last executing test programs: 5.058711359s ago: executing program 1 (id=2325): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f0000000000)=@framed={{}, [@printk={@d, {}, {}, {0x7, 0x0, 0x9}}]}, &(0x7f00000000c0)='GPL\x00', 0x1, 0x8b, &(0x7f0000000100)=""/139}, 0x90) 4.860406584s ago: executing program 1 (id=2327): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/fs/cgroup', 0x0, 0x0) getdents64(r0, &(0x7f0000000080)=""/55, 0x37) getdents64(r0, 0x0, 0x0) 4.860122739s ago: executing program 1 (id=2328): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x179, 0x11, 0x8}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x16}, 0x70) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001200)={0x0, @multicast1, @multicast1}, &(0x7f0000001240)=0xc) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) mlock2(&(0x7f00003ed000/0x3000)=nil, 0x3000, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000009000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='ext4_es_find_extent_range_exit\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000008850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ext4_es_find_extent_range_exit\x00', r3}, 0x10) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) 4.737432139s ago: executing program 1 (id=2330): mkdir(&(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='tmpfs\x00', 0x0, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0xc) umount2(&(0x7f0000000140)='./file0\x00', 0x4) 4.735336655s ago: executing program 2 (id=2331): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffca1}, 0x90) keyctl$restrict_keyring(0x3, 0xfffffffffffffffb, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x0) request_key(0x0, &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000040)='\x00\xb2\xd1)\xda\xff|\xd1\x85b\xad77\x00\fJ\xfc\xb4\x1e\xae\xe8:`\xe9\x9ew\xf5l\xee\x8dg\xc2\'\x88\xe9\xf3\x05\xe02\xe6\v_\xe9\x89\x86s\x8dh#$\xe4\xb1\xd0\x93\xceh\xfcsP)\xd9\xce\x19+?\xc6\xf7\xc0[G\x15\xde-x\xa9\xe5,\xec\xf6\xfb\xc9~2\xa1\xeb\xb3Pp\x93\x90\x17\xb2\x95\xe7\r\xae^\x92n\xbd\xf3\xb1\xac\xe3sf\xc9X\x05j:\xb6~\xa6#\xbf\x06t\xf2\xb5gd\xd7\xcc\"A_\xecu\xe8\x84\xe3\x92J\xaa!\xae\xa2\xd7\xf3\xc6J\xb9i\x9d\xb4{\xee\xf0|\xd9\x05\xaa\xbb\xfe\x12\xa0\xbb\xecY\x0f \xa3\xba?#\x90\x8c,nNQ\xa1\xed', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000000340)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0xe8}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000080), 0x62) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0x40049409, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x0) dup2(r0, r1) ioctl$KVM_RUN(r4, 0xae80, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) socket$packet(0x11, 0x3, 0x300) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') socket$packet(0x11, 0x3, 0x300) preadv(r5, &(0x7f0000000000)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1, 0x4c, 0x0) 4.590122438s ago: executing program 1 (id=2332): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.stat\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000100), 0x1001) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x10}, 0x18) ioctl$SIOCSIFHWADDR(r2, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) dup2(r1, r0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip6_flowlabel\x00') r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x5c, 0x1, 0x1, 0x101, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast2}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0xcd}]}]}, 0x5c}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$xdp(0x2c, 0x3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) pipe(0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r5, &(0x7f000000e3c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) write$FUSE_INIT(r7, &(0x7f0000000100)={0x50}, 0x7) setxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) 3.443228867s ago: executing program 2 (id=2343): open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r0 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480), 0x0, 0x0, 0xfffffffffffffffe) pipe2$watch_queue(0x0, 0x80) socket$alg(0x26, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x10, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) preadv(r1, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r2, 0x3) r3 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r3, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r4, &(0x7f0000001500), 0x588, 0x0) ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fafc00"}, 0x0, 0x1, {0x0}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x0) keyctl$update(0x2, r0, &(0x7f0000000180)="b8", 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) 2.945575898s ago: executing program 2 (id=2352): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffca1}, 0x90) keyctl$restrict_keyring(0x3, 0xfffffffffffffffb, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x0) request_key(0x0, &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000040)='\x00\xb2\xd1)\xda\xff|\xd1\x85b\xad77\x00\fJ\xfc\xb4\x1e\xae\xe8:`\xe9\x9ew\xf5l\xee\x8dg\xc2\'\x88\xe9\xf3\x05\xe02\xe6\v_\xe9\x89\x86s\x8dh#$\xe4\xb1\xd0\x93\xceh\xfcsP)\xd9\xce\x19+?\xc6\xf7\xc0[G\x15\xde-x\xa9\xe5,\xec\xf6\xfb\xc9~2\xa1\xeb\xb3Pp\x93\x90\x17\xb2\x95\xe7\r\xae^\x92n\xbd\xf3\xb1\xac\xe3sf\xc9X\x05j:\xb6~\xa6#\xbf\x06t\xf2\xb5gd\xd7\xcc\"A_\xecu\xe8\x84\xe3\x92J\xaa!\xae\xa2\xd7\xf3\xc6J\xb9i\x9d\xb4{\xee\xf0|\xd9\x05\xaa\xbb\xfe\x12\xa0\xbb\xecY\x0f \xa3\xba?#\x90\x8c,nNQ\xa1\xed', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000000340)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0xe8}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000080), 0x62) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0x40049409, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x0) dup2(r0, r1) ioctl$KVM_RUN(r4, 0xae80, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) socket$packet(0x11, 0x3, 0x300) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') socket$packet(0x11, 0x3, 0x300) preadv(r5, &(0x7f0000000000)=[{&(0x7f0000000080)=""/195, 0xc3}], 0x1, 0x4c, 0x0) 1.741587135s ago: executing program 2 (id=2369): io_setup(0x4, &(0x7f0000000400)=0x0) r1 = eventfd2(0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000300)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r2 = fcntl$dupfd(r1, 0x0, r1) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000180)="0000a00000000000", 0x8}], 0x1d) 1.453720426s ago: executing program 3 (id=2374): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5385, &(0x7f0000000000)) 1.453443058s ago: executing program 3 (id=2375): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r0, &(0x7f0000000280)='7', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e20, @loopback}}}, 0x84) 1.413022339s ago: executing program 2 (id=2377): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000004000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="b8000000190001000000000000000000e0000002000000000000000000000000ffffffff00000000000000000008000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000"], 0xb8}}, 0x0) syz_emit_ethernet(0x26, &(0x7f0000000100)={@local, @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x89, 0x0, @private=0xa010101, @remote}, "68ef365c"}}}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r0, 0x0, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) fcntl$setpipe(r0, 0x407, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6}]}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='cachefiles_coherency\x00', r4}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000200029"], 0x1c}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.3439065s ago: executing program 3 (id=2379): unshare(0x20020000) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) unlinkat(r2, &(0x7f0000000280)='./file0\x00', 0x200) 1.325802821s ago: executing program 1 (id=2380): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000fa3600000000000000450000007b10323695"], &(0x7f0000000100)='syzkaller\x00'}, 0x90) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = io_uring_setup(0x3a01, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x3, 0x1da, 0x0, r1}) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r4 = fcntl$dupfd(r3, 0x0, r2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r7 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000001200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001240)={0x40, r6, 0x3, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @auth={{{}, {0x1}, @device_a, @device_b, @from_mac=@broadcast}, 0x0, 0x0, 0x0, @void}}]}, 0x40}}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) mremap(&(0x7f0000e95000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffc000/0x1000)=nil) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x15) r9 = gettid() process_vm_writev(r9, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r10, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e030600bfff9801288463"], 0xffdd) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x160, 0x4c, 0x1a, 0x160, 0x73, 0x388, 0x258, 0x258, 0x388, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x11}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@inet=@multiport={{0x50}}, @common=@unspec=@time={{0x38}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0x100, 0x228, 0x0, {}, [@common=@inet=@dscp={{0x28}}, @common=@srh={{0x30}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:hald_var_run_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) ioctl$VIDIOC_ENUM_FRAMESIZES(r4, 0xc02c564a, &(0x7f0000000780)={0x0, 0x33565348}) r12 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r12, 0xc0145608, &(0x7f0000000080)={0x2, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r12, 0xc058565d, &(0x7f0000000240)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x80}, 0x0, 0x1, {0x0}, 0x0, 0x0, r0}) close_range(r1, 0xffffffffffffffff, 0x0) 1.112237666s ago: executing program 2 (id=2381): syz_open_dev$usbfs(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) sched_setscheduler(0x0, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x181480, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000700)={'pimreg1\x00', @local}) r2 = syz_io_uring_setup(0xec5, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x18a}, &(0x7f0000000080)=0x0, &(0x7f0000000340)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r4 = epoll_create(0x5) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000000)) io_uring_enter(r2, 0x47fa, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r2, 0xde5, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0}, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8916, &(0x7f0000000000)={'ip6gre0\x00', @random="0200"}) readahead(r1, 0x0, 0x0) r6 = syz_open_dev$cec(0x0, 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f00000002c0)={"90125830", 0x0, 0x5, 0x9, 0x0, 0x6, "471d855406050000c6a185480039d5", 'W\x00', "214619ed", "41f336e7", ["c81de44b0091fb7ce7442d42", "ed5eb3eecf000c00bd00", "34334e67c300e1a4c49d3300", "e996c9c4d23135876ea2fff7"]}) ioctl$CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 630.346505ms ago: executing program 0 (id=2383): r0 = syz_open_dev$loop(&(0x7f0000000380), 0x0, 0x0) ioctl$BLKBSZGET(r0, 0x80041270, &(0x7f00000003c0)) 492.498583ms ago: executing program 0 (id=2384): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5385, &(0x7f0000000000)) 450.939417ms ago: executing program 3 (id=2385): io_setup(0x4, &(0x7f0000000400)=0x0) r1 = eventfd2(0x0, 0x0) io_submit(r0, 0x1, &(0x7f0000000300)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) r2 = fcntl$dupfd(r1, 0x0, r1) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000180)="0000a00000000000", 0x8}], 0x1d) 300.378125ms ago: executing program 0 (id=2386): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = fanotify_init(0x0, 0x0) fanotify_mark(r1, 0x201, 0x4800003e, r0, 0x0) 164.155379ms ago: executing program 0 (id=2387): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, &(0x7f0000000080)={{0x2}, {}, 0x0, 0x6}) 163.524489ms ago: executing program 3 (id=2388): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r0, &(0x7f0000000280)='7', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e20, @loopback}}}, 0x84) 146.673912ms ago: executing program 0 (id=2389): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1}}]}}, 0x0, 0x32}, 0x20) 90.34665ms ago: executing program 0 (id=2390): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000003880)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000001600)="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", 0x2a1}], 0x1}}], 0x2, 0x0) 0s ago: executing program 3 (id=2391): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000003c0)=0x11, 0x4) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f0000001a00)=0x9, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='io.stat\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x10) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)="7c53310100f9ff61efd106939fc1", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000000), 0x4) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="02c8000c00080002"], 0x11) kernel console output (not intermixed with test programs): nvalid maxpacket 59391, setting to 1024 [ 291.426400][ T9426] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.433826][ T3660] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 291.473182][ T3660] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 291.484555][ T3660] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.498056][ T3660] usb 6-1: config 0 descriptor?? [ 291.501609][ T9684] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 291.600834][ T9659] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.604755][ T9659] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.610988][ T9659] bridge_slave_0: entered allmulticast mode [ 291.621057][ T9659] bridge_slave_0: entered promiscuous mode [ 291.684772][ T9659] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.692918][ T9659] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.696100][ T9659] bridge_slave_1: entered allmulticast mode [ 291.702590][ T9659] bridge_slave_1: entered promiscuous mode [ 291.892039][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.004285][ T3660] plantronics 0003:047F:FFFF.0006: unknown main item tag 0xd [ 292.009656][ T3660] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 292.028469][ T3660] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 292.028650][ T9659] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.069854][ T9659] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.106774][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.286294][ C2] hpet: Lost 1 RTC interrupts [ 292.307554][ T7509] usb 6-1: USB disconnect, device number 12 [ 292.394756][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.426748][ T9659] team0: Port device team_slave_0 added [ 292.525784][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.668297][ T9659] team0: Port device team_slave_1 added [ 292.878037][ T9659] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.881734][ T9659] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.922768][ T9659] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.941095][ T9659] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.944803][ T9659] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.966344][ T9659] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.991650][ T84] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.995308][ T84] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.164831][ T9659] hsr_slave_0: entered promiscuous mode [ 293.179263][ T9659] hsr_slave_1: entered promiscuous mode [ 293.187499][ T5206] Bluetooth: hci2: command tx timeout [ 293.227688][ T9659] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 293.230874][ T9659] Cannot create hsr debugfs directory [ 293.311876][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.316264][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.319007][ T9573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.423129][ T13] bridge_slave_1: left allmulticast mode [ 293.425812][ T13] bridge_slave_1: left promiscuous mode [ 293.444007][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.469482][ T13] bridge_slave_0: left allmulticast mode [ 293.472175][ T13] bridge_slave_0: left promiscuous mode [ 293.474754][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.597291][ T9727] binder: 9725:9727 ioctl 4018620d 0 returned -22 [ 294.063569][ T9727] binder: 9725:9727 ioctl c0306201 20000380 returned -11 [ 294.147070][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 294.158591][ T13] bond_slave_0: left allmulticast mode [ 294.174365][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 294.207152][ T13] bond_slave_1: left allmulticast mode [ 294.217191][ T13] bond0 (unregistering): Released all slaves [ 294.391893][ T9573] 8021q: adding VLAN 0 to HW filter on device team0 [ 294.407166][ T13] tipc: Left network mode [ 294.444709][ T5266] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.448069][ T5266] bridge0: port 1(bridge_slave_0) entered forwarding state [ 294.530455][ T5245] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.533324][ T5245] bridge0: port 2(bridge_slave_1) entered forwarding state [ 294.690450][ C2] hpet: Lost 1 RTC interrupts [ 294.720917][ T39] audit: type=1326 audit(1720905142.761:3781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9747 comm="syz.3.1583" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73b0579 code=0x7ffc0000 [ 294.739734][ T39] audit: type=1326 audit(1720905142.761:3782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9747 