last executing test programs: 1m47.605773696s ago: executing program 2 (id=465): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x21, 0x4, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x0, [0x1000, 0x0, 0x0, 0x1c1, 0x0]}, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@multicast1}, {@broadcast, 0x8000}, {@empty}, {@multicast1, 0xffd200}, {@private}]}, @timestamp_prespec={0x44, 0x1c, 0x0, 0x3, 0x0, [{@multicast2}, {@private=0xa010101}, {}]}, @noop, @noop, @lsrr={0x83, 0xb, 0x0, [@private, @rand_addr]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m46.674233256s ago: executing program 2 (id=469): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) accept$packet(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') read$FUSE(r3, &(0x7f0000002140)={0x2020}, 0x2020) 1m45.270778332s ago: executing program 2 (id=471): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001900)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xefff, 0x600}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x4c}}, 0x0) r3 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x6, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg(r1, &(0x7f000000c980)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}}, {{&(0x7f00000013c0)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x4, 0x4, 0x1, 0x2, {0xa, 0x4e21, 0x2, @remote, 0x100}}}, 0x80, &(0x7f0000000180)=[{0x0}], 0x1}}, {{&(0x7f0000001580)=@llc={0x1a, 0x337, 0x3, 0x1, 0x34, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000001600)="52523edd0556f49d24ddccd4c78777df6bf8865f93b0ff3da24dbba7dc1fc93a1057a6ec2017b4d10e11171e603729113bdf5749d61be16bfb503e15912a54bce50b82", 0x43}], 0x1, &(0x7f0000001680)=[{0xc8, 0x10d, 0x40, "273f236b8fdbd0ab15bfe465ba25b991a56556fbdd78ac1979c17f02e7357273cc6f5ed99ab9c68c5c393215db0273dd2a7b6473ea942cd85b8e4f1d3c2bfbcab48d8ba79b625c8ea2fd0d0d88043b89a8594ac3e23143a8aa4b62b7ea8ca7f704908ea49af58f99ba0477c82eea58c0a4369336207eca5adb344f7b3929a2596501864f3725ba7ffe545211106bc4b217d0580d47e13a9482e4cfb5dd95c99d951d95789ba9c479f0bb5fc500033d67f5f62c9c0444af"}, {0x28, 0x101, 0x3, "f838e2631a032029ce7038261b1b309adddf60"}], 0xf0}}, {{0x0, 0x0, &(0x7f000000b580)=[{0x0}], 0x1}}], 0x4, 0x44851) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r4, 0x0, 0x3, &(0x7f0000000080)=0x90e, 0x4) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000000c0)=0x166, 0x4) sendto$inet(r4, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) 1m44.740951064s ago: executing program 2 (id=474): timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21}, 0x0) signalfd(0xffffffffffffffff, &(0x7f0000000000), 0x8) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1, 0x7e832, 0xffffffffffffffff, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1}) syz_clone3(&(0x7f0000002c00)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x0, r1, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000}) socket$key(0xf, 0x3, 0x2) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendto$inet6(0xffffffffffffffff, &(0x7f0000000400)="7800000018002507b9409b14ffff00000204be04020506050e0204095c0009003f000a000a0000000d0085a168d0bf46d32345653600648d270016000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a320004001200050c0a0000000000e000e218d1ddf66ed538f25232", 0x77, 0x0, 0x0, 0x0) ioprio_get$pid(0x2, 0x0) 1m44.292294s ago: executing program 2 (id=478): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) socket$l2tp(0x2, 0x2, 0x73) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) 58.61356867s ago: executing program 2 (id=509): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000740), 0x400000, 0x0) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}], 0x18}, 0x0) write$binfmt_script(r2, &(0x7f0000000600), 0xfec8) recvmmsg(r2, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xd4e5}, {&(0x7f0000000140)=""/9, 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="94000000", @ANYRES16=0x0, @ANYBLOB="000000000000000000003e000000080001007063690011000200303030303a30303a31302e300003000000008200736f757263655f6d61635f69735f6d756c746963617374000500830001000000080001007063690011000200303030303a"], 0x94}}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f00000002c0)=ANY=[@ANYBLOB="1900000000000000010000400100000000000000c700000005000000e00000000300000000000000000000000000000007"]) 6.890145044s ago: executing program 0 (id=572): r0 = syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000005c0)=r0, 0x12) r3 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x1, 0x12) r4 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000005c0)=r4, 0x12) r7 = openat$cgroup_ro(r5, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0x1, 0x12) 6.749933127s ago: executing program 4 (id=574): socket$inet_udplite(0x2, 0x2, 0x88) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='io.stat\x00', 0x275a, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0x2, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="043e0b1ac900"], 0xe) socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_io_uring_setup(0x2ed2, &(0x7f0000000080)={0x0, 0xb852, 0x4, 0x1, 0x332}, 0x0, &(0x7f0000000580)) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f00000003c0), 0x3, 0x202881) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000001000000000000000a3c000000120a01010000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000009"], 0x64}}, 0x74fc654d54c430a0) 6.388466195s ago: executing program 0 (id=575): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x68}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000500)="66b90201004066b80200000066ba000000000f30f365260f0015ba4300b0a6ee0f380af9f20f38f1dfbaf80c66b8c636ca8466efbafc0ced0f01df63c964daad000026d304", 0x45}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.365963035s ago: executing program 4 (id=576): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x2710, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9) 5.407764382s ago: executing program 4 (id=577): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_type(r0, &(0x7f0000000080), 0x11ffffce1) r2 = syz_io_uring_setup(0x6908, &(0x7f0000000340)={0x0, 0x5429, 0x10100, 0xfffffffe, 0x1000}, &(0x7f00000000c0), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x1868, &(0x7f0000000140), &(0x7f0000000040)=0x0, &(0x7f0000000240)) syz_io_uring_submit(r4, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r2, 0x184c, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) syz_usb_connect(0x2, 0x5a, &(0x7f0000000c00)={{0x12, 0x1, 0x0, 0x4c, 0xb6, 0xe8, 0x10, 0x10c5, 0x819a, 0x9591, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x80, 0x6, 0x6, 0x3, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x5, 0x1, 0x400, 0x6, 0x7, 0x1}}, {{0x9, 0x5, 0x7, 0x0, 0x8, 0x4, 0xc4, 0xf}}, {{0x9, 0x5, 0xf, 0xc, 0x200, 0x1, 0x1, 0x10}}, {{0x9, 0x5, 0x8, 0x3, 0x40, 0x19, 0x0, 0x3}}, {{0x9, 0x5, 0xb, 0x3, 0x8, 0x24, 0x86, 0x7}}, {{0x9, 0x5, 0x6, 0x8, 0x3ff, 0x6, 0x7, 0x8}}]}}]}}]}}, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000580)={0x53, 0x0, 0x6, 0x60, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000340)='\n\v\x00\b\x00\x00', 0x0, 0x0, 0x0, 0x0, 0x0}) write$cgroup_int(r0, &(0x7f0000000200)=0x64cc, 0x12) close(r1) 4.910208209s ago: executing program 0 (id=579): openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) socket(0x10, 0x3, 0x9) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a9a4850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff4d, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000200)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05", @ANYRES16=r0, @ANYRES8, @ANYRES16=r1, @ANYRES16=r3], 0x0) 4.89867846s ago: executing program 1 (id=580): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="180100001c1f00000000000000000000850000006d0007009568ac22a1fd6f57beb2f154e6c0a57f7b27b5c76e631a0d910b43de3d3ccd062acb28a74287dd59e42d75dfa6fe043b95aa8736a0c527e8e9fc1c2badc7035e28a8bb5b93ab2460c7fdfd023dc8499ef27fc97f859ece53b9082d2ece1836757d3c5d83b23c0270c89cc5"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}, @IFLA_IPTUN_LINK={0x8, 0x1, r3}]}}}, @IFLA_MTU={0x8, 0x4, 0xff7f}]}, 0x4c}}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0x20, &(0x7f00000002c0)={&(0x7f00000003c0)=""/103, 0x67, 0x0, &(0x7f0000000440)=""/204, 0xcc}}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=@newlink={0x4c, 0x10, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5}, @IFLA_GRE_ENCAP_DPORT={0x6}, @IFLA_GRE_ENCAP_FLAGS={0x6}]}}}]}, 0x4c}}, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./file1\x00'}, 0x18) 4.757336173s ago: executing program 1 (id=581): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x74000000, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000010004b0400f4ed00000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000600060000000000060009"], 0x4c}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=@newsa={0x164, 0x10, 0x713, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@empty}, {@in=@empty, 0x0, 0x32}, @in=@broadcast, {}, {}, {0x0, 0x0, 0x40000000}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @etimer_thresh={0x8}, @lifetime_val={0x24}]}, 0x164}}, 0x4000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="05010900b24b6a10e6040300770100000001090224000b010000000904000302ccd4280009050b02000000040009058a02"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x2, 0x0, 0x28}, 0x18) 4.44073315s ago: executing program 3 (id=582): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000008c0), r3) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r3, &(0x7f0000000a00)={0x0, 0x2, &(0x7f00000009c0)={&(0x7f0000000900)={0x14, r4, 0xe2c40cf0776ef37, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) 3.410533464s ago: executing program 3 (id=583): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9}}, 0x50) read$FUSE(r0, &(0x7f00000044c0)={0x2020, 0x0, 0x0}, 0xfe63) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000002400)=ANY=[@ANYBLOB="290000000400000000000000000000000100000000000000000000150000000001"], 0x29) write$FUSE_INTERRUPT(r0, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r2}, 0x10) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r3, r0, 0x0) r4 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) write$FUSE_IOCTL(r4, &(0x7f0000000100)={0x20}, 0xfdef) 3.02058598s ago: executing program 3 (id=584): syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f00000006c0)={0x44, &(0x7f00000002c0)={0x0, 0x0, 0x2, "9a94"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getegid() socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x4) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x81, 0xc9, 0x6}}}, 0x8) syz_emit_ethernet(0x5e, &(0x7f0000000240)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0xf, 0x4, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x5, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x0, [{@empty}, {@rand_addr=0x64010101}]}, @ssrr={0x89, 0xf, 0xce, [@multicast2, @remote, @empty]}, @generic={0x83, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) 2.431823901s ago: executing program 4 (id=585): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(0xffffffffffffffff, 0x40184150, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4188aec6, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 2.352141251s ago: executing program 1 (id=586): r0 = socket(0x28, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x431c1, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f0000000100)={0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x1, 0x61, 0x10, 0x10}, [@ldst={0x3, 0x0, 0x6, 0x1c10a1}], {0x95, 0x0, 0x9}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x3, 0x5, 0x4}) connect$packet(r0, &(0x7f0000000500)={0x28}, 0x14) connect$packet(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x401100, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r2 = socket$packet(0x11, 0xa, 0x300) getsockname$packet(r2, 0x0, &(0x7f0000001080)) 2.260431665s ago: executing program 0 (id=587): syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000800000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) socketpair$tipc(0x1e, 0x0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000300)=[{&(0x7f0000001a80)=""/102388, 0x19000}], 0x1000000000000069, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000000000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000001c000000000000000000000007000000440c00010a2101"], 0x230}, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) 2.22684326s ago: executing program 1 (id=588): ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x6, 'ipvlan0\x00'}) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev, 0x0, 0x2, 'sed\x00'}, 0x2c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.532058118s ago: executing program 4 (id=589): openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) write$binfmt_script(r1, &(0x7f0000000040)={'#! ', './file1'}, 0xb) r3 = syz_io_uring_setup(0x2ddd, &(0x7f00000006c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x5e2, &(0x7f0000000080), &(0x7f0000000180)=0x0, &(0x7f0000000380)) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r3, 0x381b, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_GETCAPS(r1, 0x8004500f, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.377824303s ago: executing program 3 (id=590): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[], 0xfffffdef}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x0) 1.283885596s ago: executing program 1 (id=591): ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=@newlink={0x28, 0x10, 0x413, 0x0, 0x0, {}, [@IFLA_LINK={0x8}]}, 0x28}}, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000400)={'syz0\x00'}, 0x45c) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x2) ioctl$UI_SET_RELBIT(r2, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 405.171947ms ago: executing program 0 (id=592): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003580)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) r3 = dup(r2) ioctl$PPPIOCCONNECT(r3, 0x40047435, &(0x7f00000002c0)=0x1) 308.148331ms ago: executing program 3 (id=593): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000700)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780), 0x0, 0xd3, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840), 0x8, 0xba, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000bc0)={&(0x7f0000000a80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0x2, 0x0, @void, @value}, 0x20) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_tracing={0x1a, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', r0, 0x16, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x275ef, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c80)=[{0x0, 0x4, 0x10}, {0x0, 0x5, 0xb, 0x2}, {0x4, 0x5, 0x2, 0x4}], 0x10, 0xa, @void, @value}, 0x90) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001180)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x8, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001100)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xf, '\x00', r0, r4, 0x0, 0x4, 0x5, 0x0, @void, @value, @void, @value}, 0x48) 149.335177ms ago: executing program 3 (id=594): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = inotify_init1(0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, 0x0}) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000140)={0x0, 0x0}) r5 = syz_open_procfs(r4, &(0x7f0000000040)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r5, 0x40286608, &(0x7f0000000180)={@id={0x400fb, 0x0, @b}}) r6 = syz_open_procfs(r2, &(0x7f0000000600)='fd/4\x00') ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r6, 0x40286608, &(0x7f0000000180)={@desc={0x31, 0x2000000, @auto="c01d6a9b099444a1"}}) 117.75821ms ago: executing program 0 (id=595): syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) pipe(&(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000000a40)={0x2020}, 0x2) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r2, r1, 0x0, 0x3a) 111.582894ms ago: executing program 1 (id=596): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) pwritev2(0xffffffffffffffff, &(0x7f00000012c0)=[{&(0x7f0000000100)="7270aa3f0c63ef31716980d71af481e691d156e5c690c37493c965008b713ed133a85027d43b49d05b8ec0e538f674752205f76fb42632a5233a7d64e1cea692029b6a", 