last executing test programs: 9.290537548s ago: executing program 0 (id=5721): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000900)="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", 0x1cf) r3 = accept$alg(r2, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="02c9d012e80d00050015770a0004001f00000042000900"], 0x17) recvmmsg(r3, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x2000000}}], 0x1, 0x0, 0x0) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4040942c, &(0x7f00000002c0)={0x0, 0x8, [0x6, 0x1ff, 0xaed0, 0x10, 0xffffffffffffffff, 0x4]}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r8, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, &(0x7f00000007c0)) r9 = socket$packet(0x11, 0x3, 0x300) dup(r6) r10 = fcntl$dupfd(r8, 0x0, r9) ioctl$VHOST_SET_VRING_ADDR(r10, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r10, 0x4008af30, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00082bbd8500ffdbdf250600000008f71700ac1414bb060001000800000005ffff5100"/50], 0x38}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_BYTEMODE={0x8}]}}]}, 0x38}}, 0x0) 9.025800828s ago: executing program 0 (id=5723): sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000240), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) eventfd(0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='sessionid\x00') io_uring_enter(0xffffffffffffffff, 0x184c, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000d9bffc)=0xfffffffc, 0x4) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0x92020007) 8.934271476s ago: executing program 0 (id=5726): r0 = getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d0000006700000005"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000003c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) 8.527082646s ago: executing program 0 (id=5729): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000300)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window, @mss, @window], 0x5) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 8.507196244s ago: executing program 0 (id=5731): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000900)="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", 0x1cf) r3 = accept$alg(r2, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="02c9d012e80d00050015770a0004001f00000042000900"], 0x17) recvmmsg(r3, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x2000000}}], 0x1, 0x0, 0x0) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000180), 0xffffffffffffffff) ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4040942c, &(0x7f00000002c0)={0x0, 0x8, [0x6, 0x1ff, 0xaed0, 0x10, 0xffffffffffffffff, 0x4]}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r8, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r8, 0x4008af03, &(0x7f00000007c0)) r9 = socket$packet(0x11, 0x3, 0x300) dup(r6) r10 = fcntl$dupfd(r8, 0x0, r9) ioctl$VHOST_SET_VRING_ADDR(r10, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0}) ioctl$VHOST_NET_SET_BACKEND(r10, 0x4008af30, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00082bbd8500ffdbdf250600000008f71700ac1414bb060001000800000005ffff5100"/50], 0x38}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_to_team\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_BYTEMODE={0x8}]}}]}, 0x38}}, 0x0) 8.172322887s ago: executing program 0 (id=5732): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xc4}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="24000000010a01020000000000000e84d150000908000240000000000800024000000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x50) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mount(&(0x7f0000000200)=@sr0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='smb3\x00', 0x0, &(0x7f0000000380)='&+\x00') copy_file_range(r5, 0x0, r5, 0x0, 0x0, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_freezer_state(r6, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r7, &(0x7f0000000040)='FROZEN\x00', 0x7) read(r7, &(0x7f00000000c0)=""/29, 0x1d) r8 = openat$cgroup_procs(r6, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000240), 0x12) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 7.17709442s ago: executing program 1 (id=5735): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(0xffffffffffffffff, 0x3b88, &(0x7f0000000100)={0xc}) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000040), 0xc) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000b5"], 0xc8) write$binfmt_script(r2, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x39000, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f00000000c0)=0x0) timer_gettime(r8, &(0x7f0000000180)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) mount_setattr(r5, &(0x7f0000000240)='./file0\x00', 0x8000, &(0x7f0000000200)={0x0, 0x100080, 0x180000, {r6}}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) bind$tipc(0xffffffffffffffff, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x1}}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.net/syz0\x00', 0x1ff) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000a, 0x5d032, 0xffffffffffffffff, 0x0) r9 = userfaultfd(0x801) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r9, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000cd5000/0x4000)=nil, 0x800000}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001740)='./cgroup.net/syz1\x00', 0x200002, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) 6.693816434s ago: executing program 3 (id=5738): r0 = getpid() r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d0000006700000005"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000003c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) 6.273599417s ago: executing program 3 (id=5739): sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000025c0), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f0000000580)=""/138, 0x0, 0x4}) socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x6, 0x1000, 0x1, 0x2000}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, &(0x7f0000000680)={0xe, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x1, r2}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000940)) socket$nl_generic(0x10, 0x3, 0x10) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x20000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x800000, 0x0, &(0x7f00007fe000/0x800000)=nil) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) remap_file_pages(&(0x7f0000598000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f00000c0000/0x1000)=nil, 0x1000, 0x5, 0x10012, r0, 0x0) 5.38685262s ago: executing program 3 (id=5740): ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() socket$inet_udp(0x2, 0x2, 0x0) mount(0x0, 0x0, &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_usbip_server_init(0x0) 4.76406115s ago: executing program 2 (id=5741): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x3, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x64}, 0x90) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) 4.122425199s ago: executing program 1 (id=5742): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x89, 0x89, 0x2, [@var, @fwd, @typedef, @datasec={0x0, 0x7, 0x0, 0xf, 0x1, [{0x2, 0x200, 0x7}, {0x3, 0x3, 0x1}, {0x2, 0x10000, 0x8}, {0x3, 0x417, 0x1}, {0x3, 0x1f1, 0x6}, {0x1, 0x3, 0x8000}, {0x5, 0x1, 0xb}], 'L'}]}}, 0x0, 0xa6}, 0x20) 4.046148499s ago: executing program 1 (id=5743): sched_setaffinity(0x0, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r0, &(0x7f0000000240), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) eventfd(0x0) r1 = syz_io_uring_setup(0x690a, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000200), &(0x7f0000000140)) io_uring_enter(r1, 0x184c, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000d9bffc)=0xfffffffc, 0x4) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0x92020007) 3.974325884s ago: executing program 1 (id=5744): mknod$loop(&(0x7f0000000100)='./file0\x00', 0x0, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000580)) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x1000) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) mount(&(0x7f0000000000)=@sr0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='zonefs\x00', 0x0, 0x0) 3.842792465s ago: executing program 3 (id=5745): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) open$dir(&(0x7f0000000080)='./file0\x00', 0x1, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000240)="1d", 0x1}], 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="02c9"], 0x5) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02"], 0x17) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x2, 0x0, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00'}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x18}, @l2cap_cid_signaling={{0x14}, [@l2cap_info_req={{0xa, 0x0, 0x2}, {0x2}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x9f, 0x2}, {0x6}}, @l2cap_move_chan_cfm={{0x10, 0xe, 0x4}, {0xfffa, 0x3}}]}}, 0x1d) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="02c81200050017070e004cfc"], 0x1b) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r0, 0x8914, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000680)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) r1 = getpid() r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) kexec_load(0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = openat$tcp_congestion(0xffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$tcp_congestion(r3, &(0x7f0000000100)='reno\x00', 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000035717a229b3acb1b1db4f187d5073d7500bef1790a16e1a79e42a0ed4b83d5ed45a8fc201367cd74c361c9a4f5d8f16c796fcf08d155cafa103d9b9799b782d83a17bd169c6c16088acb1631889645324d8196454c9ff21aee74ce463879261e070c380d3957f0ff5769c83019dc1046271d2cbd79746013ddf322d344a4c120be9aa9bf586d6ec792641f49472a3d042069dd7be750a88a5fd265e4c49090740225fc584117049aad46931344dfd360bf3368d493f5018f"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdir(&(0x7f0000000080)='./bus\x00', 0x0) 3.836658383s ago: executing program 2 (id=5746): setxattr$incfs_metadata(0x0, 0x0, &(0x7f0000000440), 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r1 = dup(r0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) r4 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000180)={0x1, r4}) setxattr$trusted_overlay_origin(&(0x7f0000000640)='./file0\x00', &(0x7f0000000080), &(0x7f0000000200), 0x2, 0x1) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000400)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x101000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000600)=[@text32={0x20, &(0x7f0000000580)="c4c1ddfc8ed82db6033e0f01c53e0f01c5b935020000b800680000ba000000000f300f2298360f015b5d660f35b8010000000f01d9c74424000c749125c744240200a00000c7442406000000000f01142466baf80cb800f4a68bef66bafc0c66b8dadd66ef", 0x65}], 0x1, 0x23, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000e40)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x8, 0xfffffffe}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x20000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000e, 0x12, r1, 0x0) prlimit64(0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$kcm(0x10, 0x2, 0x0) 3.486580895s ago: executing program 2 (id=5747): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40}, {0x6, 0x0, 0x40}]}, 0x10) socket$inet6_dccp(0xa, 0x6, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, 0x0, 0x118) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x90) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000740)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000140)={0x1, r4}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000940)={0x1, 0x0, [{0x0, 0xe4, &(0x7f0000000580)=""/228}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x20000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000000080)={0xffff, {{0xa, 0x4e21, 0x9, @empty, 0x8}}}, 0x88) close(0xffffffffffffffff) syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r6, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000380)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r6}}) 3.293698185s ago: executing program 1 (id=5748): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r1, 0x6, &(0x7f0000002000)={0x1}) fcntl$lock(r1, 0x26, &(0x7f00000031c0)={0x0, 0x2}) mknodat$loop(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) dup(0xffffffffffffffff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x0, 0x0, 0x0, "b43d70dde5dbbbe40f00f401bbe6c9008000c67f09000000080000000200"}) 3.064862842s ago: executing program 3 (id=5749): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x80000003) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) r1 = dup2(r0, r0) read$FUSE(r1, &(0x7f0000004680)={0x2020}, 0x2020) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) 2.567603681s ago: executing program 2 (id=5750): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000300)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window, @mss, @window], 0x5) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.653876974s ago: executing program 2 (id=5751): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001fff00"/18, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e640000000014000280050001000400000008001900ffff8099774e089e0b5b8d24709c498bc9cc7f60fdc26a47fb20621c5f5d4452fdb6230eac3605e1fa4a7bf18ea04200155e27fe0b0000f3eb83bbb0116040b069cf846f66db7aac4b4a03a45e161c89c8ae475d1a110e84a0904eca0e9a2c90d8eebbff14cbbc381ba9565ba7caa9ad116680fc53d13213126d649fd82dca9e3406111c1fdaed8e038001"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="043e1f0a00"], 0x22) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="040510423cca860404c80004"], 0x7) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x400001, 0x0) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x13) ioctl$TCXONC(r2, 0x540a, 0x2) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102385, 0x18ff1}], 0x1, 0xfffffffd, 0x0) shutdown(0xffffffffffffffff, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @hyper}, 0x10) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x96ff03) dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$inet6(0xa, 0x80000, 0x1) r3 = open(&(0x7f0000000100)='./file0\x00', 0x1c1c40, 0x0) fcntl$setsig(r3, 0xa, 0x4) fcntl$setlease(r3, 0x400, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) times(0xfffffffffffffffe) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x16c}}, 0x0) syz_open_dev$usbfs(&(0x7f0000000280), 0x76, 0x0) syz_open_dev$dri(&(0x7f0000000080), 0x8, 0x20501) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) 1.55311296s ago: executing program 1 (id=5752): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x89e0, 0x0) close(0xffffffffffffffff) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) close(0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="99f82fadae27"}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000200)=r3) write$cgroup_devices(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0306003c5c980128846360864666702c1ffe8000000000"], 0xffdd) 1.35389406s ago: executing program 2 (id=5753): ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() socket$inet_udp(0x2, 0x2, 0x0) mount(0x0, 0x0, &(0x7f0000000940)='tmpfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_usbip_server_init(0x0) 0s ago: executing program 3 (id=5754): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast2, 0x0, 0x32}, @in=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}}, 0x0) kernel console output (not intermixed with test programs): 0000000000000000 [ 859.896973][T21397] __nla_validate_parse: 14 callbacks suppressed [ 859.896989][T21397] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5021'. [ 859.908295][T21397] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5021'. [ 859.915370][T21397] netlink: 868 bytes leftover after parsing attributes in process `syz.1.5021'. [ 860.001210][T21399] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 860.024216][T21399] netlink: 1 bytes leftover after parsing attributes in process `syz.1.5022'. [ 860.648617][T21421] atomic_op ffff888046f11998 conn xmit_atomic 0000000000000000 [ 860.661864][T21421] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5030'. [ 860.670690][T21421] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5030'. [ 860.683708][T21421] netlink: 868 bytes leftover after parsing attributes in process `syz.2.5030'. [ 861.679852][T21455] atomic_op ffff88804547e998 conn xmit_atomic 0000000000000000 [ 861.715256][T21455] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5042'. [ 861.726824][T21455] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5042'. [ 861.738881][T21455] netlink: 868 bytes leftover after parsing attributes in process `syz.0.5042'. [ 862.493661][ T65] Bluetooth: hci2: command 0x0406 tx timeout [ 862.701037][T21492] atomic_op ffff888044110198 conn xmit_atomic 0000000000000000 [ 863.470207][T21522] atomic_op ffff888045c71198 conn xmit_atomic 0000000000000000 [ 864.562895][T21556] atomic_op ffff88802e935198 conn xmit_atomic 0000000000000000 [ 865.624052][T21587] atomic_op ffff8880510cc198 conn xmit_atomic 0000000000000000 [ 865.646666][T21587] __nla_validate_parse: 12 callbacks suppressed [ 865.646683][T21587] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5080'. [ 865.662406][T21587] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5080'. [ 865.672322][T21587] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5080'. [ 866.828512][T21615] atomic_op ffff88802b81b198 conn xmit_atomic 0000000000000000 [ 866.843095][T21615] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5089'. [ 