comm="syz.3.1583" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73b0579 code=0x7ffc0000 [ 294.763692][ T39] audit: type=1326 audit(1720905142.761:3783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9747 comm="syz.3.1583" exe="/syz-executor" sig=0 arch=40000003 syscall=353 compat=1 ip=0xf73b0579 code=0x7ffc0000 [ 294.806376][ T39] audit: type=1326 audit(1720905142.761:3784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9747 comm="syz.3.1583" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73b0579 code=0x7ffc0000 [ 294.823159][ T39] audit: type=1326 audit(1720905142.761:3785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9747 comm="syz.3.1583" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73b0579 code=0x7ffc0000 [ 294.837186][ T39] audit: type=1326 audit(1720905142.761:3786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9747 comm="syz.3.1583" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf73b0579 code=0x7ffc0000 [ 294.846954][ T39] audit: type=1326 audit(1720905142.811:3787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9747 comm="syz.3.1583" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73b0579 code=0x7ffc0000 [ 294.856000][ T39] audit: type=1326 audit(1720905142.811:3788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9747 comm="syz.3.1583" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf73b0579 code=0x7ffc0000 [ 294.872210][ T39] audit: type=1326 audit(1720905142.811:3789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9747 comm="syz.3.1583" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73b0579 code=0x7ffc0000 [ 294.912252][ T9573] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 294.919283][ T9573] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 295.054275][ T5266] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 295.114081][ T13] hsr_slave_0: left promiscuous mode [ 295.132148][ T13] hsr_slave_1: left promiscuous mode [ 295.135613][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 295.139696][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 295.145213][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 295.152240][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 295.229027][ T5250] IPVS: starting estimator thread 0... [ 295.231619][ T13] veth1_macvtap: left promiscuous mode [ 295.234548][ T13] veth0_macvtap: left promiscuous mode [ 295.238244][ T13] veth1_vlan: left promiscuous mode [ 295.240765][ T13] veth0_vlan: left promiscuous mode [ 295.250112][ T9765] IPVS: wrr: SCTP 127.0.0.1:0 - no destination available [ 295.266822][ T5206] Bluetooth: hci2: command tx timeout [ 295.270018][ T5266] usb 8-1: Using ep0 maxpacket: 16 [ 295.277970][ T5266] usb 8-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 295.281166][ T5266] usb 8-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 295.285970][ T5266] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 295.293425][ T5266] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 295.300368][ T5266] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.303924][ T5266] usb 8-1: Product: syz [ 295.305563][ T5266] usb 8-1: Manufacturer: syz [ 295.307480][ T5266] usb 8-1: SerialNumber: syz [ 295.334596][ T9766] IPVS: using max 37 ests per chain, 88800 per kthread [ 295.901152][ T5266] usb 8-1: 0:2 : does not exist [ 295.935856][ T5266] usb 8-1: USB disconnect, device number 8 [ 296.177038][ T9648] udevd[9648]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 297.078429][ T13] team0 (unregistering): Port device team_slave_1 removed [ 297.222445][ T13] team0 (unregistering): Port device team_slave_0 removed [ 299.664730][ T9573] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 299.806733][ T9573] veth0_vlan: entered promiscuous mode [ 299.832734][ T9573] veth1_vlan: entered promiscuous mode [ 299.916477][ T9573] veth0_macvtap: entered promiscuous mode [ 299.924509][ T9573] veth1_macvtap: entered promiscuous mode [ 299.926529][ C2] hpet_rtc_timer_reinit: 72 callbacks suppressed [ 299.926543][ C2] hpet: Lost 1 RTC interrupts [ 299.972821][ T9573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 299.997912][ T9573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.001665][ T9573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.002234][ C2] hpet: Lost 1 RTC interrupts [ 300.005604][ T9573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.041548][ T9573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.046570][ T9573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.050856][ T9573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.055838][ T9573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.060749][ T9573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.065864][ T9573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.074126][ T9573] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.087469][ T9573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.108897][ T9573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.113223][ T9573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.124965][ T9573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.129581][ T9573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.133922][ T9573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.138975][ T9573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.143944][ T9573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.148082][ T9573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.163311][ T9573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.170140][ T9573] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 300.180530][ T9573] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.184620][ T9573] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.189544][ T9573] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.193223][ T9573] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.289381][ T9659] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 300.329265][ T9659] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 300.371856][ T9659] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 300.389692][ T9659] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 300.507030][ T1084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.510847][ T1084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.580490][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.586900][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.646405][ T9659] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.679147][ T9659] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.688053][ T5202] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.691212][ T5202] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.708994][ T5202] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.712216][ T5202] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.747015][ T9659] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 300.796770][ T5245] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 300.905849][ T9659] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.981353][ T5245] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 300.986761][ T5245] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 300.991667][ T5245] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 301.002643][ T5245] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 301.005935][ T9659] veth0_vlan: entered promiscuous mode [ 301.006869][ T5245] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.013456][ T5245] usb 8-1: config 0 descriptor?? [ 301.017484][ T9811] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 301.023814][ T9659] veth1_vlan: entered promiscuous mode [ 301.059492][ T9659] veth0_macvtap: entered promiscuous mode [ 301.067625][ T9659] veth1_macvtap: entered promiscuous mode [ 301.091626][ T9659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.096371][ T9659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.100891][ T9659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.105323][ T9659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.111550][ T9659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.115665][ T9659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.119873][ T9659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.124400][ T9659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.128338][ T9659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.132274][ T9659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.136727][ T9659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.141029][ T9659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.148073][ T9659] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 301.161102][ T9659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.165811][ T9659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.171797][ T9659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.176073][ T9659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.184250][ T9659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.189022][ T9659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.193363][ T9659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.198799][ T9659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.203074][ T9659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.207801][ T9659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.211733][ T9659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.215777][ T9659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.224988][ T9659] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 301.234678][ T9659] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.238657][ T9659] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.242595][ T9659] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.252845][ T9659] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.417851][ T1084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.421070][ T1084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.471510][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.476532][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.574524][ T5245] plantronics 0003:047F:FFFF.0007: unknown main item tag 0xd [ 301.590214][ T5245] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 301.601053][ T5245] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 301.850225][ C2] hpet: Lost 1 RTC interrupts [ 301.867437][ T55] usb 8-1: USB disconnect, device number 9 [ 302.340869][ T9842] usb usb9: usbfs: process 9842 (syz.2.1607) did not claim interface 1 before use [ 302.949250][ T9869] usb usb9: usbfs: process 9869 (syz.1.1618) did not claim interface 1 before use [ 303.702888][ T39] audit: type=1326 audit(1720905151.741:3859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9895 comm="syz.3.1627" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73b0579 code=0x7ffc0000 [ 303.725315][ T39] audit: type=1326 audit(1720905151.761:3860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9895 comm="syz.3.1627" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73b0579 code=0x7ffc0000 [ 303.766102][ T39] audit: type=1326 audit(1720905151.771:3861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9895 comm="syz.3.1627" exe="/syz-executor" sig=0 arch=40000003 syscall=353 compat=1 ip=0xf73b0579 code=0x7ffc0000 [ 303.777614][ T39] audit: type=1326 audit(1720905151.771:3862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9895 comm="syz.3.1627" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73b0579 code=0x7ffc0000 [ 303.793292][ T39] audit: type=1326 audit(1720905151.771:3863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9895 comm="syz.3.1627" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73b0579 code=0x7ffc0000 [ 303.802910][ T39] audit: type=1326 audit(1720905151.771:3864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9895 comm="syz.3.1627" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf73b0579 code=0x7ffc0000 [ 303.816896][ T39] audit: type=1326 audit(1720905151.841:3865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9895 comm="syz.3.1627" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73b0579 code=0x7ffc0000 [ 303.847690][ T9901] syzkaller1: entered promiscuous mode [ 303.850270][ T9901] syzkaller1: entered allmulticast mode [ 304.087322][ T5246] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 304.269233][ T5246] usb 8-1: Using ep0 maxpacket: 16 [ 304.274683][ T5246] usb 8-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 304.279151][ T5246] usb 8-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 304.285095][ T5246] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 304.299302][ T5246] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 304.303406][ T5246] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.309031][ T5246] usb 8-1: Product: syz [ 304.311006][ T5246] usb 8-1: Manufacturer: syz [ 304.313067][ T5246] usb 8-1: SerialNumber: syz [ 304.817718][ T9918] ptrace attach of "/syz-executor exec"[6270] was attempted by "/syz-executor exec"[9918] [ 304.952200][ T39] kauditd_printk_skb: 66 callbacks suppressed [ 304.952215][ T39] audit: type=1326 audit(1720905152.991:3931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9895 comm="syz.3.1627" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73b0579 code=0x7ffc0000 [ 304.993543][ T39] audit: type=1326 audit(1720905153.011:3932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9895 comm="syz.3.1627" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73b0579 code=0x7ffc0000 [ 305.063035][ T9928] vxcan1: tx drop: invalid sa for name 0x0000000000000003 [ 305.101859][ T5246] usb 8-1: 0:2 : does not exist [ 305.202551][ T5246] usb 8-1: USB disconnect, device number 10 [ 305.315882][ T9933] usb usb9: usbfs: process 9933 (syz.1.1640) did not claim interface 1 before use [ 305.428089][ T9939] unknown channel width for channel at 909000KHz? [ 305.467278][ T9786] udevd[9786]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 306.056283][ T30] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 306.197531][ T9960] unknown channel width for channel at 909000KHz? [ 306.259663][ T30] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 306.275461][ T30] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 306.280637][ T30] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 306.285009][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.292182][ T9952] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 306.633481][ T5214] usb 6-1: USB disconnect, device number 13 [ 306.783099][ T9972] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1655'. [ 307.062666][ T39] audit: type=1326 audit(1720905155.101:3933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9977 comm="syz.3.1659" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73b0579 code=0x7ffc0000 [ 307.086972][ T39] audit: type=1326 audit(1720905155.121:3934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9977 comm="syz.3.1659" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73b0579 code=0x7ffc0000 [ 307.095145][ T39] audit: type=1326 audit(1720905155.131:3935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9977 comm="syz.3.1659" exe="/syz-executor" sig=0 arch=40000003 syscall=353 compat=1 ip=0xf73b0579 code=0x7ffc0000 [ 307.115216][ T39] audit: type=1326 audit(1720905155.131:3936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9977 comm="syz.3.1659" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73b0579 code=0x7ffc0000 [ 307.136289][ T39] audit: type=1326 audit(1720905155.131:3937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9977 comm="syz.3.1659" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73b0579 code=0x7ffc0000 [ 307.146061][ T39] audit: type=1326 audit(1720905155.181:3938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9977 comm="syz.3.1659" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf73b0579 code=0x7ffc0000 [ 307.206964][ T39] audit: type=1326 audit(1720905155.231:3939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9977 comm="syz.3.1659" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73b0579 code=0x7ffc0000 [ 307.225152][ T39] audit: type=1326 audit(1720905155.231:3940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9977 comm="syz.3.1659" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73b0579 code=0x7ffc0000 [ 307.288398][ T9984] binder: 9983:9984 ioctl 4018620d 0 returned -22 [ 307.536408][ T55] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 307.588223][ T9984] binder: 9983:9984 ioctl c0306201 20000380 returned -11 [ 307.748540][ T55] usb 8-1: Using ep0 maxpacket: 16 [ 307.760237][ T55] usb 8-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 307.764940][ T55] usb 8-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 307.809474][ T55] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 307.825489][ T55] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 307.836302][ T55] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.841673][ T55] usb 8-1: Product: syz [ 307.843852][ T55] usb 8-1: Manufacturer: syz [ 307.846156][ T55] usb 8-1: SerialNumber: syz [ 307.872906][ T9997] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1666'. [ 308.857116][ T55] usb 8-1: 0:2 : does not exist [ 308.862477][T10006] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 308.894873][ T55] usb 8-1: USB disconnect, device number 11 [ 309.063611][ T5206] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 309.108080][ T9786] udevd[9786]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 309.552212][T10014] unknown channel width for channel at 909000KHz? [ 309.699088][T10016] binder: 10015:10016 