T7016] syz.2.478 (7016): drop_caches: 2 [ 131.038760][ C3] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 134.867180][ T7097] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.875319][ T7097] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.924154][ T7104] bridge_slave_1: left allmulticast mode [ 134.935504][ T7104] bridge_slave_1: left promiscuous mode [ 134.939231][ T7104] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.016138][ T7104] bridge_slave_0: left allmulticast mode [ 135.019776][ T7104] bridge_slave_0: left promiscuous mode [ 135.022187][ T7104] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.528238][ T7115] netlink: 24 bytes leftover after parsing attributes in process `syz.2.510'. [ 136.619954][ T39] audit: type=1800 audit(1728158256.134:17): pid=7136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.524" name="/" dev="fuse" ino=1 res=0 errno=0 [ 138.712732][ C0] vkms_vblank_simulate: vblank timer overrun [ 138.748772][ C0] vkms_vblank_simulate: vblank timer overrun [ 139.528198][ C0] vkms_vblank_simulate: vblank timer overrun [ 139.849171][ T7194] binder: BINDER_SET_CONTEXT_MGR already set [ 139.858715][ T7194] binder: 7193:7194 ioctl 4018620d 20000040 returned -16 [ 140.020673][ C0] vkms_vblank_simulate: vblank timer overrun [ 140.100823][ C0] vkms_vblank_simulate: vblank timer overrun [ 140.164726][ C0] vkms_vblank_simulate: vblank timer overrun [ 140.229720][ C0] vkms_vblank_simulate: vblank timer overrun [ 140.302824][ C0] vkms_vblank_simulate: vblank timer overrun [ 140.408090][ T7210] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 140.480767][ C0] vkms_vblank_simulate: vblank timer overrun [ 140.552699][ C0] vkms_vblank_simulate: vblank timer overrun [ 141.179414][ C0] vkms_vblank_simulate: vblank timer overrun [ 141.248868][ C0] vkms_vblank_simulate: vblank timer overrun [ 141.368799][ C0] vkms_vblank_simulate: vblank timer overrun [ 141.448753][ C0] vkms_vblank_simulate: vblank timer overrun [ 141.508705][ C0] vkms_vblank_simulate: vblank timer overrun [ 141.780907][ T39] audit: type=1804 audit(1728158261.284:18): pid=7235 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.558" name="/newroot/24/bus/file0" dev="overlay" ino=150 res=1 errno=0 [ 141.815169][ T7238] Bluetooth: (null): Invalid header checksum [ 142.173325][ T7243] netlink: 24 bytes leftover after parsing attributes in process `syz.3.556'. [ 142.332796][ T7248] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.339331][ T7248] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.402926][ T7241] bridge_slave_1: left allmulticast mode [ 142.408705][ T7241] bridge_slave_1: left promiscuous mode [ 142.427626][ C0] vkms_vblank_simulate: vblank timer overrun [ 142.431976][ T7241] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.544004][ T7241] bridge_slave_0: left allmulticast mode [ 142.552603][ T7241] bridge_slave_0: left promiscuous mode [ 142.558883][ T7241] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.868753][ C0] vkms_vblank_simulate: vblank timer overrun [ 143.016835][ C0] vkms_vblank_simulate: vblank timer overrun [ 143.088647][ C0] vkms_vblank_simulate: vblank timer overrun [ 143.364658][ C0] vkms_vblank_simulate: vblank timer overrun [ 143.389199][ T5352] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 143.403518][ T5352] Bluetooth: hci1: Injecting HCI hardware error event [ 143.437124][ T5352] Bluetooth: hci1: hardware error 0x00 [ 143.456879][ C0] vkms_vblank_simulate: vblank timer overrun [ 143.513144][ C0] vkms_vblank_simulate: vblank timer overrun [ 143.584774][ C0] vkms_vblank_simulate: vblank timer overrun [ 143.694121][ T7286] netlink: 24 bytes leftover after parsing attributes in process `syz.1.570'. [ 143.772694][ C0] vkms_vblank_simulate: vblank timer overrun [ 144.076711][ C0] vkms_vblank_simulate: vblank timer overrun [ 145.177291][ T7299] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.180055][ T7299] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.187420][ T7307] bridge_slave_1: left allmulticast mode [ 145.214901][ T7307] bridge_slave_1: left promiscuous mode [ 145.217205][ T7307] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.452050][ T7307] bridge_slave_0: left allmulticast mode [ 145.455468][ T7307] bridge_slave_0: left promiscuous mode [ 145.502209][ T7307] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.309994][ T5352] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 146.868062][ T39] audit: type=1800 audit(1728158266.384:19): pid=7314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.578" name="/" dev="fuse" ino=1 res=0 errno=0 [ 147.188461][ T7340] binder: 7339:7340 ioctl c0306201 20000380 returned -14 [ 147.951386][ T7352] Bluetooth: Error in BCSP hdr checksum [ 148.419117][ T7361] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.422833][ T7361] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.464812][ T7361] bridge_slave_1: left allmulticast mode [ 148.491400][ T7361] bridge_slave_1: left promiscuous mode [ 148.493782][ T7361] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.507688][ T7361] bridge_slave_0: left allmulticast mode [ 148.526213][ T7361] bridge_slave_0: left promiscuous mode [ 148.542446][ T7361] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.965850][ T7371] netlink: 24 bytes leftover after parsing attributes in process `syz.0.598'. [ 150.005116][ T5352] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 151.880363][ T5537] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 152.035293][ T5537] usb 7-1: Using ep0 maxpacket: 8 [ 152.064252][ T5537] usb 7-1: config 0 has no interfaces? [ 152.093827][ T5537] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 152.127296][ T5537] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.174562][ T5537] usb 7-1: config 0 descriptor?? [ 152.553075][ T5537] usb 7-1: USB disconnect, device number 11 [ 153.240849][ T7454] can0: slcan on pts0. [ 153.730554][ T7457] can0 (unregistered): slcan off pts0. [ 154.083250][ T64] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 154.096086][ T64] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 154.102272][ T64] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 154.142056][ T64] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 154.145119][ T64] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 