866.851029][T21615] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5089'. [ 866.856077][T21615] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5089'. [ 868.720168][T21649] atomic_op ffff88804925e998 conn xmit_atomic 0000000000000000 [ 868.727400][T21649] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5098'. [ 868.731149][T21649] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5098'. [ 868.735570][T21649] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5098'. [ 869.070399][T21660] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5101'. [ 869.474502][T11937] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 869.662889][T11937] usb 7-1: config index 0 descriptor too short (expected 9533, got 36) [ 869.666328][T11937] usb 7-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 869.669313][T11937] usb 7-1: config 161 has an invalid interface descriptor of length 7, skipping [ 869.672514][T11937] usb 7-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 869.677010][T11937] usb 7-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 869.681107][T11937] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 869.685239][T11937] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.810745][T21686] atomic_op ffff888042c20998 conn xmit_atomic 0000000000000000 [ 869.919012][T21132] usb 7-1: USB disconnect, device number 28 [ 871.879495][T21718] atomic_op ffff88803ba89198 conn xmit_atomic 0000000000000000 [ 871.891093][T21718] __nla_validate_parse: 7 callbacks suppressed [ 871.891104][T21718] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5116'. [ 871.902271][T21718] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5116'. [ 871.908199][T21718] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5116'. [ 872.043081][T21720] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5117'. [ 872.066364][T21720] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5117'. [ 872.071420][T21724] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5118'. [ 872.079461][T21724] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5118'. [ 872.127950][T21720] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5117'. [ 872.473457][ T56] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 872.666399][ T56] usb 8-1: config index 0 descriptor too short (expected 9533, got 36) [ 872.670417][ T56] usb 8-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 872.674653][ T56] usb 8-1: config 161 has an invalid interface descriptor of length 7, skipping [ 872.678712][ T56] usb 8-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 872.683555][ T56] usb 8-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 872.687707][ T56] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 872.691809][ T56] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.924838][ T56] usb 8-1: USB disconnect, device number 13 [ 875.777167][ T1358] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.779501][ T1358] ieee802154 phy1 wpan1: encryption failed: -22 [ 875.917316][T21778] syz.0.5132 (21778): drop_caches: 2 [ 876.937706][T21807] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5142'. [ 876.941740][T21807] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5142'. [ 877.433121][ T65] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 877.443968][ T65] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 877.447946][ T65] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 877.453613][ T65] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 877.457244][ T65] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 877.461201][ T65] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 877.617934][T21825] binder: 21824:21825 ioctl 400c620e 20000000 returned -22 [ 877.627316][T21815] chnl_net:caif_netlink_parms(): no params data found [ 877.768241][T21815] bridge0: port 1(bridge_slave_0) entered blocking state [ 877.774679][T21815] bridge0: port 1(bridge_slave_0) entered disabled state [ 877.778023][T21815] bridge_slave_0: entered allmulticast mode [ 877.782366][T21815] bridge_slave_0: entered promiscuous mode [ 877.788499][T21815] bridge0: port 2(bridge_slave_1) entered blocking state [ 877.791748][T21815] bridge0: port 2(bridge_slave_1) entered disabled state [ 877.795526][T21815] bridge_slave_1: entered allmulticast mode [ 877.799632][T21815] bridge_slave_1: entered promiscuous mode [ 877.861769][T21815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 877.869470][T21815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 877.919800][T21815] team0: Port device team_slave_0 added [ 877.924930][T21815] team0: Port device team_slave_1 added [ 877.979271][T21815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 877.982393][T21815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 878.001569][T21815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 878.008460][T21815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 878.011506][T21815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 878.023197][T21815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 878.149658][T21815] hsr_slave_0: entered promiscuous mode [ 878.152605][T21815] hsr_slave_1: entered promiscuous mode [ 878.158066][T21815] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 878.160948][T21815] Cannot create hsr debugfs directory [ 878.336023][T21815] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.461832][T21848] syz.2.5152[21848] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 878.462026][T21848] syz.2.5152[21848] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 878.483593][T21815] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.553839][T21815] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.642243][T21815] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.756980][T21815] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 878.762063][T21815] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 878.767036][T21815] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 878.772209][T21815] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 878.792918][ T56] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 878.868756][T21815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 878.890022][T21815] 8021q: adding VLAN 0 to HW filter on device team0 [ 878.906965][T11937] bridge0: port 1(bridge_slave_0) entered blocking state [ 878.909929][T11937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 878.915741][T11937] bridge0: port 2(bridge_slave_1) entered blocking state [ 878.918983][T11937] bridge0: port 2(bridge_slave_1) entered forwarding state [ 878.953251][T21815] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 878.977932][ T56] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 878.982392][ T56] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 878.990674][ T56] usb 7-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 879.002113][ T56] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.006682][ T56] usb 7-1: Product: syz [ 879.008568][ T56] usb 7-1: Manufacturer: syz [ 879.010661][ T56] usb 7-1: SerialNumber: syz [ 879.016240][ T56] usb 7-1: config 0 descriptor?? [ 879.019349][T21848] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 879.022676][T21848] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 879.088789][T21815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 879.140057][T21815] veth0_vlan: entered promiscuous mode [ 879.156942][T21815] veth1_vlan: entered promiscuous mode [ 879.187895][T21815] veth0_macvtap: entered promiscuous mode [ 879.195423][T21815] veth1_macvtap: entered promiscuous mode [ 879.211131][T21815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 879.217890][T21815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 879.222484][T21815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 879.229811][T21815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 879.230452][T21848] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 879.234500][T21815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 879.237890][T21848] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 879.242359][T21815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 879.250396][T21815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 879.255443][T21815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 879.260107][T21815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 879.265345][T21815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 879.270019][T21815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 879.275026][T21815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 879.281879][T21815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 879.294681][T21815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 879.299028][T21815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 879.302882][T21815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 879.308471][T21815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 879.313095][T21815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 879.313111][T21815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 879.313126][T21815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 879.313137][T21815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 879.313154][T21815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 879.313167][T21815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 879.313185][T21815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 879.313197][T21815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 879.353402][T21815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 879.358245][T21815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 879.364846][T21815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 879.372078][T21815] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.378168][T21815] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.381319][T21815] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.384681][T21815] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 879.433308][T21879] syzkaller0: entered promiscuous mode [ 879.435634][T21879] syzkaller0: entered allmulticast mode [ 879.453146][ T56] Error reading MAC address [ 879.460700][ T56] usb 7-1: USB disconnect, device number 29 [ 879.536462][ T65] Bluetooth: hci7: command tx timeout [ 880.248920][ T39] audit: type=1400 audit(1720563508.059:3348): avc: denied { bind } for pid=21897 comm="syz.0.5172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 881.492844][ T101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 881.507261][ T101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 881.614281][ T65] Bluetooth: hci7: command tx timeout [ 881.654788][ T101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 881.658368][ T101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 882.694947][T21925] netlink: 'syz.3.5179': attribute type 4 has an invalid length. [ 883.010851][ T39] audit: type=1400 audit(1720563510.809:3349): avc: denied { getopt } for pid=21952 comm="syz.1.5192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 883.018257][T21955] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 883.025899][T21955] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 883.074029][ T39] audit: type=1400 audit(1720563510.879:3350): avc: denied { read } for pid=21960 comm="syz.1.5195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 883.077246][T21948] netlink: 'syz.2.5190': attribute type 4 has an invalid length. [ 883.483642][ T56] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 883.673600][ T56] usb 7-1: Using ep0 maxpacket: 16 [ 883.679139][ T56] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 883.684632][ T56] usb 7-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 883.689990][ T56] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 883.693756][ T65] Bluetooth: hci7: command tx timeout [ 883.696334][ T56] usb 7-1: config 0 descriptor?? [ 883.752804][ T39] audit: type=1326 audit(1720563511.549:3351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21976 comm="syz.3.5202" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbec0d75bd9 code=0x0 [ 883.905688][T21960] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 884.013701][T21982] sctp: [Deprecated]: syz.3.5202 (pid 21982) Use of int in max_burst socket option deprecated. [ 884.013701][T21982] Use struct sctp_assoc_value instead [ 884.228108][T21981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 884.231390][T21981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 884.241212][ T56] hid-generic 0003:0158:0100.0027: unknown main item tag 0x1 [ 884.244339][ T56] hid-generic 0003:0158:0100.0027: unexpected long global item [ 884.248055][ T56] hid-generic 0003:0158:0100.0027: probe with driver hid-generic failed with error -22 [ 884.437275][ T5259] usb 7-1: USB disconnect, device number 30 [ 884.786849][T21993] can: request_module (can-proto-0) failed. [ 885.049175][ T39] audit: type=1400 audit(1720563512.849:3352): avc: denied { watch watch_reads } for pid=22000 comm="syz.2.5210" path="/proc/462" dev="proc" ino=93704 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 885.103811][ T39] audit: type=1400 audit(1720563512.899:3353): avc: denied { mount } for pid=22004 comm="syz.3.5212" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 885.169419][ T39] audit: type=1326 audit(1720563512.969:3354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22000 comm="syz.2.5210" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d57175bd9 code=0x7fc00000 [ 885.179424][ T39] audit: type=1326 audit(1720563512.969:3355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22000 comm="syz.2.5210" exe="/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f3d57175bd9 code=0x7fc00000 [ 885.190922][ T39] audit: type=1326 audit(1720563512.979:3356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22000 comm="syz.2.5210" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d57175bd9 code=0x7fc00000 [ 885.199904][ T39] audit: type=1326 audit(1720563512.979:3357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22000 comm="syz.2.5210" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d57175bd9 code=0x7fc00000 [ 885.219151][T22012] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 885.226456][T22012] batadv_slave_0: entered allmulticast mode [ 885.316284][ T39] kauditd_printk_skb: 17 callbacks suppressed [ 885.316299][ T39] audit: type=1400 audit(1720563513.119:3375): avc: denied { create } for pid=22016 comm="syz.2.5217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 885.419917][ T39] audit: type=1400 audit(1720563513.219:3376): avc: denied { unmount } for pid=18918 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 885.563064][ T39] audit: type=1400 audit(1720563513.359:3377): avc: denied { write } for pid=22016 comm="syz.2.5217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 885.583216][T22031] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 885.596714][T22031] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 885.783402][ T65] Bluetooth: hci7: command tx timeout [ 886.338365][T22035] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5224'. [ 886.635254][T22043] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 887.604468][T22066] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 887.609262][T22066] batadv_slave_0: entered allmulticast mode [ 887.622414][T22065] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5236'. [ 887.629281][T22069] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 887.640972][ T39] audit: type=1400 audit(1720563515.439:3378): avc: denied { name_bind } for pid=22067 comm="syz.2.5238" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 887.686573][ T39] audit: type=1400 audit(1720563515.489:3379): avc: denied { listen } for pid=22073 comm="syz.2.5239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 887.740472][T22081] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5241'. [ 887.825076][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 888.155594][T22112] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5251'. [ 888.159255][T22112] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5251'. [ 888.644035][ T39] audit: type=1400 audit(1720563516.429:3380): avc: denied { create } for pid=22125 comm="syz.1.5256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 888.653039][ T39] audit: type=1400 audit(1720563516.449:3381): avc: denied { connect } for pid=22125 comm="syz.1.5256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 888.718429][T22139] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv_slave_1, syncid = 0, id = 0 [ 888.721501][T22135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 888.754957][T22136] futex_wake_op: syz.1.5258 tries to shift op by 32; fix this program [ 891.353636][T22166] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5269'. [ 891.503905][T22176] bridge0: port 3(erspan0) entered blocking state [ 891.506545][T22176] bridge0: port 3(erspan0) entered disabled state [ 891.508920][T22176] erspan0: entered allmulticast mode [ 891.511747][T22176] erspan0: entered promiscuous mode [ 891.515068][T22176] bridge0: port 3(erspan0) entered blocking state [ 891.518582][T22176] bridge0: port 3(erspan0) entered forwarding state [ 891.566698][ T39] audit: type=1400 audit(1720563519.369:3382): avc: denied { getopt } for pid=22180 comm="syz.2.5276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 892.439418][T19705] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 