ioctl 4018620d 0 returned -22 [ 310.111917][ T5206] Bluetooth: hci2: unexpected event 0x09 length: 10 > 3 [ 310.112033][ T5206] Bluetooth: hci2: SCO packet for unknown connection handle 201 [ 310.115366][ T5206] Bluetooth: hci2: SCO packet for unknown connection handle 1039 [ 310.207334][T10012] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1671'. [ 310.478298][T10016] binder: 10015:10016 ioctl c0306201 20000380 returned -11 [ 310.895452][ C2] hpet_rtc_timer_reinit: 72 callbacks suppressed [ 310.895468][ C2] hpet: Lost 1 RTC interrupts [ 310.967740][T10028] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 311.145764][ T5206] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 311.658018][ C2] hpet: Lost 1 RTC interrupts [ 311.912798][T10053] binder: 10052:10053 ioctl 4018620d 0 returned -22 [ 313.073640][T10065] ptrace attach of "/syz-executor exec"[9659] was attempted by "/syz-executor exec"[10065] [ 313.398228][T10071] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1696'. [ 314.016465][ T966] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 314.137641][T10091] ptrace attach of "/syz-executor exec"[9426] was attempted by "/syz-executor exec"[10091] [ 314.221284][ T966] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 314.241152][ T966] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 314.245557][ T966] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 314.266765][ T966] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.289139][T10076] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 314.306479][ T5206] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 314.315477][ T5206] Bluetooth: hci2: Injecting HCI hardware error event [ 314.321205][ T5206] Bluetooth: hci2: hardware error 0x00 [ 314.335761][T10095] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1706'. [ 314.593358][ T966] usb 5-1: USB disconnect, device number 9 [ 315.326719][T10104] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 315.785564][T10119] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 315.790173][T10119] overlayfs: failed to set xattr on upper [ 315.793452][T10119] overlayfs: ...falling back to redirect_dir=nofollow. [ 315.797369][T10119] overlayfs: ...falling back to index=off. [ 315.800029][T10119] overlayfs: ...falling back to uuid=null. [ 316.302291][T10130] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 316.406342][ T5206] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 316.815418][T10141] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 316.821033][T10141] overlayfs: failed to set xattr on upper [ 316.829003][T10141] overlayfs: ...falling back to redirect_dir=nofollow. [ 316.836488][T10141] overlayfs: ...falling back to index=off. [ 316.842140][T10141] overlayfs: ...falling back to uuid=null. [ 317.359636][T10161] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 317.362703][T10161] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 317.376405][T10161] vhci_hcd vhci_hcd.0: Device attached [ 317.576581][ T5214] vhci_hcd: vhci_device speed not set [ 317.647340][ T5214] usb 13-1: new full-speed USB device number 5 using vhci_hcd [ 317.663775][T10168] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1736'. [ 318.198220][T10162] vhci_hcd: connection reset by peer [ 318.201625][ T63] vhci_hcd: stop threads [ 318.203343][ T63] vhci_hcd: release socket [ 318.205459][ T63] vhci_hcd: disconnect device [ 318.481479][ T39] audit: type=1326 audit(1720905166.521:4012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10178 comm="syz.2.1741" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7494579 code=0x7ffc0000 [ 318.535801][ T39] audit: type=1326 audit(1720905166.521:4013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10178 comm="syz.2.1741" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7494579 code=0x7ffc0000 [ 318.545168][ T39] audit: type=1326 audit(1720905166.521:4014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10178 comm="syz.2.1741" exe="/syz-executor" sig=0 arch=40000003 syscall=353 compat=1 ip=0xf7494579 code=0x7ffc0000 [ 318.555672][ T39] audit: type=1326 audit(1720905166.521:4015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10178 comm="syz.2.1741" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7494579 code=0x7ffc0000 [ 318.564955][ T39] audit: type=1326 audit(1720905166.521:4016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10178 comm="syz.2.1741" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7494579 code=0x7ffc0000 [ 318.574755][ T39] audit: type=1326 audit(1720905166.531:4017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10178 comm="syz.2.1741" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf7494579 code=0x7ffc0000 [ 318.584226][ T39] audit: type=1326 audit(1720905166.571:4018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10178 comm="syz.2.1741" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7494579 code=0x7ffc0000 [ 318.596149][ T39] audit: type=1326 audit(1720905166.571:4019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10178 comm="syz.2.1741" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7494579 code=0x7ffc0000 [ 318.605479][ T39] audit: type=1326 audit(1720905166.601:4020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10178 comm="syz.2.1741" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7494579 code=0x7ffc0000 [ 318.615246][ T39] audit: type=1326 audit(1720905166.611:4021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10178 comm="syz.2.1741" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7494579 code=0x7ffc0000 [ 318.856499][ T966] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 319.052597][ T966] usb 7-1: Using ep0 maxpacket: 16 [ 319.057584][ T966] usb 7-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 319.061502][ T966] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 319.096280][ T966] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 319.125583][ T966] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 319.131822][ T966] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.135384][ T966] usb 7-1: Product: syz [ 319.137417][ T966] usb 7-1: Manufacturer: syz [ 319.142305][ T966] usb 7-1: SerialNumber: syz [ 319.326002][ T5206] Bluetooth: hci4: ACL packet for unknown connection handle 0 [ 319.959421][T10200] netlink: 'syz.0.1747': attribute type 3 has an invalid length. [ 319.963649][T10200] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1747'. [ 320.036496][ T966] usb 7-1: 0:2 : does not exist [ 320.058554][ T966] usb 7-1: USB disconnect, device number 11 [ 320.300113][ T9786] udevd[9786]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 320.786804][ T5206] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 320.793301][ T5206] Bluetooth: hci1: Injecting HCI hardware error event [ 320.801081][ T5211] Bluetooth: hci1: hardware error 0x00 [ 320.806791][T10230] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 320.810905][T10230] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 320.815696][T10230] vhci_hcd vhci_hcd.0: Device attached [ 321.018069][ T35] vhci_hcd: vhci_device speed not set [ 321.087627][ T35] usb 15-1: new full-speed USB device number 3 using vhci_hcd [ 321.411484][T10231] vhci_hcd: connection reset by peer [ 321.436897][ T13] vhci_hcd: stop threads [ 321.438833][ T13] vhci_hcd: release socket [ 321.455633][ T13] vhci_hcd: disconnect device [ 322.552313][ T1352] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.796791][ T5214] vhci_hcd: vhci_device speed not set [ 322.867308][ T5211] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 323.725917][T10286] kAFS: unable to lookup cell '‡øš@ïboÙ^]1 F[v‡øš@ïboÙ^]1 F[v‡øš@ïboÙ^]1 F[v‡øš@ïboÙ^]1 F[v‡øš@ïboÙ^]1 F[v‡øš@ïboÙ^]1 F[v‡øš@ïboÙ^]1 F[v‡øš@ïboÙ^]1 F[v‡øš@ïboÙ^]1 F[v‡øš@ïboÙ^]1 F[v‡øš@ïboÙ^]1 F[v‡øš@ïboÙ^]1 F[v‡øš@ïboÙ^]1 F[v‡øš@ïboÙ^]1 F[v‡øš@ïboÙ^]1 F[v‡øš@ïboÙ^]1 F[v‡øš@ïboÙ^]1 F[v‡øš@ïboÙ^]1 F[v‡øš@ïboÙ^]1 F[v‡øš@ïboÙ^]1 F[@ëÙo¿à§j˜ä"aŸÈ¢ù/¸†EEc°h8H3ö' [ 323.802505][T10291] dccp_close: ABORT with 1 bytes unread [ 324.092235][T10306] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 324.094671][T10306] overlayfs: failed to set xattr on upper [ 324.100530][T10306] overlayfs: ...falling back to redirect_dir=nofollow. [ 324.102942][T10306] overlayfs: ...falling back to index=off. [ 324.104917][T10306] overlayfs: ...falling back to uuid=null. [ 324.279360][ T39] kauditd_printk_skb: 70 callbacks suppressed [ 324.279374][ T39] audit: type=1326 audit(1720905172.321:4091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10313 comm="syz.3.1791" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73b0579 code=0x7ffc0000 [ 324.296468][ T39] audit: type=1326 audit(1720905172.341:4092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10313 comm="syz.3.1791" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73b0579 code=0x7ffc0000 [ 324.305794][ T39] audit: type=1326 audit(1720905172.341:4093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10313 comm="syz.3.1791" exe="/syz-executor" sig=0 arch=40000003 syscall=353 compat=1 ip=0xf73b0579 code=0x7ffc0000 [ 324.315713][ T39] audit: type=1326 audit(1720905172.341:4094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10313 comm="syz.3.1791" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73b0579 code=0x7ffc0000 [ 324.333878][ T39] audit: type=1326 audit(1720905172.341:4095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10313 comm="syz.3.1791" exe="/syz-executor" sig=0 arch=40000003 syscall=358 compat=1 ip=0xf73b0579 code=0x7ffc0000 [ 324.362439][ T39] audit: type=1326 audit(1720905172.401:4096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10313 comm="syz.3.1791" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73b0579 code=0x7ffc0000 [ 324.373515][ T39] audit: type=1326 audit(1720905172.401:4097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10313 comm="syz.3.1791" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73b0579 code=0x7ffc0000 [ 324.426528][ T39] audit: type=1326 audit(1720905172.461:4098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10313 comm="syz.3.1791" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf73b0579 code=0x7ffc0000 [ 324.456300][ T39] audit: type=1326 audit(1720905172.491:4099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10313 comm="syz.3.1791" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73b0579 code=0x7ffc0000 [ 324.475804][ T39] audit: type=1326 audit(1720905172.491:4100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10313 comm="syz.3.1791" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73b0579 code=0x7ffc0000 [ 324.721492][T10330] kAFS: unable to lookup cell '‡øš@ïboÙ^]1 F[v‡øš@ïboÙ^]1 F[v‡øš@ïboÙ^]1 F[v‡øš@ïboÙ^]1 F[v‡øš@ïboÙ^]1 F[v‡øš@ïboÙ^]1 F[v‡øš@ïboÙ^]1 F[v‡øš@ïboÙ^]1 F[v‡øš@ïboÙ^]1 F[v‡øš@ïboÙ^]1 F[v‡øš@ïboÙ^]1 F[v‡øš@ïboÙ^]1 F[v‡øš@ïboÙ^]1 F[v‡øš@ïboÙ^]1 F[v‡øš@ïboÙ^]1 F[v‡øš@ïboÙ^]1 F[v‡øš@ïboÙ^]1 F[v‡øš@ïboÙ^]1 F[v‡øš@ïboÙ^]1 F[v‡øš@ïboÙ^]1 F[@ëÙo¿à§j˜ä"aŸÈO’žÎ*ˆa'âÅ®’ÂH3ö' [ 324.774713][ T5266] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 324.956552][ T5266] usb 8-1: Using ep0 maxpacket: 16 [ 324.961559][ T5266] usb 8-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 324.965153][ T5266] usb 8-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 324.971554][ T5266] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 324.982939][ T5266] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 324.992250][T10338] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 324.993230][ T5266] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.997274][T10338] overlayfs: failed to set xattr on upper [ 325.019836][T10338] overlayfs: ...falling back to redirect_dir=nofollow. [ 325.022979][T10338] overlayfs: ...falling back to index=off. [ 325.026281][ T5266] usb 8-1: Product: syz [ 325.028312][ T5266] usb 8-1: Manufacturer: syz [ 325.031297][T10338] overlayfs: ...falling back to uuid=null. [ 325.033213][ T5266] usb 8-1: SerialNumber: syz [ 325.776082][T10356] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1807'. [ 325.867801][ T5266] usb 8-1: 0:2 : does not exist [ 325.887157][ T5266] usb 8-1: USB disconnect, device number 12 [ 325.976171][T10362] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 325.978947][T10362] overlayfs: failed to set xattr on upper [ 325.981328][T10362] overlayfs: ...falling back to redirect_dir=nofollow. [ 325.989844][T10362] overlayfs: ...falling back to index=off. [ 325.992063][T10362] overlayfs: ...falling back to uuid=null. [ 326.115727][T10374] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 326.137609][ T9786] udevd[9786]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 326.172316][T10377] kAFS: unable to lookup cell '‡øš@ïboÙ^]1 F[v‡øš@ïboÙ^]1 F[v‡øš@ïboÙ^]1 F[v‡øš@ïboÙ^]1 F[v‡øš@ïboÙ^]1 F[v‡øš@ïboÙ^]1 F[v‡øš@ïboÙ^]1 F[v‡øš@ïboÙ^]1 F[v‡øš@ïboÙ^]1 F[v‡øš@ïboÙ^]1 F[v‡øš@ïboÙ^]1 F[v‡øš@ïboÙ^]1 F[v‡øš@ïboÙ^]1 F[v‡øš@ïboÙ^]1 F[v‡øš@ïboÙ^]1 F[v‡øš@ïboÙ^]1 F[v‡øš@ïboÙ^]1 F[v‡øš@ïboÙ^]1 F[v‡øš@ïboÙ^]1 F[v‡øš@ïboÙ^]1 F[@ëÙo¿à§j˜ä"aŸÈ/l¦ÕA^Í«üd½C«H3ö' [ 326.246798][ T35] vhci_hcd: vhci_device speed not set [ 326.520825][T10395] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 326.654581][T10404] netlink: 'syz.0.1828': attribute type 21 has an invalid length. [ 326.705654][T10390] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 327.157284][ T5250] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 327.172300][T10425] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1836'. [ 327.211466][T10425] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1836'. [ 327.219136][T10425] gre1: entered promiscuous mode [ 327.221567][T10425] gre1: entered allmulticast mode [ 327.242586][T10432] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 327.336290][ T5250] usb 5-1: Using ep0 maxpacket: 16 [ 327.341980][ T5250] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 327.346043][ T5250] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 327.354267][ T5250] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 327.362981][ T5250] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 327.372554][ T5250] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.375871][ T5250] usb 5-1: Product: syz [ 327.378321][ T5250] usb 5-1: Manufacturer: syz [ 327.380142][ T5250] usb 5-1: SerialNumber: syz [ 327.740491][T10459] macvlan2: entered allmulticast mode [ 327.743924][T10459] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode [ 327.753589][T10459] mac80211_hwsim hwsim12 wlan0: entered allmulticast mode [ 327.763842][T10459] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 327.821850][T10459] bond0: entered promiscuous mode [ 327.823717][T10459] bond_slave_0: entered promiscuous mode [ 327.833728][T10459] bond_slave_1: entered promiscuous mode [ 327.836159][T10459] macvlan2: entered promiscuous mode [ 328.035914][ T5250] usb 5-1: 0:2 : does not exist [ 328.053551][ T5250] usb 5-1: USB disconnect, device number 10 [ 328.138879][T10465] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1853'. [ 328.187988][T10465] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1853'. [ 328.198287][T10465] gre1: entered promiscuous mode [ 328.200641][T10465] gre1: entered allmulticast mode [ 328.279340][ T9786] udevd[9786]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 328.432138][T10473] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 328.656349][ T35] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 328.840189][ T35] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 328.844964][ T35] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 328.853450][ T35] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 328.861623][ T35] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.881261][T10476] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 328.952543][T10493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1866'. [ 329.024184][T10493] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1866'. [ 329.031434][T10493] gre2: entered promiscuous mode [ 329.034962][T10493] gre2: entered allmulticast mode [ 329.200880][ T35] usb 6-1: USB disconnect, device number 14 [ 329.359506][T10512] syz.3.1874[10512] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 329.359660][T10512] syz.3.1874[10512] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 329.380892][T10512] syz.3.1874[10512] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 329.385898][T10512] syz.3.1874[10512] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 329.480067][ T39] kauditd_printk_skb: 144 callbacks suppressed [ 329.480077][ T39] audit: type=1326 audit(1720905177.521:4243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10511 comm="syz.3.1874" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf73b0579 code=0x7ffc0000 [ 329.506969][ T39] audit: type=1326 audit(1720905177.551:4244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10511 comm="syz.3.1874" exe="/syz-executor" sig=0 arch=40000003 syscall=29 compat=1 ip=0xf73b0579 code=0x7ffc0000 [ 329.995614][T10530] netlink: 'syz.0.1880': attribute type 1 has an invalid length. [ 330.000521][T10530] netlink: 9352 bytes leftover after parsing attributes in process `syz.0.1880'. [ 330.004612][T10530] netlink: 'syz.0.1880': attribute type 1 has an invalid length. [ 330.009461][T10530] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1880'. [ 330.562567][T10554] netlink: 'syz.0.1889': attribute type 1 has an invalid length. [ 330.569053][T10554] netlink: 9352 bytes leftover after parsing attributes in process `syz.0.1889'. [ 330.573144][T10554] netlink: 'syz.0.1889': attribute type 1 has an invalid length. [ 330.955377][T10568] input: syz1 as /devices/virtual/input/input29 [ 331.616297][ T5266] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 331.704655][T10580] __nla_validate_parse: 1 callbacks suppressed [ 331.704671][T10580] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1897'. [ 331.852163][T10584] netlink: 'syz.0.1898': attribute type 1 has an invalid length. [ 331.861935][T10584] netlink: 9352 bytes leftover after parsing attributes in process `syz.0.1898'. [ 331.864928][ T5266] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 331.874135][T10584] netlink: 'syz.0.1898': attribute type 1 has an invalid length. [ 331.874626][ T5266] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.886289][ T5266] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 331.888958][T10584] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1898'. [ 331.895440][ T5266] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 331.937428][ T5266] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 331.942088][ T5266] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 331.945513][ T5266] usb 6-1: Manufacturer: syz [ 331.969536][ T5266] usb 6-1: config 0 descriptor?? [ 332.479938][ T5266] appleir 0003:05AC:8243.0008: unknown main item tag 0x0 [ 332.483685][ T5266] appleir 0003:05AC:8243.0008: No inputs registered, leaving [ 332.535894][ T5266] appleir 0003:05AC:8243.0008: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 334.574017][ T5266] usb 6-1: USB disconnect, device number 15 [ 335.533792][ C2] hpet: Lost 1 RTC interrupts [ 336.629839][T10671] xt_CT: You must specify a L4 protocol and not use inversions on it [ 338.253056][T10691] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1937'. [ 338.515750][T10695] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 339.429050][T10706] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1942'. [ 339.435440][T10706] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1942'. [ 339.605269][T10711] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_bridge, syncid = 0, id = 0 [ 339.805806][T10715] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1946'. [ 340.187333][T10727] input: syz1 as /devices/virtual/input/input30 [ 340.327014][T10729] syzkaller1: entered promiscuous mode [ 340.329738][T10729] syzkaller1: entered allmulticast mode [ 340.347997][T10729] PF_CAN: dropped non conform CAN XL skbuff: dev type 65534, len 40 [ 340.746338][T10736] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_bridge, syncid = 0, id = 0 [ 341.400586][T10754] xt_CT: You must specify a L4 protocol and not use inversions on it [ 341.914498][T10767] input: syz1 as /devices/virtual/input/input31 [ 343.490256][ C2] hpet: Lost 1 RTC interrupts [ 344.221757][ C2] hpet: Lost 1 RTC interrupts [ 344.337782][ C2] hpet: Lost 1 RTC interrupts [ 344.505607][ C2] hpet: Lost 1 RTC interrupts [ 345.643276][ T5206] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 345.653666][ T5206] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 345.666830][ T5206] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 345.693899][ T5206] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 345.697366][ T5206] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 345.700392][ T5206] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 345.707122][ C2] hpet: Lost 1 RTC interrupts [ 345.913795][T10787] chnl_net:caif_netlink_parms(): no params data found [ 346.164816][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.504968][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.609404][T10787] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.617612][T10787] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.621503][T10787] bridge_slave_0: entered allmulticast mode [ 346.639324][T10787] bridge_slave_0: entered promiscuous mode [ 346.702347][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.752406][T10787] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.756886][T10787] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.760788][T10787] bridge_slave_1: entered allmulticast mode [ 346.765255][T10787] bridge_slave_1: entered promiscuous mode [ 346.996409][ T13] batman_adv: batadv1: Interface deactivated: netdevsim0 [ 347.077841][ T13] batman_adv: batadv1: Removing interface: netdevsim0 [ 347.097131][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.190511][T10787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 347.214661][ T5211] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 347.228885][ T5211] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 347.239373][ T5211] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 347.270772][ T5211] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 347.291497][ T5211] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 347.295122][ T5211] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 347.326156][T10787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 347.559065][T10787] team0: Port device team_slave_0 added [ 347.629589][T10787] team0: Port device team_slave_1 added [ 347.675145][T10828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 347.756627][ T5206] Bluetooth: hci0: command tx timeout [ 347.794714][T10787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.803909][T10787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.824639][T10787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.832217][T10787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.835390][T10787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.854752][T10787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 348.017884][T10787] hsr_slave_0: entered promiscuous mode [ 348.021665][T10787] hsr_slave_1: entered promiscuous mode [ 348.025139][T10787] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 348.038238][T10787] Cannot create hsr debugfs directory [ 348.053142][ T13] bridge_slave_1: left allmulticast mode [ 348.055711][ T13] bridge_slave_1: left promiscuous mode [ 348.056474][ T5266] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 348.060547][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.093187][ T13] bridge_slave_0: left allmulticast mode [ 348.095759][ T13] bridge_slave_0: left promiscuous mode [ 348.100187][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.242127][ T5266] usb 8-1: Using ep0 maxpacket: 32 [ 348.263351][ T5266] usb 8-1: config 9 has no interfaces? [ 348.267819][ T5266] usb 8-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 348.273668][ T5266] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.580674][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 348.584795][ T13] bond_slave_0: left promiscuous mode [ 348.597190][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 348.601835][ T13] bond_slave_1: left promiscuous mode [ 348.612716][ T13] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 348.618391][ T13] macvlan2: left promiscuous mode [ 348.624094][ T13] mac80211_hwsim hwsim12 wlan0: left allmulticast mode [ 348.629715][ T13] mac80211_hwsim hwsim12 wlan0: left promiscuous mode [ 348.634794][ T13] bond0 (unregistering): Released all slaves [ 348.801255][ T13] tipc: Left network mode [ 348.859971][ T5266] usb 8-1: string descriptor 0 read error: -71 [ 348.886808][ T5266] usb 8-1: USB disconnect, device number 13 [ 349.272208][T10820] chnl_net:caif_netlink_parms(): no params data found [ 349.346706][ T5206] Bluetooth: hci1: command tx timeout [ 349.566271][ T13] hsr_slave_0: left promiscuous mode [ 349.588989][ T13] hsr_slave_1: left promiscuous mode [ 349.593871][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 349.607282][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 349.615589][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 349.619611][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 349.719909][ T13] veth1_macvtap: left promiscuous mode [ 349.722527][ T13] veth0_macvtap: left promiscuous mode [ 349.724989][ T13] veth1_vlan: left promiscuous mode [ 349.746822][ T13] veth0_vlan: left promiscuous mode [ 349.836657][ T5206] Bluetooth: hci0: command tx timeout [ 351.227379][ T5245] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 351.408425][ T5245] usb 8-1: Using ep0 maxpacket: 8 [ 351.428851][ T5245] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 351.433114][ T5245] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 351.436354][ T5206] Bluetooth: hci1: command tx timeout [ 351.444046][ T5245] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 351.449480][ T5245] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 351.455042][ T5245] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 351.465605][ T5245] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.575233][ T13] team0 (unregistering): Port device team_slave_1 removed [ 351.723900][ T5245] usb 8-1: GET_CAPABILITIES returned 0 [ 351.732401][ T5245] usbtmc 8-1:16.0: can't read capabilities [ 351.841029][ T13] team0 (unregistering): Port device team_slave_0 removed [ 351.916437][ T5206] Bluetooth: hci0: command tx timeout [ 352.003811][ T5245] usb 8-1: USB disconnect, device number 14 [ 352.833540][T10867] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1992'. [ 353.445652][ C2] hpet: Lost 1 RTC interrupts [ 353.516354][ T5206] Bluetooth: hci1: command tx timeout [ 353.986543][ T5206] Bluetooth: hci0: command tx timeout [ 354.050541][T10820] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.053924][T10820] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.057347][T10820] bridge_slave_0: entered allmulticast mode [ 354.060071][T10820] bridge_slave_0: entered promiscuous mode [ 354.067349][T10820] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.077443][T10820] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.081998][T10820] bridge_slave_1: entered allmulticast mode [ 354.096286][T10820] bridge_slave_1: entered promiscuous mode [ 354.420346][T10820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.439778][T10820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.563101][T10820] team0: Port device team_slave_0 added [ 354.575155][T10820] team0: Port device team_slave_1 added [ 354.670976][T10820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 354.673959][T10820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.686550][T10820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.692385][T10820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.694757][T10820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.719133][T10820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.768406][ T13] IPVS: stop unused estimator thread 0... [ 354.929797][T10820] hsr_slave_0: entered promiscuous mode [ 354.943546][T10820] hsr_slave_1: entered promiscuous mode [ 355.020884][T10787] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 355.206979][T10787] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 355.216046][T10787] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 355.341158][T10787] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 355.428878][T10914] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1999'. [ 355.571910][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.586483][ T5206] Bluetooth: hci1: command tx timeout [ 355.730115][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.856367][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 355.909949][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.040128][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.048056][ T9] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 356.055118][ T9] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 356.072880][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 356.083862][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 356.091215][ T9] usb 5-1: string descriptor 0 read error: -22 [ 356.106684][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 356.110688][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.122194][ T9] usb 5-1: 0:2 : does not exist [ 356.301266][T10787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.368820][ T9] usb 5-1: USB disconnect, device number 11 [ 356.539906][ T13] bridge_slave_1: left allmulticast mode [ 356.544700][ T13] bridge_slave_1: left promiscuous mode [ 356.549611][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.559651][ T13] bridge_slave_0: left allmulticast mode [ 356.562296][ T13] bridge_slave_0: left promiscuous mode [ 356.567050][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.283885][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 357.316701][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 357.336135][ T13] bond0 (unregistering): Released all slaves [ 357.412371][T10787] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.530245][T10946] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 357.576250][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.580221][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.614549][T10959] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2010'. [ 357.690404][ T966] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.693773][ T966] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.825316][T10962] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 358.449166][T10974] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 358.456931][ T13] hsr_slave_0: left promiscuous mode [ 358.460244][ T13] hsr_slave_1: left promiscuous mode [ 358.463864][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 358.476515][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 358.483623][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 358.487593][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 358.620200][ T13] veth1_macvtap: left promiscuous mode [ 358.628304][ T13] veth0_macvtap: left promiscuous mode [ 358.633985][ T13] veth1_vlan: left promiscuous mode [ 358.636503][ T13] veth0_vlan: left promiscuous mode [ 358.645237][T10982] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 358.652288][T10982] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 359.221564][ C2] hpet: Lost 1 RTC interrupts [ 360.497257][ T13] team0 (unregistering): Port device team_slave_1 removed [ 360.737479][ T13] team0 (unregistering): Port device team_slave_0 removed [ 362.340397][T10820] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 362.383781][T10820] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 362.407147][T10787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 362.412769][T10820] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 362.422031][T10820] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 362.594099][T10787] veth0_vlan: entered promiscuous mode [ 362.604054][T10787] veth1_vlan: entered promiscuous mode [ 362.689253][T10820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.708572][T10787] veth0_macvtap: entered promiscuous mode [ 362.715807][T10787] veth1_macvtap: entered promiscuous mode [ 362.751247][T10820] 8021q: adding VLAN 0 to HW filter on device team0 [ 362.770984][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.773897][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.820190][T10787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 362.841330][ T5211] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 362.842765][T10787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.848618][ T5211] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 362.849831][T10787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 362.855627][ T5211] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 362.862374][T10787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.864200][ T5211] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 362.872894][T10787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 362.877047][T10787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.877661][ T5211] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 362.884448][T10787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 362.884766][ T5211] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 362.893816][T10787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.901859][T10787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 362.910161][T10787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 362.928251][T10787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 362.958416][T10997] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 363.056737][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.092714][ T5250] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.095394][ T5250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.142858][T11001] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 363.164122][T11001] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 363.182425][T10787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 363.197138][T10787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.206582][T10787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 363.211010][T10787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.214788][T10787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 363.226828][T10787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.230684][T10787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 363.234851][T10787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.239295][T10787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 363.243713][T10787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.255087][T10787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 