0x43}], 0x1, 0x0, 0x1, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000240)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=""/253, 0x0, &(0x7f0000000600)=""/91}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f00000001c0)={0x28, 0x0, 0x0, @my=0x1}, 0x10) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 0s ago: executing program 4 (id=597): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x0, 0x0}, 0x10) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xcd702000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0xe, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x500, 0x0, 0x0) kernel console output (not intermixed with test programs): es [ 145.348566][ T5980] hsr_slave_0: entered promiscuous mode [ 145.398283][ T5980] hsr_slave_1: entered promiscuous mode [ 145.451867][ T5980] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 145.486152][ T5980] Cannot create hsr debugfs directory [ 145.785768][ T6224] netlink: 4 bytes leftover after parsing attributes in process `syz.4.241'. [ 145.831752][ C1] vcan0: j1939_session_tx_dat: 0xffff8880304ccc00: queue data error: -100 [ 145.916532][ T5278] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 146.118477][ T5278] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 146.146232][ T5278] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.168800][ T52] hsr_slave_0: left promiscuous mode [ 146.182580][ T5278] usb 1-1: config 0 descriptor?? [ 146.191363][ T52] hsr_slave_1: left promiscuous mode [ 146.249059][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.265433][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.278340][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.288879][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.380339][ T52] veth1_macvtap: left promiscuous mode [ 146.402115][ T52] veth0_macvtap: left promiscuous mode [ 146.411697][ T52] veth1_vlan: left promiscuous mode [ 146.422006][ T52] veth0_vlan: left promiscuous mode [ 146.897357][ T6253] 9p: Unknown uid 00000000004294967295 [ 147.330531][ T52] team0 (unregistering): Port device team_slave_1 removed [ 147.384523][ T52] team0 (unregistering): Port device team_slave_0 removed [ 147.851367][ T5278] pegasus 1-1:0.0: can't reset MAC [ 147.863099][ T5278] pegasus 1-1:0.0: probe with driver pegasus failed with error -5 [ 147.899407][ T5278] usb 1-1: USB disconnect, device number 7 [ 148.314800][ T5926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.483802][ T5926] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.579204][ T965] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.586392][ T965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.857345][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.864539][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.158103][ T5926] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 149.427462][ T6290] netlink: 4 bytes leftover after parsing attributes in process `syz.1.251'. [ 149.533536][ T5980] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 149.581628][ T5980] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 149.614381][ T5980] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 149.692345][ T5980] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 149.974347][ T5926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.253047][ T5980] 8021q: adding VLAN 0 to HW filter on device bond0 [ 150.324469][ T6311] xt_TCPMSS: Only works on TCP SYN packets [ 151.471903][ T5980] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.554599][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.561829][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.601399][ T5926] veth0_vlan: entered promiscuous mode [ 151.633343][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.640535][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.655937][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 151.655955][ T29] audit: type=1804 audit(1725899242.189:85): pid=6323 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.257" name="/newroot/56/file0/bus" dev="hugetlbfs" ino=12851 res=1 errno=0 [ 151.695737][ T5926] veth1_vlan: entered promiscuous mode [ 151.760771][ T29] audit: type=1804 audit(1725899242.209:86): pid=6323 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.257" name="/newroot/56/file0/bus" dev="hugetlbfs" ino=12851 res=1 errno=0 [ 151.874224][ T5926] veth0_macvtap: entered promiscuous mode [ 151.933154][ T5926] veth1_macvtap: entered promiscuous mode [ 152.000763][ T5926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.041941][ T5926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.072318][ T5926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.097615][ T5926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.130453][ T5926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.142671][ T5926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.185053][ T5926] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.221479][ T5926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.252683][ T5926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.276472][ T5926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.296673][ T5926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.307356][ T5926] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.320971][ T5926] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.355473][ T5926] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.375759][ T5926] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.386034][ T5926] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.396206][ T5926] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.407800][ T5926] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.468866][ T5980] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 152.644337][ T1118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.689426][ T1118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.724210][ T5980] veth0_vlan: entered promiscuous mode [ 152.779352][ T6343] Invalid ELF header magic: != ELF [ 152.792639][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.817421][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.825011][ T5980] veth1_vlan: entered promiscuous mode [ 152.922788][ T5980] veth0_macvtap: entered promiscuous mode [ 152.955514][ T5980] veth1_macvtap: entered promiscuous mode [ 153.128765][ T5980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.142084][ T5980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.154902][ T5980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.198932][ T5980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.231381][ T5980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.320088][ T5980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.412004][ T5980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.514768][ T5980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.655270][ T5980] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.861910][ T5980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.881041][ T5980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.892275][ T5980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.916360][ T5980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.967192][ T5980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.017422][ T5980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.044184][ T5980] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.075064][ T5980] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.097427][ T5980] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 154.142999][ T5980] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.167132][ T5980] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.191012][ T5980] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.215078][ T5980] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.573384][ T61] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.953449][ T61] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.161060][ T61] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.381276][ T61] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.477896][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 155.566139][ T965] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.599550][ T965] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.677238][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 155.700185][ T2926] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.725349][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 155.729478][ T2926] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.762696][ T9] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 155.823674][ T9] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 155.863999][ T9] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 155.893530][ T61] bridge_slave_1: left allmulticast mode [ 155.913694][ T9] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 155.919444][ T4617] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 155.932592][ T61] bridge_slave_1: left promiscuous mode [ 155.942938][ T4617] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 155.976230][ T4617] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 155.985676][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.001147][ T9] usb 1-1: config 1 interface 0 has no altsetting 0 [ 156.017385][ T4617] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 156.025496][ T61] bridge_slave_0: left allmulticast mode [ 156.032920][ T9] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 156.034639][ T4617] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 156.052463][ T61] bridge_slave_0: left promiscuous mode [ 156.058214][ T4617] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 156.066598][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.113949][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.193342][ T9] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 156.424582][ T9] scsi host1: usb-storage 1-1:1.0 [ 156.631430][ T5306] usb 1-1: USB disconnect, device number 8 [ 157.190708][ T6394] netlink: 12 bytes leftover after parsing attributes in process `syz.1.273'. [ 157.332749][ T6396] netlink: 8 bytes leftover after parsing attributes in process `syz.0.274'. [ 157.456789][ T6396] netlink: 4 bytes leftover after parsing attributes in process `syz.0.274'. [ 157.583203][ T5234] block nbd0: Receive control failed (result -107) [ 157.606787][ T6396] nbd0: detected capacity change from 0 to 256 [ 157.665886][ T6283] block nbd0: Dead connection, failed to find a fallback [ 157.736999][ T6283] block nbd0: shutting down sockets [ 157.788548][ T6283] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 157.839103][ T6283] Buffer I/O error on dev nbd0, logical block 0, async page read [ 157.930762][ T6283] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 157.981540][ T6283] Buffer I/O error on dev nbd0, logical block 0, async page read [ 158.019538][ T6283] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 158.058884][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.096362][ T6283] Buffer I/O error on dev nbd0, logical block 0, async page read [ 158.113266][ T5234] Bluetooth: hci0: command tx timeout [ 158.121568][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 158.167705][ T6283] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 158.212374][ T6283] Buffer I/O error on dev nbd0, logical block 0, async page read [ 158.248932][ T6283] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 158.275862][ T61] bond0 (unregistering): Released all slaves [ 158.307342][ T6283] Buffer I/O error on dev nbd0, logical block 0, async page read [ 158.323873][ T6283] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 158.433862][ T6283] Buffer I/O error on dev nbd0, logical block 0, async page read [ 158.481982][ T6283] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 158.552102][ T6283] Buffer I/O error on dev nbd0, logical block 0, async page read [ 158.566922][ T943] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 158.601741][ T6283] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 158.636868][ T6283] Buffer I/O error on dev nbd0, logical block 0, async page read [ 158.716726][ T6283] ldm_validate_partition_table(): Disk read failed. [ 158.804185][ T6283] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 158.847042][ T943] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.858408][ T5276] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 158.876723][ T6283] Buffer I/O error on dev nbd0, logical block 0, async page read [ 158.887023][ T6283] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 158.903913][ T943] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 158.936872][ T943] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 158.943692][ T6283] Buffer I/O error on dev nbd0, logical block 0, async page read [ 158.961187][ T943] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.015688][ T6283] Dev nbd0: unable to read RDB block 0 [ 159.044946][ T943] usb 1-1: config 0 descriptor?? [ 159.046178][ T6283] nbd0: unable to read partition table [ 159.087035][ T5276] usb 2-1: Using ep0 maxpacket: 32 [ 159.097236][ T5276] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 159.138498][ T5276] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 159.191712][ T6283] ldm_validate_partition_table(): Disk read failed. [ 159.199283][ T5276] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 159.214777][ T5276] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 159.228685][ T5276] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.239230][ T6283] Dev nbd0: unable to read RDB block 0 [ 159.249616][ T5276] usb 2-1: config 0 descriptor?? [ 159.255926][ T6418] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 159.305318][ T5276] hub 2-1:0.0: USB hub found [ 159.312616][ T6283] nbd0: unable to read partition table [ 159.385568][ T61] hsr_slave_0: left promiscuous mode [ 159.441289][ T61] hsr_slave_1: left promiscuous mode [ 159.509233][ T943] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 159.523705][ T5276] hub 2-1:0.0: 2 ports detected [ 159.544230][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.575516][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.596152][ T943] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 159.621477][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.664641][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.756725][ T61] veth1_macvtap: left promiscuous mode [ 159.780970][ T61] veth0_macvtap: left promiscuous mode [ 159.804636][ T61] veth1_vlan: left promiscuous mode [ 159.825011][ T61] veth0_vlan: left promiscuous mode [ 160.187126][ T5234] Bluetooth: hci0: command tx timeout [ 160.481392][ T8] usb 1-1: USB disconnect, device number 9 [ 160.747042][ T5276] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 160.973334][ T5276] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.010338][ T5276] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.035618][ T5276] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 161.110056][ T5276] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.179632][ T5276] usb 3-1: config 0 descriptor?? [ 161.323958][ T9] usb 2-1: USB disconnect, device number 7 [ 161.562465][ T61] team0 (unregistering): Port device team_slave_1 removed [ 161.643023][ T61] team0 (unregistering): Port device team_slave_0 removed [ 161.861772][ T5276] usb 3-1: string descriptor 0 read error: -22 [ 162.063036][ T5276] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0006/input/input10 [ 162.210548][ T5276] uclogic 0003:256C:006D.0006: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 162.266641][ T5234] Bluetooth: hci0: command tx timeout [ 162.937072][ T5276] usb 3-1: USB disconnect, device number 3 [ 163.254666][ T5234] Bluetooth: min 0 < 6 [ 163.485543][ T6467] tipc: Failed to remove unknown binding: 65,0,0/0:3690606767/3690606768 [ 164.346644][ T5234] Bluetooth: hci0: command tx timeout [ 165.084986][ T6484] netlink: 