892.445733][T19705] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 892.449985][T19705] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 892.456603][T19705] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 892.462016][T19705] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 892.472032][T19705] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 892.661161][T22211] futex_wake_op: syz.3.5286 tries to shift op by 32; fix this program [ 892.674876][T22201] chnl_net:caif_netlink_parms(): no params data found [ 892.793003][T22201] bridge0: port 1(bridge_slave_0) entered blocking state [ 892.798319][T22201] bridge0: port 1(bridge_slave_0) entered disabled state [ 892.801917][T22201] bridge_slave_0: entered allmulticast mode [ 892.806588][T22201] bridge_slave_0: entered promiscuous mode [ 892.810478][T22201] bridge0: port 2(bridge_slave_1) entered blocking state [ 892.813922][T22201] bridge0: port 2(bridge_slave_1) entered disabled state [ 892.817235][T22201] bridge_slave_1: entered allmulticast mode [ 892.821311][T22201] bridge_slave_1: entered promiscuous mode [ 892.882641][T22201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 892.887398][T22227] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5291'. [ 892.890891][T22227] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5291'. [ 892.897770][T22201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 892.943681][ T817] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 892.960782][T22201] team0: Port device team_slave_0 added [ 892.965972][T22201] team0: Port device team_slave_1 added [ 893.029210][T22201] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 893.032316][T22201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 893.046172][T22201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 893.054414][T22201] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 893.057588][T22201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 893.069785][T22201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 893.143577][ T817] usb 8-1: Using ep0 maxpacket: 16 [ 893.147950][T22201] hsr_slave_0: entered promiscuous mode [ 893.151979][T22201] hsr_slave_1: entered promiscuous mode [ 893.155739][ T817] usb 8-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=9a.1d [ 893.155851][T22201] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 893.159599][ T817] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.162322][T22201] Cannot create hsr debugfs directory [ 893.167709][ T817] usb 8-1: Product: syz [ 893.170048][ T817] usb 8-1: Manufacturer: syz [ 893.172428][ T817] usb 8-1: SerialNumber: syz [ 893.181043][ T817] usb 8-1: config 0 descriptor?? [ 893.190258][ T817] ims_pcu 8-1:0.0: Missing CDC union descriptor [ 893.192995][ T817] ims_pcu 8-1:0.0: probe with driver ims_pcu failed with error -22 [ 893.349494][T22201] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 893.429274][T11786] usb 8-1: USB disconnect, device number 14 [ 893.502132][T22201] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 893.618823][T22201] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 893.709867][T22201] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 893.925699][T22201] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 893.936006][T22201] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 893.946795][T22201] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 893.965006][T22201] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 894.057943][T22201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 894.079253][T22201] 8021q: adding VLAN 0 to HW filter on device team0 [ 894.087135][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 894.089589][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 894.107145][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 894.110061][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 894.269398][T22201] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 894.314829][T22201] veth0_vlan: entered promiscuous mode [ 894.323713][T22201] veth1_vlan: entered promiscuous mode [ 894.340916][ T826] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 894.354293][T22201] veth0_macvtap: entered promiscuous mode [ 894.361216][T22201] veth1_macvtap: entered promiscuous mode [ 894.375147][T22201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 894.379639][T22201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 894.385358][T22201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 894.389499][T22201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 894.394946][T22201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 894.399162][T22201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 894.403135][T22201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 894.407785][T22201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 894.412157][T22201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 894.416592][T22201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 894.422391][T22201] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 894.432742][T22201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 894.439347][T22201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 894.443566][T22201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 894.447718][T22201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 894.451732][T22201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 894.456301][T22201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 894.460613][T22201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 894.465077][T22201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 894.469154][T22201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 894.473476][T22201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 894.477415][T22201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 894.481710][T22201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 894.485965][T22201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 894.490218][T22201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 894.496473][T22201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 894.500831][T22201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 894.506895][T22201] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 894.515942][T22201] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 894.519495][T22201] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 894.522917][T22201] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 894.527735][ T826] usb 8-1: Using ep0 maxpacket: 16 [ 894.527773][T22201] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 894.532241][ T826] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 894.539798][ T826] usb 8-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4 [ 894.544237][ T826] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 894.547639][ T826] usb 8-1: Product: syz [ 894.549554][ T826] usb 8-1: Manufacturer: syz [ 894.551467][ T826] usb 8-1: SerialNumber: syz [ 894.556170][ T826] usb 8-1: config 0 descriptor?? [ 894.573997][T19705] Bluetooth: hci8: command tx timeout [ 894.627131][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 894.633121][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 894.670741][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 894.674690][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 894.782739][ T826] usb 8-1: USB disconnect, device number 15 [ 895.013482][ T5240] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 895.133063][ T65] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 895.143932][ T65] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 895.149962][ T65] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 895.177288][ T65] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 895.190927][ T65] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 895.195371][ T65] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 895.220194][ T5240] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 895.225925][ T5240] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 895.230373][ T5240] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 895.246362][ T5240] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 895.274577][ T5240] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 895.278434][ T5240] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 895.281641][ T5240] usb 5-1: Manufacturer: syz [ 895.290375][ T5240] usb 5-1: config 0 descriptor?? [ 895.726083][ T5240] appleir 0003:05AC:8243.0028: unknown main item tag 0x0 [ 895.729867][ T5240] appleir 0003:05AC:8243.0028: No inputs registered, leaving [ 895.742316][ T1092] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.749624][ T5240] appleir 0003:05AC:8243.0028: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 895.895760][ T1092] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.959030][T22268] chnl_net:caif_netlink_parms(): no params data found [ 895.994472][ T1092] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.121276][ T1092] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.129391][T22268] bridge0: port 1(bridge_slave_0) entered blocking state [ 896.133008][T22268] bridge0: port 1(bridge_slave_0) entered disabled state [ 896.137300][T22268] bridge_slave_0: entered allmulticast mode [ 896.155858][T22268] bridge_slave_0: entered promiscuous mode [ 896.167031][T22268] bridge0: port 2(bridge_slave_1) entered blocking state [ 896.170281][T22268] bridge0: port 2(bridge_slave_1) entered disabled state [ 896.174552][T22268] bridge_slave_1: entered allmulticast mode [ 896.181229][T22268] bridge_slave_1: entered promiscuous mode [ 896.311599][T22268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 896.319937][T22268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 896.439598][T22268] team0: Port device team_slave_0 added [ 896.446701][T22268] team0: Port device team_slave_1 added [ 896.603240][T22268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 896.606924][T22268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 896.618019][T22268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 896.637092][T22268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 896.640698][T22268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 896.653602][T19705] Bluetooth: hci8: command tx timeout [ 896.657070][T22268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 896.758293][ T1092] erspan0: left allmulticast mode [ 896.762599][ T1092] erspan0: left promiscuous mode [ 896.766006][ T1092] bridge0: port 3(erspan0) entered disabled state [ 896.775943][ T1092] bridge_slave_1: left allmulticast mode [ 896.778836][ T1092] bridge_slave_1: left promiscuous mode [ 896.781750][ T1092] bridge0: port 2(bridge_slave_1) entered disabled state [ 896.788381][ T1092] bridge_slave_0: left allmulticast mode [ 896.791142][ T1092] bridge_slave_0: left promiscuous mode [ 896.795574][ T1092] bridge0: port 1(bridge_slave_0) entered disabled state [ 897.298667][T19705] Bluetooth: hci9: command tx timeout [ 897.306396][ T1092] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 897.313509][ T1092] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 897.320079][ T1092] bond0 (unregistering): Released all slaves [ 897.332570][T22268] hsr_slave_0: entered promiscuous mode [ 897.339288][T22268] hsr_slave_1: entered promiscuous mode [ 897.341803][T22268] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 897.344843][T22268] Cannot create hsr debugfs directory [ 897.879617][ T1092] hsr_slave_0: left promiscuous mode [ 897.887818][ T5240] usb 5-1: USB disconnect, device number 24 [ 897.894727][ T1092] hsr_slave_1: left promiscuous mode [ 897.900752][ T1092] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 897.965973][ T1092] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 897.968961][ T1092] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 898.075933][ T1092] veth1_macvtap: left promiscuous mode [ 898.078436][ T1092] veth0_macvtap: left promiscuous mode [ 898.743793][T19705] Bluetooth: hci8: command tx timeout [ 899.214317][T22326] futex_wake_op: syz.0.5316 tries to shift op by 32; fix this program [ 899.388681][T19705] Bluetooth: hci9: command tx timeout [ 899.739783][ T1092] team0 (unregistering): Port device team_slave_1 removed [ 899.753469][ T25] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 899.827748][ T1092] team0 (unregistering): Port device team_slave_0 removed [ 899.936573][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 899.947579][ T25] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=9a.1d [ 899.950730][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.954529][ T25] usb 5-1: Product: syz [ 899.956048][ T25] usb 5-1: Manufacturer: syz [ 899.957828][ T25] usb 5-1: SerialNumber: syz [ 899.962183][ T25] usb 5-1: config 0 descriptor?? [ 899.969442][ T25] ims_pcu 5-1:0.0: Missing CDC union descriptor [ 899.971930][ T25] ims_pcu 5-1:0.0: probe with driver ims_pcu failed with error -22 [ 900.178553][T11937] usb 5-1: USB disconnect, device number 25 [ 900.823631][T19705] Bluetooth: hci8: command tx timeout [ 901.131889][T22268] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 901.140899][T22268] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 901.157295][T22268] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 901.164630][T22268] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 901.271427][T22268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 901.300778][T22268] 8021q: adding VLAN 0 to HW filter on device team0 [ 901.316610][T11786] bridge0: port 1(bridge_slave_0) entered blocking state [ 901.319787][T11786] bridge0: port 1(bridge_slave_0) entered forwarding state [ 901.324775][T11786] bridge0: port 2(bridge_slave_1) entered blocking state [ 901.327877][T11786] bridge0: port 2(bridge_slave_1) entered forwarding state [ 901.412579][T22268] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 901.425730][T22268] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 901.454071][T19705] Bluetooth: hci9: command tx timeout [ 901.598060][T22268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 901.648924][T22268] veth0_vlan: entered promiscuous mode [ 901.668645][T22268] veth1_vlan: entered promiscuous mode [ 901.721082][T22268] veth0_macvtap: entered promiscuous mode [ 901.728191][T22268] veth1_macvtap: entered promiscuous mode [ 901.747710][T22268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 901.752221][T22268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 901.757707][T22268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 901.761898][T22268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 901.765805][T22268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 901.769507][T22268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 901.773052][T22268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 901.777914][T22268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 901.782065][T22268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 901.786856][T22268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 901.790707][T22268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 901.795282][T22268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 901.800091][T22268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 901.880418][T22268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 901.890140][T22268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 901.894594][T22268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 901.899100][T22268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 901.903147][T22268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 901.909090][T22268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 901.916570][T22268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 901.921000][T22268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 901.925738][T22268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 901.930550][T22268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 901.935027][T22268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 901.939846][T22268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 901.944103][T22268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 901.948479][T22268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 901.952756][T22268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 901.957338][T22268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 901.963688][T22268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 901.975089][T22268] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 901.981890][T22268] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 901.991745][T22268] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 901.996934][T22268] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 902.155741][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 902.159200][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 902.209986][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 902.215152][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 903.163516][T22396] ======================================================= [ 903.163516][T22396] WARNING: The mand mount option has been deprecated and [ 903.163516][T22396] and is ignored by this kernel. Remove the mand [ 903.163516][T22396] option from the mount to silence this warning. [ 903.163516][T22396] ======================================================= [ 903.190593][ T39] audit: type=1400 audit(1720563530.989:3383): avc: denied { mount } for pid=22389 