363.261988][T10787] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.266630][T10787] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.276601][T10787] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.281375][T10787] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.353033][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.480888][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.595877][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.044121][ T5211] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 364.052279][ T5211] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 364.059423][ T5211] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 364.064550][ T5211] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 364.069615][ T5211] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 364.073815][ T5211] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 364.080495][ T13] bridge_slave_1: left allmulticast mode [ 364.083024][ T13] bridge_slave_1: left promiscuous mode [ 364.086161][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.109337][ T13] bridge_slave_0: left allmulticast mode [ 364.111760][ T13] bridge_slave_0: left promiscuous mode [ 364.114245][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.485282][ C2] hpet: Lost 1 RTC interrupts [ 364.666985][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 364.685600][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 364.709249][ T13] bond0 (unregistering): Released all slaves [ 364.726948][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.730278][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.858064][T10994] chnl_net:caif_netlink_parms(): no params data found [ 364.873125][T10820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 364.936972][ T13] IPVS: stopping master sync thread 10736 ... [ 364.947384][ T5206] Bluetooth: hci4: command tx timeout [ 364.955284][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.960974][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.514101][ T13] hsr_slave_0: left promiscuous mode [ 365.523097][ T13] hsr_slave_1: left promiscuous mode [ 365.530484][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 365.533853][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 365.540622][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 365.543969][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 365.624208][ T13] veth1_macvtap: left promiscuous mode [ 365.626791][ T13] veth0_macvtap: left promiscuous mode [ 365.629239][ T13] veth1_vlan: left promiscuous mode [ 365.632312][ T13] veth0_vlan: left promiscuous mode [ 366.156623][ T5206] Bluetooth: hci2: command tx timeout [ 367.037790][ T5206] Bluetooth: hci4: command tx timeout [ 367.066593][ T39] audit: type=1804 audit(1720905215.101:4245): pid=11043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2038" name="/" dev="pidfs" ino=11342 res=1 errno=0 [ 367.067296][ T13] team0 (unregistering): Port device team_slave_1 removed [ 367.194486][ T13] team0 (unregistering): Port device team_slave_0 removed [ 367.615469][T11058] syz.1.2044[11058] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 367.615554][T11058] syz.1.2044[11058] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 368.236416][ T5206] Bluetooth: hci2: command tx timeout [ 368.450534][T10994] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.453573][T10994] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.457316][T10994] bridge_slave_0: entered allmulticast mode [ 368.461497][T10994] bridge_slave_0: entered promiscuous mode [ 368.481924][T10820] veth0_vlan: entered promiscuous mode [ 368.493646][T10994] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.515349][T10994] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.529363][T10994] bridge_slave_1: entered allmulticast mode [ 368.533561][T10994] bridge_slave_1: entered promiscuous mode [ 368.695510][T10820] veth1_vlan: entered promiscuous mode [ 368.710420][T10994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 368.737952][T10994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.839938][T10994] team0: Port device team_slave_0 added [ 368.915608][T10994] team0: Port device team_slave_1 added [ 369.030657][T10994] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 369.033414][T10994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.046148][T10994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 369.052565][T10994] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 369.055469][T10994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 369.067293][T10994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 369.102182][T10820] veth0_macvtap: entered promiscuous mode [ 369.116768][ T5206] Bluetooth: hci4: command tx timeout [ 369.159590][T10820] veth1_macvtap: entered promiscuous mode [ 369.221958][T11010] chnl_net:caif_netlink_parms(): no params data found [ 369.275841][T10994] hsr_slave_0: entered promiscuous mode [ 369.280566][T10994] hsr_slave_1: entered promiscuous mode [ 369.283820][T10994] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 369.287224][T10994] Cannot create hsr debugfs directory [ 369.534155][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.577671][T10820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.582355][T10820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.599467][T10820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.604165][T10820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.611542][T10820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.616120][T10820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.630809][T10820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.635677][T10820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.639797][T10820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.644563][T10820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.657343][T10820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 369.794954][T10820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.801140][T10820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.805564][T10820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.810777][T10820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.815108][T10820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.820181][T10820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.824276][T10820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.828891][T10820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.833193][T10820] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.837823][T10820] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.843959][T10820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 369.886614][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.926601][T11010] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.929665][T11010] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.932615][T11010] bridge_slave_0: entered allmulticast mode [ 369.976552][T11010] bridge_slave_0: entered promiscuous mode [ 370.008638][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.046940][T11010] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.049727][T11010] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.052768][T11010] bridge_slave_1: entered allmulticast mode [ 370.079220][T11010] bridge_slave_1: entered promiscuous mode [ 370.123163][T11104] syz.1.2051[11104] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 370.123310][T11104] syz.1.2051[11104] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 370.176755][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.255772][T10820] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.261629][T10820] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.266654][T10820] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.270513][T10820] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 370.316355][ T5206] Bluetooth: hci2: command tx timeout [ 370.317222][T11010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.349371][T11010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.534858][T11010] team0: Port device team_slave_0 added [ 370.557415][T11010] team0: Port device team_slave_1 added [ 370.719973][T11010] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.727485][T11010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.763625][T11010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.856096][T11010] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.872716][T11010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.908222][T11010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.186363][ T5206] Bluetooth: hci4: command tx timeout [ 371.305347][T11010] hsr_slave_0: entered promiscuous mode [ 371.337244][T11010] hsr_slave_1: entered promiscuous mode [ 371.340176][T11010] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 371.342875][T11010] Cannot create hsr debugfs directory [ 371.345130][ T13] bridge_slave_1: left allmulticast mode [ 371.348292][ T13] bridge_slave_1: left promiscuous mode [ 371.362493][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.386681][ T13] bridge_slave_0: left allmulticast mode [ 371.388613][ T13] bridge_slave_0: left promiscuous mode [ 371.391078][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.057001][ T39] audit: type=1326 audit(1720905220.101:4246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11126 comm="syz.1.2056" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7415579 code=0x0 [ 372.166567][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 372.188284][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 372.195325][ T13] bond0 (unregistering): Released all slaves [ 372.346561][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.349652][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.396419][ T5206] Bluetooth: hci2: command tx timeout [ 372.423810][ T13] IPVS: stopping master sync thread 10711 ... [ 372.602462][ T1084] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.605923][ T1084] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.765721][T11130] vivid-007: ================= START STATUS ================= [ 372.770161][T11130] vivid-007: Enable Output Cropping: true grabbed [ 372.775930][T11130] vivid-007: Enable Output Composing: true grabbed [ 372.785588][T11130] vivid-007: Enable Output Scaler: true grabbed [ 372.788960][T11130] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 372.799154][T11130] vivid-007: Transmit Mode: HDMI grabbed [ 372.801674][T11130] vivid-007: Display Present: true inactive [ 372.804444][T11130] vivid-007: Hotplug Present: 0x00000001 [ 372.807499][T11130] vivid-007: RxSense Present: 0x00000001 [ 372.809932][T11130] vivid-007: EDID Present: 0x00000001 [ 372.812613][T11130] vivid-007: ================== END STATUS ================== [ 372.928054][ T13] hsr_slave_0: left promiscuous mode [ 372.931708][ T13] hsr_slave_1: left promiscuous mode [ 372.934942][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 372.940788][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 372.957916][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 372.962165][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 373.028572][ T13] veth1_macvtap: left promiscuous mode [ 373.030895][ T13] veth0_macvtap: left promiscuous mode [ 373.033769][ T13] veth1_vlan: left promiscuous mode [ 373.036115][ T13] veth0_vlan: left promiscuous mode [ 373.467958][T11147] vivid-007: ================= START STATUS ================= [ 373.470872][T11147] vivid-007: Enable Output Cropping: true grabbed [ 373.473366][T11147] vivid-007: Enable Output Composing: true grabbed [ 373.477533][T11147] vivid-007: Enable Output Scaler: true grabbed [ 373.480029][T11147] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 373.482569][T11147] vivid-007: Transmit Mode: HDMI grabbed [ 373.484620][T11147] vivid-007: Display Present: true inactive [ 373.536680][T11147] vivid-007: Hotplug Present: 0x00000001 [ 373.561363][T11147] vivid-007: RxSense Present: 0x00000001 [ 373.563668][T11147] vivid-007: EDID Present: 0x00000001 [ 373.565551][T11147] vivid-007: ================== END STATUS ================== [ 373.999995][T11158] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 374.144535][ T39] audit: type=1326 audit(1720905222.181:4247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11160 comm="syz.2.2066" exe="/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf741f579 code=0x0 [ 374.916339][ T13] team0 (unregistering): Port device team_slave_1 removed [ 375.117062][ T13] team0 (unregistering): Port device team_slave_0 removed [ 376.709459][T10994] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 376.725728][T10994] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 376.805356][T10994] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 376.822356][T10994] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 377.174852][ T5206] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 377.179726][ T5206] CPU: 2 PID: 5206 Comm: kworker/u33:3 Not tainted 6.10.0-rc7-syzkaller-00256-gd0d0cd380055 #0 [ 377.184253][ T5206] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 377.189028][ T5206] Workqueue: hci0 hci_rx_work [ 377.191125][ T5206] Call Trace: [ 377.192657][ T5206] [ 377.194020][ T5206] dump_stack_lvl+0x16c/0x1f0 [ 377.196207][ T5206] sysfs_warn_dup+0x7f/0xa0 [ 377.198270][ T5206] sysfs_create_dir_ns+0x24d/0x2b0 [ 377.200571][ T5206] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 377.203300][ T5206] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 377.205739][ T5206] ? do_raw_spin_unlock+0x172/0x230 [ 377.208037][ T5206] kobject_add_internal+0x2c8/0x990 [ 377.210275][ T5206] kobject_add+0x16f/0x240 [ 377.212258][ T5206] ? __pfx_kobject_add+0x10/0x10 [ 377.214485][ T5206] ? do_raw_spin_unlock+0x172/0x230 [ 377.216829][ T5206] ? kobject_put+0xbe/0x5b0 [ 377.218865][ T5206] device_add+0x289/0x1a70 [ 377.220801][ T5206] ? __pfx_dev_set_name+0x10/0x10 [ 377.223051][ T5206] ? __pfx_device_add+0x10/0x10 [ 377.225225][ T5206] ? mgmt_send_event_skb+0x2f0/0x460 [ 377.227597][ T5206] hci_conn_add_sysfs+0x17e/0x230 [ 377.229890][ T5206] le_conn_complete_evt+0xfc7/0x1cf0 [ 377.232277][ T5206] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 377.234842][ T5206] ? trace_contention_end+0xea/0x140 [ 377.237226][ T5206] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 377.239773][ T5206] ? skb_pull_data+0x166/0x210 [ 377.241906][ T5206] hci_le_meta_evt+0x2e2/0x5d0 [ 377.244055][ T5206] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 377.246904][ T5206] hci_event_packet+0x664/0x1190 [ 377.249189][ T5206] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 377.251562][ T5206] ? __pfx_hci_event_packet+0x10/0x10 [ 377.253984][ T5206] ? mark_held_locks+0x9f/0xe0 [ 377.256147][ T5206] ? kcov_remote_start+0x3d1/0x6e0 [ 377.258392][ T5206] ? lockdep_hardirqs_on+0x7c/0x110 [ 377.260678][ T5206] hci_rx_work+0x2c4/0x1610 [ 377.262614][ T5206] process_one_work+0x958/0x1ad0 [ 377.264565][ T5206] ? __pfx_lock_acquire+0x10/0x10 [ 377.266759][ T5206] ? __pfx_process_one_work+0x10/0x10 [ 377.269144][ T5206] ? assign_work+0x1a0/0x250 [ 377.271224][ T5206] worker_thread+0x6c8/0xf30 [ 377.273338][ T5206] ? __pfx_worker_thread+0x10/0x10 [ 377.275654][ T5206] kthread+0x2c1/0x3a0 [ 377.277486][ T5206] ? _raw_spin_unlock_irq+0x23/0x50 [ 377.279722][ T5206] ? __pfx_kthread+0x10/0x10 [ 377.281782][ T5206] ret_from_fork+0x45/0x80 [ 377.283781][ T5206] ? __pfx_kthread+0x10/0x10 [ 377.285843][ T5206] ret_from_fork_asm+0x1a/0x30 [ 377.287983][ T5206] [ 377.290077][ C2] hpet: Lost 6 RTC interrupts [ 377.301965][ T5206] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 377.307619][ T5206] Bluetooth: hci0: failed to register connection device [ 377.397973][T10994] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.444463][T10994] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.457764][ T5202] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.460327][ T5202] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.497911][ T5202] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.501073][ T5202] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.670373][T11010] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 377.708538][T11010] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 377.719932][T11010] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 377.728811][T11010] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 377.938494][T11010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.973171][T11010] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.991890][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.995063][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.046652][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.050402][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.232262][T10994] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.286148][T10994] veth0_vlan: entered promiscuous mode [ 378.293590][T10994] veth1_vlan: entered promiscuous mode [ 378.321087][T11010] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.327732][T10994] veth0_macvtap: entered promiscuous mode [ 378.331978][T10994] veth1_macvtap: entered promiscuous mode [ 378.357410][T10994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.360945][T10994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.364188][T10994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.368058][T10994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.371358][T10994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.374776][T10994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.379555][T10994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.383851][T10994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.388725][T10994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.392828][T10994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.400659][T10994] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 