154.161133][ T64] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 154.185448][ T64] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 154.225103][ T64] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 154.227611][ T64] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 154.233467][ T64] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 154.238015][ T64] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 154.250821][ T64] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 154.253585][ T64] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 154.256383][ T64] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 154.259505][ T64] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 154.262900][ T64] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 154.265677][ T64] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 154.268648][ T64] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 154.272116][ T64] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 154.274999][ T64] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 154.284195][ T64] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 154.287102][ T64] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 154.291636][ T64] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 154.295002][ T64] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 154.335518][ T64] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 154.340008][ T64] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 154.348072][ T64] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 154.359240][ T64] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 154.363852][ T64] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 154.387307][ T64] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 154.417327][ T64] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 154.420579][ T64] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 154.423616][ T64] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 154.449426][ T64] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 154.455003][ T64] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 154.458364][ T64] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 154.461431][ T64] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 154.464343][ T64] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 154.475838][ T64] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 154.478943][ T64] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 154.482226][ T64] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 154.490629][ T64] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 154.494452][ T64] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 154.509782][ T64] hid-generic 0000:0000:0000.0007: hidraw1: HID v0.00 Device [syz0] on syz0 [ 154.918847][ T7496] netlink: 4 bytes leftover after parsing attributes in process `syz.3.642'. [ 155.080855][ T7499] syz.3.643[7499] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 155.080937][ T7499] syz.3.643[7499] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 155.086684][ T7499] syz.3.643[7499] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 155.360948][ T39] audit: type=1326 audit(1728158274.864:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7503 comm="syz.2.645" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f87579 code=0x0 [ 155.532168][ T7513] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 156.516853][ T7538] netlink: 'syz.1.652': attribute type 4 has an invalid length. [ 156.592864][ T7538] netlink: 20 bytes leftover after parsing attributes in process `syz.1.652'. [ 156.598642][ T7538] netlink: 'syz.1.652': attribute type 17 has an invalid length. [ 156.653874][ T7541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.653'. [ 156.657766][ T7541] netlink: 4 bytes leftover after parsing attributes in process `syz.2.653'. [ 156.754523][ T5346] block nbd2: Receive control failed (result -107) [ 156.869255][ T7545] netlink: 24 bytes leftover after parsing attributes in process `syz.3.665'. [ 157.554738][ T8] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 157.558821][ T7559] warning: `syz.1.661' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 157.678886][ T7565] iou-wrk-7561 (7565): drop_caches: 2 [ 157.991213][ T8] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 157.994541][ T8] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 157.998337][ T8] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 158.010761][ T8] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 158.015140][ T8] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 158.071402][ T8] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 158.074602][ T8] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 158.077345][ T8] usb 7-1: Product: syz [ 158.078801][ T8] usb 7-1: Manufacturer: syz [ 158.156511][ T8] cdc_wdm 7-1:1.0: skipping garbage [ 158.166040][ T8] cdc_wdm 7-1:1.0: skipping garbage [ 158.185001][ T8] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 158.213035][ T8] cdc_wdm 7-1:1.0: Unknown control protocol [ 158.482370][ T5387] usb 7-1: USB disconnect, device number 12 [ 158.488814][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 158.494618][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 158.496844][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 158.510210][ T7554] cdc_wdm 7-1:1.0: Tx URB error: -19 [ 161.692404][ T7608] xt_TCPMSS: Only works on TCP SYN packets [ 164.345322][ T7645] syzkaller0: entered allmulticast mode [ 165.500799][ T57] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 165.670090][ T57] usb 8-1: Using ep0 maxpacket: 32 [ 165.710953][ T57] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.716257][ T57] usb 8-1: config 0 has no interfaces? [ 165.730264][ T57] usb 8-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 165.735058][ T57] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.739504][ T57] usb 8-1: Product: syz [ 165.764559][ T57] usb 8-1: Manufacturer: syz [ 165.766263][ T57] usb 8-1: SerialNumber: syz [ 165.772531][ T57] usb 8-1: config 0 descriptor?? [ 166.111341][ T57] usb 8-1: USB disconnect, device number 6 [ 168.145208][ T7675] netlink: 12 bytes leftover after parsing attributes in process `syz.3.705'. [ 168.444661][ T7684] netlink: 4 