comm="syz.3.5330" name="/" dev="ramfs" ino=95589 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 903.393542][ T65] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 903.403271][ T65] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 903.407720][ T65] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 903.417837][ T65] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 903.422900][ T65] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 903.427088][ T65] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 903.534448][T19705] Bluetooth: hci9: command tx timeout [ 903.563515][ T817] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 903.668185][T22398] chnl_net:caif_netlink_parms(): no params data found [ 903.767408][ T817] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 903.771562][ T817] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 903.781893][ T817] usb 8-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 903.786327][ T817] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.792407][ T817] usb 8-1: config 0 descriptor?? [ 903.954219][T22398] bridge0: port 1(bridge_slave_0) entered blocking state [ 903.958229][T22398] bridge0: port 1(bridge_slave_0) entered disabled state [ 903.962415][T22398] bridge_slave_0: entered allmulticast mode [ 903.968709][T22398] bridge_slave_0: entered promiscuous mode [ 903.976932][T22398] bridge0: port 2(bridge_slave_1) entered blocking state [ 903.980072][T22398] bridge0: port 2(bridge_slave_1) entered disabled state [ 903.983835][T22398] bridge_slave_1: entered allmulticast mode [ 903.988654][T22398] bridge_slave_1: entered promiscuous mode [ 904.586266][T22398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 904.606697][T22398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 904.690772][T22398] team0: Port device team_slave_0 added [ 904.698204][T22398] team0: Port device team_slave_1 added [ 904.779438][T22398] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 904.785682][T22398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 904.799425][T22398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 904.808141][T22398] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 904.811400][T22398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 904.818266][ T39] audit: type=1400 audit(1720563532.619:3384): avc: denied { append } for pid=22423 comm="syz.2.5339" name="renderD128" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 904.833451][T22398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 904.925559][T22398] hsr_slave_0: entered promiscuous mode [ 904.931313][T22398] hsr_slave_1: entered promiscuous mode [ 904.943040][T22398] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 904.950650][T22398] Cannot create hsr debugfs directory [ 905.118340][T22398] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.174569][ T817] usbhid 8-1:0.0: can't add hid device: -71 [ 905.176971][ T817] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 905.187656][ T817] usb 8-1: USB disconnect, device number 16 [ 905.247190][T22398] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.323645][ T827] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 905.465424][T19705] Bluetooth: hci4: command tx timeout [ 905.537738][ T827] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 905.542040][ T827] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 905.546870][ T827] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.559217][ T827] usb 7-1: config 0 descriptor?? [ 905.584987][ T39] audit: type=1400 audit(1720563533.339:3385): avc: denied { unmount } for pid=18918 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 905.666863][T22398] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 905.699023][T22439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5342'. [ 905.703526][T22439] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5342'. [ 905.710589][T19705] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 905.715652][T19705] CPU: 0 PID: 19705 Comm: kworker/u33:2 Not tainted 6.10.0-rc7-syzkaller-00012-g34afb82a3c67 #0 [ 905.719479][T19705] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 905.723621][T19705] Workqueue: hci2 hci_rx_work [ 905.725557][T19705] Call Trace: [ 905.726800][T19705] [ 905.728038][T19705] dump_stack_lvl+0x16c/0x1f0 [ 905.730084][T19705] sysfs_warn_dup+0x7f/0xa0 [ 905.731743][T19705] sysfs_create_dir_ns+0x24d/0x2b0 [ 905.733739][T19705] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 905.736125][T19705] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 905.738039][T19705] ? do_raw_spin_unlock+0x172/0x230 [ 905.740076][T19705] kobject_add_internal+0x2c8/0x990 [ 905.742016][T19705] kobject_add+0x16f/0x240 [ 905.743930][T19705] ? __pfx_kobject_add+0x10/0x10 [ 905.745624][T19705] ? do_raw_spin_unlock+0x172/0x230 [ 905.747620][T19705] ? kobject_put+0xbe/0x5b0 [ 905.749577][T19705] device_add+0x289/0x1a70 [ 905.751489][T19705] ? __pfx_dev_set_name+0x10/0x10 [ 905.753189][T19705] ? __pfx_device_add+0x10/0x10 [ 905.755198][T19705] ? mgmt_send_event_skb+0x2f0/0x460 [ 905.757492][T19705] hci_conn_add_sysfs+0x17e/0x230 [ 905.759585][T19705] le_conn_complete_evt+0x1078/0x1d80 [ 905.761901][T19705] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 905.764357][T19705] ? trace_contention_end+0xea/0x140 [ 905.766572][T19705] ? __mutex_lock+0x1a6/0x9c0 [ 905.768549][T19705] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 905.770506][T19705] ? skb_pull_data+0x166/0x210 [ 905.771983][T19705] hci_le_meta_evt+0x2e2/0x5d0 [ 905.773927][T19705] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 905.776580][T19705] hci_event_packet+0x664/0x1170 [ 905.778278][T19705] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 905.779837][T19705] ? __pfx_hci_event_packet+0x10/0x10 [ 905.786549][T19705] ? mark_held_locks+0x9f/0xe0 [ 905.788530][T19705] ? kcov_remote_start+0x3d1/0x6e0 [ 905.790677][T19705] ? lockdep_hardirqs_on+0x7c/0x110 [ 905.792824][T19705] hci_rx_work+0x2c4/0x1610 [ 905.794732][T19705] process_one_work+0x9c5/0x1b40 [ 905.796787][T19705] ? __pfx_lock_acquire+0x10/0x10 [ 905.798860][T19705] ? __pfx_process_one_work+0x10/0x10 [ 905.801082][T19705] ? assign_work+0x1a0/0x250 [ 905.803073][T19705] worker_thread+0x6c8/0xf30 [ 905.805001][T19705] ? __kthread_parkme+0x148/0x220 [ 905.807081][T19705] ? __pfx_worker_thread+0x10/0x10 [ 905.809198][T19705] kthread+0x2c1/0x3a0 [ 905.810892][ T827] ath6kl: Failed to submit usb control message: -71 [ 905.810900][T19705] ? _raw_spin_unlock_irq+0x23/0x50 [ 905.816038][T19705] ? __pfx_kthread+0x10/0x10 [ 905.817944][T19705] ret_from_fork+0x45/0x80 [ 905.818576][ T827] ath6kl: unable to send the bmi data to the device: -71 [ 905.819769][T19705] ? __pfx_kthread+0x10/0x10 [ 905.822800][ T827] ath6kl: Unable to send get target info: -71 [ 905.824678][T19705] ret_from_fork_asm+0x1a/0x30 [ 905.824709][T19705] [ 905.834769][T19705] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 905.840649][T19705] Bluetooth: hci2: failed to register connection device [ 905.864894][ T827] ath6kl: Failed to init ath6kl core: -71 [ 905.870834][ T827] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 905.891240][ T827] usb 7-1: USB disconnect, device number 31 [ 905.892955][T22398] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 906.119717][T22398] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 906.138960][T22398] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 906.146083][T22398] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 906.162043][T22398] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 906.267235][T22398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 906.290708][T22398] 8021q: adding VLAN 0 to HW filter on device team0 [ 906.299895][ T5240] bridge0: port 1(bridge_slave_0) entered blocking state [ 906.302874][ T5240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 906.318489][ T5240] bridge0: port 2(bridge_slave_1) entered blocking state [ 906.321803][ T5240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 906.327799][T22448] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5345'. [ 906.844845][T22398] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 906.907484][T22398] veth0_vlan: entered promiscuous mode [ 906.924684][T22398] veth1_vlan: entered promiscuous mode [ 906.959952][T22398] veth0_macvtap: entered promiscuous mode [ 906.983872][T22398] veth1_macvtap: entered promiscuous mode [ 906.998229][T22398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 907.001754][T22398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 907.005888][T22398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 907.009862][T22398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 907.013862][T22398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 907.018086][T22398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 907.022345][T22398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 907.027228][T22398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 907.031423][T22398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 907.038773][T22398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 907.042976][T22398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 907.047673][T22398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 907.051076][T22398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 907.057039][T22398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 907.061575][T22398] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 907.072052][T22398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 907.077404][T22398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 907.081486][T22398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 907.086146][T22398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 907.089517][T22398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 907.094255][T22398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 907.097894][T22398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 907.101766][T22398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 907.105357][T22398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 907.109030][T22398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 907.112891][T22398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 907.117113][T22398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 907.120704][T22398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 907.124921][T22398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 907.128920][T22398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 907.138114][T22398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 907.142480][T22398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 907.147051][T22398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 907.153180][T22398] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 907.162493][T22398] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.167905][T22398] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.171551][T22398] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.175485][T22398] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.193448][ T25] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 907.261980][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 907.276371][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 907.300319][ T101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 907.314973][ T101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 907.371281][T22467] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 907.380914][T22467] batadv_slave_0: entered allmulticast mode [ 907.383458][ T25] usb 7-1: Using ep0 maxpacket: 16 [ 907.389162][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 131, changing to 11 [ 907.397482][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 58686, setting to 1024 [ 907.401208][ T25] usb 7-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 907.413881][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 907.423954][ T25] usb 7-1: config 0 descriptor?? [ 907.426846][T22461] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 907.533761][T19705] Bluetooth: hci4: command tx timeout [ 907.968319][T22479] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5353'. [ 907.972547][T22479] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5353'. [ 907.981692][T19705] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci8/hci8:201' [ 907.986597][T19705] CPU: 3 PID: 19705 Comm: kworker/u33:2 Not tainted 6.10.0-rc7-syzkaller-00012-g34afb82a3c67 #0 [ 907.990888][T19705] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 907.995182][T19705] Workqueue: hci8 hci_rx_work [ 907.997130][T19705] Call Trace: [ 907.998532][T19705] [ 907.999730][T19705] dump_stack_lvl+0x16c/0x1f0 [ 908.001677][T19705] sysfs_warn_dup+0x7f/0xa0 [ 908.003537][T19705] sysfs_create_dir_ns+0x24d/0x2b0 [ 908.005676][T19705] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 908.007987][T19705] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 908.010212][T19705] ? do_raw_spin_unlock+0x172/0x230 [ 908.012359][T19705] kobject_add_internal+0x2c8/0x990 [ 908.014327][T19705] kobject_add+0x16f/0x240 [ 908.016266][T19705] ? __pfx_kobject_add+0x10/0x10 [ 908.018291][T19705] ? do_raw_spin_unlock+0x172/0x230 [ 908.020415][T19705] ? kobject_put+0xbe/0x5b0 [ 908.022182][T19705] device_add+0x289/0x1a70 [ 908.024042][T19705] ? __pfx_dev_set_name+0x10/0x10 [ 908.026130][T19705] ? __pfx_device_add+0x10/0x10 [ 908.028289][T19705] ? mgmt_send_event_skb+0x2f0/0x460 [ 908.030492][T19705] hci_conn_add_sysfs+0x17e/0x230 [ 908.032512][T19705] le_conn_complete_evt+0x1078/0x1d80 [ 908.034619][T19705] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 908.037060][T19705] ? trace_contention_end+0xea/0x140 [ 908.039385][T19705] ? __mutex_lock+0x1a6/0x9c0 [ 908.041454][T19705] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 908.043860][T19705] ? skb_pull_data+0x166/0x210 [ 908.044521][ T5240] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 908.045703][T19705] hci_le_meta_evt+0x2e2/0x5d0 [ 908.050534][T19705] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 908.053308][T19705] hci_event_packet+0x664/0x1170 [ 908.055372][T19705] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 908.057648][T19705] ? __pfx_hci_event_packet+0x10/0x10 [ 908.059902][T19705] ? mark_held_locks+0x9f/0xe0 [ 908.061898][T19705] ? kcov_remote_start+0x3d1/0x6e0 [ 908.064091][T19705] ? lockdep_hardirqs_on+0x7c/0x110 [ 908.066284][T19705] hci_rx_work+0x2c4/0x1610 [ 908.067997][T19705] process_one_work+0x9c5/0x1b40 [ 908.069919][T19705] ? __pfx_lock_acquire+0x10/0x10 [ 908.071849][T19705] ? __pfx_process_one_work+0x10/0x10 [ 908.074027][T19705] ? assign_work+0x1a0/0x250 [ 908.075765][T19705] worker_thread+0x6c8/0xf30 [ 908.077684][T19705] ? __kthread_parkme+0x148/0x220 [ 908.079498][T19705] ? __pfx_worker_thread+0x10/0x10 [ 908.081588][T19705] kthread+0x2c1/0x3a0 [ 908.083343][T19705] ? _raw_spin_unlock_irq+0x23/0x50 [ 908.085590][T19705] ? __pfx_kthread+0x10/0x10 [ 908.087628][T19705] ret_from_fork+0x45/0x80 [ 908.089594][T19705] ? __pfx_kthread+0x10/0x10 [ 908.091709][T19705] ret_from_fork_asm+0x1a/0x30 [ 908.093858][T19705] [ 908.096931][T22460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 908.098096][T19705] kobject: kobject_add_internal failed for hci8:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 908.100394][T22460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 908.105435][T19705] Bluetooth: hci8: failed to register connection device [ 908.111449][T19705] Bluetooth: hci8: command tx timeout [ 908.143545][ T25] hid-generic 0003:0158:0100.0029: unknown main item tag 0x1 [ 908.147200][ T25] hid-generic 0003:0158:0100.0029: unexpected long global item [ 908.151165][ T25] hid-generic 0003:0158:0100.0029: probe with driver hid-generic failed with error -22 [ 908.233526][ T5240] usb 8-1: Using ep0 maxpacket: 32 [ 908.238330][ T5240] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 908.241925][ T5240] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 908.246936][ T5240] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 908.250681][ T5240] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 908.256092][ T5240] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 908.259534][ T5240] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 908.269981][ T5240] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 908.274290][ T5240] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.280215][ T5240] usb 8-1: config 0 descriptor?? [ 908.351955][ T5199] usb 7-1: USB disconnect, device number 32 [ 908.586451][T19705] Bluetooth: hci5: command 0x0406 tx timeout [ 908.799088][T22496] warning: `syz.0.5358' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 909.305023][ T39] audit: type=1400 audit(1720563537.109:3386): avc: denied { listen } for pid=22506 comm="syz.2.5362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 909.613517][ T65] Bluetooth: hci4: command tx timeout [ 910.243578][ T5199] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 910.423528][ T5199] usb 7-1: Using ep0 maxpacket: 8 [ 910.427646][ T5199] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 910.431990][ T5199] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 910.435882][ T5199] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 910.439565][ T5199] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 910.444608][ T5199] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 910.449736][ T5199] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 