378.410305][T11010] veth0_vlan: entered promiscuous mode [ 378.415648][T10994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.422985][T10994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.428219][T10994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.432901][T10994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.441923][T10994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.447615][T10994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.451874][T10994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.461619][T10994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.468441][T10994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.474725][T10994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.480502][T10994] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 378.488980][T10994] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.491994][T10994] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.495486][T10994] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.500049][T10994] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.524104][T11010] veth1_vlan: entered promiscuous mode [ 378.613867][T11010] veth0_macvtap: entered promiscuous mode [ 378.628749][T11010] veth1_macvtap: entered promiscuous mode [ 378.649076][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.652327][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.673587][T11010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.678385][T11010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.682435][T11010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.688916][T11010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.692643][T11010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.697399][T11010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.701890][T11010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.707552][T11010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.711782][T11010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.716750][T11010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.721120][T11010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 378.725121][T11010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.733109][T11010] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 378.759717][T11010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.764405][T11010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.769638][T11010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.773246][T11010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.781205][T11010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.798188][T11010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.803055][T11010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.832371][T11010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.836029][T11010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.839033][T11230] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 378.840913][T11010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.846447][T11230] overlayfs: failed to set xattr on upper [ 378.847595][T11010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.848915][T11230] overlayfs: ...falling back to redirect_dir=nofollow. [ 378.848921][T11230] overlayfs: ...falling back to index=off. [ 378.853216][T11010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.856029][T11230] overlayfs: ...falling back to uuid=null. [ 378.861365][T11010] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 378.868930][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.871779][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.919647][T11010] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.925773][T11010] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.930718][T11010] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.934665][T11010] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.061766][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.065602][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.114301][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.144800][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.220399][T11192] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 379.225211][T11192] CPU: 3 PID: 11192 Comm: kworker/u33:0 Not tainted 6.10.0-rc7-syzkaller-00256-gd0d0cd380055 #0 [ 379.229236][T11192] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 379.234008][T11192] Workqueue: hci1 hci_rx_work [ 379.236591][T11192] Call Trace: [ 379.238124][T11192] [ 379.239480][T11192] dump_stack_lvl+0x16c/0x1f0 [ 379.241932][T11192] sysfs_warn_dup+0x7f/0xa0 [ 379.244366][T11192] sysfs_create_dir_ns+0x24d/0x2b0 [ 379.246899][T11192] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 379.249409][T11192] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 379.251767][T11192] ? do_raw_spin_unlock+0x172/0x230 [ 379.254195][T11192] kobject_add_internal+0x2c8/0x990 [ 379.256583][T11192] kobject_add+0x16f/0x240 [ 379.258672][T11192] ? __pfx_kobject_add+0x10/0x10 [ 379.261042][T11192] ? do_raw_spin_unlock+0x172/0x230 [ 379.263019][T11192] ? kobject_put+0xbe/0x5b0 [ 379.264556][T11192] device_add+0x289/0x1a70 [ 379.266299][T11192] ? __pfx_dev_set_name+0x10/0x10 [ 379.268141][T11192] ? __pfx_device_add+0x10/0x10 [ 379.270237][T11192] ? mgmt_send_event_skb+0x2f0/0x460 [ 379.272284][T11192] hci_conn_add_sysfs+0x17e/0x230 [ 379.274298][T11192] le_conn_complete_evt+0xfc7/0x1cf0 [ 379.276582][T11192] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 379.279756][T11192] ? trace_contention_end+0xea/0x140 [ 379.282768][T11192] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 379.285988][T11192] ? skb_pull_data+0x166/0x210 [ 379.288105][T11192] hci_le_meta_evt+0x2e2/0x5d0 [ 379.289787][T11192] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 379.292092][T11192] hci_event_packet+0x664/0x1190 [ 379.294375][T11192] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 379.297086][T11192] ? __pfx_hci_event_packet+0x10/0x10 [ 379.299609][T11192] ? mark_held_locks+0x9f/0xe0 [ 379.301927][T11192] ? kcov_remote_start+0x3d1/0x6e0 [ 379.304363][T11192] ? lockdep_hardirqs_on+0x7c/0x110 [ 379.306487][T11192] hci_rx_work+0x2c4/0x1610 [ 379.308618][T11192] process_one_work+0x958/0x1ad0 [ 379.311159][T11192] ? __pfx_lock_acquire+0x10/0x10 [ 379.313109][T11192] ? __pfx_process_one_work+0x10/0x10 [ 379.314942][T11192] ? assign_work+0x1a0/0x250 [ 379.316817][T11192] worker_thread+0x6c8/0xf30 [ 379.318784][T11192] ? __kthread_parkme+0x148/0x220 [ 379.320881][T11192] ? __pfx_worker_thread+0x10/0x10 [ 379.323063][T11192] kthread+0x2c1/0x3a0 [ 379.324763][T11192] ? _raw_spin_unlock_irq+0x23/0x50 [ 379.326845][T11192] ? __pfx_kthread+0x10/0x10 [ 379.328840][T11192] ret_from_fork+0x45/0x80 [ 379.330594][T11192] ? __pfx_kthread+0x10/0x10 [ 379.332542][T11192] ret_from_fork_asm+0x1a/0x30 [ 379.334868][T11192] [ 379.341405][T11192] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 379.348297][T11192] Bluetooth: hci1: failed to register connection device [ 380.058098][T11266] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 380.061701][T11266] overlayfs: failed to set xattr on upper [ 380.064662][T11266] overlayfs: ...falling back to redirect_dir=nofollow. [ 380.069939][T11266] overlayfs: ...falling back to index=off. [ 380.076471][T11266] overlayfs: ...falling back to uuid=null. [ 380.422525][T11192] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 380.426904][T11192] CPU: 3 PID: 11192 Comm: kworker/u33:0 Not tainted 6.10.0-rc7-syzkaller-00256-gd0d0cd380055 #0 [ 380.430973][T11192] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 380.435322][T11192] Workqueue: hci2 hci_rx_work [ 380.437138][T11192] Call Trace: [ 380.438578][T11192] [ 380.439801][T11192] dump_stack_lvl+0x16c/0x1f0 [ 380.441748][T11192] sysfs_warn_dup+0x7f/0xa0 [ 380.443624][T11192] sysfs_create_dir_ns+0x24d/0x2b0 [ 380.445725][T11192] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 380.448055][T11192] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 380.450299][T11192] ? do_raw_spin_unlock+0x172/0x230 [ 380.452230][T11192] kobject_add_internal+0x2c8/0x990 [ 380.454257][T11192] kobject_add+0x16f/0x240 [ 380.456068][T11192] ? __pfx_kobject_add+0x10/0x10 [ 380.458418][T11192] ? do_raw_spin_unlock+0x172/0x230 [ 380.460751][T11192] ? kobject_put+0xbe/0x5b0 [ 380.462791][T11192] device_add+0x289/0x1a70 [ 380.464526][T11192] ? __pfx_dev_set_name+0x10/0x10 [ 380.466632][T11192] ? __pfx_device_add+0x10/0x10 [ 380.468475][T11192] ? mgmt_send_event_skb+0x2f0/0x460 [ 380.470676][T11192] hci_conn_add_sysfs+0x17e/0x230 [ 380.472797][T11192] le_conn_complete_evt+0xfc7/0x1cf0 [ 380.474980][T11192] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 380.477217][T11192] ? trace_contention_end+0xea/0x140 [ 380.479291][T11192] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 380.481765][T11192] ? skb_pull_data+0x166/0x210 [ 380.483824][T11192] hci_le_meta_evt+0x2e2/0x5d0 [ 380.485901][T11192] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 380.488086][T11192] hci_event_packet+0x664/0x1190 [ 380.490070][T11192] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 380.492254][T11192] ? __pfx_hci_event_packet+0x10/0x10 [ 380.494470][T11192] ? mark_held_locks+0x9f/0xe0 [ 380.496484][T11192] ? kcov_remote_start+0x3d1/0x6e0 [ 380.499124][T11192] ? lockdep_hardirqs_on+0x7c/0x110 [ 380.501491][T11192] hci_rx_work+0x2c4/0x1610 [ 380.503567][T11192] process_one_work+0x958/0x1ad0 [ 380.506487][T11192] ? __pfx_lock_acquire+0x10/0x10 [ 380.508787][T11192] ? __pfx_process_one_work+0x10/0x10 [ 380.511103][T11192] ? assign_work+0x1a0/0x250 [ 380.513306][T11192] worker_thread+0x6c8/0xf30 [ 380.526879][T11192] ? __kthread_parkme+0x148/0x220 [ 380.529089][T11192] ? __pfx_worker_thread+0x10/0x10 [ 380.531282][T11192] kthread+0x2c1/0x3a0 [ 380.533074][T11192] ? _raw_spin_unlock_irq+0x23/0x50 [ 380.533553][ C2] hpet: Lost 1 RTC interrupts [ 380.535444][T11192] ? __pfx_kthread+0x10/0x10 [ 380.539785][T11192] ret_from_fork+0x45/0x80 [ 380.541574][T11192] ? __pfx_kthread+0x10/0x10 [ 380.543425][T11192] ret_from_fork_asm+0x1a/0x30 [ 380.545347][T11192] [ 380.550769][T11192] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 380.556494][T11192] Bluetooth: hci2: failed to register connection device [ 380.689768][T11288] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 380.703235][T11288] overlayfs: failed to set xattr on upper [ 380.705849][T11288] overlayfs: ...falling back to redirect_dir=nofollow. [ 380.709887][T11288] overlayfs: ...falling back to index=off. [ 380.712528][T11288] overlayfs: ...falling back to uuid=null. [ 381.271670][T11308] netlink: 'syz.3.2104': attribute type 21 has an invalid length. [ 381.275749][T11308] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2104'. [ 381.312135][T11308] netlink: 'syz.3.2104': attribute type 5 has an invalid length. [ 381.315210][T11308] netlink: 'syz.3.2104': attribute type 6 has an invalid length. [ 381.325241][T11308] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2104'. [ 381.368693][T11299] trusted_key: encrypted_key: insufficient parameters specified [ 381.386745][T11299] trusted_key: encrypted_key: insufficient parameters specified [ 382.157248][T11327] mac80211_hwsim hwsim36 wlan0: entered promiscuous mode [ 382.666669][ T3660] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 382.763155][T11354] mac80211_hwsim hwsim34 wlan0: entered promiscuous mode [ 382.866298][ T3660] usb 8-1: Using ep0 maxpacket: 8 [ 382.870443][ T3660] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 382.878813][ T3660] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 382.883176][ T3660] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.897330][ T3660] usb 8-1: config 0 descriptor?? [ 383.105895][T11365] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2131'. [ 383.138010][ T3660] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 383.415044][T11379] syz.1.2135[11379] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 383.415241][T11379] syz.1.2135[11379] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 383.436652][ T966] usb 8-1: USB disconnect, device number 15 [ 383.436777][ C3] iowarrior 8-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 383.453384][ T966] iowarrior 8-1:0.0: I/O-Warror #0 now disconnected [ 383.991014][ T1352] ieee802154 phy0 wpan0: encryption failed: -22 [ 385.019209][T11434] syz.3.2155[11434] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 385.019352][T11434] syz.3.2155[11434] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 385.237091][ C2] hpet: Lost 1 RTC interrupts [ 385.635801][T11440] trusted_key: encrypted_key: insufficient parameters specified [ 385.643214][T11440] trusted_key: encrypted_key: insufficient parameters specified [ 385.925365][T11451] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2161'. [ 386.097975][T11459] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2163'. [ 386.388888][ T5214] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 386.394081][ T5214] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 386.405115][ T5214] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 386.411151][ T5214] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 386.422571][ T5214] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 386.430584][ T5214] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 386.433955][ T5214] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 386.449172][ T5214] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 386.452750][ T5214] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 386.456002][ T5214] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 386.481345][ T5214] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 386.487565][ T5214] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 386.499156][ T5214] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 386.502350][ T5214] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 386.505504][ T5214] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 386.510417][ T5214] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 386.514065][ T5214] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 386.522404][ T5214] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 386.525481][ T5214] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 386.529364][ T5214] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 386.533945][ T5214] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 386.541175][ T5214] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 386.544197][ T5214] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 386.548866][ T5214] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 386.552183][ T5214] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 386.555337][ T5214] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 386.561766][ T5214] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 386.569428][ T5214] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 386.572269][ T5214] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 386.575855][ T5214] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 386.587124][ T5214] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 386.590585][ T5214] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 386.594152][ T5214] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 386.598428][ T5214] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 386.601872][ T5214] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 386.605302][ T5214] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 386.610514][ T5214] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 386.614184][ T5214] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 386.621115][ T5214] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 386.631502][ T5214] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 386.634928][ T5214] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 386.641941][ T5214] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 386.649644][ T5214] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 386.672682][ T5214] hid-generic 0000:0000:0000.0009: hidraw1: HID v0.00 Device [syz0] on syz0 [ 386.899514][ T39] audit: type=1326 audit(1720905234.941:4248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11480 comm="syz.1.2172" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7415579 code=0x7ffc0000 [ 386.920882][ T39] audit: type=1326 audit(1720905234.961:4249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11480 comm="syz.1.2172" exe="/syz-executor" sig=0 arch=40000003 syscall=440 compat=1 ip=0xf7415579 code=0x7ffc0000 [ 386.941162][ T39] audit: type=1326 audit(1720905234.961:4250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11480 comm="syz.1.2172" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7415579 code=0x7ffc0000 [ 386.984676][ T39] audit: type=1326 audit(1720905234.961:4251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11480 comm="syz.1.2172" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7415579 code=0x7ffc0000 [ 387.463894][ T39] audit: type=1326 audit(1720905235.501:4252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11509 comm="syz.0.2184" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 387.487457][ T39] audit: type=1326 audit(1720905235.501:4253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11509 comm="syz.0.2184" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 387.517857][T11508] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2183'. [ 