bytes leftover after parsing attributes in process `syz.2.707'. [ 169.030112][ T5409] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 169.199748][ T5409] usb 8-1: Using ep0 maxpacket: 32 [ 169.208103][ T5409] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 169.213698][ T5409] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 169.217034][ T5409] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 169.223815][ T5409] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 169.263792][ T5409] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 169.267738][ T5409] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 169.289510][ T5409] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 169.292815][ T5409] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.312555][ T5409] usb 8-1: config 0 descriptor?? [ 169.555093][ T5409] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 169.851307][ T7701] vivid-006: disconnect [ 169.855718][ T7694] vivid-006: reconnect [ 169.875846][ T5409] usb 8-1: USB disconnect, device number 7 [ 169.901080][ T5409] usblp0: removed [ 170.320988][ T5346] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 170.643702][ T39] audit: type=1326 audit(1728158290.164:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7707 comm="syz.2.715" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f87579 code=0x0 [ 170.679709][ T39] audit: type=1326 audit(1728158290.184:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7705 comm="syz.1.716" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f98579 code=0x0 [ 170.794416][ T39] audit: type=1326 audit(1728158290.314:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7714 comm="syz.3.718" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7f38579 code=0x0 [ 171.850668][ T7731] netlink: 8 bytes leftover after parsing attributes in process `syz.1.723'. [ 171.854405][ T7731] netlink: 4 bytes leftover after parsing attributes in process `syz.1.723'. [ 171.857806][ T7731] netlink: 'syz.1.723': attribute type 1 has an invalid length. [ 171.877683][ T7731] nbd: error processing sock list [ 173.689220][ T7761] bridge_slave_0: entered promiscuous mode [ 174.531009][ T5384] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 174.704376][ T5384] usb 6-1: Using ep0 maxpacket: 32 [ 174.708063][ T5384] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 174.730267][ T5384] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 174.733985][ T5384] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 174.737051][ T5384] usb 6-1: Product: syz [ 174.738777][ T5384] usb 6-1: Manufacturer: syz [ 174.740525][ T5384] usb 6-1: SerialNumber: syz [ 174.751529][ T5384] usb 6-1: config 0 descriptor?? [ 174.765912][ C0] vkms_vblank_simulate: vblank timer overrun [ 174.767465][ T7776] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 174.948408][ T7791] syz.3.747 uses obsolete (PF_INET,SOCK_PACKET) [ 175.031435][ T5352] Bluetooth: hci3: command 0x1003 tx timeout [ 175.034955][ T5346] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 175.041603][ T5409] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 175.167589][ T5342] usb 6-1: USB disconnect, device number 4 [ 175.232533][ T5409] usb 7-1: Using ep0 maxpacket: 32 [ 175.235688][ T5409] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 175.287382][ T5409] usb 7-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 175.292101][ T5409] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.298934][ T5409] usb 7-1: Product: syz [ 175.301692][ T5409] usb 7-1: Manufacturer: syz [ 175.304428][ T5409] usb 7-1: SerialNumber: syz [ 175.311636][ T5409] usb 7-1: config 0 descriptor?? [ 175.315203][ T7788] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 175.327755][ T5409] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 175.421934][ T7795] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 175.442480][ T7795] syzkaller0: entered promiscuous mode [ 175.443507][ C0] vkms_vblank_simulate: vblank timer overrun [ 175.478881][ C0] vkms_vblank_simulate: vblank timer overrun [ 175.491726][ T7795] syzkaller0: entered allmulticast mode [ 175.520397][ C0] vkms_vblank_simulate: vblank timer overrun [ 175.541104][ T5342] usb 7-1: USB disconnect, device number 13 [ 175.564324][ C0] vkms_vblank_simulate: vblank timer overrun [ 175.628451][ C0] vkms_vblank_simulate: vblank timer overrun [ 175.728402][ C0] vkms_vblank_simulate: vblank timer overrun [ 175.824400][ C0] vkms_vblank_simulate: vblank timer overrun [ 176.183935][ C0] vkms_vblank_simulate: vblank timer overrun [ 176.376401][ C0] vkms_vblank_simulate: vblank timer overrun [ 176.536357][ C0] vkms_vblank_simulate: vblank timer overrun [ 176.576384][ C0] vkms_vblank_simulate: vblank timer overrun [ 177.493039][ C0] vkms_vblank_simulate: vblank timer overrun [ 178.097636][ C0] vkms_vblank_simulate: vblank timer overrun [ 178.176638][ C0] vkms_vblank_simulate: vblank timer overrun [ 178.228588][ C0] vkms_vblank_simulate: vblank timer overrun [ 178.448869][ C0] vkms_vblank_simulate: vblank timer overrun [ 178.634013][ T5352] Bluetooth: hci3: sending frame failed (-49) [ 178.659222][ T5346] Bluetooth: hci3: Opcode 0x1003 failed: -49 [ 178.709405][ C0] vkms_vblank_simulate: vblank timer overrun [ 178.772334][ C0] vkms_vblank_simulate: vblank timer overrun [ 179.124396][ C0] vkms_vblank_simulate: vblank timer overrun [ 179.560361][ C0] vkms_vblank_simulate: vblank timer overrun [ 181.524529][ T5352] Bluetooth: hci3: command 0x1003 tx timeout [ 181.544449][ T5346] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 181.653071][ T7832] TCP: out of memory -- consider tuning tcp_mem [ 185.616464][ T7857] syz.1.767 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 185.807721][ T5352] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 185.823973][ T5352] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 185.842705][ T5352] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 185.851987][ T6816] bond0: (slave syz_tun): Releasing backup interface [ 185.852364][ T5352] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 185.876342][ T5352] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 185.884564][ T5352] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 186.172633][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.602123][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.714127][ T7864] chnl_net:caif_netlink_parms(): no params data found [ 186.976994][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.001515][ T7864] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.006603][ T7864] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.013000][ T7864] bridge_slave_0: entered allmulticast mode [ 187.018925][ T7864] bridge_slave_0: entered promiscuous mode [ 187.025615][ T7864] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.028970][ T7864] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.037984][ T7864] bridge_slave_1: entered allmulticast mode [ 187.059229][ T7864] bridge_slave_1: entered promiscuous mode [ 187.185239][ T7864] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.190602][ T7864] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.328418][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.415420][ C0] vkms_vblank_simulate: vblank timer overrun [ 187.458279][ C0] vkms_vblank_simulate: vblank timer overrun [ 187.679247][ T7864] team0: Port device team_slave_0 added [ 187.687783][ T7864] team0: Port device team_slave_1 added [ 187.822339][ T7864] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.825534][ T7864] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.857368][ T7864] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.864855][ T7864] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.867266][ T7864] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.877059][ C0] vkms_vblank_simulate: vblank timer overrun [ 187.929938][ C0] vkms_vblank_simulate: vblank timer overrun [ 187.942182][ T5346] Bluetooth: hci1: command tx timeout [ 187.999737][ T7864] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.016279][ C0] vkms_vblank_simulate: vblank timer overrun [ 188.128501][ C0] vkms_vblank_simulate: vblank timer overrun [ 188.253817][ T7864] hsr_slave_0: entered promiscuous mode [ 188.258240][ T7864] hsr_slave_1: entered promiscuous mode [ 188.270812][ T7864] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 188.274986][ T7864] Cannot create hsr debugfs directory [ 188.597331][ C0] vkms_vblank_simulate: vblank timer overrun [ 188.771919][ C0] vkms_vblank_simulate: vblank timer overrun [ 189.044233][ C0] vkms_vblank_simulate: vblank timer overrun [ 189.362860][ T7909] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x0) [ 189.676514][ T5346] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 189.680224][ T5346] Bluetooth: hci4: Injecting HCI hardware error event [ 189.702089][ T5346] Bluetooth: hci4: hardware error 0x00 [ 189.838042][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 189.871830][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.877217][ T11] bond0 (unregistering): Released all slaves [ 190.000285][ T5352] Bluetooth: hci1: command tx timeout [ 190.332272][ C0] vkms_vblank_simulate: vblank timer overrun [ 190.632291][ C0] vkms_vblank_simulate: vblank timer overrun [ 190.668248][ C0] vkms_vblank_simulate: vblank timer overrun [ 190.700271][ C0] vkms_vblank_simulate: vblank timer overrun [ 191.364279][ C0] vkms_vblank_simulate: vblank timer overrun [ 191.703691][ T7926] netlink: 24 bytes leftover after parsing attributes in process `syz.3.788'. [ 191.921258][ T5346] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 192.072440][ T5346] Bluetooth: hci1: command tx timeout [ 192.075532][ T11] hsr_slave_0: left promiscuous mode [ 192.127644][ T11] hsr_slave_1: left promiscuous mode [ 192.210873][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.213999][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.247662][ C0] vkms_vblank_simulate: vblank timer overrun [ 192.287433][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.299960][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.371831][ C0] vkms_vblank_simulate: vblank timer overrun [ 192.400871][ T39] audit: type=1800 audit(1728158311.924:24): pid=7940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.790" name="/" dev="fuse" ino=1 res=0 errno=0 [ 192.484396][ T11] veth1_macvtap: left promiscuous mode [ 192.530592][ T11] veth0_macvtap: left promiscuous mode [ 192.545973][ T11] veth1_vlan: left promiscuous mode [ 192.547890][ T11] veth0_vlan: left promiscuous mode [ 193.658796][ T7950] netlink: 'syz.2.793': attribute type 1 has an invalid length. [ 194.152820][ T5346] Bluetooth: hci1: command tx timeout [ 195.894493][ T39] audit: type=1800 audit(1728158315.404:25): pid=7957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.797" name="bus" dev="overlay" ino=798 res=0 errno=0 [ 196.048283][ T7961] [ 196.585868][ T5352] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 196.599049][ T5352] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 196.607089][ T5352] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 196.645076][ T5352] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 196.659050][ T5352] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 196.663227][ T5352] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 197.609145][ C2] vkms_vblank_simulate: vblank timer overrun [ 197.839845][ C2] vkms_vblank_simulate: vblank timer overrun [ 198.600127][ C2] vkms_vblank_simulate: vblank timer overrun [ 198.808182][ T5352] Bluetooth: hci3: command tx timeout [ 199.118318][ C2] vkms_vblank_simulate: vblank timer overrun [ 199.738804][ T11] team0 (unregistering): Port device team_slave_1 removed [ 200.055410][ C2] vkms_vblank_simulate: vblank timer overrun [ 200.219285][ T11] team0 (unregistering): Port device team_slave_0 removed [ 200.505323][ C2] vkms_vblank_simulate: vblank timer overrun [ 200.799480][ C2] vkms_vblank_simulate: vblank timer overrun [ 200.877306][ T5352] Bluetooth: hci3: command tx timeout [ 201.008163][ C2] vkms_vblank_simulate: vblank timer overrun [ 201.042640][ C2] vkms_vblank_simulate: vblank timer overrun [ 201.734525][ C2] vkms_vblank_simulate: vblank timer overrun [ 201.779829][ C2] vkms_vblank_simulate: vblank timer overrun [ 201.815360][ C2] vkms_vblank_simulate: vblank timer overrun [ 201.849906][ C2] vkms_vblank_simulate: vblank timer overrun [ 201.956122][ C2] vkms_vblank_simulate: vblank timer overrun [ 202.076102][ C2] vkms_vblank_simulate: vblank timer overrun [ 202.102397][ C2] vkms_vblank_simulate: vblank timer overrun [ 202.199792][ C2] vkms_vblank_simulate: vblank timer overrun [ 202.969399][ T5352] Bluetooth: hci3: command tx timeout [ 205.060814][ T5352] Bluetooth: hci3: command tx timeout [ 205.965015][ T7970] chnl_net:caif_netlink_parms(): no params data found [ 206.119839][ C0] vkms_vblank_simulate: vblank timer overrun [ 206.475165][ T7970] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.479179][ T7970] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.507719][ T7970] bridge_slave_0: entered allmulticast mode [ 206.513808][ T7970] bridge_slave_0: entered promiscuous mode [ 206.670541][ T7970] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.674269][ T7970] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.677520][ T7970] bridge_slave_1: entered allmulticast mode [ 206.681599][ T7970] bridge_slave_1: entered promiscuous mode [ 206.696424][ T7864] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 206.717409][ T7864] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 206.724073][ C0] vkms_vblank_simulate: vblank timer overrun [ 206.741754][ T7864] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 206.874364][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.007161][ T7864] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 207.113217][ T7970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.145216][ T7970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.376877][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.441667][ C0] vkms_vblank_simulate: vblank timer overrun [ 207.530530][ T7970] team0: Port device team_slave_0 added [ 207.636834][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.657787][ T7970] team0: Port device team_slave_1 added [ 207.990458][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.040447][ T7970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.043281][ T7970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.052477][ T7970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.076831][ T7970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.080022][ T7970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.099736][ T7970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.325297][ T7970] hsr_slave_0: entered promiscuous mode [ 208.338248][ T7970] hsr_slave_1: entered promiscuous mode [ 208.345773][ T7970] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 208.350659][ T7970] Cannot create hsr debugfs directory [ 208.547973][ T7864] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.606519][ C0] vkms_vblank_simulate: vblank timer overrun [ 208.930886][ C0] vkms_vblank_simulate: vblank timer overrun [ 210.127242][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 210.142025][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 210.153669][ T11] bond0 (unregistering): Released all slaves [ 210.226802][ T7864] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.437240][ T1098] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.442404][ T1098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.450981][ T1098] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.455744][ T1098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.494200][ T8094] pim6reg: entered allmulticast mode [ 211.261630][ T7864] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 211.298050][ T7864] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 211.399807][ T8107] netlink: 16 bytes leftover after parsing attributes in process `syz.2.832'. [ 211.993194][ T11] hsr_slave_0: left promiscuous mode [ 212.064103][ T11] hsr_slave_1: left promiscuous mode [ 212.157414][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.160504][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.183037][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.186643][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.443730][ T11] veth1_macvtap: left promiscuous mode [ 212.463483][ T11] veth0_macvtap: left promiscuous mode [ 212.465746][ T11] veth1_vlan: left promiscuous mode [ 212.467843][ T11] veth0_vlan: left promiscuous mode [ 217.501282][ T5346] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 217.527433][ T5346] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 217.575337][ T5346] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 217.597017][ T5346] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 217.600963][ T5346] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 217.605599][ T5346] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 217.899229][ T11] team0 (unregistering): Port device team_slave_1 removed [ 218.525584][ T11] team0 (unregistering): Port device team_slave_0 removed [ 219.780202][ T5346] Bluetooth: hci4: command tx timeout [ 221.855989][ T5346] Bluetooth: hci4: command tx timeout [ 222.080008][ T1299] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 222.229906][ T1299] usb 7-1: Using ep0 maxpacket: 32 [ 222.253924][ T1299] usb 7-1: config 0 has no interfaces? [ 222.258104][ T1299] usb 7-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 222.262652][ T1299] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.266245][ T1299] usb 7-1: Product: syz [ 222.267895][ T1299] usb 7-1: Manufacturer: syz [ 222.270822][ T1299] usb 7-1: SerialNumber: syz [ 222.280437][ T1299] usb 7-1: config 0 descriptor?? [ 223.215056][ T7864] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.595669][ T7864] veth0_vlan: entered promiscuous mode [ 223.892094][ T7864] veth1_vlan: entered promiscuous mode [ 223.918292][ T7970] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 223.921995][ T5346] Bluetooth: hci4: command tx timeout [ 224.059984][ T7970] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 224.078707][ T7970] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 224.133341][ T7970] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 224.203415][ T8130] chnl_net:caif_netlink_parms(): no params data found [ 224.230029][ T7864] veth0_macvtap: entered promiscuous mode [ 224.278083][ T7864] veth1_macvtap: entered promiscuous mode [ 224.517019][ T7970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.538668][ T8130] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.543355][ T8130] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.547941][ T8130] bridge_slave_0: entered allmulticast mode [ 224.551924][ T8130] bridge_slave_0: entered promiscuous