910.664400][ T5199] usb 7-1: GET_CAPABILITIES returned 0 [ 910.666582][ T5199] usbtmc 7-1:16.0: can't read capabilities [ 910.800689][ T5240] usblp 8-1:0.0: usblp1: USB Bidirectional printer dev 17 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 910.807758][ T5240] usb 8-1: USB disconnect, device number 17 [ 910.813028][ T5240] usblp1: removed [ 910.815878][ T65] Bluetooth: hci8: command tx timeout [ 910.840267][ T4688] udevd[4688]: worker [21849] terminated by signal 33 (Unknown signal 33) [ 910.871021][ C1] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 910.875744][T22513] usbtmc 7-1:16.0: Unable to send data, error -71 [ 910.880412][T21132] usb 7-1: USB disconnect, device number 33 [ 911.703560][ T65] Bluetooth: hci4: command tx timeout [ 911.904938][T22534] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 911.951045][T22536] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5371'. [ 912.203478][T16771] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 912.384863][T16771] usb 8-1: Using ep0 maxpacket: 32 [ 912.389979][T16771] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 912.400153][T16771] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 912.403966][T16771] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 912.407322][T16771] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 912.411081][T16771] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 912.424468][T16771] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 912.433519][T16771] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 912.437275][T16771] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 912.455421][T16771] usb 8-1: config 0 descriptor?? [ 912.671298][ T39] audit: type=1400 audit(1720563540.469:3387): avc: denied { map } for pid=22545 comm="syz.1.5376" path="socket:[96976]" dev="sockfs" ino=96976 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 912.685442][ T39] audit: type=1400 audit(1720563540.469:3388): avc: denied { read } for pid=22545 comm="syz.1.5376" path="socket:[96976]" dev="sockfs" ino=96976 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 912.767371][T22550] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5377'. [ 912.771853][T22550] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5377'. [ 912.782083][T19705] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 912.793418][T19705] CPU: 3 PID: 19705 Comm: kworker/u33:2 Not tainted 6.10.0-rc7-syzkaller-00012-g34afb82a3c67 #0 [ 912.797809][T19705] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 912.802030][T19705] Workqueue: hci4 hci_rx_work [ 912.803990][T19705] Call Trace: [ 912.805474][T19705] [ 912.806788][T19705] dump_stack_lvl+0x16c/0x1f0 [ 912.808883][T19705] sysfs_warn_dup+0x7f/0xa0 [ 912.810857][T19705] sysfs_create_dir_ns+0x24d/0x2b0 [ 912.812957][T19705] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 912.815357][T19705] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 912.817602][T19705] ? do_raw_spin_unlock+0x172/0x230 [ 912.819805][T19705] kobject_add_internal+0x2c8/0x990 [ 912.821942][T19705] kobject_add+0x16f/0x240 [ 912.823836][T19705] ? __pfx_kobject_add+0x10/0x10 [ 912.825965][T19705] ? kobject_put+0xbe/0x5b0 [ 912.827851][T19705] device_add+0x289/0x1a70 [ 912.829814][T19705] ? __pfx_dev_set_name+0x10/0x10 [ 912.831890][T19705] ? __pfx_device_add+0x10/0x10 [ 912.833958][T19705] ? mgmt_send_event_skb+0x2f0/0x460 [ 912.836019][T19705] hci_conn_add_sysfs+0x17e/0x230 [ 912.837841][T19705] le_conn_complete_evt+0x1078/0x1d80 [ 912.839865][T19705] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 912.841838][T19705] ? trace_contention_end+0xea/0x140 [ 912.843949][T19705] ? __mutex_lock+0x1a6/0x9c0 [ 912.845627][T19705] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 912.848159][T19705] ? skb_pull_data+0x166/0x210 [ 912.850212][T19705] hci_le_meta_evt+0x2e2/0x5d0 [ 912.852261][T19705] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 912.854747][T19705] hci_event_packet+0x664/0x1170 [ 912.856724][T19705] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 912.858934][T19705] ? __pfx_hci_event_packet+0x10/0x10 [ 912.861145][T19705] ? mark_held_locks+0x9f/0xe0 [ 912.863197][T19705] ? kcov_remote_start+0x3d1/0x6e0 [ 912.865086][T19705] ? lockdep_hardirqs_on+0x7c/0x110 [ 912.866839][T19705] hci_rx_work+0x2c4/0x1610 [ 912.868761][T19705] process_one_work+0x9c5/0x1b40 [ 912.870861][T19705] ? __pfx_lock_acquire+0x10/0x10 [ 912.873010][T19705] ? __pfx_process_one_work+0x10/0x10 [ 912.875291][T19705] ? assign_work+0x1a0/0x250 [ 912.877258][T19705] worker_thread+0x6c8/0xf30 [ 912.879212][T19705] ? __kthread_parkme+0x148/0x220 [ 912.881330][T19705] ? __pfx_worker_thread+0x10/0x10 [ 912.883413][T19705] kthread+0x2c1/0x3a0 [ 912.884932][T19705] ? _raw_spin_unlock_irq+0x23/0x50 [ 912.886805][T19705] ? __pfx_kthread+0x10/0x10 [ 912.888625][T19705] ret_from_fork+0x45/0x80 [ 912.890239][T19705] ? __pfx_kthread+0x10/0x10 [ 912.892060][T19705] ret_from_fork_asm+0x1a/0x30 [ 912.894039][T19705] [ 912.896608][T19705] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 912.902924][T19705] Bluetooth: hci4: failed to register connection device [ 913.666685][ T39] audit: type=1400 audit(1720563541.469:3389): avc: denied { getopt } for pid=22562 comm="syz.1.5380" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 914.443625][T22577] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 914.664795][T19705] Bluetooth: hci9: SCO packet for unknown connection handle 1039 [ 914.669113][T22588] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5388'. [ 914.683471][T22588] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5388'. [ 914.695634][T19705] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 914.988156][T16771] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 18 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 915.019499][T16771] usb 8-1: USB disconnect, device number 18 [ 915.029938][T16771] usblp0: removed [ 915.383517][T22433] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 915.493764][T16771] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 915.570406][T22433] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 915.575458][T22433] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 915.579683][T22433] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 915.586061][T22433] usb 7-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 915.589860][T22433] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 915.595238][T22433] usb 7-1: config 0 descriptor?? [ 915.678057][T16771] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 915.682980][T16771] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 915.687594][T16771] usb 8-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 915.692345][T16771] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 915.706998][T16771] usb 8-1: config 0 descriptor?? [ 916.011212][T22433] hid-led 0003:1294:1320.002A: hidraw1: USB HID v0.00 Device [HID 1294:1320] on usb-dummy_hcd.2-1/input0 [ 916.020741][T22433] hid-led 0003:1294:1320.002A: Riso Kagaku Webmail Notifier initialized [ 916.135026][T16771] hid-rmi 0003:06CB:81A7.002B: unknown main item tag 0x0 [ 916.138286][T16771] hid-rmi 0003:06CB:81A7.002B: unknown main item tag 0x0 [ 916.141483][T16771] hid-rmi 0003:06CB:81A7.002B: item fetching failed at offset 4/5 [ 916.152306][T16771] hid-rmi 0003:06CB:81A7.002B: parse failed [ 916.155175][T16771] hid-rmi 0003:06CB:81A7.002B: probe with driver hid-rmi failed with error -22 [ 916.207383][ T5259] usb 7-1: USB disconnect, device number 34 [ 916.216282][T16771] leds riso_kagaku1:blue: Setting an LED's brightness failed (-38) [ 916.223119][T16771] leds riso_kagaku1:green: Setting an LED's brightness failed (-38) [ 916.228478][T16771] leds riso_kagaku1:red: Setting an LED's brightness failed (-38) [ 916.320471][T16771] usb 8-1: USB disconnect, device number 19 [ 916.631855][T19705] Bluetooth: hci8: SCO packet for unknown connection handle 1039 [ 917.003562][ T25] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 917.190435][ T25] usb 7-1: Using ep0 maxpacket: 32 [ 917.202263][ T25] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 917.208130][ T25] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 917.210666][T22627] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 917.211939][ T25] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 917.228985][ T25] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 917.233282][ T25] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 917.237912][ T25] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 917.248018][ T25] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 917.251460][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.260197][ T25] usb 7-1: config 0 descriptor?? [ 917.928945][ T39] audit: type=1400 audit(2000000000.180:3390): avc: denied { load_policy } for pid=22632 comm="syz.3.5402" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 918.530513][ T65] Bluetooth: hci4: SCO packet for unknown connection handle 1039 [ 918.593677][T16771] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 918.701489][T22651] input: syz0 as /devices/virtual/input/input54 [ 918.793530][T16771] usb 8-1: Using ep0 maxpacket: 16 [ 918.797246][T16771] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 131, changing to 11 [ 918.803497][T16771] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 58686, setting to 1024 [ 918.811669][T16771] usb 8-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 918.816197][T16771] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 918.822786][T16771] usb 8-1: config 0 descriptor?? [ 918.826255][T22641] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 919.532140][T22640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 919.536230][T22640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 919.548146][T16771] hid-generic 0003:0158:0100.002C: unknown main item tag 0x1 [ 919.552865][T16771] hid-generic 0003:0158:0100.002C: unexpected long global item [ 919.557503][T16771] hid-generic 0003:0158:0100.002C: probe with driver hid-generic failed with error -22 [ 919.749309][T16771] usb 8-1: USB disconnect, device number 20 [ 919.770530][ T25] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 35 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 919.779548][ T25] usb 7-1: USB disconnect, device number 35 [ 919.784890][ T25] usblp0: removed [ 919.892149][T22672] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5416'. [ 919.896515][T22672] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5416'. [ 919.902330][ T65] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci9/hci9:201' [ 919.906752][ T65] CPU: 0 PID: 65 Comm: kworker/u33:0 Not tainted 6.10.0-rc7-syzkaller-00012-g34afb82a3c67 #0 [ 919.910916][ T65] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 919.915557][ T65] Workqueue: hci9 hci_rx_work [ 919.917725][ T65] Call Trace: [ 919.919202][ T65] [ 919.920554][ T65] dump_stack_lvl+0x16c/0x1f0 [ 919.922855][ T65] sysfs_warn_dup+0x7f/0xa0 [ 919.924925][ T65] sysfs_create_dir_ns+0x24d/0x2b0 [ 919.927241][ T65] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 919.930021][ T65] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 919.932357][ T65] ? do_raw_spin_unlock+0x172/0x230 [ 919.934493][ T65] kobject_add_internal+0x2c8/0x990 [ 919.936502][ T65] kobject_add+0x16f/0x240 [ 919.938091][ T65] ? __pfx_kobject_add+0x10/0x10 [ 919.939826][ T65] ? do_raw_spin_unlock+0x172/0x230 [ 919.941726][ T65] ? kobject_put+0xbe/0x5b0 [ 919.943609][ T65] device_add+0x289/0x1a70 [ 919.945163][ T65] ? __pfx_dev_set_name+0x10/0x10 [ 919.946828][ T65] ? __pfx_device_add+0x10/0x10 [ 919.948946][ T65] ? mgmt_send_event_skb+0x2f0/0x460 [ 919.951328][ T65] hci_conn_add_sysfs+0x17e/0x230 [ 919.953117][ T65] le_conn_complete_evt+0x1078/0x1d80 [ 919.955060][ T65] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 919.957412][ T65] ? trace_contention_end+0xea/0x140 [ 919.959680][ T65] ? __mutex_lock+0x1a6/0x9c0 [ 919.961698][ T65] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 919.964077][ T65] ? skb_pull_data+0x166/0x210 [ 919.966547][ T65] hci_le_meta_evt+0x2e2/0x5d0 [ 919.969180][ T65] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 919.972507][ T65] hci_event_packet+0x664/0x1170 [ 919.974853][ T65] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 919.977232][ T65] ? __pfx_hci_event_packet+0x10/0x10 [ 919.979605][ T65] ? mark_held_locks+0x9f/0xe0 [ 919.981801][ T65] ? kcov_remote_start+0x3d1/0x6e0 [ 919.984097][ T65] ? lockdep_hardirqs_on+0x7c/0x110 [ 919.986329][ T65] hci_rx_work+0x2c4/0x1610 [ 919.988275][ T65] process_one_work+0x9c5/0x1b40 [ 919.990298][ T65] ? __pfx_lock_acquire+0x10/0x10 [ 919.992393][ T65] ? __pfx_process_one_work+0x10/0x10 [ 919.994762][ T65] ? assign_work+0x1a0/0x250 [ 919.996864][ T65] worker_thread+0x6c8/0xf30 [ 919.999404][ T65] ? __pfx_worker_thread+0x10/0x10 [ 920.001648][ T65] kthread+0x2c1/0x3a0 [ 920.003367][ T65] ? _raw_spin_unlock_irq+0x23/0x50 [ 920.005659][ T65] ? __pfx_kthread+0x10/0x10 [ 920.007642][ T65] ret_from_fork+0x45/0x80 [ 920.009270][ T65] ? __pfx_kthread+0x10/0x10 [ 920.011136][ T65] ret_from_fork_asm+0x1a/0x30 [ 920.012972][ T65] [ 920.019080][ T65] kobject: kobject_add_internal failed for hci9:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 920.023995][ T65] Bluetooth: hci9: failed to register connection device [ 921.054074][ T56] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 921.244064][ T56] usb 8-1: Using ep0 maxpacket: 8 [ 921.254672][ T56] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 921.258372][ T56] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 921.262619][ T56] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 921.274454][ T56] usb 8-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 921.278661][ T56] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 921.278817][ T39] audit: type=1400 audit(2000000003.530:3391): avc: denied { connect } for pid=22693 comm="syz.0.5423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 921.286488][ T56] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 921.296399][ T56] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.320231][ T56] usbtmc 8-1:16.0: bulk endpoints not found [ 921.391694][T19705] Bluetooth: hci9: SCO packet for unknown connection handle 1039 [ 921.556682][T22705] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5426'. [ 921.568621][T22705] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5426'. [ 921.589842][T19705] Bluetooth: hci9: Ignoring HCI_Connection_Complete for existing connection [ 922.298852][ T39] audit: type=1400 audit(2000000004.550:3392): avc: denied { setattr } for pid=22721 comm="syz.2.5432" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 923.067561][T19705] Bluetooth: hci4: SCO packet for unknown connection handle 1039 [ 923.155032][T22731] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5435'. [ 923.162128][T22731] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5435'. [ 923.189754][T19705] Bluetooth: hci8: Ignoring HCI_Connection_Complete for existing connection [ 923.367574][T22741] macsec1: entered promiscuous mode [ 923.370121][T22741] macvlan1: entered promiscuous mode [ 923.372895][T22741] macsec1: entered allmulticast mode [ 923.379676][T22741] macvlan1: entered allmulticast mode [ 923.381987][T22741] veth1_vlan: entered allmulticast mode [ 923.388116][T22741] macvlan1: left allmulticast mode [ 923.390410][T22741] veth1_vlan: left allmulticast mode [ 923.392699][T22741] macvlan1: left promiscuous mode [ 923.757897][T22433] usb 8-1: USB disconnect, device number 21 [ 923.933616][T19705] Bluetooth: hci3: command 0x0406 tx timeout [ 924.003457][T16771] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 924.185060][T16771] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 924.189070][T16771] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 924.192623][T16771] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.197713][T16771] usb 5-1: config 0 descriptor?? [ 924.403954][T16771] ath6kl: Failed to submit usb control message: -71 [ 924.408458][T16771] ath6kl: unable to send the bmi data to the device: -71 [ 924.411526][T16771] ath6kl: Unable to send get target info: -71 [ 924.434027][T16771] ath6kl: Failed to init ath6kl core: -71 [ 924.436785][T16771] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 924.446157][T16771] usb 5-1: USB disconnect, device number 26 [ 924.968427][T19705] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 924.969415][T19705] Bluetooth: hci2: SCO packet for unknown connection handle 1039 [ 925.724980][T22789] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 926.660253][T22804] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5455'. [ 926.696572][T22804] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5455'. [ 927.143508][T16771] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 927.335458][T16771] usb 8-1: config index 0 descriptor too short (expected 9533, got 36) [ 927.339162][T16771] usb 8-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 927.342878][T16771] usb 8-1: config 161 has an invalid interface descriptor of length 7, skipping [ 927.346868][T16771] usb 8-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 927.351351][T16771] usb 8-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 927.355406][T16771] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 927.359683][T16771] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.598087][ T5199] usb 8-1: USB