387.519825][ T39] audit: type=1326 audit(1720905235.501:4254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11509 comm="syz.0.2184" exe="/syz-executor" sig=0 arch=40000003 syscall=440 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 387.538317][ T39] audit: type=1326 audit(1720905235.501:4255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11509 comm="syz.0.2184" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 387.556424][ T39] audit: type=1326 audit(1720905235.511:4256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11509 comm="syz.0.2184" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 388.177183][ C2] vkms_vblank_simulate: vblank timer overrun [ 389.010078][T11558] netdevsim netdevsim1 @: renamed from netdevsim0 (while UP) [ 390.283327][T11594] binder_alloc: binder_alloc_mmap_handler: 11593 200a0000-200a2000 already mapped failed -16 [ 391.025150][ C2] hpet: Lost 1 RTC interrupts [ 391.027586][ C2] vkms_vblank_simulate: vblank timer overrun [ 391.118131][T11620] binder_alloc: binder_alloc_mmap_handler: 11619 200a0000-200a2000 already mapped failed -16 [ 391.650382][ T39] audit: type=1326 audit(1720905239.691:4257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11630 comm="syz.0.2231" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 391.707673][ T39] audit: type=1326 audit(1720905239.691:4258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11630 comm="syz.0.2231" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 391.712965][ C2] vkms_vblank_simulate: vblank timer overrun [ 391.720521][ C2] hpet: Lost 2 RTC interrupts [ 391.791836][ T39] audit: type=1326 audit(1720905239.691:4259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11630 comm="syz.0.2231" exe="/syz-executor" sig=0 arch=40000003 syscall=440 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 391.841259][ T39] audit: type=1326 audit(1720905239.691:4260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11630 comm="syz.0.2231" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 391.908014][ T39] audit: type=1326 audit(1720905239.711:4261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11630 comm="syz.0.2231" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf741d579 code=0x7ffc0000 [ 392.301046][T11647] syz.3.2237 (11647): /proc/11646/oom_adj is deprecated, please use /proc/11646/oom_score_adj instead. [ 392.304443][T11645] macvlan0: entered allmulticast mode [ 392.349143][T11645] veth1_vlan: entered allmulticast mode [ 392.394775][T11648] macvlan0: left allmulticast mode [ 392.401431][T11648] veth1_vlan: left allmulticast mode [ 392.533027][ C2] hpet: Lost 1 RTC interrupts [ 392.801900][T11654] Cannot find add_set index 0 as target [ 394.164626][T11674] netlink: 'syz.0.2247': attribute type 10 has an invalid length. [ 394.192520][T11674] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2247'. [ 394.201265][T11674] batman_adv: batadv0: Adding interface: vlan0 [ 394.218049][T11674] batman_adv: batadv0: The MTU of interface vlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.237839][T11674] batman_adv: batadv0: Interface activated: vlan0 [ 394.749775][T11677] trusted_key: encrypted_key: insufficient parameters specified [ 394.780983][T11677] trusted_key: encrypted_key: insufficient parameters specified [ 395.307764][T11699] netlink: 'syz.1.2257': attribute type 10 has an invalid length. [ 395.369568][ T39] audit: type=1804 audit(1720905243.411:4262): pid=11698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2256" name="/newroot/51/bus/bus" dev="overlay" ino=290 res=1 errno=0 [ 395.411319][T11699] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2257'. [ 395.417624][T11698] Invalid ELF header magic: != ELF [ 395.423851][T11699] batman_adv: batadv0: Adding interface: vlan0 [ 395.426922][T11699] batman_adv: batadv0: The MTU of interface vlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 395.438430][T11699] batman_adv: batadv0: Interface activated: vlan0 [ 396.393459][T11727] trusted_key: encrypted_key: insufficient parameters specified [ 396.399328][T11727] trusted_key: encrypted_key: insufficient parameters specified [ 396.735387][ T3660] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 396.749211][ T3660] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 396.756082][ T3660] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 396.763730][ T3660] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 396.768035][ T3660] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 396.774375][ T3660] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 396.784278][ T3660] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 396.787911][ T3660] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 396.794670][ T3660] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 396.806266][ T3660] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 396.810284][ T3660] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 396.824738][ T3660] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 396.828661][ T3660] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 396.831789][ T3660] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 396.834974][ T3660] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 396.839628][ T3660] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 396.843030][ T3660] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 396.848982][ T3660] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 396.856281][ T3660] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 396.859738][ T3660] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 396.863031][ T3660] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 396.869847][ T3660] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 396.872807][ T3660] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 396.876001][ T3660] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 396.886300][ T3660] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 396.889582][ T3660] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 396.903009][ T3660] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 396.914678][ T3660] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 396.926350][ T3660] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 396.930802][ T3660] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 396.934409][ T3660] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 396.939790][ T3660] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 396.942914][ T3660] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 396.949996][ T3660] hid-generic 0000:0000:0000.000A: hidraw1: HID v0.00 Device [syz0] on syz0 [ 397.069278][T11745] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 397.099041][T11745] cramfs: wrong magic [ 397.730846][ T966] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 397.733857][ T966] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 397.738531][ T966] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 397.741445][ T966] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 397.744550][ T966] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 397.751417][ T966] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 397.754979][ T966] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 397.758620][ T966] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 397.762303][ T966] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 397.765509][ T966] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 397.769641][ T966] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 397.772977][ T966] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 397.776672][ T966] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 397.779602][ T966] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 397.783746][ T966] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 397.788985][ T966] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 397.792643][ T966] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 397.795825][ T966] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 397.800715][ T966] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 397.803542][ T966] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 397.806587][ T966] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 397.809969][ T966] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 397.814090][ T966] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 397.820332][ T966] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 397.823777][ T966] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 397.827550][ T966] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 397.830607][ T966] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 397.833108][ T966] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 397.835592][ T966] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 397.839110][ T966] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 397.842572][ T966] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 397.847309][ T966] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 397.851125][ T966] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 397.860518][ T966] hid-generic 0000:0000:0000.000B: hidraw1: HID v0.00 Device [syz0] on syz0 [ 397.955785][T11777] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 397.965423][T11777] cramfs: wrong magic [ 398.521330][ C2] hpet: Lost 1 RTC interrupts [ 398.603100][T11801] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2296'. [ 398.805271][ T39] audit: type=1804 audit(1720905246.841:4263): pid=11805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2297" name="/newroot/45/bus/bus" dev="overlay" ino=258 res=1 errno=0 [ 398.874962][T11805] Invalid ELF header magic: != ELF [ 399.305270][T11828] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2308'. [ 399.759562][ T39] audit: type=1804 audit(1720905247.791:4264): pid=11834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2310" name="/newroot/67/bus/bus" dev="overlay" ino=381 res=1 errno=0 [ 399.769713][T11834] Invalid ELF header magic: != ELF [ 400.187922][T11853] xt_CT: You must specify a L4 protocol and not use inversions on it [ 400.289209][T11859] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2321'. [ 400.672800][ T39] audit: type=1804 audit(1720905248.711:4265): pid=11869 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2326" name="/newroot/85/bus/bus" dev="overlay" ino=467 res=1 errno=0 [ 400.707669][T11869] Invalid ELF header magic: != ELF [ 400.720049][T11860] trusted_key: encrypted_key: insufficient parameters specified [ 400.725099][T11860] trusted_key: encrypted_key: insufficient parameters specified [ 401.692538][T11899] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2338'. [ 402.559797][ T966] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 402.562694][ T966] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 402.576266][ T966] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 402.580283][ T966] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 402.583700][ T966] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 402.587434][ T966] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 402.590703][ T966] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 402.594710][ T966] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 402.598532][ T966] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 402.601769][ T966] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 402.604891][ T966] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 402.608621][ T966] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 402.612501][ T966] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 402.635442][ T966] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 402.654288][ T966] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 402.659100][ T966] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 402.683792][ T966] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 402.688790][ T966] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 402.692119][ T966] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 402.695297][ T966] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 402.698662][ T966] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 402.701911][ T966] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 402.706639][ T966] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 402.710128][ T966] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 402.713057][ T966] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 402.715998][ T966] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 402.724862][ T966] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 402.734601][ T966] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 402.738865][ T966] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 402.742292][ T966] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 402.745671][ T966] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 402.756350][ T966] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 402.759506][ T966] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 402.764711][T11939] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 402.767356][ T966] hid-generic 0000:0000:0000.000C: hidraw1: HID v0.00 Device [syz0] on syz0 [ 402.768405][T11939] cramfs: wrong magic [ 403.332618][ T39] audit: type=1804 audit(1720905251.371:4266): pid=11959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2362" name="/newroot/61/bus/bus" dev="overlay" ino=349 res=1 errno=0 [ 403.335363][T11959] Invalid ELF header magic: != ELF [ 404.171435][T11992] delete_channel: no stack [ 404.243132][T11997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2377'. [ 404.501007][ T84] bridge_slave_1: left allmulticast mode [ 404.503607][ T84] bridge_slave_1: left promiscuous mode [ 404.520507][ T84] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.556577][ T84] bridge_slave_0: left allmulticast mode [ 404.559280][ T84] bridge_slave_0: left promiscuous mode [ 404.561973][ T84] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.569696][ T84] gretap1: left allmulticast mode [ 404.571885][ T84] gretap1: left promiscuous mode [ 404.574234][ T84] bridge1: port 1(gretap1) entered disabled state [ 404.876129][T12011] trusted_key: encrypted_key: insufficient parameters specified [ 404.903000][T12011] trusted_key: encrypted_key: insufficient parameters specified [ 405.644124][ T84] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 405.657112][T11192] BUG: workqueue leaked atomic, lock or RCU: kworker/u33:0[11192] [ 405.657112][T11192] preempt=0x00000000 lock=0->1 RCU=0->0 workfn=hci_rx_work [ 405.675766][T11192] 1 lock held by kworker/u33:0/11192: [ 405.677953][T11192] #0: ffff888015339518 (&chan->lock#2/1){+.+.}-{3:3}, at: l2cap_recv_frame+0x14f2/0x8e10 [ 405.681680][T11192] CPU: 3 PID: 11192 Comm: kworker/u33:0 Not tainted 6.10.0-rc7-syzkaller-00256-gd0d0cd380055 #0 [ 405.685750][T11192] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 405.690220][T11192] Workqueue: hci4 hci_rx_work [ 405.692389][T11192] Call Trace: [ 405.693817][T11192] [ 405.694986][T11192] dump_stack_lvl+0x16c/0x1f0 [ 405.696852][T11192] process_one_work+0x1170/0x1ad0 [ 405.698781][T11192] ? __pfx_hci_rx_work+0x10/0x10 [ 405.700871][T11192] ? __pfx_hci_rx_work+0x10/0x10 [ 405.702828][T11192] ? __pfx_hci_rx_work+0x10/0x10 [ 405.704833][T11192] ? __pfx_process_one_work+0x10/0x10 [ 405.707469][T11192] ? assign_work+0x1a0/0x250 [ 405.709356][T11192] worker_thread+0x6c8/0xf30 [ 405.711132][T11192] ? __kthread_parkme+0x148/0x220 [ 405.713060][T11192] ? __pfx_worker_thread+0x10/0x10 [ 405.715020][T11192] kthread+0x2c1/0x3a0 [ 405.716609][T11192] ? _raw_spin_unlock_irq+0x23/0x50 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 405.718865][T11192] ? __pfx_kthread+0x10/0x10 [ 405.720854][T11192] ret_from_fork+0x45/0x80 [ 405.722618][T11192] ? __pfx_kthread+0x10/0x10 [ 405.724427][T11192] ret_from_fork_asm+0x1a/0x30 [ 405.726289][T11192] [ 405.769406][ T84] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 405.783076][ T5187] syz-executor (5187) used greatest stack depth: 20160 bytes left [ 405.803230][ T84] bond0 (unregistering): Released all slaves [ 405.924418][ C2] hpet: Lost 1 RTC interrupts [ 406.156383][T11192] [ 406.157736][T11192] ====================================================== [ 406.160493][T11192] WARNING: possible circular locking dependency detected [ 406.163811][T11192] 6.10.0-rc7-syzkaller-00256-gd0d0cd380055 #0 Not tainted [ 406.166913][T11192] ------------------------------------------------------ [ 406.170252][T11192] kworker/u33:0/11192 is trying to acquire lock: [ 406.173273][T11192] ffff888029aba148 ((wq_completion)hci2#2){+.+.}-{0:0}, at: process_one_work+0x11f0/0x1ad0 [ 406.177419][T11192] [ 406.177419][T11192] but task is already holding lock: [ 406.180365][T11192] ffff888015339518 (&chan->lock#2/1){+.+.}-{3:3}, at: l2cap_recv_frame+0x14f2/0x8e10 [ 406.185254][T11192] [ 406.185254][T11192] which lock already depends on the new lock. [ 406.185254][T11192] [ 406.190369][T11192] [ 406.190369][T11192] the existing dependency chain (in reverse order) is: [ 406.194468][T11192] [ 406.194468][T11192] -> #2 (&chan->lock#2/1){+.+.}-{3:3}: [ 406.198231][T11192] __mutex_lock+0x175/0x9c0 [ 406.200559][T11192] l2cap_recv_frame+0x14f2/0x8e10 [ 406.203470][T11192] l2cap_recv_acldata+0x9ac/0xb60 [ 406.205922][T11192] hci_rx_work+0xaa7/0x1610 [ 406.208071][T11192] process_one_work+0x958/0x1ad0 [ 406.210397][T11192] worker_thread+0x6c8/0xf30 [ 406.212783][T11192] kthread+0x2c1/0x3a0 [ 406.215321][T11192] ret_from_fork+0x45/0x80 [ 406.218172][T11192] ret_from_fork_asm+0x1a/0x30 [ 406.221254][T11192] [ 406.221254][T11192] -> #1 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}: [ 406.225085][T11192] process_one_work+0x8c4/0x1ad0 [ 406.227758][T11192] worker_thread+0x6c8/0xf30 [ 406.230480][T11192] kthread+0x2c1/0x3a0 [ 406.232684][T11192] ret_from_fork+0x45/0x80 [ 406.235062][T11192] ret_from_fork_asm+0x1a/0x30 [ 406.237845][T11192] [ 406.237845][T11192] -> #0 ((wq_completion)hci2#2){+.