mode [ 224.558195][ T7864] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.571072][ T7864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.574497][ T7864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.577616][ T7864] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.596891][ T7864] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.616258][ T7864] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.619367][ T8130] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.623647][ T8130] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.628329][ T8130] bridge_slave_1: entered allmulticast mode [ 224.637807][ T8130] bridge_slave_1: entered promiscuous mode [ 224.778942][ T5537] usb 7-1: USB disconnect, device number 14 [ 224.911645][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.982288][ T7864] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.986925][ T7864] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.001403][ T7864] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.005647][ T7864] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.095218][ T8130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.116723][ T8130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.251536][ T7970] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.336849][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.631537][ T8130] team0: Port device team_slave_0 added [ 225.705660][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.860998][ T8130] team0: Port device team_slave_1 added [ 225.989930][ T5346] Bluetooth: hci4: command tx timeout [ 226.031482][ T1101] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.034319][ T1101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.037452][ T1101] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.039382][ T1101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.128810][ T8165] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.840'. [ 226.134368][ T8165] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 226.163514][ T8165] overlayfs: missing 'lowerdir' [ 226.263145][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.422628][ T8130] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.439812][ T8130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.452283][ T8130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.464339][ T8130] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.467576][ T8130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.472251][ T1016] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.497062][ T8130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.521657][ T1016] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.773339][ T8130] hsr_slave_0: entered promiscuous mode [ 226.809264][ T8130] hsr_slave_1: entered promiscuous mode [ 226.848404][ T8130] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 226.851314][ T8130] Cannot create hsr debugfs directory [ 226.894934][ T1101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.898196][ T1101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.233667][ T8191] [ 228.234776][ T8191] ====================================================== [ 228.237574][ T8191] WARNING: possible circular locking dependency detected [ 228.244462][ T8191] 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0 Not tainted [ 228.259163][ T8191] ------------------------------------------------------ [ 228.264496][ T8191] syz.2.844/8191 is trying to acquire lock: [ 228.267722][ T8191] ffffffff8fd51e28 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_dlc_exists+0x5f/0x1a0 [ 228.274530][ T8191] [ 228.274530][ T8191] but task is already holding lock: [ 228.280202][ T8191] ffffffff8fd56de8 (rfcomm_ioctl_mutex){+.+.}-{3:3}, at: rfcomm_dev_ioctl+0x9db/0x1e70 [ 228.286119][ T8191] [ 228.286119][ T8191] which lock already depends on the new lock. [ 228.286119][ T8191] [ 228.291798][ T8191] [ 228.291798][ T8191] the existing dependency chain (in reverse order) is: [ 228.307455][ T8191] [ 228.307455][ T8191] -> #3 (rfcomm_ioctl_mutex){+.+.}-{3:3}: [ 228.311264][ T8191] __mutex_lock+0x175/0x9c0 [ 228.330270][ T8191] rfcomm_dev_ioctl+0x9db/0x1e70 [ 228.333098][ T8191] rfcomm_sock_compat_ioctl+0xba/0xe0 [ 228.336073][ T8191] compat_sock_ioctl+0x17b/0x7e0 [ 228.338464][ T8191] __do_compat_sys_ioctl+0x259/0x2b0 [ 228.341938][ T8191] __do_fast_syscall_32+0x73/0x120 [ 228.345277][ T8191] do_fast_syscall_32+0x32/0x80 [ 228.348380][ T8191] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 228.351641][ T8191] [ 228.351641][ T8191] -> #2 (sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM){+.+.}-{0:0}: [ 228.355873][ T8191] lock_sock_nested+0x3a/0xf0 [ 228.358013][ T8191] rfcomm_sk_state_change+0x6d/0x3b0 [ 228.361330][ T8191] __rfcomm_dlc_close+0x28c/0x700 [ 228.363844][ T8191] rfcomm_dlc_close+0x1eb/0x240 [ 228.366540][ T8191] __rfcomm_sock_close+0xa7/0x230 [ 228.369449][ T8191] rfcomm_sock_shutdown+0xd5/0x230 [ 228.371361][ T8191] rfcomm_sock_release+0x5d/0x140 [ 228.373470][ T8191] __sock_release+0xb0/0x270 [ 228.376229][ T8191] sock_close+0x1c/0x30 [ 228.379185][ T8191] __fput+0x3f6/0xb60 [ 228.381728][ T8191] task_work_run+0x14e/0x250 [ 228.384175][ T8191] get_signal+0x1d3/0x26d0 [ 228.386507][ T8191] arch_do_signal_or_restart+0x90/0x7e0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 228.389312][ T8191] syscall_exit_to_user_mode+0x150/0x2a0 [ 228.392706][ T8191] __do_fast_syscall_32+0x80/0x120 [ 228.396514][ T8191] do_fast_syscall_32+0x32/0x80 [ 228.399830][ T8191] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 228.403518][ T8191] [ 228.403518][ T8191] -> #1 (&d->lock#2){+.+.}-{3:3}: [ 228.408676][ T8191] __mutex_lock+0x175/0x9c0 [ 228.412029][ T8191] __rfcomm_dlc_close+0x235/0x700 [ 228.415526][ T8191] rfcomm_dlc_close+0x1eb/0x240 [ 228.418829][ T8191] __rfcomm_sock_close+0xa7/0x230 [ 228.421733][ T8191] rfcomm_sock_shutdown+0xd5/0x230 [ 228.424384][ T8191] rfcomm_sock_release+0x5d/0x140 [ 228.427240][ T8191] __sock_release+0xb0/0x270 [ 228.430034][ T8191] sock_close+0x1c/0x30 [ 228.434185][ T8191] __fput+0x3f6/0xb60 [ 228.436723][ T8191] task_work_run+0x14e/0x250 [ 228.439836][ T8191] get_signal+0x1d3/0x26d0 [ 228.443798][ T8191] arch_do_signal_or_restart+0x90/0x7e0 [ 228.446694][ T8191] syscall_exit_to_user_mode+0x150/0x2a0 [ 228.449746][ T8191] __do_fast_syscall_32+0x80/0x120 [ 228.452412][ T8191] do_fast_syscall_32+0x32/0x80 [ 228.455017][ T8191] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 228.458403][ T8191] [ 228.458403][ T8191] -> #0 (rfcomm_mutex){+.