disconnect, device number 22 [ 928.962001][T22836] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 930.767633][T22876] atomic_op ffff88802f473998 conn xmit_atomic 0000000000000000 [ 930.781784][T22876] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5475'. [ 930.789520][T22876] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5475'. [ 930.795190][T22876] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5475'. [ 930.843962][ T6261] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 931.038057][ T6261] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 931.041518][ T6261] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 931.045530][ T6261] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 931.050776][ T6261] usb 7-1: config 0 descriptor?? [ 931.261969][ T6261] ath6kl: Failed to submit usb control message: -71 [ 931.265711][ T6261] ath6kl: unable to send the bmi data to the device: -71 [ 931.268616][ T6261] ath6kl: Unable to send get target info: -71 [ 931.289155][ T6261] ath6kl: Failed to init ath6kl core: -71 [ 931.292126][ T6261] ath6kl_usb 7-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 931.306037][ T6261] usb 7-1: USB disconnect, device number 36 [ 932.184236][T22894] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 933.375576][ T5240] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 933.572428][ T5240] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 933.583768][ T5240] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 933.587805][ T5240] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.593486][ T5240] usb 5-1: config 0 descriptor?? [ 933.733245][T22939] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5493'. [ 933.741407][T22939] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5493'. [ 933.837047][ T5240] ath6kl: Failed to submit usb control message: -71 [ 933.851523][ T5240] ath6kl: unable to send the bmi data to the device: -71 [ 933.859585][ T5240] ath6kl: Unable to send get target info: -71 [ 933.909586][ T5240] ath6kl: Failed to init ath6kl core: -71 [ 933.912885][ T5240] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 933.944474][ T5240] usb 5-1: USB disconnect, device number 27 [ 934.173529][ T6261] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 934.173704][T19705] Bluetooth: hci6: command 0x0406 tx timeout [ 934.365558][ T6261] usb 8-1: config index 0 descriptor too short (expected 9533, got 36) [ 934.369419][ T6261] usb 8-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 934.372519][ T6261] usb 8-1: config 161 has an invalid interface descriptor of length 7, skipping [ 934.377989][ T6261] usb 8-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 934.381507][ T6261] usb 8-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 934.384882][ T6261] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 934.388077][ T6261] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 934.634518][ T6261] usb 8-1: USB disconnect, device number 23 [ 934.703733][T19705] Bluetooth: hci4: SCO packet for unknown connection handle 1039 [ 935.087165][T22965] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 935.926329][T22985] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5505'. [ 936.063491][T11786] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 936.246262][T11786] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 936.250361][T11786] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 936.254794][T11786] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 936.260085][T11786] usb 5-1: config 0 descriptor?? [ 936.358928][T23003] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5509'. [ 936.474369][T11786] ath6kl: Failed to submit usb control message: -71 [ 936.477283][T11786] ath6kl: unable to send the bmi data to the device: -71 [ 936.479708][T11786] ath6kl: Unable to send get target info: -71 [ 936.487232][T11786] ath6kl: Failed to init ath6kl core: -71 [ 936.490204][T11786] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 936.503534][T11786] usb 5-1: USB disconnect, device number 28 [ 937.217500][ T1358] ieee802154 phy0 wpan0: encryption failed: -22 [ 937.220049][ T1358] ieee802154 phy1 wpan1: encryption failed: -22 [ 937.637578][ T39] audit: type=1326 audit(2000000019.890:3393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23036 comm="syz.1.5517" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72f0175bd9 code=0x7ffc0000 [ 937.647279][ T39] audit: type=1326 audit(2000000019.890:3394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23036 comm="syz.1.5517" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72f0175bd9 code=0x7ffc0000 [ 937.661489][ T39] audit: type=1326 audit(2000000019.900:3395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23036 comm="syz.1.5517" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f72f0175bd9 code=0x7ffc0000 [ 937.673236][ T39] audit: type=1326 audit(2000000019.910:3396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23036 comm="syz.1.5517" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72f0175bd9 code=0x7ffc0000 [ 937.688163][ T39] audit: type=1326 audit(2000000019.910:3397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23036 comm="syz.1.5517" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f72f0175bd9 code=0x7ffc0000 [ 937.699975][ T39] audit: type=1326 audit(2000000019.920:3398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23036 comm="syz.1.5517" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72f0175bd9 code=0x7ffc0000 [ 937.713557][ T39] audit: type=1326 audit(2000000019.920:3399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23036 comm="syz.1.5517" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72f0175bd9 code=0x7ffc0000 [ 937.723072][ T39] audit: type=1326 audit(2000000019.920:3400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23036 comm="syz.1.5517" exe="/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f72f0175bd9 code=0x7ffc0000 [ 937.732031][T23037] xt_TPROXY: Can be used only with -p tcp or -p udp [ 937.735451][ T39] audit: type=1326 audit(2000000019.920:3401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23036 comm="syz.1.5517" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72f0175bd9 code=0x7ffc0000 [ 937.749878][ T39] audit: type=1326 audit(2000000019.920:3402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23036 comm="syz.1.5517" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72f0175bd9 code=0x7ffc0000 [ 937.885315][T23042] futex_wake_op: syz.1.5519 tries to shift op by 32; fix this program [ 938.395862][T23057] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5524'. [ 938.425784][T23057] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5524'. [ 938.499725][T23057] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5524'. [ 939.385579][T23074] xt_TPROXY: Can be used only with -p tcp or -p udp [ 939.463868][T23077] futex_wake_op: syz.2.5528 tries to shift op by 32; fix this program [ 939.571315][T23081] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 940.691849][T23094] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5534'. [ 940.721869][T23094] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5534'. [ 940.780211][T23094] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5534'. [ 941.421315][T23121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5539'. [ 941.426333][T23121] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5539'. [ 941.432416][T19705] Bluetooth: hci9: Ignoring HCI_Connection_Complete for existing connection [ 941.948637][T23138] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 944.398462][T23186] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 944.537254][T23188] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5561'. [ 944.540723][T23188] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5561'. [ 944.549753][T19705] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 945.439488][T23210] futex_wake_op: syz.1.5569 tries to shift op by 32; fix this program [ 945.555530][T23216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5571'. [ 945.563194][T23216] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5571'. [ 946.689108][T23236] futex_wake_op: syz.3.5578 tries to shift op by 32; fix this program [ 946.896768][T23244] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 947.894957][ T65] Bluetooth: hci9: SCO packet for unknown connection handle 1039 [ 948.644141][T23275] futex_wake_op: syz.1.5588 tries to shift op by 32; fix this program [ 948.784992][T23282] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5589'. [ 949.142214][T23289] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 949.405280][ T65] Bluetooth: hci9: SCO packet for unknown connection handle 1039 [ 949.544566][T23294] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5593'. [ 949.695791][T23294] /dev/sr0: Can't open blockdev [ 949.899678][T23303] futex_wake_op: syz.3.5597 tries to shift op by 32; fix this program [ 949.982481][T23306] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5598'. [ 949.997382][T23306] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5598'. [ 950.383656][ T5240] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 950.403134][ T65] Bluetooth: hci9: SCO packet for unknown connection handle 1039 [ 950.579928][ T5240] usb 8-1: config index 0 descriptor too short (expected 9533, got 36) [ 950.585517][ T5240] usb 8-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 950.588878][ T5240] usb 8-1: config 161 has an invalid interface descriptor of length 7, skipping [ 950.593193][ T5240] usb 8-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 950.597342][ T5240] usb 8-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 950.601236][ T5240] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 950.603936][T23321] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5602'. [ 950.607947][ T5240] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 950.850106][ T6261] usb 8-1: USB disconnect, device number 24 [ 950.955676][T23330] futex_wake_op: syz.1.5606 tries to shift op by 32; fix this program [ 951.393231][T23340] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5609'. [ 951.592790][T23341] /dev/sr0: Can't open blockdev [ 952.514484][T23347] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5611'. [ 952.705674][T23348] /dev/sr0: Can't open blockdev [ 952.825248][T23349] /dev/sr0: Can't open blockdev [ 952.930276][T23353] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5613'. [ 953.031887][T23359] futex_wake_op: syz.1.5615 tries to shift op by 32; fix this program [ 954.543221][T23388] futex_wake_op: syz.2.5624 tries to shift op by 32; fix this program [ 955.012307][T23399] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5629'. [ 955.047683][T23399] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5629'. [ 955.109008][T23399] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5629'. [ 956.410563][T23417] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5633'. [ 956.464302][T23417] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5633'. [ 956.520922][T23417] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5633'. [ 957.977636][T23439] atomic_op ffff88805d506198 conn xmit_atomic 0000000000000000 [ 958.040608][T23440] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5638'. [ 958.044710][T23440] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5638'. [ 958.226407][T23439] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5638'. [ 958.435417][T19705] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 958.443126][T19705] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 958.459206][T19705] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 958.466765][T19705] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 958.471060][T19705] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 958.474642][T19705] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 958.716986][T23452] chnl_net:caif_netlink_parms(): no params data found [ 958.884980][ T39] kauditd_printk_skb: 90 callbacks suppressed [ 958.884996][ T39] audit: type=1326 audit(2000000041.140:3493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23458 comm="syz.1.5643" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f72f0175bd9 code=0x0 [ 958.932158][T23452] bridge0: port 1(bridge_slave_0) entered blocking state [ 958.938962][T23452] bridge0: port 1(bridge_slave_0) entered disabled state [ 958.942280][T23452] bridge_slave_0: entered allmulticast mode [ 958.951408][T23452] bridge_slave_0: entered promiscuous mode [ 958.962229][T23452] bridge0: port 2(bridge_slave_1) entered blocking state [ 958.967072][T23452] bridge0: port 2(bridge_slave_1) entered disabled state [ 958.970487][T23452] bridge_slave_1: entered allmulticast mode [ 958.974621][T23452] bridge_slave_1: entered promiscuous mode [ 959.043928][T23452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 959.051790][T23452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 959.076484][T23459] No control pipe specified [ 959.146917][T23452] team0: Port device team_slave_0 added [ 959.169713][T23452] team0: Port device team_slave_1 added [ 959.236733][T23452] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 959.240044][T23452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 959.251273][T23452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 959.270066][ T39] audit: type=1326 audit(2000000041.520:3494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23465 comm="syz.2.5644" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f968f175bd9 code=0x0 [ 959.274086][T23452] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 959.281948][T23452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 959.291916][T23452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 959.359575][T23452] hsr_slave_0: entered promiscuous mode [ 959.364838][T23452] hsr_slave_1: entered promiscuous mode [ 959.368167][T23452] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 959.371716][T23452] Cannot create hsr debugfs directory [ 959.435777][T23466] No control pipe specified [ 959.559031][T23452] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.648343][T23452] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.798938][T23452] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.922315][T23452] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.127221][T23452] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 960.157633][T23452] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 960.167936][T23452] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 960.193268][T23452] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 960.198182][T23475] atomic_op ffff88804303a998 conn xmit_atomic 0000000000000000 [ 960.207206][T23475] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5647'. [ 960.212393][T23475] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5647'. [ 960.303975][T23452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 960.331923][T23452] 8021q: adding VLAN 0 to HW filter on device team0 [ 960.345814][ T5240] bridge0: port 1(bridge_slave_0) entered blocking state [ 960.349400][ T5240] bridge0: port 1(bridge_slave_0) entered forwarding state [ 960.365119][ T5240] bridge0: port 2(bridge_slave_1) entered blocking state [ 960.368437][ T5240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 960.493744][ T65] Bluetooth: hci7: command tx timeout [ 960.587934][ T39] audit: type=1400 audit(2000000042.840:3495): avc: denied { ioctl } for pid=23484 comm="syz.1.5649" path="socket:[99824]" dev="sockfs" ino=99824 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 960.608266][T23452] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 960.662474][T23452] veth0_vlan: entered promiscuous mode [ 960.672791][T23452] veth1_vlan: entered promiscuous mode [ 960.709093][T23452] veth0_macvtap: entered promiscuous mode [ 960.716149][T23452] veth1_macvtap: entered promiscuous mode [ 960.735978][T23452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 960.740654][T23452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 960.746085][T23452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 960.750648][T23452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 960.755378][T23452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 960.760005][T23452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 960.764794][T23452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 960.769541][T23452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 960.774807][T23452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 960.779435][T23452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 960.784667][T23452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 960.789317][T23452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 960.796914][T23452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 960.801563][T23452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 960.808298][T23452] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 960.819712][T23452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 960.823637][T23452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 960.827474][T23452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 960.831756][T23452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 960.837607][T23452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 960.842252][T23452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 960.846673][T23452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 960.851268][T23452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 