+.}-{0:0}: [ 406.241431][T11192] __lock_acquire+0x2478/0x3b30 [ 406.243613][T11192] lock_acquire+0x1b1/0x560 [ 406.246106][T11192] process_one_work+0x1220/0x1ad0 [ 406.248493][T11192] worker_thread+0x6c8/0xf30 [ 406.251147][T11192] kthread+0x2c1/0x3a0 [ 406.253523][T11192] ret_from_fork+0x45/0x80 [ 406.256185][T11192] ret_from_fork_asm+0x1a/0x30 [ 406.258656][T11192] [ 406.258656][T11192] other info that might help us debug this: [ 406.258656][T11192] [ 406.263653][T11192] Chain exists of: [ 406.263653][T11192] (wq_completion)hci2#2 --> (work_completion)(&hdev->rx_work) --> &chan->lock#2/1 [ 406.263653][T11192] [ 406.270892][T11192] Possible unsafe locking scenario: [ 406.270892][T11192] [ 406.274251][T11192] CPU0 CPU1 [ 406.276534][T11192] ---- ---- [ 406.279181][T11192] lock(&chan->lock#2/1); [ 406.281105][T11192] lock((work_completion)(&hdev->rx_work)); [ 406.285586][T11192] lock(&chan->lock#2/1); [ 406.288634][T11192] lock((wq_completion)hci2#2); [ 406.290747][T11192] [ 406.290747][T11192] *** DEADLOCK *** [ 406.290747][T11192] [ 406.304299][T11192] 1 lock held by kworker/u33:0/11192: [ 406.306636][T11192] #0: ffff888015339518 (&chan->lock#2/1){+.+.}-{3:3}, at: l2cap_recv_frame+0x14f2/0x8e10 [ 406.311314][T11192] [ 406.311314][T11192] stack backtrace: [ 406.314350][T11192] CPU: 3 PID: 11192 Comm: kworker/u33:0 Not tainted 6.10.0-rc7-syzkaller-00256-gd0d0cd380055 #0 [ 406.320628][T11192] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 406.326345][T11192] Workqueue: hci2 hci_ncmd_timeout [ 406.328812][T11192] Call Trace: [ 406.330517][T11192] [ 406.331943][T11192] dump_stack_lvl+0x116/0x1f0 [ 406.334388][T11192] check_noncircular+0x31a/0x400 [ 406.337075][T11192] ? __pfx_check_noncircular+0x10/0x10 [ 406.340289][T11192] ? lockdep_lock+0xc6/0x200 [ 406.343099][T11192] ? __pfx_lockdep_lock+0x10/0x10 [ 406.346036][T11192] __lock_acquire+0x2478/0x3b30 [ 406.348715][T11192] ? __pfx___lock_acquire+0x10/0x10 [ 406.351866][T11192] ? __pfx_mark_lock+0x10/0x10 [ 406.355058][T11192] lock_acquire+0x1b1/0x560 [ 406.357757][T11192] ? process_one_work+0x11f0/0x1ad0 [ 406.360885][T11192] ? __pfx_lock_acquire+0x10/0x10 [ 406.363335][T11192] ? __pfx_lock_release+0x10/0x10 [ 406.365977][T11192] ? mark_held_locks+0x9f/0xe0 [ 406.368827][T11192] ? process_one_work+0x11f0/0x1ad0 [ 406.371937][T11192] process_one_work+0x1220/0x1ad0 [ 406.374417][T11192] ? process_one_work+0x11f0/0x1ad0 [ 406.376949][T11192] ? __pfx_lock_acquire+0x10/0x10 [ 406.379172][T11192] ? __pfx_process_one_work+0x10/0x10 [ 406.381529][T11192] ? assign_work+0x1a0/0x250 [ 406.383649][T11192] worker_thread+0x6c8/0xf30 [ 406.385721][T11192] ? __kthread_parkme+0x148/0x220 [ 406.387942][T11192] ? __pfx_worker_thread+0x10/0x10 [ 406.390209][T11192] kthread+0x2c1/0x3a0 [ 406.392062][T11192] ? _raw_spin_unlock_irq+0x23/0x50 [ 406.394366][T11192] ? __pfx_kthread+0x10/0x10 [ 406.396314][T11192] ret_from_fork+0x45/0x80 [ 406.398305][T11192] ? __pfx_kthread+0x10/0x10 [ 406.400435][T11192] ret_from_fork_asm+0x1a/0x30 [ 406.402610][T11192] [ 406.407415][T11192] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 406.411527][T11192] Bluetooth: hci2: Injecting HCI hardware error event [ 406.414451][T11192] BUG: workqueue leaked atomic, lock or RCU: kworker/u33:0[11192] [ 406.414451][T11192] preempt=0x00000000 lock=1->0 RCU=0->0 workfn=hci_ncmd_timeout [ 406.424188][T11192] INFO: lockdep is turned off. [ 406.426432][T11192] CPU: 3 PID: 11192 Comm: kworker/u33:0 Not tainted 6.10.0-rc7-syzkaller-00256-gd0d0cd380055 #0 [ 406.431113][T11192] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 406.437601][T11192] Workqueue: hci2 hci_ncmd_timeout [ 406.439950][T11192] Call Trace: [ 406.441491][T11192] [ 406.443087][T11192] dump_stack_lvl+0x16c/0x1f0 [ 406.445645][T11192] process_one_work+0x1170/0x1ad0 [ 406.447932][T11192] ? __pfx_hci_ncmd_timeout+0x10/0x10 [ 406.450320][T11192] ? __pfx_hci_ncmd_timeout+0x10/0x10 [ 406.452715][T11192] ? __pfx_hci_ncmd_timeout+0x10/0x10 [ 406.455227][T11192] ? __pfx_process_one_work+0x10/0x10 [ 406.457678][T11192] ? assign_work+0x1a0/0x250 [ 406.459664][T11192] worker_thread+0x6c8/0xf30 [ 406.461730][T11192] ? __kthread_parkme+0x148/0x220 [ 406.463972][T11192] ? __pfx_worker_thread+0x10/0x10 [ 406.466248][T11192] kthread+0x2c1/0x3a0 [ 406.468065][T11192] ? _raw_spin_unlock_irq+0x23/0x50 [ 406.470435][T11192] ? __pfx_kthread+0x10/0x10 [ 406.472507][T11192] ret_from_fork+0x45/0x80 [ 406.474487][T11192] ? __pfx_kthread+0x10/0x10 [ 406.476383][T11192] ret_from_fork_asm+0x1a/0x30 [ 406.478485][T11192] [ 406.873339][ T84] hsr_slave_0: left promiscuous mode [ 406.878131][ T84] hsr_slave_1: left promiscuous mode [ 406.881287][ T84] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 406.884280][ T84] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 406.889372][ T84] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 406.892759][ T84] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 406.898290][ T84] veth1_macvtap: left promiscuous mode [ 406.900789][ T84] veth0_macvtap: left promiscuous mode [ 406.903330][ T84] veth1_vlan: left promiscuous mode [ 406.905861][ T84] veth0_vlan: left promiscuous mode [ 407.189658][ T84] team0 (unregistering): Port device team_slave_1 removed [ 407.257456][ T84] team0 (unregistering): Port device team_slave_0 removed [ 408.216892][ T84] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.267387][ T84] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.364024][ T84] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.461950][ T84] netdevsim netdevsim1 @ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.591393][ T84] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.663546][ T84] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.745333][ T84] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.830652][ T84] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.915426][ T84] bridge_slave_1: left allmulticast mode [ 408.918246][ T84] bridge_slave_1: left promiscuous mode [ 408.920832][ T84] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.926430][ T84] bridge_slave_0: left allmulticast mode [ 408.928907][ T84] bridge_slave_0: left promiscuous mode [ 408.931521][ T84] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.938405][ T84] bridge_slave_1: left allmulticast mode [ 408.941135][ T84] bridge_slave_1: left promiscuous mode [ 408.943722][ T84] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.971100][ T84] bridge_slave_0: left allmulticast mode [ 408.973501][ T84] bridge_slave_0: left promiscuous mode [ 408.976272][ T84] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.423138][ T84] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 409.429769][ T84] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 409.435047][ T84] bond0 (unregistering): Released all slaves [ 409.447987][ T84] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 409.453851][ T84] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 409.462452][ T84] bond0 (unregistering): Released all slaves [ 410.138713][ T84] hsr_slave_0: left promiscuous mode [ 410.142549][ T84] hsr_slave_1: left promiscuous mode [ 410.145732][ T84] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 410.149451][ T84] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 410.159330][ T84] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 410.162657][ T84] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 410.166999][ T84] batman_adv: batadv0: Interface deactivated: vlan0 [ 410.169870][ T84] batman_adv: batadv0: Removing interface: vlan0 [ 410.181902][ T84] hsr_slave_0: left promiscuous mode [ 410.185140][ T84] hsr_slave_1: left promiscuous mode [ 410.189504][ T84] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 410.192738][ T84] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 410.197080][ T84] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 410.200346][ T84] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 410.208379][ T84] veth1_macvtap: left promiscuous mode [ 410.211041][ T84] veth0_macvtap: left promiscuous mode [ 410.213361][ T84] veth1_vlan: left promiscuous mode [ 410.215585][ T84] veth0_vlan: left promiscuous mode [ 410.229862][ T84] veth1_macvtap: left promiscuous mode [ 410.232362][ T84] veth0_macvtap: left promiscuous mode [ 410.235482][ T84] veth1_vlan: left promiscuous mode [ 410.238960][ T84] veth0_vlan: left promiscuous mode [ 410.735432][ T84] team0 (unregistering): Port device team_slave_1 removed [ 410.809786][ C2] hpet: Lost 1 RTC interrupts [ 410.882266][ T84] team0 (unregistering): Port device team_slave_0 removed [ 411.526783][ T84] team0 (unregistering): Port device team_slave_1 removed [ 411.599947][ T84] team0 (unregistering): Port device team_slave_0 removed [ 412.786466][ T1084] bridge_slave_1: left allmulticast mode [ 412.788947][ T1084] bridge_slave_1: left promiscuous mode [ 412.791421][ T1084] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.806746][ T1084] bridge_slave_0: left allmulticast mode [ 412.816702][ T1084] bridge_slave_0: left promiscuous mode [ 412.819332][ T1084] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.116685][ T1084] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 413.122453][ T1084] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 413.128477][ T1084] bond0 (unregistering): Released all slaves [ 413.518834][ T1084] hsr_slave_0: left promiscuous mode [ 413.521791][ T1084] hsr_slave_1: left promiscuous mode [ 413.525064][ T1084] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 413.529850][ T1084] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 413.534295][ T1084] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 413.537560][ T1084] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 413.542490][ T1084] veth1_macvtap: left promiscuous mode [ 413.544841][ T1084] veth0_macvtap: left promiscuous mode [ 413.549582][ T1084] veth1_vlan: left promiscuous mode [ 413.551883][ T1084] veth0_vlan: left promiscuous mode [ 413.749270][ T1084] team0 (unregistering): Port device team_slave_1 removed [ 413.762685][ T1084] team0 (unregistering): Port device team_slave_0 removed VM DIAGNOSIS: 21:14:13 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000001 RBX=ffff888022d78b08 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff8b2cbce0 RDI=ffffffff8b8ff8e0 RBP=ffff8880583c23d8 RSP=ffffc90007b77b98 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=ffff888022d78000 R13=0000000000000001 R14=00000000ffffffff R15=0000000000000001 RIP=ffffffff8adca378 RFL=00000092 [--S-A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0063 ffff88802c000000 ffffffff 00d0f300 DPL=3 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000033110ff8 CR3=0000000058792000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000088000000 Opmask01=00000000fffff808 Opmask02=0000000002000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff38a59760 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6565656565656565 6565656565656565 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffff0000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f6e3a6d5e007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4b1f485e005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000a735b 462f3136000a3d6f ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000478fdb RBX=0000000000000001 RCX=ffffffff8adc9be9 RDX=0000000000000000 RSI=ffffffff8b2cb9e0 RDI=ffffffff8b8ff8e0 RBP=ffffed1002ce9910 RSP=ffffc90000477e08 R8 =0000000000000001 R9 =ffffed1005826fdd R10=ffff88802c137eeb R11=0000000000000000 R12=0000000000000001 R13=ffff88801674c880 R14=ffffffff8fe2e3d0 R15=0000000000000000 RIP=ffffffff8adcafdf RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c100000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7415cbc CR3=000000000d97a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002012492 Opmask01=0000000000004211 Opmask02=000000000000ffdf Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4b5f5455504e495f 4449006b636f6c62 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc976f1070 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2a2a2a2a2a2a2a2a 2a2a2a2a2a2a2a2a ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ff000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ff00000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ff000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffff0000 ffffffffffffffff ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a18d9e9a35902934 73732560083478b7 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737373737142 7373737373737373 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 656c696620732520 6465746165726300 0a73253a47000a73 253d73253a45000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 40494c4305560005 4140514440574600 0a56001f47000a56 001856001f45000a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000003f1 0000000000000000 30706f6f6c2f6b63 6f6c622f6c617574 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302e303030303a30 3030303a30303030 0000000000000021 0000000000004330 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 640079737650db0f 6d2f256a0868121a 7373377a79093be9 732f563c0832701e ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 777f7f7b7f7fffff 7f7f7f6f7f7f7f5f ffffffff7fdfffff 7f7f7f7d5f7f7fff ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 264c383a3a264f38 3a3a264e383a3a26 49383a3a2648383a 3a2633383a3a2632 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000210 0000000000000030 2f6d697346685a31 0000301363470b00 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000210 0000000000000030 000056161a264831 0000301363470b00 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffffc90006d175a0 RCX=ffffffff813c94ce RDX=ffff8880193ec880 RSI=ffffffff813ca131 RDI=0000000000000001 RBP=0000000000000001 RSP=ffffc90006d17518 R8 =0000000000000001 R9 =0000000000000004 R10=0000000000000001 R11=0000000000000001 R12=ffffffff90701018 R13=ffffc90006d17df8 R14=0000000000000001 R15=0000000000000001 RIP=ffffffff818e8f78 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c200000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00000000f7255fa0 CR3=000000000d97a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=0000000000000000 Opmask02=0000000001000000 Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff672b8c00 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6565656565656565 6565656565656565 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffff0000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00ff0000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 33323437352e3430 3420205b3e363c00 65646f6d2073756f 756373696d6f7200 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3332343735243430 3420205134363600 6564656720737565 7563736367657200 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30372e3230342020 4330000000304530 203d212020636567 6120206961642065 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3020203230202000 3030000000204520 2037212020203333 3320203333202030 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3e2a2a5134393600 3a37656478786f2a 3b37796f782a333e 39376564632a2873 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7d656461647f2a30 493a0a004c464f75 2a372b2a3069636d 6b672a786f6e6b6f ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000400100 RBX=0000000000100cca RCX=1ffff92000839ec0 RDX=0000000000000000 RSI=0000000000000000 RDI=ffff88801c8f48ac RBP=ffff88801c8f4880 RSP=ffffc900041cf468 R8 =ffffc900041cf5e8 R9 =ffffc900041cf5a8 R10=0000000000000000 R11=0000000000000001 R12=ffffc900041cf5e8 R13=ffffc900041cf604 R14=ffffc900041cf5f0 R15=0000000000000008 RIP=ffffffff81df253d RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007eff70d6dd00 ffffffff 00c00000 GS =0000 ffff88802c300000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005565c9f72000 CR3=000000001dc10000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=9aad47319aad4731 9aad47319aad4731 9aad47319aad4731 9aad47319aad4731 9aad47319aad4731 9aad47319aad4731 9aad47319aad4731 9aad47319aad4731 ZMM22=44a8d1a644a8d1a6 44a8d1a644a8d1a6 44a8d1a644a8d1a6 44a8d1a644a8d1a6 44a8d1a644a8d1a6 44a8d1a644a8d1a6 44a8d1a644a8d1a6 44a8d1a644a8d1a6 ZMM23=c688becfc688becf c688becfc688becf c688becfc688becf c688becfc688becf c688becfc688becf c688becfc688becf c688becfc688becf c688becfc688becf ZMM24=9c8923ad9c8923ad 9c8923ad9c8923ad 9c8923ad9c8923ad 9c8923ad9c8923ad 9c8923ad9c8923ad 9c8923ad9c8923ad 9c8923ad9c8923ad 9c8923ad9c8923ad ZMM25=822de20f822de20f 822de20f822de20f 822de20f822de20f 822de20f822de20f 822de20f822de20f 822de20f822de20f 822de20f822de20f 822de20f822de20f ZMM26=b7ad8929b7ad8929 b7ad8929b7ad8929 b7ad8929b7ad8929 b7ad8929b7ad8929 b7ad8929b7ad8929 b7ad8929b7ad8929 b7ad8929b7ad8929 b7ad8929b7ad8929 ZMM27=cb08a4a8cb08a4a8 cb08a4a8cb08a4a8 cb08a4a8cb08a4a8 cb08a4a8cb08a4a8 cb08a4a8cb08a4a8 cb08a4a8cb08a4a8 cb08a4a8cb08a4a8 cb08a4a8cb08a4a8 ZMM28=000001f0000001ef 000001ee000001ed 000001ec000001eb 000001ea000001e9 000001e8000001e7 000001e6000001e5 000001e4000001e3 000001e2000001e1 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=4320000043200000 4320000043200000 4320000043200000 4320000043200000 4320000043200000 4320000043200000 4320000043200000 4320000043200000