+.}-{3:3}: [ 228.462188][ T8191] __lock_acquire+0x250b/0x3ce0 [ 228.465770][ T8191] lock_acquire.part.0+0x11b/0x380 [ 228.468866][ T8191] __mutex_lock+0x175/0x9c0 [ 228.471514][ T8191] rfcomm_dlc_exists+0x5f/0x1a0 [ 228.474510][ T8191] rfcomm_dev_ioctl+0xabc/0x1e70 [ 228.477506][ T8191] rfcomm_sock_compat_ioctl+0xba/0xe0 [ 228.480334][ T8191] compat_sock_ioctl+0x17b/0x7e0 [ 228.483332][ T8191] __do_compat_sys_ioctl+0x259/0x2b0 [ 228.486525][ T8191] __do_fast_syscall_32+0x73/0x120 [ 228.490275][ T8191] do_fast_syscall_32+0x32/0x80 [ 228.493257][ T8191] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 228.495445][ T8191] [ 228.495445][ T8191] other info that might help us debug this: [ 228.495445][ T8191] [ 228.498712][ T8191] Chain exists of: [ 228.498712][ T8191] rfcomm_mutex --> sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM --> rfcomm_ioctl_mutex [ 228.498712][ T8191] [ 228.503770][ T8191] Possible unsafe locking scenario: [ 228.503770][ T8191] [ 228.508067][ T8191] CPU0 CPU1 [ 228.517765][ T8191] ---- ---- [ 228.519725][ T8191] lock(rfcomm_ioctl_mutex); [ 228.521540][ T8191] lock(sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM); [ 228.524671][ T8191] lock(rfcomm_ioctl_mutex); [ 228.540397][ T8191] lock(rfcomm_mutex); [ 228.541958][ T8191] [ 228.541958][ T8191] *** DEADLOCK *** [ 228.541958][ T8191] [ 228.545224][ T8191] 2 locks held by syz.2.844/8191: [ 228.547138][ T8191] #0: ffff88802b76e258 (sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM){+.+.}-{0:0}, at: rfcomm_sock_compat_ioctl+0xac/0xe0 [ 228.551321][ T8191] #1: ffffffff8fd56de8 (rfcomm_ioctl_mutex){+.+.}-{3:3}, at: rfcomm_dev_ioctl+0x9db/0x1e70 [ 228.554747][ T8191] [ 228.554747][ T8191] stack backtrace: [ 228.573857][ T8191] CPU: 1 UID: 0 PID: 8191 Comm: syz.2.844 Not tainted 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0 [ 228.577468][ T8191] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 228.581035][ T8191] Call Trace: [ 228.582460][ T8191] [ 228.596524][ T8191] dump_stack_lvl+0x116/0x1f0 [ 228.598445][ T8191] print_circular_bug+0x419/0x5d0 [ 228.600430][ T8191] check_noncircular+0x31a/0x400 [ 228.602273][ T8191] ? __pfx_check_noncircular+0x10/0x10 [ 228.604186][ T8191] ? __kernel_text_address+0xd/0x40 [ 228.606233][ T8191] ? lockdep_lock+0xc6/0x200 [ 228.607684][ T8191] ? __pfx_lockdep_lock+0x10/0x10 [ 228.609556][ T8191] __lock_acquire+0x250b/0x3ce0 [ 228.611666][ T8191] ? __pfx___lock_acquire+0x10/0x10 [ 228.614070][ T8191] ? add_lock_to_list+0x17d/0x390 [ 228.616275][ T8191] lock_acquire.part.0+0x11b/0x380 [ 228.627317][ T8191] ? rfcomm_dlc_exists+0x5f/0x1a0 [ 228.629183][ T8191] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 228.644831][ T8191] ? rcu_is_watching+0x12/0xc0 [ 228.647286][ T8191] ? trace_lock_acquire+0x14a/0x1d0 [ 228.649893][ T8191] ? rfcomm_dlc_exists+0x5f/0x1a0 [ 228.652006][ T8191] ? lock_acquire+0x2f/0xb0 [ 228.654515][ T8191] ? rfcomm_dlc_exists+0x5f/0x1a0 [ 228.656861][ T8191] __mutex_lock+0x175/0x9c0 [ 228.672988][ T8191] ? rfcomm_dlc_exists+0x5f/0x1a0 [ 228.674925][ T8191] ? find_held_lock+0x2d/0x110 [ 228.676788][ T8191] ? rfcomm_dlc_exists+0x5f/0x1a0 [ 228.679159][ T8191] ? __pfx___mutex_lock+0x10/0x10 [ 228.682029][ T8191] ? __pfx_lock_release+0x10/0x10 [ 228.684197][ T8191] ? trace_lock_acquire+0x14a/0x1d0 [ 228.686582][ T8191] ? apparmor_capable+0x114/0x1d0 [ 228.705150][ T8191] ? rfcomm_dlc_exists+0x5f/0x1a0 [ 228.707980][ T8191] rfcomm_dlc_exists+0x5f/0x1a0 [ 228.710489][ T8191] rfcomm_dev_ioctl+0xabc/0x1e70 [ 228.712417][ T8191] ? __pfx_rfcomm_dev_ioctl+0x10/0x10 [ 228.715484][ T8191] ? __pfx_lock_release+0x10/0x10 [ 228.718241][ T8191] ? mark_held_locks+0x9f/0xe0 [ 228.720666][ T8191] ? rfcomm_sock_compat_ioctl+0xac/0xe0 [ 228.723409][ T8191] ? __local_bh_enable_ip+0xa4/0x120 [ 228.727219][ T8191] rfcomm_sock_compat_ioctl+0xba/0xe0 [ 228.732479][ T8191] compat_sock_ioctl+0x17b/0x7e0 [ 228.734389][ T8191] ? __pfx_rfcomm_sock_compat_ioctl+0x10/0x10 [ 228.736948][ T8191] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 228.739769][ T8191] ? __fget_files+0x244/0x3f0 [ 228.742555][ T8191] ? __pfx_compat_sock_ioctl+0x10/0x10 [ 228.745534][ T8191] __do_compat_sys_ioctl+0x259/0x2b0 [ 228.748702][ T8191] __do_fast_syscall_32+0x73/0x120 [ 228.753752][ T8191] do_fast_syscall_32+0x32/0x80 [ 228.758391][ T8191] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 228.761635][ T8191] RIP: 0023:0xf7f87579 [ 228.763602][ T8191] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 228.779040][ T8191] RSP: 002b:00000000f570656c EFLAGS: 00000296 ORIG_RAX: 0000000000000036 [ 228.798461][ T8191] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000400452c8 [ 228.801308][ T8191] RDX: 0000000020000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 228.803866][ T8191] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 228.806314][ T8191] R10: 0000000000000000 R11: 0000000000000296 R12: 0000000000000000 [ 228.809961][ T8191] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 228.813565][ T8191] [ 229.348465][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 229.366029][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 229.383181][ T11] bond0 (unregistering): Released all slaves [ 229.664776][ T11] tipc: Left network mode [ 230.515377][ T11] hsr_slave_0: left promiscuous mode [ 230.518819][ T11] hsr_slave_1: left promiscuous mode [ 230.531553][ T11] veth1_macvtap: left promiscuous mode [ 230.534351][ T11] veth0_macvtap: left promiscuous mode [ 230.536512][ T11] veth1_vlan: left promiscuous mode [ 230.538510][ T11] veth0_vlan: left promiscuous mode [ 231.447504][ T11] team0 (unregistering): Port device team_slave_1 removed [ 231.630629][ T11] team0 (unregistering): Port device team_slave_0 removed [ 233.883243][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.958890][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.100134][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.264830][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.577280][ T11] bridge_slave_1: left allmulticast mode [ 234.580536][ T11] bridge_slave_1: left promiscuous mode [ 234.584441][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.606268][ T11] bridge_slave_0: left allmulticast mode [ 234.608942][ T11] bridge_slave_0: left promiscuous mode [ 234.614223][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.658546][ T11] bridge_slave_1: left allmulticast mode [ 234.661054][ T11] bridge_slave_1: left promiscuous mode [ 234.685123][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.700429][ T11] bridge_slave_0: left allmulticast mode [ 234.702338][ T11] bridge_slave_0: left promiscuous mode [ 234.704145][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.742344][ T11] bridge_slave_1: left allmulticast mode [ 234.744155][ T11] bridge_slave_1: left promiscuous mode [ 234.745992][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.752270][ T11] bridge_slave_0: left allmulticast mode [ 234.754267][ T11] bridge_slave_0: left promiscuous mode [ 234.756310][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.333615][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.338988][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.381630][ T11] bond0 (unregistering): Released all slaves [ 235.411943][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.419491][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.428573][ T11] bond0 (unregistering): Released all slaves [ 235.473401][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.480131][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.497321][ T11] bond0 (unregistering): Released all slaves [ 236.126874][ T11] hsr_slave_0: left promiscuous mode [ 236.131405][ T11] hsr_slave_1: left promiscuous mode [ 236.135998][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.141244][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.168110][ T11] hsr_slave_0: left promiscuous mode [ 236.230634][ T11] hsr_slave_1: left promiscuous mode [ 236.239734][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.276655][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.394537][ T11] hsr_slave_0: left promiscuous mode [ 236.401031][ T11] hsr_slave_1: left promiscuous mode [ 236.403468][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.406686][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.411531][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 236.416802][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.435321][ T11] veth1_macvtap: left promiscuous mode [ 236.437377][ T11] veth0_macvtap: left promiscuous mode [ 236.439229][ T11] veth1_vlan: left promiscuous mode [ 236.441608][ T11] veth0_vlan: left promiscuous mode [ 237.405481][ T11] team0 (unregistering): Port device team_slave_1 removed [ 237.478882][ T11] team0 (unregistering): Port device team_slave_0 removed VM DIAGNOSIS: 19:59:07 Registers: info registers vcpu 0 CPU#0 RAX=0000000000235584 RBX=0000000000000000 RCX=ffffffff8b12f709 RDX=ffffed1005687026 RSI=ffffffff8bb120a0 RDI=ffffffff816407fc RBP=fffffbfff1b52af8 RSP=ffffffff8da07e20 R8 =0000000000000000 R9 =ffffed1005687025 R10=ffff88802b43812b R11=0000000000000001 R12=0000000000000000 R13=ffffffff8da957c0 R14=ffffffff901cce88 R15=0000000000000000 RIP=ffffffff8b130aef RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b400000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=0000000073266000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff85034f00 RDI=ffffffff9a63a220 RBP=ffffffff9a63a1e0 RSP=ffffc9000735f220 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=722d302e32312e36 R12=0000000000000000 R13=0000000000000020 R14=fffffbfff34c7496 R15=dffffc0000000000 RIP=ffffffff85034f27 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802b500000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f73ab780 CR3=0000000073266000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000080000000 RBX=0000000000000063 RCX=ffffffff81dccf6b RDX=ffff88801ff90000 RSI=ffffffff81dccf27 RDI=0000000000000005 RBP=ffff88801ac622b0 RSP=ffffc90000e1f6c8 R8 =0000000000000005 R9 =0000000000000100 R10=0000000000000063 R11=0000000000000001 R12=0000000000000000 R13=ffff88801ac61958 R14=dffffc0000000000 R15=0000000000000001 RIP=ffffffff818ca7fb RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055da4e10c000 CR3=00000000223d8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000fe0 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=13ca7da913ca7da9 13ca7da913ca7da9 13ca7da913ca7da9 13ca7da913ca7da9 13ca7da913ca7da9 13ca7da913ca7da9 13ca7da913ca7da9 13ca7da913ca7da9 ZMM22=71fc22b971fc22b9 71fc22b971fc22b9 71fc22b971fc22b9 71fc22b971fc22b9 71fc22b971fc22b9 71fc22b971fc22b9 71fc22b971fc22b9 71fc22b971fc22b9 ZMM23=0859fe0e0859fe0e 0859fe0e0859fe0e 0859fe0e0859fe0e 0859fe0e0859fe0e 0859fe0e0859fe0e 0859fe0e0859fe0e 0859fe0e0859fe0e 0859fe0e0859fe0e ZMM24=ddcc3e7dddcc3e7d ddcc3e7dddcc3e7d ddcc3e7dddcc3e7d ddcc3e7dddcc3e7d ddcc3e7dddcc3e7d ddcc3e7dddcc3e7d ddcc3e7dddcc3e7d ddcc3e7dddcc3e7d ZMM25=c827b6dac827b6da c827b6dac827b6da c827b6dac827b6da c827b6dac827b6da c827b6dac827b6da c827b6dac827b6da c827b6dac827b6da c827b6dac827b6da ZMM26=7a09a8127a09a812 7a09a8127a09a812 7a09a8127a09a812 7a09a8127a09a812 7a09a8127a09a812 7a09a8127a09a812 7a09a8127a09a812 7a09a8127a09a812 ZMM27=32fce35832fce358 32fce35832fce358 32fce35832fce358 32fce35832fce358 32fce35832fce358 32fce35832fce358 32fce35832fce358 32fce35832fce358 ZMM28=000001200000011f 0000011e0000011d 0000011c0000011b 0000011a00000119 0000011800000117 0000011600000115 0000011400000113 0000011200000111 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=a3070000a3070000 a3070000a3070000 a3070000a3070000 a3070000a3070000 a3070000a3070000 a3070000a3070000 a3070000a3070000 a3070000a3070000 info registers vcpu 3 CPU#3 RAX=0000000000000002 RBX=ffff88802b740080 RCX=ffffffff8180c0a4 RDX=ffff88801b748000 RSI=0000000000000000 RDI=0000000000000005 RBP=ffffc90000457d78 RSP=ffffc90000457c98 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=fffffbfff1bb853e R12=1ffff9200008af98 R13=0000000000000001 R14=0000000000000003 R15=ffffed10056e8011 RIP=ffffffff818ca87c RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802b700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000000c38270a CR3=000000000db7c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000052 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000