960.855682][T23452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 960.860186][T23452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 960.864328][T23452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 960.868666][T23452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 960.872929][T23452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 960.877475][T23452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 960.881647][T23452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 960.885936][T23452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 960.890069][T23452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 960.896441][T23452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 960.900397][T23452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 960.904998][T23452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 960.915109][T23452] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 960.924949][T23452] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.928988][T23452] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.936832][T23452] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.940745][T23452] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 960.959456][T23493] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5652'. [ 961.040949][ T101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 961.045827][ T101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 961.067608][ T101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 961.071097][ T101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 961.112167][T23493] /dev/sr0: Can't open blockdev [ 961.199438][T23496] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5639'. [ 961.220314][T23496] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5639'. [ 961.654512][ T5240] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 961.851308][ T5240] usb 5-1: config index 0 descriptor too short (expected 9533, got 36) [ 961.868287][ T5240] usb 5-1: config 161 has too many interfaces: 81, using maximum allowed: 32 [ 961.872151][ T5240] usb 5-1: config 161 has an invalid interface descriptor of length 7, skipping [ 961.881798][ T5240] usb 5-1: config 161 has an invalid descriptor of length 0, skipping remainder of the config [ 961.890203][ T5240] usb 5-1: config 161 has 0 interfaces, different from the descriptor's value: 81 [ 961.894531][ T5240] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 961.898400][ T5240] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 962.130223][T23523] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5661'. [ 962.134955][T23523] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5661'. [ 962.137291][ T5240] usb 5-1: USB disconnect, device number 29 [ 962.143157][ T65] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 962.583731][ T65] Bluetooth: hci7: command tx timeout [ 962.632181][ T65] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 962.633768][ T65] Bluetooth: hci2: SCO packet for unknown connection handle 1039 [ 962.830374][ T65] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 962.982200][T23539] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5665'. [ 963.023669][T23539] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5665'. [ 963.094984][T23553] futex_wake_op: syz.0.5669 tries to shift op by 32; fix this program [ 963.099142][T23539] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5665'. [ 963.209769][T23558] input: syz0 as /devices/virtual/input/input56 [ 963.216578][T23559] atomic_op ffff888049ce1198 conn xmit_atomic 0000000000000000 [ 963.709969][ T39] audit: type=1326 audit(2000000045.960:3496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23566 comm="syz.0.5674" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fec86b75bd9 code=0x0 [ 963.793470][T19705] Bluetooth: hci4: SCO packet for unknown connection handle 1039 [ 964.381897][ T39] audit: type=1326 audit(2000000046.630:3497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23584 comm="syz.1.5679" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f72f0175bd9 code=0x0 [ 964.515063][T23589] atomic_op ffff8880495e4998 conn xmit_atomic 0000000000000000 [ 964.663889][T19705] Bluetooth: hci7: command tx timeout [ 964.699961][T23593] /dev/sr0: Can't open blockdev [ 964.804298][T23595] /dev/sr0: Can't open blockdev [ 965.359968][ T65] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 965.362040][ T65] Bluetooth: hci2: SCO packet for unknown connection handle 1039 [ 965.435500][T23617] futex_wake_op: syz.0.5688 tries to shift op by 32; fix this program [ 966.735218][ T65] Bluetooth: hci7: command tx timeout [ 968.336823][T23652] futex_wake_op: syz.1.5697 tries to shift op by 32; fix this program [ 968.534215][T23654] /dev/sr0: Can't open blockdev [ 968.634347][T23655] /dev/sr0: Can't open blockdev [ 968.878129][T23657] input: syz0 as /devices/virtual/input/input57 [ 969.520371][ T39] audit: type=1326 audit(2000000051.770:3498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23668 comm="syz.3.5702" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbec0d75bd9 code=0x0 [ 969.651322][ T39] audit: type=1326 audit(2000000051.900:3499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23671 comm="syz.1.5703" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72f0175bd9 code=0x7ffc0000 [ 969.665261][ T39] audit: type=1326 audit(2000000051.900:3500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23671 comm="syz.1.5703" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72f0175bd9 code=0x7ffc0000 [ 969.675014][ T39] audit: type=1326 audit(2000000051.920:3501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23671 comm="syz.1.5703" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f72f0175bd9 code=0x7ffc0000 [ 969.684154][ T39] audit: type=1326 audit(2000000051.920:3502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23671 comm="syz.1.5703" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72f0175bd9 code=0x7ffc0000 [ 969.693307][ T39] audit: type=1326 audit(2000000051.920:3503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23671 comm="syz.1.5703" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72f0175bd9 code=0x7ffc0000 [ 969.704540][ T39] audit: type=1326 audit(2000000051.930:3504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23671 comm="syz.1.5703" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f72f0175bd9 code=0x7ffc0000 [ 969.714187][ T39] audit: type=1326 audit(2000000051.930:3505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23671 comm="syz.1.5703" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72f0175bd9 code=0x7ffc0000 [ 969.729229][ T39] audit: type=1326 audit(2000000051.930:3506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23671 comm="syz.1.5703" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72f0175bd9 code=0x7ffc0000 [ 969.739461][ T39] audit: type=1326 audit(2000000051.930:3507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23671 comm="syz.1.5703" exe="/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f72f0175bd9 code=0x7ffc0000 [ 970.204234][T23679] /dev/sr0: Can't open blockdev [ 970.291856][T23680] /dev/sr0: Can't open blockdev [ 970.475544][T19705] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 970.481288][T19705] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 970.485924][T19705] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 970.490473][T19705] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 970.504864][T19705] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 970.508517][T19705] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 970.630537][T23691] input: syz0 as /devices/virtual/input/input58 [ 970.710756][T23686] chnl_net:caif_netlink_parms(): no params data found [ 970.861840][T23686] bridge0: port 1(bridge_slave_0) entered blocking state [ 970.869054][T23686] bridge0: port 1(bridge_slave_0) entered disabled state [ 970.871682][T23686] bridge_slave_0: entered allmulticast mode [ 970.876628][T23686] bridge_slave_0: entered promiscuous mode [ 970.881795][T23686] bridge0: port 2(bridge_slave_1) entered blocking state [ 970.886238][T23686] bridge0: port 2(bridge_slave_1) entered disabled state [ 970.889278][T23686] bridge_slave_1: entered allmulticast mode [ 970.892631][T23686] bridge_slave_1: entered promiscuous mode [ 970.975044][T23686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 970.981350][T23686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 971.079485][T23686] team0: Port device team_slave_0 added [ 971.086189][T23686] team0: Port device team_slave_1 added [ 971.181229][T23686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 971.184814][T23686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 971.203931][T23686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 971.224995][T23686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 971.227889][T23686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 971.253416][T23686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 971.331746][T23686] hsr_slave_0: entered promiscuous mode [ 971.345729][T23686] hsr_slave_1: entered promiscuous mode [ 971.376505][T23686] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 971.379515][T23686] Cannot create hsr debugfs directory [ 971.734052][T23686] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 971.841508][T23686] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 971.943150][T23686] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.041772][T23686] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.174395][T23686] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 972.182048][T23686] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 972.198421][T23686] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 972.205751][T23686] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 972.301763][T23686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 972.321767][T23686] 8021q: adding VLAN 0 to HW filter on device team0 [ 972.332228][T11786] bridge0: port 1(bridge_slave_0) entered blocking state [ 972.335539][T11786] bridge0: port 1(bridge_slave_0) entered forwarding state [ 972.356247][ T826] bridge0: port 2(bridge_slave_1) entered blocking state [ 972.359739][ T826] bridge0: port 2(bridge_slave_1) entered forwarding state [ 972.399832][T23686] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 972.583685][T19705] Bluetooth: hci10: command tx timeout [ 972.603133][T23686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 972.624142][T23726] input: syz0 as /devices/virtual/input/input59 [ 972.660185][T23686] veth0_vlan: entered promiscuous mode [ 972.691693][T23686] veth1_vlan: entered promiscuous mode [ 972.746625][T23686] veth0_macvtap: entered promiscuous mode [ 972.760346][T23686] veth1_macvtap: entered promiscuous mode [ 972.785226][T23686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 972.789938][T23686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.794910][T23686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 972.800188][T23686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.805220][T23686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 972.811737][T23686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.817931][T23686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 972.824190][T23686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.829217][T23686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 972.835227][T23686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.844380][T23686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 972.852126][T23686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.856916][T23686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 972.861727][T23686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.867552][T23686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 972.873239][T23686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.885214][T23686] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 972.897817][T23686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 972.903235][T23686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.908080][T23686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 972.912795][T23686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.917924][T23686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 972.923768][T23686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.928348][T23686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 972.934472][T23686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.942058][T23686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 972.948105][T23686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.952669][T23686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 972.957331][T23686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.962264][T23686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 972.968153][T23686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.972864][T23686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 972.978187][T23686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.984058][T23686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 972.989127][T23686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 972.993677][T23686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 972.998363][T23686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 973.003537][T23686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 973.008326][T23686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 973.014719][T23686] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 973.042596][T23686] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.048394][T23686] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.059806][T23686] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.063396][T23686] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 973.242290][T17295] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 973.245833][T17295] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 973.272953][ T101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 973.280594][ T101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 973.475494][T23734] /dev/sr0: Can't open blockdev [ 973.584424][T23737] /dev/sr0: Can't open blockdev [ 974.386015][T19705] Bluetooth: hci10: SCO packet for unknown connection handle 1039 [ 974.405570][T23752] futex_wake_op: syz.0.5723 tries to shift op by 32; fix this program [ 974.663856][T19705] Bluetooth: hci10: command tx timeout [ 974.985905][T23771] /dev/sr0: Can't open blockdev [ 975.124955][T23774] /dev/sr0: Can't open blockdev [ 975.679420][T19705] Bluetooth: hci10: ACL packet for unknown connection handle 1583 [ 975.737748][T19705] Bluetooth: Unexpected start frame (len 24) [ 975.741978][T19705] Bluetooth: hci10: ACL packet for unknown connection handle 712 [ 976.146434][T23789] futex_wake_op: syz.1.5734 tries to shift op by 32; fix this program [ 976.514511][T23794] /dev/sr0: Can't open blockdev [ 976.634127][T23795] /dev/sr0: Can't open blockdev [ 976.743566][T19705] Bluetooth: hci10: command tx timeout [ 978.531785][T23810] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 978.813815][T19705] Bluetooth: hci10: command tx timeout [ 979.360320][T23827] futex_wake_op: syz.1.5743 tries to shift op by 32; fix this program [ 979.554375][T23829] /dev/sr0: Can't open blockdev [ 979.585828][T19705] Bluetooth: hci2: ACL packet for unknown connection handle 1583 [ 979.647257][T19705] Bluetooth: Unexpected start frame (len 24) [ 979.649669][T19705] Bluetooth: hci2: ACL packet for unknown connection handle 712 [ 981.829878][T23861] __nla_validate_parse: 4 callbacks suppressed [ 981.829960][T23861] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5751'. [ 981.889605][T23861] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5751'. [ 981.966755][T23861] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5751'. [ 982.436474][T23877] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 983.657808][T23881] [ 983.658801][T23881] ====================================================== [ 983.661598][T23881] WARNING: possible circular locking dependency detected [ 983.664304][T23881] 6.10.0-rc7-syzkaller-00012-g34afb82a3c67 #0 Not tainted [ 983.668856][T23881] ------------------------------------------------------ SYZFAIL: failed to recv rpc [ 983.671843][T23881] syz.3.5754/23881 is trying to acquire lock: [ 983.674619][T23881] ffff88807ffdbce0 (&pgdat->kswapd_wait){....}-{2:2}, at: __wake_up+0x1c/0x60 [ 983.678513][T23881] [ 983.678513][T23881] but task is already holding lock: fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 983.681403][T23881] ffff88804c2099f8 (&trie->lock){..-.}-{2:2}, at: trie_update_elem+0xc8/0xe00 [ 983.685077][T23881] [ 983.685077][T23881] which lock already depends on the new lock. [ 983.685077][T23881] [ 983.689520][T23881] [ 983.689520][T23881] the existing dependency chain (in reverse order) is: [ 983.693319][T23881] [ 983.693319][T23881] -> #3 (&trie->lock){..-.}-{2:2}: [ 983.696417][T23881] _raw_spin_lock_irqsave+0x3a/0x60 [ 983.698953][T23881] trie_delete_elem+0xb0/0x820 [ 983.701145][T23881] ___bpf_prog_run+0x3e51/0xabd0 [ 983.703239][T23881] __bpf_prog_run32+0xc1/0x100 [ 983.705723][T23881] bpf_trace_run4+0x245/0x5a0 [ 983.708382][T23881] __bpf_trace_sched_switch+0x13e/0x190 [ 983.711391][T23881] __traceiter_sched_switch+0x6c/0xc0 [ 983.714197][T23881] __schedule+0x252c/0x5d00 [ 983.716375][T23881] schedule+0xe7/0x350 [ 983.718414][T23881] futex_wait_queue+0xfc/0x1f0 [ 983.720725][T23881] __futex_wait+0x291/0x3c0 [ 983.722887][T23881] futex_wait+0xe9/0x380 [ 983.724873][T23881] do_futex+0x22b/0x350 [ 983.726895][T23881] __x64_sys_futex+0x1e1/0x4c0 [ 983.728822][T23881] do_syscall_64+0xcd/0x250 [ 983.730557][T23881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 983.733234][T23881] [ 983.733234][T23881] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 983.736453][T23881] _raw_spin_lock_nested+0x31/0x40 [ 983.738730][T23881] raw_spin_rq_lock_nested+0x29/0x130 [ 983.741110][T23881] task_fork_fair+0x73/0x250 [ 983.742858][T23881] sched_cgroup_fork+0x3cf/0x510 [ 983.745214][T23881] copy_process+0x439b/0x8f10 [ 983.747122][T23881] kernel_clone+0xfd/0x980 [ 983.748941][T23881] user_mode_thread+0xb4/0xf0 [ 983.751085][T23881] rest_init+0x23/0x2b0 [ 983.753154][T23881] start_kernel+0x3df/0x4c0 [ 983.755430][T23881] x86_64_start_reservations+0x18/0x30 [ 983.758266][T23881] x86_64_start_kernel+0xb2/0xc0 [ 983.760571][T23881] common_startup_64+0x13e/0x148 [ 983.762879][T23881] [ 983.762879][T23881] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 983.766046][T23881] _raw_spin_lock_irqsave+0x3a/0x60 [ 983.768468][T23881] try_to_wake_up+0x9a/0x13e0 [ 983.770676][T23881] autoremove_wake_function+0x16/0x150 [ 983.773038][T23881] __wake_up_common+0x131/0x1e0 [ 983.774734][T23881] __wake_up+0x31/0x60 [ 983.776174][T23881] wakeup_kswapd+0x45e/0x640 [ 983.777748][T23881] get_page_from_freelist+0x9bc/0x2e50 [ 983.780427][T23881] __alloc_pages_noprof+0x22b/0x2460 [ 983.783005][T23881] alloc_pages_mpol_noprof+0x275/0x610 [ 983.785462][T23881] get_free_pages_noprof+0xc/0x40 [ 983.787514][T23881] packet_set_ring+0xb78/0x18f0 [ 983.789566][T23881] packet_setsockopt+0x16b0/0x2360 [ 983.791872][T23881] do_sock_setsockopt+0x222/0x480 [ 983.794155][T23881] __sys_setsockopt+0x1a4/0x270 [ 983.796412][T23881] __x64_sys_setsockopt+0xbd/0x160 [ 983.798907][T23881] do_syscall_64+0xcd/0x250 [ 983.801139][T23881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 983.803877][T23881] [ 983.803877][T23881] -> #0 (&pgdat->kswapd_wait){....}-{2:2}: [ 983.806859][T23881] __lock_acquire+0x2478/0x3b30 [ 983.808938][T23881] lock_acquire+0x1b1/0x560 [ 983.811059][T23881] _raw_spin_lock_irqsave+0x3a/0x60 [ 983.813383][T23881] __wake_up+0x1c/0x60 [ 983.815136][T23881] wakeup_kswapd+0x45e/0x640 [ 983.817190][T23881] get_page_from_freelist+0x9bc/0x2e50 [ 983.819466][T23881] __alloc_pages_noprof+0x22b/0x2460 [ 983.821680][T23881] __kmalloc_large_node+0x7f/0x1a0 [ 983.823847][T23881] __kmalloc_node_noprof.cold+0x5/0x5f [ 983.826126][T23881] bpf_map_kmalloc_node+0x98/0x4a0 [ 983.828532][T23881] trie_update_elem+0x1ef/0xe00 [ 983.830900][T23881] bpf_map_update_value+0x2c1/0x6c0 [ 983.833308][T23881] map_update_elem+0x623/0x910 [ 983.835575][T23881] __sys_bpf+0x90c/0x49a0 [ 983.837645][T23881] __x64_sys_bpf+0x78/0xc0 [ 983.839656][T23881] do_syscall_64+0xcd/0x250 [ 983.841866][T23881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 983.844766][T23881] [ 983.844766][T23881] other info that might help us debug this: [ 983.844766][T23881] [ 983.849232][T23881] Chain exists of: [ 983.849232][T23881] &pgdat->kswapd_wait --> &rq->__lock --> &trie->lock [ 983.849232][T23881] [ 983.855051][T23881] Possible unsafe locking scenario: [ 983.855051][T23881] [ 983.858478][T23881] CPU0 CPU1 [ 983.862496][T23881] ---- ---- [ 983.865530][T23881] lock(&trie->lock); [ 983.867804][T23881] lock(&rq->__lock); [ 983.870657][T23881] lock(&trie->lock); [ 983.873571][T23881] lock(&pgdat->kswapd_wait); [ 983.875609][T23881] [ 983.875609][T23881] *** DEADLOCK *** [ 983.875609][T23881] [ 983.879350][T23881] 2 locks held by syz.3.5754/23881: [ 983.881595][T23881] #0: ffffffff8dbb1620 (rcu_read_lock){....}-{1:2}, at: bpf_map_update_value+0x24b/0x6c0 [ 983.885843][T23881] #1: ffff88804c2099f8 (&trie->lock){..-.}-{2:2}, at: trie_update_elem+0xc8/0xe00 [ 983.889720][T23881] [ 983.889720][T23881] stack backtrace: [ 983.891878][T23881] CPU: 0 PID: 23881 Comm: syz.3.5754 Not tainted 6.10.0-rc7-syzkaller-00012-g34afb82a3c67 #0 [ 983.895068][T23881] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 983.899429][T23881] Call Trace: [ 983.900923][T23881] [ 983.902221][T23881] dump_stack_lvl+0x116/0x1f0 [ 983.904311][T23881] check_noncircular+0x31a/0x400 [ 983.906390][T23881] ? __pfx_check_noncircular+0x10/0x10 [ 983.908380][T23881] ? __lock_acquire+0x14f4/0x3b30 [ 983.910650][T23881] ? lockdep_lock+0xc6/0x200 [ 983.912643][T23881] ? __pfx_lockdep_lock+0x10/0x10 [ 983.914809][T23881] __lock_acquire+0x2478/0x3b30 [ 983.916834][T23881] ? __pfx___lock_acquire+0x10/0x10 [ 983.919056][T23881] ? __pfx_lock_release+0x10/0x10 [ 983.921185][T23881] ? __mod_zone_page_state+0xcc/0x1a0 [ 983.923539][T23881] lock_acquire+0x1b1/0x560 [ 983.925537][T23881] ? __wake_up+0x1c/0x60 [ 983.927347][T23881] ? __pfx_lock_acquire+0x10/0x10 [ 983.929550][T23881] ? rcu_is_watching+0x12/0xc0 [ 983.931722][T23881] ? trace_mm_page_alloc_zone_locked+0x123/0x190 [ 983.934377][T23881] ? find_held_lock+0x2d/0x110 [ 983.936482][T23881] ? __zone_watermark_ok+0x252/0x4d0 [ 983.938680][T23881] _raw_spin_lock_irqsave+0x3a/0x60 [ 983.941096][T23881] ? __wake_up+0x1c/0x60 [ 983.942974][T23881] __wake_up+0x1c/0x60 [ 983.944909][T23881] wakeup_kswapd+0x45e/0x640 [ 983.947208][T23881] get_page_from_freelist+0x9bc/0x2e50 [ 983.950054][T23881] ? __pfx_get_page_from_freelist+0x10/0x10 [ 983.953099][T23881] ? prepare_alloc_pages.constprop.0+0x412/0x560 [ 983.956035][T23881] ? register_lock_class+0xb1/0x1230 [ 983.958261][T23881] __alloc_pages_noprof+0x22b/0x2460 [ 983.960530][T23881] ? hlock_class+0x4e/0x130 [ 983.962468][T23881] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 983.964921][T23881] ? __pfx___lock_acquire+0x10/0x10 [ 983.967256][T23881] ? lock_acquire+0x1b1/0x560 [ 983.969299][T23881] ? find_held_lock+0x2d/0x110 [ 983.971511][T23881] ? bpf_map_get_memcg.isra.0+0x143/0x5a0 [ 983.973861][T23881] ? __pfx_lock_release+0x10/0x10 [ 983.976045][T23881] __kmalloc_large_node+0x7f/0x1a0 [ 983.978279][T23881] __kmalloc_node_noprof.cold+0x5/0x5f [ 983.980656][T23881] ? bpf_map_kmalloc_node+0x98/0x4a0 [ 983.982903][T23881] bpf_map_kmalloc_node+0x98/0x4a0 [ 983.984676][T23881] trie_update_elem+0x1ef/0xe00 [ 983.986716][T23881] bpf_map_update_value+0x2c1/0x6c0 [ 983.988949][T23881] map_update_elem+0x623/0x910 [ 983.991023][T23881] ? __pfx_map_update_elem+0x10/0x10 [ 983.993387][T23881] ? selinux_bpf+0xee/0x130 [ 983.995419][T23881] __sys_bpf+0x90c/0x49a0 [ 983.997333][T23881] ? __pfx_futex_wake+0x10/0x10 [ 983.999533][T23881] ? __pfx___sys_bpf+0x10/0x10 [ 984.001695][T23881] ? find_held_lock+0x2d/0x110 [ 984.003862][T23881] ? do_futex+0x123/0x350 [ 984.005843][T23881] ? __pfx_do_futex+0x10/0x10 [ 984.007898][T23881] ? xfd_validate_state+0x5d/0x180 [ 984.010153][T23881] __x64_sys_bpf+0x78/0xc0 [ 984.012165][T23881] ? lockdep_hardirqs_on+0x7c/0x110 [ 984.014503][T23881] do_syscall_64+0xcd/0x250 [ 984.016354][T23881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 984.018806][T23881] RIP: 0033:0x7fbec0d75bd9 [ 984.020715][T23881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 984.028516][T23881] RSP: 002b:00007fbec1add048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 984.032090][T23881] RAX: ffffffffffffffda RBX: 00007fbec0f04110 RCX: 00007fbec0d75bd9 [ 984.035585][T23881] RDX: 0000000000000020 RSI: 0000000020000380 RDI: 0000000000000002 [ 984.039085][T23881] RBP: 00007fbec0de4e60 R08: 0000000000000000 R09: 0000000000000000 [ 984.042483][T23881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 984.045889][T23881] R13: 000000000000006e R14: 00007fbec0f04110 R15: 00007ffca90a4478 [ 984.048879][T23881] [ 984.782410][ T42] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 984.925830][ T42] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 984.989522][ T42] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 985.090343][ T42] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 985.196751][ T42] bridge_slave_1: left allmulticast mode [ 985.199401][ T42] bridge_slave_1: left promiscuous mode [ 985.201898][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 985.206506][ T42] bridge_slave_0: left allmulticast mode [ 985.208837][ T42] bridge_slave_0: left promiscuous mode [ 985.211266][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 985.398910][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 985.404874][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 985.410314][ T42] bond0 (unregistering): Released all slaves [ 985.564009][ T42] IPVS: stopping backup sync thread 22139 ... [ 985.829204][ T42] hsr_slave_0: left promiscuous mode [ 985.832141][ T42] hsr_slave_1: left promiscuous mode [ 985.836920][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 985.841141][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 985.844697][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 985.850325][ T42] veth1_macvtap: left promiscuous mode [ 985.852611][ T42] veth0_macvtap: left promiscuous mode [ 986.207790][ T42] team0 (unregistering): Port device team_slave_1 removed [ 986.274570][ T42] team0 (unregistering): Port device team_slave_0 removed [ 986.983036][ T42] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.070029][ T42] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.140749][ T42] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.200993][ T42] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.285997][ T42] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.347882][ T42] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.391242][ T42] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.449845][ T42] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 987.552135][ T42] bridge_slave_1: left allmulticast mode [ 987.554440][ T42] bridge_slave_1: left promiscuous mode [ 987.556663][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 987.560939][ T42] bridge_slave_0: left allmulticast mode [ 987.563151][ T42] bridge_slave_0: left promiscuous mode [ 987.565887][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 987.572483][ T42] bridge_slave_1: left allmulticast mode [ 987.574875][ T42] bridge_slave_1: left promiscuous mode [ 987.577165][ T42] bridge0: port 2(bridge_slave_1) entered disabled state [ 987.581089][ T42] bridge_slave_0: left allmulticast mode [ 987.583253][ T42] bridge_slave_0: left promiscuous mode [ 987.585823][ T42] bridge0: port 1(bridge_slave_0) entered disabled state [ 987.951544][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 987.956967][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 987.962421][ T42] bond0 (unregistering): Released all slaves [ 987.975140][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 987.980729][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 987.986100][ T42] bond0 (unregistering): Released all slaves [ 988.524654][ T42] hsr_slave_0: left promiscuous mode [ 988.527508][ T42] hsr_slave_1: left promiscuous mode [ 988.530335][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 988.533167][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 988.536899][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 988.540266][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 988.547846][ T42] hsr_slave_0: left promiscuous mode [ 988.552166][ T42] hsr_slave_1: left promiscuous mode [ 988.578053][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 988.581193][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 988.584658][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 988.594071][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 988.607017][ T42] veth1_macvtap: left promiscuous mode [ 988.609275][ T42] veth0_macvtap: left promiscuous mode [ 988.611277][ T42] veth1_vlan: left promiscuous mode [ 988.613157][ T42] veth0_vlan: left promiscuous mode [ 988.616096][ T42] veth1_macvtap: left promiscuous mode [ 988.618040][ T42] veth0_macvtap: left promiscuous mode [ 988.981459][ T42] team0 (unregistering): Port device team_slave_1 removed [ 989.036604][ T42] team0 (unregistering): Port device team_slave_0 removed [ 989.555394][ T42] team0 (unregistering): Port device team_slave_1 removed [ 989.627411][ T42] team0 (unregistering): Port device team_slave_0 removed VM DIAGNOSIS: 22:20:11 Registers: info registers vcpu 0 CPU#0 RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff84fd2ac5 RDI=ffffffff94dd71a0 RBP=ffffffff94dd7160 RSP=ffffc90003f7ee20 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=722d302e30312e36 R12=0000000000000000 R13=000000000000002d R14=ffffffff84fd2a60 R15=0000000000000000 RIP=ffffffff84fd2aef RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fbec1add6c0 ffffffff 00c00000 GS =0000 ffff88806b000000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b32213ff8 CR3=000000004b972000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000040001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 ffffffff820242c9 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbec0de4325 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbec0de4332 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbec0de432c ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbec0de4340 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbec0de43c6 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbec0de44a4 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbec0ed4488 00007fbec0ed4480 00007fbec0ed4478 00007fbec0ed4450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbec1a3d100 00007fbec0ed4440 00007fbec0ed4458 00007fbec0ed44a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbec0ed4498 00007fbec0ed4490 00007fbec0ed4488 00007fbec0ed4480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000088 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=ffff88806b13fd00 RCX=ffffffff8181c968 RDX=ffff888017eb0000 RSI=ffffffff8181c943 RDI=0000000000000005 RBP=ffffc90000167d60 RSP=ffffc90000167c38 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=ffffffff8dbbc6f0 R12=1ffff9200002cf8c R13=0000000000000001 R14=0000000000000003 R15=ffffed100d627fa1 RIP=ffffffff818de4c3 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806b100000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fbec1addd58 CR3=000000004b972000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffca90a4780 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbec0de4325 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbec0de4332 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbec0de432c ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbec0de4340 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbec0de43c6 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbec0de44a4 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000088 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000088 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000001d73e4c RBX=0000000000000002 RCX=ffffffff8ae76799 RDX=ffffed100d646fde RSI=ffffffff8b8ff5c0 RDI=ffffffff816638fc RBP=ffffed1002fd9000 RSP=ffffc90000197e08 R8 =0000000000000000 R9 =ffffed100d646fdd R10=ffff88806b237eeb R11=0000000000000001 R12=0000000000000002 R13=ffff888017ec8000 R14=ffffffff8fe43710 R15=0000000000000000 RIP=ffffffff8ae77b8f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806b200000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fbec0f04030 CR3=000000005d7cc000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffeaa06350 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f72f01e4325 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f72f01e4332 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f72f01e432c ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f72f01e4340 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f72f01e43c6 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f72f01e44a4 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000b8 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 00000000000000b8 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=ffffffff8fe43718 RBX=0000000000000003 RCX=ffffffff819528f6 RDX=0000000000000000 RSI=0000000000000008 RDI=ffffffff8fe43710 RBP=0000000000000246 RSP=ffffc900040cf6d8 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=000000000003d90c R13=0000000000000000 R14=ffff88804e5ec0e8 R15=ffffc900040cf8b8 RIP=ffffffff81e9a02b RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fbec1afe6c0 ffffffff 00c00000 GS =0000 ffff88806b300000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fbec1afdfa8 CR3=000000004b972000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000040001 Opmask01=0000000000000054 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 ffffffff8159abc2 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbec0de4325 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbec0de4332 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbec0de432c ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbec0de4340 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbec0de43c6 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbec0de44a4 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbec0ed4488 00007fbec0ed4480 00007fbec0ed4478 00007fbec0ed4450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbec1a3d100 00007fbec0ed4440 00007fbec0ed4458 00007fbec0ed44a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbec0ed4498 00007fbec0ed4490 00007fbec0ed4488 00007fbec0ed4480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000088 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000