'syz.0.294': attribute type 10 has an invalid length. [ 165.123375][ T6484] netlink: 40 bytes leftover after parsing attributes in process `syz.0.294'. [ 165.162154][ T6484] syz_tun: entered promiscuous mode [ 165.168641][ T6484] syz_tun: entered allmulticast mode [ 165.186120][ T6484] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 165.221261][ T6376] chnl_net:caif_netlink_parms(): no params data found [ 165.306984][ T5234] Bluetooth: hci2: command tx timeout [ 165.390449][ T6478] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 165.965774][ T6376] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.023166][ T6376] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.033276][ T6376] bridge_slave_0: entered allmulticast mode [ 166.040939][ T6376] bridge_slave_0: entered promiscuous mode [ 166.093428][ T6376] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.111365][ T6376] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.136811][ T6376] bridge_slave_1: entered allmulticast mode [ 166.170083][ T6376] bridge_slave_1: entered promiscuous mode [ 167.396166][ T6376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.434647][ T6376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.463395][ T6524] netlink: 68 bytes leftover after parsing attributes in process `syz.1.310'. [ 167.547959][ T6529] netlink: 28 bytes leftover after parsing attributes in process `syz.1.310'. [ 168.287306][ T6376] team0: Port device team_slave_0 added [ 168.517580][ T6376] team0: Port device team_slave_1 added [ 169.838967][ T6376] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.865884][ T6376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.900328][ T6376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.671386][ T6376] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.713636][ T6376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.751640][ T6376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.977245][ T6376] hsr_slave_0: entered promiscuous mode [ 171.009905][ T6376] hsr_slave_1: entered promiscuous mode [ 171.396601][ T5275] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 171.606713][ T5275] usb 3-1: Using ep0 maxpacket: 32 [ 171.636361][ T5275] usb 3-1: config 0 has an invalid interface number: 198 but max is 0 [ 171.646565][ T5275] usb 3-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 171.693865][ T5275] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 171.709354][ T5275] usb 3-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 171.720573][ T5275] usb 3-1: config 0 has no interface number 0 [ 171.728516][ T5275] usb 3-1: config 0 interface 198 altsetting 0 endpoint 0x8B has an invalid bInterval 31, changing to 8 [ 171.758739][ T6575] 8021q: VLANs not supported on ipvlan0 [ 171.765503][ T5275] usb 3-1: config 0 interface 198 altsetting 0 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 171.821008][ T5275] usb 3-1: config 0 interface 198 altsetting 0 has a duplicate endpoint with address 0xF, skipping [ 171.848016][ T5275] usb 3-1: config 0 interface 198 altsetting 0 has 6 endpoint descriptors, different from the interface descriptor's value: 8 [ 171.885309][ T5275] usb 3-1: New USB device found, idVendor=066f, idProduct=8000, bcdDevice= 0.01 [ 171.910114][ T5275] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.922537][ T5275] usb 3-1: Product: syz [ 171.926927][ T5275] usb 3-1: Manufacturer: syz [ 171.934311][ T5275] usb 3-1: SerialNumber: syz [ 171.980895][ T5275] usb 3-1: config 0 descriptor?? [ 172.012642][ T5275] usb-storage 3-1:0.198: USB Mass Storage device detected [ 172.027700][ T6376] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 172.049149][ T5275] usb-storage 3-1:0.198: Quirks match for vid 066f pid 8000: 10 [ 172.059641][ T6376] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 172.234268][ T6376] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 172.990553][ T6376] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 173.156376][ T6592] netlink: 24 bytes leftover after parsing attributes in process `syz.3.315'. [ 173.196965][ T6593] hub 9-0:1.0: USB hub found [ 173.241510][ T5275] usb 3-1: USB disconnect, device number 4 [ 173.390275][ T6593] hub 9-0:1.0: 8 ports detected [ 174.434435][ T6376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.486603][ T5275] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 174.958939][ T5275] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.991318][ T6376] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.998196][ T5275] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.024911][ T5275] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 175.042227][ T965] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.049900][ T965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.064050][ T5275] usb 3-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 175.077048][ T5275] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.084359][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.092278][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.093648][ T5275] usb 3-1: config 0 descriptor?? [ 175.269403][ T6376] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 175.584068][ T5275] hid-udraw 0003:20D6:CB17.0007: unknown main item tag 0x0 [ 175.623239][ T5275] input: THQ uDraw Game Tablet for PS3 Joypad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:20D6:CB17.0007/input/input11 [ 175.811275][ T5275] input: THQ uDraw Game Tablet for PS3 Touchpad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:20D6:CB17.0007/input/input12 [ 175.862987][ T6376] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.965264][ T5275] input: THQ uDraw Game Tablet for PS3 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:20D6:CB17.0007/input/input13 [ 176.094406][ T5275] input: THQ uDraw Game Tablet for PS3 Accelerometer as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:20D6:CB17.0007/input/input14 [ 176.295437][ T5275] hid-udraw 0003:20D6:CB17.0007: hidraw0: USB HID v0.00 Device [HID 20d6:cb17] on usb-dummy_hcd.2-1/input0 [ 176.389864][ T5275] usb 3-1: USB disconnect, device number 5 [ 176.508017][ T4617] Bluetooth: hci1: command 0x1003 tx timeout [ 176.515349][ T5234] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 177.039285][ T6376] veth0_vlan: entered promiscuous mode [ 177.110005][ T6376] veth1_vlan: entered promiscuous mode [ 177.251866][ T6376] veth0_macvtap: entered promiscuous mode [ 177.272518][ T6376] veth1_macvtap: entered promiscuous mode [ 177.345231][ T6656] macvlan2: entered allmulticast mode [ 177.373884][ T6656] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode [ 177.386224][ T6656] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 177.453102][ T6656] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 177.489159][ T6658] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.579886][ T6659] bond0: entered promiscuous mode [ 177.590095][ T6659] bond_slave_0: entered promiscuous mode [ 177.598532][ T6659] bond_slave_1: entered promiscuous mode [ 177.617154][ T6659] macvlan2: entered promiscuous mode [ 177.735860][ T6376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.764473][ T6376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.776776][ T6376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.848442][ T6376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.902742][ T6376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.963902][ T6376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.991629][ T6376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.003980][ T6376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.082900][ T6675] overlayfs: failed to resolve './file0': -2 [ 178.091973][ T6376] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.131126][ T6376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.184257][ T6376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.212510][ T6376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.224977][ T6376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.254571][ T6376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.269271][ T6376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.286358][ T6376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.302291][ T6376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.320262][ T6376] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.334167][ T6376] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.352867][ T6376] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.409755][ T6376] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.438963][ T29] audit: type=1326 audit(1725899268.979:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6678 comm="syz.3.330" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fddfad7def9 code=0x0 [ 178.460147][ T6376] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.850602][ T6685] netlink: 'syz.2.332': attribute type 1 has an invalid length. [ 178.906737][ T6685] netlink: 'syz.2.332': attribute type 3 has an invalid length. [ 178.931893][ T6685] netlink: 224 bytes leftover after parsing attributes in process `syz.2.332'. [ 179.018440][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.055103][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.112067][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.156501][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.252421][ T6695] ip6t_srh: unknown srh match flags FDC7 [ 179.473874][ T6706] netlink: 'syz.4.268': attribute type 10 has an invalid length. [ 179.558952][ T6706] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.604175][ T6706] bond0: (slave team0): Enslaving as an active interface with an up link [ 179.660697][ T6710] netlink: 'syz.4.268': attribute type 10 has an invalid length. [ 179.813811][ T6710] bond0: (slave team0): Releasing backup interface [ 179.919005][ T6710] bridge0: port 3(team0) entered blocking state [ 179.982347][ T6710] bridge0: port 3(team0) entered disabled state [ 179.995074][ T6709] Bluetooth: MGMT ver 1.23 [ 180.024155][ T6710] team0: entered allmulticast mode [ 180.048899][ T6710] team_slave_0: entered allmulticast mode [ 180.081411][ T6710] team_slave_1: entered allmulticast mode [ 180.090949][ T6710] team0: entered promiscuous mode [ 180.112452][ T6710] team_slave_0: entered promiscuous mode [ 180.125132][ T6710] team_slave_1: entered promiscuous mode [ 180.356719][ T5277] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 180.451489][ T6733] Bluetooth: MGMT ver 1.23 [ 180.466792][ T5275] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 180.569698][ T5277] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.598498][ T5277] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 180.622356][ T5277] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.687774][ T5277] usb 2-1: config 0 descriptor?? [ 180.745576][ T5275] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=6f.22 [ 180.745602][ T5277] pwc: Askey VC010 type 2 USB webcam detected. [ 180.783938][ T5275] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.805636][ T5275] usb 3-1: Product: syz [ 180.820393][ T5275] usb 3-1: Manufacturer: syz [ 180.843345][ T5275] usb 3-1: SerialNumber: syz [ 180.856194][ T136] Bluetooth: hci1: Frame reassembly failed (-84) [ 180.894708][ T5275] usb 3-1: config 0 descriptor?? [ 180.917017][ T5275] dm9601 3-1:0.0: probe with driver dm9601 failed with error -22 [ 180.932830][ T5275] sr9700 3-1:0.0: probe with driver sr9700 failed with error -22 [ 180.972781][ T5277] pwc: send_video_command error -71 [ 180.996155][ T5277] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 181.020925][ T5277] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 181.057535][ T5277] usb 2-1: USB disconnect, device number 8 [ 181.306812][ T5242] Bluetooth: hci4: command 0x0405 tx timeout [ 181.312974][ T5229] Bluetooth: hci2: command 0x0406 tx timeout [ 181.726637][ T5277] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 181.967506][ T5277] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.081214][ T5277] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 182.197094][ T5277] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.217270][ T5277] usb 2-1: config 0 descriptor?? [ 182.227862][ T5277] pwc: Askey VC010 type 2 USB webcam detected. [ 182.505538][ T6763] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.347'. [ 182.519804][ T6763] openvswitch: netlink: VXLAN extension 1024 out of range max 1 [ 182.642151][ T5277] pwc: recv_control_msg error -32 req 02 val 2b00 [ 182.656933][ T5277] pwc: recv_control_msg error -32 req 02 val 2700 [ 182.664283][ T5277] pwc: recv_control_msg error -32 req 02 val 2c00 [ 182.673990][ T5277] pwc: recv_control_msg error -32 req 04 val 1000 [ 182.687220][ T5277] pwc: recv_control_msg error -32 req 04 val 1300 [ 182.694239][ T5277] pwc: recv_control_msg error -32 req 04 val 1400 [ 182.703691][ T5277] pwc: recv_control_msg error -32 req 02 val 2000 [ 182.743555][ T6765] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 182.762106][ T943] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 182.906664][ T5233] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 182.909858][ T4617] Bluetooth: hci1: command 0x1003 tx timeout [ 183.177479][ T5277] pwc: recv_control_msg error -71 req 02 val 2500 [ 183.340012][ T5277] pwc: recv_control_msg error -71 req 02 val 2400 [ 183.444163][ T5277] pwc: recv_control_msg error -71 req 02 val 2600 [ 183.535986][ T5277] pwc: recv_control_msg error -71 req 02 val 2900 [ 183.614119][ T943] usb 1-1: Using ep0 maxpacket: 16 [ 183.626968][ T943] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 183.646299][ T5277] pwc: recv_control_msg error -71 req 02 val 2800 [ 183.652482][ T943] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 183.671143][ T5277] pwc: recv_control_msg error -71 req 04 val 1100 [ 183.671909][ T943] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 183.684617][ T5277] pwc: recv_control_msg error -71 req 04 val 1200 [ 183.689052][ T46] usb 3-1: USB disconnect, device number 6 [ 183.766088][ T943] usb 1-1: New USB device found, idVendor=10bd, idProduct=1427, bcdDevice=60.d0 [ 183.785999][ T943] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.797008][ T5277] pwc: Registered as video71. [ 183.803710][ T5277] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input15 [ 183.805793][ T943] usb 1-1: Product: syz [ 183.852587][ T943] usb 1-1: Manufacturer: syz [ 183.880483][ T943] usb 1-1: SerialNumber: syz [ 183.937836][ T943] usb 1-1: config 0 descriptor?? [ 183.953709][ T5277] usb 2-1: USB disconnect, device number 9 [ 184.202637][ T943] kaweth 1-1:0.0: Firmware present in device. [ 184.417192][ T46] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 184.488750][ T943] kaweth 1-1:0.0: Error reading configuration (-71), no net device created [ 184.501979][ T943] kaweth 1-1:0.0: probe with driver kaweth failed with error -5 [ 184.518869][ T943] usb 1-1: USB disconnect, device number 10 [ 184.697218][ T46] usb 3-1: Using ep0 maxpacket: 8 [ 184.729003][ T46] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.769705][ T46] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.802723][ T46] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 184.814366][ T46] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 184.830187][ T46] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 184.848057][ T46] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 184.861473][ T46] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 184.893914][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.902426][ T46] usb 3-1: Product: syz [ 184.906994][ T46] usb 3-1: Manufacturer: syz [ 184.911738][ T46] usb 3-1: SerialNumber: syz [ 185.832735][ T6793] syz.4.356 (6793): drop_caches: 2 [ 186.243489][ T46] cdc_ncm 3-1:1.0: bind() failure [ 186.260935][ T46] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 186.287684][ T46] cdc_ncm 3-1:1.1: bind() failure [ 186.297459][ T46] usb 3-1: USB disconnect, device number 7 [ 186.436550][ T8] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 186.736522][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 186.826592][ T4617] Bluetooth: hci1: command 0x1003 tx timeout [ 186.837011][ T5233] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 186.878004][ T8] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 187.781956][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.871643][ T8] usb 5-1: Product: syz [ 187.877260][ T8] usb 5-1: Manufacturer: syz [ 187.883086][ T8] usb 5-1: SerialNumber: syz [ 187.919689][ T8] usb 5-1: config 0 descriptor?? [ 188.138847][ T8] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 190.127060][ T8] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 190.159468][ T8] usb 5-1: USB disconnect, device number 7 [ 190.278200][ T943] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 190.488664][ T943] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.505091][ T943] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 190.525011][ T943] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.600545][ T943] usb 4-1: config 0 descriptor?? [ 190.851274][ T6835] trusted_key: syz.2.370 sent an empty control message without MSG_MORE. [ 191.010712][ T943] keytouch 0003:0926:3333.0008: fixing up Keytouch IEC report descriptor [ 191.041138][ T29] audit: type=1400 audit(1725899281.579:88): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=6836 comm="syz.4.371" daddr=ff02::1 [ 191.055772][ T943] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0008/input/input16 [ 191.223279][ T6823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.277173][ T6823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.328493][ T6823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.379621][ T943] keytouch 0003:0926:3333.0008: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 191.429672][ T6823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.456194][ T6823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.525459][ T6823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.944683][ T8] usb 4-1: USB disconnect, device number 4 [ 192.006569][ T1172] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 192.227617][ T1172] usb 3-1: Using ep0 maxpacket: 16 [ 192.257157][ T1172] usb 3-1: unable to get BOS descriptor or descriptor too short [ 192.277299][ T1172] usb 3-1: no configurations [ 192.287906][ T1172] usb 3-1: can't read configurations, error -22 [ 192.673562][ T6859] overlayfs: failed to resolve './file0': -2 [ 194.599605][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.606179][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.355161][ T29] audit: type=1326 audit(1725899286.889:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6923 comm="syz.4.398" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f054817def9 code=0x0 [ 196.461626][ T6925] sp0: Synchronizing with TNC [ 197.384822][ T6941] syz.2.403[6941] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 197.384980][ T6941] syz.2.403[6941] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 198.327027][ T5277] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 198.372222][ T6949] netlink: 4 bytes leftover after parsing attributes in process `syz.2.405'. [ 198.487351][ T6949] batman_adv: batadv1: Adding interface: netdevsim0 [ 198.512104][ T6949] batman_adv: batadv1: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.555134][ T6949] batman_adv: batadv1: Interface activated: netdevsim0 [ 198.580692][ T6952] netlink: 4 bytes leftover after parsing attributes in process `syz.2.405'. [ 198.590062][ T5277] usb 5-1: Using ep0 maxpacket: 16 [ 198.595447][ T6952] batman_adv: batadv1: Interface deactivated: netdevsim0 [ 198.604541][ T5277] usb 5-1: New USB device found, idVendor=2770, idProduct=9050, bcdDevice=11.97 [ 198.616287][ T6952] batman_adv: batadv1: Removing interface: netdevsim0 [ 198.624629][ T5277] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.661109][ T5277] usb 5-1: config 0 descriptor?? [ 198.678406][ T5277] gspca_main: sq905c-2.14.0 probing 2770:9050 [ 198.882608][ T5277] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 198.913687][ T5277] sq905c 5-1:0.0: Get version command failed [ 198.933321][ T5277] sq905c 5-1:0.0: probe with driver sq905c failed with error -71 [ 198.961196][ T5277] usb 5-1: USB disconnect, device number 8 [ 198.986641][ T6954] netlink: 20 bytes leftover after parsing attributes in process `syz.2.407'. [ 198.995551][ T6954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.407'. [ 199.047574][ T6954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.407'. [ 199.466997][ T5277] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 199.858914][ T6967] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 199.872164][ T6967] xt_SECMARK: unable to map security context 'system_u:object_r:dbusd_etc_t:s0' [ 200.479194][ T5277] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.516492][ T5277] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.796555][ T5277] usb 3-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 200.839854][ T5277] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.874331][ T5277] usb 3-1: config 0 descriptor?? [ 201.176735][ T1172] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 201.373374][ T29] audit: type=1400 audit(1725899291.909:90): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="trusted.overlay.redirect" object="_" requested=w pid=6957 comm="syz.2.409" saddr=fc01:: daddr=fe80::aa dest=20002 netif=wpan0 [ 201.410619][ T5277] usbhid 3-1:0.0: can't add hid device: -71 [ 201.454818][ T5277] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 201.483647][ T1172] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.543562][ T5277] usb 3-1: USB disconnect, device number 10 [ 201.575311][ T1172] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 201.638190][ T1172] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 201.692433][ T1172] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.776108][ T1172] usb 5-1: config 0 descriptor?? [ 202.458848][ T1172] Bluetooth: Can't get version to change to load ram patch err [ 202.510578][ T1172] Bluetooth: Loading sysconfig file failed [ 202.538319][ T1172] ath3k 5-1:0.0: probe with driver ath3k failed with error -32 [ 202.619133][ T1172] usb 5-1: USB disconnect, device number 9 [ 204.539884][ T7009] netlink: 'syz.4.427': attribute type 1 has an invalid length. [ 204.563262][ T7009] netlink: 9372 bytes leftover after parsing attributes in process `syz.4.427'. [ 204.574077][ T7009] netlink: 'syz.4.427': attribute type 1 has an invalid length. [ 204.872710][ T29] audit: type=1326 audit(1725899295.409:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7016 comm="syz.4.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f054817def9 code=0x7ffc0000 [ 204.933292][ T29] audit: type=1326 audit(1725899295.409:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7016 comm="syz.4.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f054817def9 code=0x7ffc0000 [ 204.982713][ T7020] binder: 7019:7020 ioctl c0306201 20000000 returned -14 [ 204.993279][ T29] audit: type=1326 audit(1725899295.409:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7016 comm="syz.4.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f054817def9 code=0x7ffc0000 [ 205.015493][ T29] audit: type=1326 audit(1725899295.409:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7016 comm="syz.4.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f054817def9 code=0x7ffc0000 [ 205.037012][ C0] vkms_vblank_simulate: vblank timer overrun [ 205.046740][ T29] audit: type=1326 audit(1725899295.409:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7016 comm="syz.4.430" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f054817def9 code=0x7ffc0000 [ 205.069134][ T943] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 205.095964][ T7023] binder_alloc: 7019: binder_alloc_buf size 4096 failed, no address space [ 205.105362][ T7023] binder_alloc: allocated: 8 (num: 1 largest: 8), free: 4088 (num: 1 largest: 4088) [ 205.266528][ T943] usb 2-1: Using ep0 maxpacket: 32 [ 205.274217][ T943] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.285435][ T943] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.287044][ T1172] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 205.297384][ T943] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 205.313854][ T943] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.355482][ T943] hub 2-1:4.0: USB hub found [ 205.507049][ T1172] usb 5-1: Using ep0 maxpacket: 8 [ 205.585281][ T1172] usb 5-1: unable to get BOS descriptor or descriptor too short [ 205.604361][ T943] hub 2-1:4.0: 2 ports detected [ 205.613780][ T1172] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 205.626085][ T1172] usb 5-1: can't read configurations, error -71 [ 206.260949][ T7027] kvm: pic: non byte read [ 206.907846][ T943] hub 2-1:4.0: hub_hub_status failed (err = -32) [ 206.930489][ T943] hub 2-1:4.0: config failed, can't get hub status (err -32) [ 207.052152][ T943] usb 2-1: USB disconnect, device number 10 [ 207.059315][ T7044] 9pnet: p9_errstr2errno: server reported unknown error œæçæÿÎsŧ‘̼§6µ‡ [ 207.286594][ T46] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 207.465711][ T7050] tmpfs: Cannot retroactively limit inodes [ 207.528383][ T46] usb 1-1: config 0 has an invalid interface number: 156 but max is 1 [ 207.538104][ T7050] netlink: 4580 bytes leftover after parsing attributes in process `syz.4.441'. [ 207.549789][ T46] usb 1-1: config 0 has no interface number 1 [ 207.567071][ T46] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 207.591305][ T7050] netlink: 4580 bytes leftover after parsing attributes in process `syz.4.441'. [ 207.600594][ T7050] netlink: 69 bytes leftover after parsing attributes in process `syz.4.441'. [ 207.613902][ T46] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 207.631590][ T46] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 207.643372][ T46] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 207.665085][ T46] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 207.685964][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.775607][ T46] usb 1-1: config 0 descriptor?? [ 207.851429][ T46] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 207.897913][ T46] usb 1-1: MIDIStreaming interface descriptor not found [ 208.053201][ T29] audit: type=1400 audit(1725899298.589:96): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="trusted.overlay.redirect" object="_" requested=w pid=7039 comm="syz.0.438" daddr=fe80::aa dest=20002 netif=wpan0 [ 208.140631][ T29] audit: type=1400 audit(1725899298.589:97): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="trusted.overlay.redirect" object="_" requested=w pid=7039 comm="syz.0.438" daddr=fe80::aa dest=20002 netif=wpan0 [ 208.195534][ T46] gspca_main: spca561-2.14.0 probing abcd:cdee [ 208.272484][ T46] spca561 1-1:0.0: probe with driver spca561 failed with error -22 [ 208.315043][ T46] usb 1-1: USB disconnect, device number 11 [ 209.128940][ T7076] netlink: 20 bytes leftover after parsing attributes in process `syz.2.451'. [ 209.257506][ T7080] hub 9-0:1.0: USB hub found [ 209.292878][ T7080] hub 9-0:1.0: 8 ports detected [ 209.727596][ T943] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 209.996519][ T943] usb 1-1: Using ep0 maxpacket: 8 [ 210.966646][ T943] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 210.999130][ T943] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 211.051686][ T943] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 211.112470][ T943] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 211.311699][ T4617] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 211.323374][ T4617] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 211.334745][ T4617] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 211.359531][ T4617] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 211.370017][ T4617] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 211.449581][ T4617] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 211.487366][ T943] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 211.566010][ T943] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 211.617529][ T943] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.693974][ T943] usb 1-1: config 0 descriptor?? [ 211.811036][ T46] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 211.836251][ T4617] Bluetooth: hci6: urb ffff888043dedd00 submission failed (90) [ 212.066528][ T46] usb 5-1: Using ep0 maxpacket: 32 [ 212.079136][ T46] usb 5-1: New USB device found, idVendor=06d0, idProduct=0622, bcdDevice=89.65 [ 212.107039][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.131171][ T46] usb 5-1: Product: syz [ 212.141700][ T46] usb 5-1: Manufacturer: syz [ 212.156087][ T5306] usb 1-1: USB disconnect, device number 12 [ 212.169023][ T46] usb 5-1: SerialNumber: syz [ 212.207460][ T46] usb 5-1: config 0 descriptor?? [ 212.216086][ T7121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.464'. [ 212.227280][ T1172] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 212.250598][ T46] net1080 5-1:0.0: probe with driver net1080 failed with error -22 [ 212.319164][ T7100] chnl_net:caif_netlink_parms(): no params data found [ 212.446830][ T1172] usb 2-1: Using ep0 maxpacket: 8 [ 212.499049][ T1172] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 212.509053][ T1172] usb 2-1: config 0 has no interface number 0 [ 212.515425][ T1172] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 212.537453][ T1172] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 212.551365][ T1172] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.572755][ T1172] usb 2-1: config 0 descriptor?? [ 212.617856][ T5277] usb 5-1: USB disconnect, device number 12 [ 212.661926][ T1172] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 212.766220][ T7100] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.779523][ T7100] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.804636][ T7100] bridge_slave_0: entered allmulticast mode [ 212.813250][ T7100] bridge_slave_0: entered promiscuous mode [ 212.847605][ T7100] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.872533][ T7100] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.911851][ T7100] bridge_slave_1: entered allmulticast mode [ 212.940952][ T7100] bridge_slave_1: entered promiscuous mode [ 213.077482][ T7100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.172523][ T7100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.371451][ T7100] team0: Port device team_slave_0 added [ 213.406070][ T7100] team0: Port device team_slave_1 added [ 213.501176][ T7100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.523948][ T7100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.658552][ T4617] Bluetooth: hci1: command tx timeout [ 213.709544][ T7100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.979301][ T7100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.995813][ T7100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.135875][ T7100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.167448][ T5277] usb 2-1: USB disconnect, device number 11 [ 214.245389][ T5277] iowarrior 2-1:0.1: I/O-Warror #0 now disconnected [ 214.880577][ T7150] overlayfs: failed to resolve './file1': -2 [ 214.964992][ T7100] hsr_slave_0: entered promiscuous mode [ 214.983568][ T7100] hsr_slave_1: entered promiscuous mode [ 214.992348][ T7100] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 215.014332][ T7100] Cannot create hsr debugfs directory [ 215.034207][ T7152] vlan2: entered allmulticast mode [ 215.040746][ T7152] bond0: entered allmulticast mode [ 215.057118][ T7152] bond_slave_0: entered allmulticast mode [ 215.082926][ T7152] bond_slave_1: entered allmulticast mode [ 215.101511][ T7152] bond0: left allmulticast mode [ 215.114976][ T7152] bond_slave_0: left allmulticast mode [ 215.128161][ T7152] bond_slave_1: left allmulticast mode [ 215.191827][ T29] audit: type=1400 audit(1725899305.729:98): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=7156 comm="syz.0.473" daddr=fe80::1b dest=16385 [ 215.468995][ T7161] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 215.716244][ T4617] Bluetooth: hci1: command tx timeout [ 216.031315][ T943] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 216.143337][ T7100] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.280479][ T943] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 216.329540][ T943] usb 2-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 216.341967][ T7100] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.385263][ T943] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.490208][ T943] usb 2-1: config 0 descriptor?? [ 216.531340][ T7100] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.790895][ T7100] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.961538][ T5277] usb 2-1: USB disconnect, device number 12 [ 217.325443][ T7100] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 217.348753][ T7100] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 217.361012][ T7100] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 217.389520][ T7100] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 217.711466][ T7190] netlink: 12 bytes leftover after parsing attributes in process `syz.4.482'. [ 217.786557][ T4617] Bluetooth: hci1: command tx timeout [ 218.634694][ T7100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.678487][ T7100] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.695498][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.702817][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.813454][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.820648][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.866791][ T4617] Bluetooth: hci1: command tx timeout [ 219.905195][ T7100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.103999][ T7100] veth0_vlan: entered promiscuous mode [ 220.598678][ T7100] veth1_vlan: entered promiscuous mode [ 220.690185][ T29] audit: type=1326 audit(1725899311.199:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7205 comm="syz.0.488" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f769c97def9 code=0x0 [ 220.718856][ T7222] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.491'. [ 220.745198][ T7222] openvswitch: netlink: VXLAN extension 1024 out of range max 1 [ 220.891154][ T7100] veth0_macvtap: entered promiscuous mode [ 220.968461][ T7100] veth1_macvtap: entered promiscuous mode [ 221.012332][ T7100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.065237][ T7100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.109988][ T7100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.127383][ T7100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.141810][ T7100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.155972][ T7100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.159168][ T4617] Bluetooth: hci2: unexpected event for opcode 0x2005 [ 221.188326][ T7100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.251185][ T7100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.336148][ T7100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.370880][ T7100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.406918][ T7100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.465769][ T7100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.493148][ T7100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.526887][ T7100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.553676][ T7100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.582104][ T7100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.623898][ T7100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.655831][ T7100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.674399][ T7100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.705897][ T7100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.722897][ T7100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.743680][ T7100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.774123][ T7100] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.815740][ T7100] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.825078][ T7100] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.834767][ T7100] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.024399][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.055660][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.111396][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.139997][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.001359][ T5275] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 223.223381][ T5275] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 223.239831][ T5275] usb 4-1: config 0 has no interfaces? [ 223.245644][ T5275] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 223.254929][ T5275] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.274870][ T5275] usb 4-1: config 0 descriptor?? [ 223.318395][ T943] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 223.486565][ T5306] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 223.504830][ T943] usb 5-1: device descriptor read/64, error -71 [ 223.546166][ T5278] usb 4-1: USB disconnect, device number 5 [ 223.821560][ T5306] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 223.831700][ T5306] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 224.137654][ T5306] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 224.149618][ T5306] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.157879][ T5306] usb 2-1: Product: syz [ 224.162303][ T5306] usb 2-1: Manufacturer: syz [ 224.167258][ T5306] usb 2-1: SerialNumber: syz [ 224.196845][ T943] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 224.213055][ T5306] usb 2-1: config 0 descriptor?? [ 224.224442][ T7255] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 224.255417][ T7255] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 224.294596][ T7264] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 224.380291][ T943] usb 5-1: device descriptor read/64, error -71 [ 224.488544][ T7255] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 224.510170][ T7255] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 224.579527][ T943] usb usb5-port1: attempt power cycle [ 225.006743][ T943] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 225.067380][ T943] usb 5-1: device descriptor read/8, error -71 [ 225.238952][ T4617] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 225.248902][ T4617] Bluetooth: hci2: Injecting HCI hardware error event [ 225.260524][ T5233] Bluetooth: hci2: hardware error 0x00 [ 225.507607][ T943] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 225.543578][ T5306] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 225.585697][ T5306] dm9601 2-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet, 00:00:00:28:00:00 [ 225.617098][ T5306] usb 2-1: USB disconnect, device number 13 [ 225.662636][ T5306] dm9601 2-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet [ 225.746535][ T943] usb 5-1: device not accepting address 16, error -71 [ 225.781489][ T943] usb usb5-port1: unable to enumerate USB device [ 228.009766][ T5233] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 228.116258][ T4617] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 228.135656][ T4617] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 228.195224][ T4617] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 228.882327][ T1118] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.911337][ T1118] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.169295][ T1118] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.286467][ T5233] Bluetooth: hci5: Opcode 0x1009 failed: -110 [ 230.287688][ T4617] Bluetooth: hci5: command 0x1009 tx timeout [ 230.302526][ T7297] Bluetooth: hci5: Opcode 0x0c03 failed: -4 [ 230.595376][ T1118] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.497045][ T1118] bridge_slave_1: left allmulticast mode [ 231.502716][ T1118] bridge_slave_1: left promiscuous mode [ 231.817030][ T1118] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.977245][ T1118] bridge_slave_0: left allmulticast mode [ 231.982906][ T1118] bridge_slave_0: left promiscuous mode [ 232.117216][ T1118] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.227910][ T1118] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 237.337114][ T1118] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 237.440062][ T1118] bond0 (unregistering): Released all slaves [ 238.987310][ T1118] hsr_slave_0: left promiscuous mode [ 239.047472][ T1118] hsr_slave_1: left promiscuous mode [ 239.107151][ T1118] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.114620][ T1118] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.468204][ T1118] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.475666][ T1118] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.980686][ T1118] veth1_macvtap: left promiscuous mode [ 239.986244][ T1118] veth0_macvtap: left promiscuous mode [ 240.146753][ T1118] veth1_vlan: left promiscuous mode [ 240.152248][ T1118] veth0_vlan: left promiscuous mode [ 249.608585][ T1118] team0 (unregistering): Port device team_slave_1 removed [ 250.507260][ T1118] team0 (unregistering): Port device team_slave_0 removed [ 256.057090][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.063435][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.613770][ T4617] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 262.627167][ T4617] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 262.636343][ T4617] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 262.646279][ T4617] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 262.654398][ T4617] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 262.662189][ T4617] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 262.727629][ T5234] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 262.737560][ T5234] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 262.747094][ T5234] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 262.755589][ T5234] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 262.763122][ T5234] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 262.770409][ T5234] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 262.849966][ T5234] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 262.859497][ T5234] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 262.867932][ T5234] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 262.875561][ T5234] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 262.883376][ T5234] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 263.068157][ T5234] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 263.159306][ T4617] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 263.169601][ T4617] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 263.178256][ T4617] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 263.306953][ T4617] Bluetooth: hci3: command 0x0406 tx timeout [ 263.380950][ T5229] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 263.397569][ T5229] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 263.405184][ T5229] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 263.415363][ T5229] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 263.446163][ T5229] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 263.458876][ T5229] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 263.513608][ T5234] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 263.524640][ T5234] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 263.532245][ T5234] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 264.443690][ T1118] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.624786][ T1118] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.748172][ T5233] Bluetooth: hci0: command tx timeout [ 264.762212][ T1118] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.828914][ T5233] Bluetooth: hci5: command tx timeout [ 264.962603][ T1118] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.147217][ T5233] Bluetooth: hci2: command tx timeout [ 265.225508][ T7325] chnl_net:caif_netlink_parms(): no params data found [ 265.547262][ T5233] Bluetooth: hci6: command tx timeout [ 265.627251][ T5233] Bluetooth: hci7: command tx timeout [ 265.743250][ T7341] chnl_net:caif_netlink_parms(): no params data found [ 265.804296][ T1118] team0: left allmulticast mode [ 265.814251][ T1118] team_slave_0: left allmulticast mode [ 265.837828][ T1118] team_slave_1: left allmulticast mode [ 265.843763][ T1118] team0: left promiscuous mode [ 265.849417][ T1118] team_slave_0: left promiscuous mode [ 265.860396][ T1118] team_slave_1: left promiscuous mode [ 265.866279][ T1118] bridge0: port 3(team0) entered disabled state [ 265.883597][ T1118] bridge_slave_1: left allmulticast mode [ 265.891749][ T1118] bridge_slave_1: left promiscuous mode [ 265.899013][ T1118] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.936800][ T1118] bridge_slave_0: left allmulticast mode [ 265.942994][ T1118] bridge_slave_0: left promiscuous mode [ 265.966887][ T1118] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.614546][ T1118] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 266.630955][ T1118] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 266.647672][ T1118] bond0 (unregistering): Released all slaves [ 266.827926][ T5233] Bluetooth: hci0: command tx timeout [ 266.907932][ T5233] Bluetooth: hci5: command tx timeout [ 267.020384][ T7339] chnl_net:caif_netlink_parms(): no params data found [ 267.060459][ T7328] chnl_net:caif_netlink_parms(): no params data found [ 267.165961][ T7325] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.173831][ T7325] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.186614][ T7325] bridge_slave_0: entered allmulticast mode [ 267.202760][ T7325] bridge_slave_0: entered promiscuous mode [ 267.226564][ T5233] Bluetooth: hci2: command tx timeout [ 267.234215][ T7325] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.241806][ T7325] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.251170][ T7325] bridge_slave_1: entered allmulticast mode [ 267.266914][ T7325] bridge_slave_1: entered promiscuous mode [ 267.422451][ T7341] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.434239][ T7341] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.445762][ T7341] bridge_slave_0: entered allmulticast mode [ 267.458525][ T7341] bridge_slave_0: entered promiscuous mode [ 267.579979][ T7341] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.622591][ T7341] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.630070][ T5233] Bluetooth: hci6: command tx timeout [ 267.664843][ T7341] bridge_slave_1: entered allmulticast mode [ 267.682655][ T7341] bridge_slave_1: entered promiscuous mode [ 267.707206][ T5233] Bluetooth: hci7: command tx timeout [ 267.806475][ T1118] hsr_slave_0: left promiscuous mode [ 267.822651][ T1118] hsr_slave_1: left promiscuous mode [ 267.844273][ T1118] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.852580][ T1118] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.873327][ T1118] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.882482][ T1118] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.944030][ T1118] veth1_macvtap: left promiscuous mode [ 267.949913][ T1118] veth0_macvtap: left promiscuous mode [ 267.955805][ T1118] veth1_vlan: left promiscuous mode [ 267.963713][ T1118] veth0_vlan: left promiscuous mode [ 268.906576][ T5233] Bluetooth: hci0: command tx timeout [ 268.986608][ T5233] Bluetooth: hci5: command tx timeout [ 269.084271][ T1118] team0 (unregistering): Port device team_slave_1 removed [ 269.150817][ T1118] team0 (unregistering): Port device team_slave_0 removed [ 269.313424][ T5233] Bluetooth: hci2: command tx timeout [ 269.706615][ T5233] Bluetooth: hci6: command tx timeout [ 269.796721][ T5233] Bluetooth: hci7: command tx timeout [ 270.100942][ T7325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.260977][ T7328] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.271655][ T7328] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.279688][ T7328] bridge_slave_0: entered allmulticast mode [ 270.290800][ T7328] bridge_slave_0: entered promiscuous mode [ 270.315695][ T7341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.342888][ T7325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.388374][ T7339] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.395690][ T7339] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.404684][ T7339] bridge_slave_0: entered allmulticast mode [ 270.412760][ T7339] bridge_slave_0: entered promiscuous mode [ 270.421515][ T7339] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.433760][ T7339] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.452128][ T7339] bridge_slave_1: entered allmulticast mode [ 270.460340][ T7339] bridge_slave_1: entered promiscuous mode [ 270.468728][ T7331] chnl_net:caif_netlink_parms(): no params data found [ 270.482281][ T7328] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.489892][ T7328] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.523237][ T7328] bridge_slave_1: entered allmulticast mode [ 270.542099][ T7328] bridge_slave_1: entered promiscuous mode [ 270.608917][ T7341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.739002][ T7328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.782710][ T7325] team0: Port device team_slave_0 added [ 270.847639][ T7341] team0: Port device team_slave_0 added [ 270.897719][ T7339] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.920023][ T7339] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.983304][ T7328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.996726][ T5233] Bluetooth: hci0: command tx timeout [ 271.014993][ T7325] team0: Port device team_slave_1 added [ 271.047059][ T7341] team0: Port device team_slave_1 added [ 271.066492][ T5233] Bluetooth: hci5: command tx timeout [ 271.410921][ T5233] Bluetooth: hci2: command tx timeout [ 271.491264][ T7339] team0: Port device team_slave_0 added [ 271.510370][ T7339] team0: Port device team_slave_1 added [ 271.529628][ T7328] team0: Port device team_slave_0 added [ 271.540692][ T7328] team0: Port device team_slave_1 added [ 271.660958][ T7325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.677126][ T7325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.719409][ T7325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.786562][ T5233] Bluetooth: hci6: command tx timeout [ 271.831266][ T7341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.866844][ T5233] Bluetooth: hci7: command tx timeout [ 271.867642][ T7341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.907776][ T7341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.029007][ T7328] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.035994][ T7328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.095314][ T7328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.113221][ T7325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.120813][ T7325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.157305][ T7325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.184261][ T7341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.194699][ T7341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.221264][ T7341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.361252][ T7328] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.368570][ T7328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.400387][ T7328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.453851][ T7331] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.477100][ T7331] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.490532][ T7331] bridge_slave_0: entered allmulticast mode [ 272.498260][ T7331] bridge_slave_0: entered promiscuous mode [ 272.508124][ T7331] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.515262][ T7331] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.524585][ T7331] bridge_slave_1: entered allmulticast mode [ 272.538039][ T7331] bridge_slave_1: entered promiscuous mode [ 272.548175][ T7339] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.555151][ T7339] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.582343][ T7339] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.701616][ T7339] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.708810][ T7339] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.735051][ T7339] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.927405][ T7325] hsr_slave_0: entered promiscuous mode [ 272.942605][ T7325] hsr_slave_1: entered promiscuous mode [ 272.992440][ T7341] hsr_slave_0: entered promiscuous mode [ 273.000362][ T7341] hsr_slave_1: entered promiscuous mode [ 273.007788][ T7341] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 273.015601][ T7341] Cannot create hsr debugfs directory [ 273.103184][ T1118] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.152705][ T7331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.205655][ T7328] hsr_slave_0: entered promiscuous mode [ 273.244910][ T7328] hsr_slave_1: entered promiscuous mode [ 273.251720][ T7328] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 273.265903][ T7328] Cannot create hsr debugfs directory [ 273.352186][ T7331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.473578][ T7339] hsr_slave_0: entered promiscuous mode [ 273.513905][ T7339] hsr_slave_1: entered promiscuous mode [ 273.533220][ T7339] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 273.545337][ T7339] Cannot create hsr debugfs directory [ 273.608548][ T1118] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.022166][ T1118] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.121077][ T7331] team0: Port device team_slave_0 added [ 274.205601][ T1118] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.249260][ T7331] team0: Port device team_slave_1 added [ 274.471524][ T7331] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.481133][ T7331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.508235][ T7331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.604452][ T7331] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.611760][ T7331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.639416][ T7331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.084498][ T7325] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.284497][ T7331] hsr_slave_0: entered promiscuous mode [ 275.301214][ T7331] hsr_slave_1: entered promiscuous mode [ 275.320043][ T7331] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 275.328021][ T7331] Cannot create hsr debugfs directory [ 275.378894][ T7325] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.541807][ T7325] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.734332][ T7325] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.998530][ T1118] bridge_slave_1: left allmulticast mode [ 276.004236][ T1118] bridge_slave_1: left promiscuous mode [ 276.025732][ T1118] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.038989][ T1118] bridge_slave_0: left allmulticast mode [ 276.044677][ T1118] bridge_slave_0: left promiscuous mode [ 276.051858][ T1118] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.065837][ T1118] team0: left allmulticast mode [ 276.071260][ T1118] team_slave_0: left allmulticast mode [ 276.077258][ T1118] team_slave_1: left allmulticast mode [ 276.082843][ T1118] team0: left promiscuous mode [ 276.088641][ T1118] team_slave_0: left promiscuous mode [ 276.094857][ T1118] team_slave_1: left promiscuous mode [ 276.105319][ T1118] bridge0: port 3(team0) entered disabled state [ 276.125512][ T1118] bridge_slave_1: left allmulticast mode [ 276.131473][ T1118] bridge_slave_1: left promiscuous mode [ 276.138302][ T1118] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.158174][ T1118] bridge_slave_0: left allmulticast mode [ 276.165351][ T1118] bridge_slave_0: left promiscuous mode [ 276.172180][ T1118] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.193279][ T1118] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.210323][ T1118] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.228416][ T1118] bond0 (unregistering): Released all slaves [ 277.441751][ T1118] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.452112][ T1118] bond_slave_0: left promiscuous mode [ 277.463893][ T1118] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.475596][ T1118] bond_slave_1: left promiscuous mode [ 277.485367][ T1118] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 277.503617][ T1118] macvlan2: left promiscuous mode [ 277.519747][ T1118] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 277.528439][ T1118] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 277.544270][ T1118] bond0 (unregistering): Released all slaves [ 278.164888][ T7325] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 278.214173][ T7325] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 278.298041][ T7325] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 278.314682][ T7325] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 279.074162][ T1118] hsr_slave_0: left promiscuous mode [ 279.081003][ T1118] hsr_slave_1: left promiscuous mode [ 279.092482][ T1118] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 279.100925][ T1118] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.110577][ T1118] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 279.122817][ T1118] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 279.146072][ T1118] hsr_slave_0: left promiscuous mode [ 279.158185][ T1118] hsr_slave_1: left promiscuous mode [ 279.168436][ T1118] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 279.178514][ T1118] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 279.192933][ T1118] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 279.204527][ T1118] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 279.262533][ T1118] veth1_macvtap: left promiscuous mode [ 279.268239][ T1118] veth0_macvtap: left promiscuous mode [ 279.274152][ T1118] veth1_vlan: left promiscuous mode [ 279.280107][ T1118] veth0_vlan: left promiscuous mode [ 279.290594][ T1118] veth1_macvtap: left promiscuous mode [ 279.296295][ T1118] veth0_macvtap: left promiscuous mode [ 279.305948][ T1118] veth1_vlan: left promiscuous mode [ 279.311566][ T1118] veth0_vlan: left promiscuous mode [ 280.362972][ T1118] team0 (unregistering): Port device team_slave_1 removed [ 280.444437][ T1118] team0 (unregistering): Port device team_slave_0 removed [ 281.804484][ T1118] team0 (unregistering): Port device team_slave_1 removed [ 281.870128][ T1118] team0 (unregistering): Port device team_slave_0 removed [ 282.724913][ T7325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.869159][ T7325] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.969812][ T2926] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.977002][ T2926] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.087766][ T2926] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.094950][ T2926] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.152291][ T7341] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 283.179269][ T7341] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 283.313164][ T7341] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 283.343382][ T7341] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 283.448995][ T7325] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 284.302170][ T7325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.321318][ T7341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.395468][ T7341] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.500545][ T2962] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.507748][ T2962] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.543700][ T7325] veth0_vlan: entered promiscuous mode [ 284.590056][ T7325] veth1_vlan: entered promiscuous mode [ 284.615619][ T2962] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.622779][ T2962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.825694][ T7341] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 284.851263][ T7341] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 284.917582][ T7328] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 284.951686][ T7328] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 284.999167][ T7328] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 285.039156][ T7328] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 285.188006][ T7331] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.261155][ T7325] veth0_macvtap: entered promiscuous mode [ 285.292508][ T7325] veth1_macvtap: entered promiscuous mode [ 285.390655][ T7331] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.502104][ T7331] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.550212][ T7325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.566250][ T7325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.582282][ T7325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 285.597320][ T7325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.620245][ T7325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 285.720251][ T7331] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.776189][ T7325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.788567][ T7325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.806690][ T7325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 285.818028][ T7325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 285.832051][ T7325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 285.852789][ T7341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.880946][ T7325] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.892040][ T7325] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.905126][ T7325] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.917550][ T7325] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.114567][ T7328] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.140303][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.166161][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.354554][ T7341] veth0_vlan: entered promiscuous mode [ 286.369992][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.398442][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.415371][ T7341] veth1_vlan: entered promiscuous mode [ 286.467481][ T7331] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 286.511548][ T7331] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 286.579656][ T7328] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.637894][ T7331] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 286.678976][ T7331] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 286.719694][ T965] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.726852][ T965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.796008][ T965] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.803457][ T965] bridge0: port 2(bridge_slave_1) entered forwarding state [ 287.132150][ T7341] veth0_macvtap: entered promiscuous mode [ 287.173943][ T7339] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 287.230799][ T7339] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 287.282393][ T7339] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 287.328397][ T7339] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 288.024241][ T7341] veth1_macvtap: entered promiscuous mode [ 288.477092][ T7331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.577525][ T7331] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.612991][ T7341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.655231][ T7341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.738786][ T7341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.775301][ T7341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.793684][ T7341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 288.823440][ T7341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.844045][ T7341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 288.870403][ T7528] hfsplus: unable to parse mount options [ 288.931990][ T2926] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.939236][ T2926] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.997192][ T7341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.034611][ T7341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.049179][ T7341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.060552][ T7341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.093628][ T7341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 289.109952][ T7341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.122044][ T7341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 289.168799][ T7328] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 289.209410][ T2926] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.216626][ T2926] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.237014][ T5313] usb 2-1: new low-speed USB device number 14 using dummy_hcd [ 289.246383][ T7341] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.276096][ T7341] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.285121][ T7341] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.301659][ T7341] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.452444][ T5313] usb 2-1: No LPM exit latency info found, disabling LPM. [ 289.481989][ T5313] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 289.533719][ T5313] usb 2-1: string descriptor 0 read error: -22 [ 289.557544][ T5313] usb 2-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.40 [ 289.586661][ T5313] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.601616][ T7339] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.638572][ T5313] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 289.730425][ T7331] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 289.779545][ T7331] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 289.907086][ T25] usb 2-1: USB disconnect, device number 14 [ 289.909480][ T7339] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.045154][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.052291][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.113875][ T7328] veth0_vlan: entered promiscuous mode [ 290.142375][ T2962] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.149610][ T2962] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.280921][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.315004][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.351544][ T7328] veth1_vlan: entered promiscuous mode [ 290.521022][ T965] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.543648][ T965] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.690864][ T7328] veth0_macvtap: entered promiscuous mode [ 290.732467][ T7331] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.938920][ T7328] veth1_macvtap: entered promiscuous mode [ 291.269445][ T7328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.302717][ T7328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.356458][ T7328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.375456][ T7328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.388446][ T7328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.408319][ T7328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.429966][ T7328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.449374][ T7328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.495613][ T7328] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 291.535175][ T7331] veth0_vlan: entered promiscuous mode [ 291.570689][ T7328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.591456][ T7328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.627006][ T7328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.660284][ T7328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.684496][ T7328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.700857][ T7328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.714735][ T7328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.728131][ T7328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.761773][ T7328] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.855747][ T7328] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.876683][ T7328] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.887861][ T7328] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.897286][ T7328] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.933651][ T7331] veth1_vlan: entered promiscuous mode [ 291.955209][ T7339] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.303570][ T7331] veth0_macvtap: entered promiscuous mode [ 292.390375][ T7331] veth1_macvtap: entered promiscuous mode [ 292.469202][ T2926] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.507940][ T2926] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.573573][ T1118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.588107][ T7331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.602718][ T1118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.616302][ T7331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.628358][ T7331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.655995][ T7331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.712994][ T7331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.727538][ T7331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.760589][ T7331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.772459][ T7331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.782449][ T7331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.793017][ T7331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.811643][ T7331] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 292.939058][ T7331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.969833][ T7331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.120750][ T7331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.147969][ T7331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.161072][ T7331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.161145][ T7331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.161156][ T7331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.161179][ T7331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.161191][ T7331] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.161205][ T7331] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.235513][ T7606] xt_SECMARK: unable to map security context 'system_u:object_r:dbusd_etc_t:s0' [ 293.365560][ T7608] xt_CT: You must specify a L4 protocol and not use inversions on it [ 293.574935][ T7331] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.972554][ T7331] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.972595][ T7331] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.972623][ T7331] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.972651][ T7331] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.156461][ T7339] veth0_vlan: entered promiscuous mode [ 294.264417][ T7339] veth1_vlan: entered promiscuous mode [ 294.332830][ T7604] tty tty22: ldisc open failed (-12), clearing slot 21 [ 294.517790][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.531717][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.626309][ T2962] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.645600][ T2962] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.744427][ T7339] veth0_macvtap: entered promiscuous mode [ 295.790162][ T7614] batadv_slave_0: entered allmulticast mode [ 295.832411][ T7339] veth1_macvtap: entered promiscuous mode [ 295.870529][ T7629] pim6reg: entered allmulticast mode [ 295.903624][ T7614] pim6reg: left allmulticast mode [ 295.931625][ T7614] batadv_slave_0: left allmulticast mode [ 296.198373][ T7339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.214533][ T7339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.310369][ T7339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.368038][ T7339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.421512][ T7339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.467571][ T7339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.492430][ T7339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.522871][ T7339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.550735][ T7339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.574606][ T7339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.597671][ T7339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.617454][ T7339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.671860][ T7339] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 296.691012][ T943] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 296.691153][ T7339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.744583][ T7339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.779629][ T7339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.808698][ T7339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.841901][ T7339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.873926][ T7339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.910449][ T7339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.938930][ T7339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.954069][ T943] usb 4-1: New USB device found, idVendor=0458, idProduct=7029, bcdDevice=8b.92 [ 296.967538][ T7339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.976471][ T943] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.993433][ T7339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.002942][ T943] usb 4-1: Product: syz [ 297.028154][ T943] usb 4-1: Manufacturer: syz [ 297.032040][ T7339] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 297.056033][ T943] usb 4-1: SerialNumber: syz [ 297.074477][ T7339] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.095714][ T943] usb 4-1: config 0 descriptor?? [ 297.109904][ T7339] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 297.139873][ T943] gspca_main: gspca_sn9c20x-2.14.0 probing 0458:7029 [ 297.226143][ T7339] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.277222][ T7339] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.297708][ T7339] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.343478][ T7339] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.463910][ T29] audit: type=1400 audit(1725899387.997:100): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=7646 comm="syz.3.531" daddr=ff02::1 [ 297.668634][ T1118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.687761][ T1118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.695474][ T943] gspca_sn9c20x: Write register 1000 failed -110 [ 297.739265][ T943] gspca_sn9c20x: Device initialization failed [ 297.757535][ T943] gspca_sn9c20x 4-1:0.0: probe with driver gspca_sn9c20x failed with error -110 [ 297.787286][ T25] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 297.878325][ T2962] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.906709][ T2962] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.004224][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 298.122389][ T25] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 298.198085][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 298.240006][ T25] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 298.278538][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.296755][ T25] usb 1-1: Product: syz [ 298.308522][ T25] usb 1-1: Manufacturer: syz [ 298.457231][ T9] usb 4-1: USB disconnect, device number 6 [ 299.441963][ T25] usb 1-1: SerialNumber: syz [ 299.483271][ T25] usb 1-1: config 0 descriptor?? [ 299.544721][ T25] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 299.607693][ T25] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 299.784779][ T7696] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 300.321401][ T25] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 300.443748][ T25] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 301.083435][ T25] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 301.114607][ T25] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 301.182287][ T7716] netlink: 'syz.1.544': attribute type 32 has an invalid length. [ 302.446551][ T25] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 302.558880][ T25] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 302.571460][ T25] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 302.616948][ T25] usb 1-1: USB disconnect, device number 13 [ 303.209008][ T25] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 303.468661][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.489346][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.531395][ T25] usb 5-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 303.608882][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.691115][ T25] usb 5-1: config 0 descriptor?? [ 304.337205][ T1172] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 304.383847][ T7754] capability: warning: `syz.3.558' uses deprecated v2 capabilities in a way that may be insecure [ 304.592707][ T1172] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 304.603863][ T1172] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 304.636300][ T1172] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 304.659327][ T1172] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.675690][ T1172] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 304.700040][ T1172] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 304.731712][ T1172] usb 2-1: Product: syz [ 304.743823][ T1172] usb 2-1: Manufacturer: syz [ 304.789541][ T1172] cdc_wdm 2-1:1.0: skipping garbage [ 304.817469][ T1172] cdc_wdm 2-1:1.0: skipping garbage [ 304.826375][ T1172] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 304.841256][ T1172] cdc_wdm 2-1:1.0: Unknown control protocol [ 305.223171][ C0] wdm_int_callback: 45 callbacks suppressed [ 305.223199][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 305.223827][ T943] usb 2-1: USB disconnect, device number 15 [ 305.229106][ C0] wdm_int_callback: 45 callbacks suppressed [ 305.229130][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 305.229146][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 307.248650][ T25] usbhid 5-1:0.0: can't add hid device: -71 [ 307.294513][ T25] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 307.367992][ T25] usb 5-1: USB disconnect, device number 17 [ 308.731051][ T1172] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 308.731060][ T943] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 308.921200][ T1172] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 308.939183][ T1172] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 308.969285][ T1172] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.40 [ 308.999184][ T943] usb 4-1: Using ep0 maxpacket: 16 [ 309.004552][ T1172] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 309.013662][ T943] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 309.015772][ T1172] usb 2-1: Manufacturer: syz [ 309.057133][ T1172] usb 2-1: bad CDC descriptors [ 309.128101][ T943] usb 4-1: New USB device found, idVendor=05ac, idProduct=0231, bcdDevice= 0.40 [ 309.148068][ T943] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.171489][ T943] usb 4-1: Product: syz [ 309.175862][ T943] usb 4-1: Manufacturer: syz [ 309.186854][ T943] usb 4-1: SerialNumber: syz [ 309.265026][ T943] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input17 [ 309.567021][ T5277] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 309.717483][ T1172] usb 2-1: USB disconnect, device number 16 [ 309.803338][ T5277] usb 5-1: config 36 has an invalid interface number: 49 but max is 0 [ 309.823717][ T5277] usb 5-1: config 36 has an invalid descriptor of length 52, skipping remainder of the config [ 309.840771][ T5277] usb 5-1: config 36 has no interface number 0 [ 309.852697][ T5277] usb 5-1: too many endpoints for config 36 interface 49 altsetting 56: 52, using maximum allowed: 30 [ 309.882699][ T5277] usb 5-1: config 36 interface 49 altsetting 56 has 0 endpoint descriptors, different from the interface descriptor's value: 52 [ 309.906011][ T5277] usb 5-1: config 36 interface 49 has no altsetting 0 [ 309.920351][ T5277] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=26.29 [ 309.930370][ T5277] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 309.944288][ T5277] usb 5-1: Manufacturer: syz [ 309.950538][ T5277] usb 5-1: SerialNumber: syz [ 312.080391][ T4663] bcm5974 4-1:1.0: could not read from device [ 312.122549][ T4663] bcm5974 4-1:1.0: could not read from device [ 312.435512][ T5277] usb 5-1: USB disconnect, device number 18 [ 312.467670][ T943] usb 4-1: USB disconnect, device number 7 [ 313.443448][ T5233] Bluetooth: hci6: unexpected subevent 0x1a length: 10 > 6 [ 315.316570][ T5276] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 315.466576][ T5233] Bluetooth: hci6: command tx timeout [ 315.568624][ T5276] usb 5-1: config 0 has an invalid interface number: 128 but max is 0 [ 315.578668][ T5276] usb 5-1: config 0 has no interface number 0 [ 315.611861][ T5276] usb 5-1: config 0 interface 128 altsetting 6 endpoint 0x5 has invalid maxpacket 1024, setting to 1023 [ 315.628303][ T5276] usb 5-1: config 0 interface 128 altsetting 6 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 315.639588][ T5276] usb 5-1: config 0 interface 128 altsetting 6 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 315.652963][ T943] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 315.663953][ T5276] usb 5-1: config 0 interface 128 has no altsetting 0 [ 315.792785][ T5277] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 315.840989][ T5276] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=95.91 [ 315.850469][ T5276] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.858711][ T5276] usb 5-1: Product: syz [ 315.863044][ T5276] usb 5-1: Manufacturer: syz [ 315.867845][ T5276] usb 5-1: SerialNumber: syz [ 316.071547][ T5277] usb 2-1: Using ep0 maxpacket: 16 [ 316.133483][ T5277] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 316.212335][ T5277] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 316.271295][ T5277] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 316.339420][ T5277] usb 2-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 316.414574][ T5277] usb 2-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 316.470295][ T5277] usb 2-1: config 1 interface 0 has no altsetting 0 [ 316.535308][ T5277] usb 2-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 316.556000][ T5277] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.579450][ T5277] ums-sddr09 2-1:1.0: USB Mass Storage device detected [ 316.638427][ T5276] usb 5-1: config 0 descriptor?? [ 316.649257][ T943] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 316.661781][ T5276] radio-si470x 5-1:0.128: could not find interrupt in endpoint [ 316.680454][ T943] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 316.691360][ T5276] radio-si470x 5-1:0.128: probe with driver radio-si470x failed with error -5 [ 316.705966][ T943] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 316.717947][ T5276] usbhid 5-1:0.128: couldn't find an input interrupt endpoint [ 316.728504][ T943] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 316.752852][ T943] usb 1-1: SerialNumber: syz [ 316.823500][ T5277] scsi host1: usb-storage 2-1:1.0 [ 316.863743][ T29] audit: type=1800 audit(1725899407.397:101): pid=7843 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.583" name="/" dev="fuse" ino=1 res=0 errno=0 [ 316.910334][ C1] sd 0:0:1:0: [sda] tag#7079 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 316.920783][ C1] sd 0:0:1:0: [sda] tag#7079 CDB: Write(6) 0a 0b 00 08 00 00 [ 316.932959][ T29] audit: type=1804 audit(1725899407.467:102): pid=7843 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.3.583" name="/newroot/12/file0" dev="fuse" ino=1 res=1 errno=0 [ 316.969353][ T29] audit: type=1800 audit(1725899407.497:103): pid=7843 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.583" name="/" dev="fuse" ino=1 res=0 errno=0 [ 316.993728][ T943] usb 1-1: 0:2 : does not exist [ 317.001480][ T5277] usb 5-1: USB disconnect, device number 19 [ 317.006617][ T943] usb 1-1: unit 255 not found! [ 317.054638][ T5278] usb 2-1: USB disconnect, device number 17 [ 317.131925][ T943] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 317.180596][ T943] usb 1-1: USB disconnect, device number 14 [ 317.223960][ T7457] udevd[7457]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 317.472485][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.486360][ T7861] netlink: 143236 bytes leftover after parsing attributes in process `syz.0.587'. [ 318.530575][ T7861] netlink: zone id is out of range [ 318.540216][ T7861] netlink: zone id is out of range [ 318.545867][ T7861] netlink: zone id is out of range [ 318.563552][ T7861] netlink: zone id is out of range [ 318.569263][ T7861] netlink: zone id is out of range [ 318.575037][ T7861] netlink: zone id is out of range [ 318.580997][ T7861] netlink: zone id is out of range [ 318.586705][ T7861] netlink: zone id is out of range [ 318.592294][ T7861] netlink: zone id is out of range [ 318.598363][ T7861] netlink: zone id is out of range [ 319.712542][ T7873] input: syz0 as /devices/virtual/input/input18 [ 320.334931][ T7889] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 262395 (only 8 groups) [ 323.940083][ T136] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.073536][ T136] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.238555][ T136] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.416211][ T136] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.730246][ T136] bridge_slave_1: left allmulticast mode [ 324.736031][ T136] bridge_slave_1: left promiscuous mode [ 324.776021][ T136] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.795613][ T136] bridge_slave_0: left allmulticast mode [ 324.814509][ T136] bridge_slave_0: left promiscuous mode [ 324.821384][ T136] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.718466][ T136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 325.745065][ T136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 325.770372][ T136] bond0 (unregistering): Released all slaves [ 326.375721][ T136] hsr_slave_0: left promiscuous mode [ 326.404334][ T136] hsr_slave_1: left promiscuous mode [ 326.413980][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 326.444405][ T136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.475387][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 326.497078][ T136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.565779][ T136] veth1_macvtap: left promiscuous mode [ 326.610366][ T136] veth0_macvtap: left promiscuous mode [ 326.632263][ T136] veth1_vlan: left promiscuous mode [ 326.645367][ T136] veth0_vlan: left promiscuous mode [ 328.204447][ T136] team0 (unregistering): Port device team_slave_1 removed [ 328.320515][ T136] team0 (unregistering): Port device team_slave_0 removed [ 335.710770][ T29] audit: type=1400 audit(1725899426.247:104): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=4892 comm="dhcpcd" daddr=ff02::2 [ 335.902683][ T29] audit: type=1400 audit(1725899426.437:105): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=4892 comm="dhcpcd" daddr=ff02::2 [ 336.755837][ T29] audit: type=1400 audit(1725899427.287:106): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=4892 comm="dhcpcd" daddr=ff02::2 [ 337.637990][ T29] audit: type=1400 audit(1725899428.167:107): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=4892 comm="dhcpcd" daddr=ff02::2 [ 339.712248][ T29] audit: type=1400 audit(1725899430.247:108): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=4892 comm="dhcpcd" daddr=ff02::2 [ 339.903198][ T29] audit: type=1400 audit(1725899430.437:109): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=4892 comm="dhcpcd" daddr=ff02::2 [ 340.763261][ T29] audit: type=1400 audit(1725899431.297:110): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=4892 comm="dhcpcd" daddr=ff02::2 [ 341.645325][ T29] audit: type=1400 audit(1725899432.177:111): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=4892 comm="dhcpcd" daddr=ff02::2 [ 344.004396][ T29] audit: type=1400 audit(1725899434.537:112): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=4892 comm="dhcpcd" daddr=ff02::2 [ 344.033163][ T29] audit: type=1400 audit(1725899434.537:113): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=4892 comm="dhcpcd" daddr=ff02::2 [ 344.788413][ T29] audit: type=1400 audit(1725899435.317:114): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=4892 comm="dhcpcd" daddr=ff02::2 [ 345.664961][ T29] audit: type=1400 audit(1725899436.197:115): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=4892 comm="dhcpcd" daddr=ff02::2 [ 350.771367][ T29] audit: type=1400 audit(1725899441.297:116): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=4892 comm="dhcpcd" daddr=ff02::2 [ 350.872747][ T29] audit: type=1400 audit(1725899441.337:117): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=4892 comm="dhcpcd" daddr=ff02::2 [ 350.948173][ T29] audit: type=1400 audit(1725899441.357:118): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=4892 comm="dhcpcd" daddr=ff02::2 [ 350.974342][ T29] audit: type=1400 audit(1725899441.447:119): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="trusted.overlay.redirect" requested=w pid=4892 comm="dhcpcd" daddr=ff02::2 [ 378.913803][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 386.121863][ T5242] Bluetooth: hci0: command 0x0406 tx timeout [ 386.137162][ T8158] Bluetooth: hci6: command 0x0406 tx timeout [ 386.143319][ T8158] Bluetooth: hci5: command 0x0406 tx timeout [ 440.353996][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 482.587429][ T30] INFO: task kworker/u8:3:52 blocked for more than 143 seconds. [ 482.595130][ T30] Not tainted 6.11.0-rc7-syzkaller #0 [ 482.644342][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 482.654749][ T30] task:kworker/u8:3 state:D stack:21008 pid:52 tgid:52 ppid:2 flags:0x00004000 [ 482.676425][ T30] Workqueue: writeback wb_workfn (flush-8:0) [ 482.682502][ T30] Call Trace: [ 482.685797][ T30] [ 482.718132][ T30] __schedule+0x17ae/0x4a10 [ 482.722724][ T30] ? __pfx___schedule+0x10/0x10 [ 482.753336][ T30] ? __blk_flush_plug+0x449/0x500 [ 482.766203][ T30] ? __pfx_lock_release+0x10/0x10 [ 482.780873][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 482.801298][ T30] ? kthread_data+0x52/0xd0 [ 482.816936][ T30] ? wq_worker_sleeping+0x66/0x240 [ 482.822112][ T30] ? schedule+0x90/0x320 [ 482.851929][ T30] schedule+0x14b/0x320 [ 482.856152][ T30] start_this_handle+0x55d/0x2110 [ 482.861894][ T30] ? jbd2__journal_start+0x1ef/0x5d0 [ 482.880325][ T30] ? __pfx_start_this_handle+0x10/0x10 [ 482.885859][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 482.918866][ T30] ? jbd2__journal_start+0x1ef/0x5d0 [ 482.924204][ T30] ? rcu_is_watching+0x15/0xb0 [ 482.950826][ T30] ? jbd2__journal_start+0x1ef/0x5d0 [ 482.956162][ T30] ? kmem_cache_alloc_noprof+0x185/0x2a0 [ 482.974061][ T30] jbd2__journal_start+0x2da/0x5d0 [ 482.981165][ T30] __ext4_journal_start_sb+0x239/0x600 [ 482.994827][ T30] ext4_do_writepages+0x1129/0x3d40 [ 483.006484][ T30] ? __kasan_slab_free+0x37/0x60 [ 483.022248][ T30] ? worker_thread+0x86d/0xd10 [ 483.028744][ T30] ? ret_from_fork_asm+0x1a/0x30 [ 483.033758][ T30] ? __pfx_ext4_do_writepages+0x10/0x10 [ 483.048207][ T30] ? rcu_read_lock_any_held+0xb7/0x160 [ 483.053724][ T30] ext4_writepages+0x213/0x3c0 [ 483.065751][ T30] ? __pfx_ext4_writepages+0x10/0x10 [ 483.073077][ T30] ? reacquire_held_locks+0x3eb/0x690 [ 483.088167][ T30] ? __pfx_ext4_writepages+0x10/0x10 [ 483.093497][ T30] do_writepages+0x35d/0x870 [ 483.106340][ T30] ? __pfx_do_writepages+0x10/0x10 [ 483.114866][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 483.126933][ T30] ? writeback_sb_inodes+0x5ea/0x1380 [ 483.132343][ T30] ? __pfx_lock_release+0x10/0x10 [ 483.146319][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 483.156461][ T30] __writeback_single_inode+0x165/0x10b0 [ 483.162155][ T30] writeback_sb_inodes+0x99c/0x1380 [ 483.180304][ T30] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 483.185990][ T30] ? mark_lock+0x9a/0x350 [ 483.197902][ T30] ? __pfx_down_read_trylock+0x10/0x10 [ 483.203412][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 483.219222][ T30] __writeback_inodes_wb+0x11b/0x260 [ 483.224563][ T30] wb_writeback+0x495/0xd40 [ 483.234706][ T30] ? queue_io+0x361/0x5a0 [ 483.240022][ T30] ? __pfx_wb_writeback+0x10/0x10 [ 483.245079][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 483.260461][ T30] wb_workfn+0xba1/0x1090 [ 483.264854][ T30] ? __pfx_wb_workfn+0x10/0x10 [ 483.273916][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 483.285910][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 483.294095][ T30] ? process_scheduled_works+0x945/0x1830 [ 483.311062][ T30] process_scheduled_works+0xa2c/0x1830 [ 483.325783][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 483.334311][ T30] ? assign_work+0x364/0x3d0 [ 483.344573][ T30] worker_thread+0x86d/0xd10 [ 483.349717][ T30] ? __kthread_parkme+0x169/0x1d0 [ 483.354804][ T30] ? __pfx_worker_thread+0x10/0x10 [ 483.369916][ T30] kthread+0x2f0/0x390 [ 483.374032][ T30] ? __pfx_worker_thread+0x10/0x10 [ 483.385469][ T30] ? __pfx_kthread+0x10/0x10 [ 483.391851][ T30] ret_from_fork+0x4b/0x80 [ 483.396306][ T30] ? __pfx_kthread+0x10/0x10 [ 483.410251][ T30] ret_from_fork_asm+0x1a/0x30 [ 483.415105][ T30] [ 483.427083][ T30] INFO: task kworker/u8:5:136 blocked for more than 144 seconds. [ 483.434837][ T30] Not tainted 6.11.0-rc7-syzkaller #0 [ 483.449710][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 483.464769][ T30] task:kworker/u8:5 state:D stack:19984 pid:136 tgid:136 ppid:2 flags:0x00004000 [ 483.485298][ T30] Workqueue: netns cleanup_net [ 483.491026][ T30] Call Trace: [ 483.494326][ T30] [ 483.500383][ T30] __schedule+0x17ae/0x4a10 [ 483.504946][ T30] ? __pfx___schedule+0x10/0x10 [ 483.522375][ T30] ? __pfx_lock_release+0x10/0x10 [ 483.533803][ T30] ? __lock_acquire+0x137a/0x2040 [ 483.543206][ T30] ? kthread_data+0x52/0xd0 [ 483.552936][ T30] ? wq_worker_sleeping+0x66/0x240 [ 483.562196][ T30] ? schedule+0x90/0x320 [ 483.571540][ T30] schedule+0x14b/0x320 [ 483.575734][ T30] schedule_timeout+0xb0/0x310 [ 483.581603][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 483.596021][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 483.602901][ T30] ? wait_for_completion+0x2fe/0x620 [ 483.610052][ T30] ? wait_for_completion+0x2fe/0x620 [ 483.615392][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 483.633727][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 483.642487][ T30] ? wait_for_completion+0x2fe/0x620 [ 483.655009][ T30] wait_for_completion+0x355/0x620 [ 483.661611][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 483.674539][ T30] ? flush_workqueue_prep_pwqs+0x45c/0x4c0 [ 483.682330][ T30] ? check_flush_dependency+0xb2/0x390 [ 483.695106][ T30] __flush_workqueue+0x7d6/0x1710 [ 483.701872][ T30] ? __flush_work+0xe6/0xd00 [ 483.714707][ T30] ? __pfx___flush_workqueue+0x10/0x10 [ 483.721918][ T30] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 483.730963][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 483.736206][ T30] peer_remove_after_dead+0x9d/0x1a0 [ 483.752865][ T30] wg_peer_remove_all+0x453/0x4f0 [ 483.761417][ T30] ? __pfx_wg_peer_remove_all+0x10/0x10 [ 483.773463][ T30] wg_destruct+0x173/0x2e0 [ 483.778779][ T30] ? __pfx_wg_destruct+0x10/0x10 [ 483.783746][ T30] netdev_run_todo+0xe1a/0x1000 [ 483.796940][ T30] ? __pfx_netdev_run_todo+0x10/0x10 [ 483.802269][ T30] ? unregister_netdevice_queue+0x26b/0x370 [ 483.816363][ T30] ? batadv_softif_destroy_netlink+0x1e3/0x270 [ 483.823402][ T30] default_device_exit_batch+0xa14/0xa90 [ 483.843858][ T30] ? __pfx___might_resched+0x10/0x10 [ 483.853401][ T30] ? __pfx_default_device_exit_batch+0x10/0x10 [ 483.865881][ T30] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 483.872672][ T30] ? cfg802154_pernet_exit+0xc3/0xe0 [ 483.894245][ T30] ? __pfx_default_device_exit_batch+0x10/0x10 [ 483.904645][ T30] cleanup_net+0x89d/0xcc0 [ 483.910075][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 483.915055][ T30] ? process_scheduled_works+0x945/0x1830 [ 483.933669][ T30] process_scheduled_works+0xa2c/0x1830 [ 483.943292][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 483.955824][ T30] ? assign_work+0x364/0x3d0 [ 483.960947][ T30] worker_thread+0x86d/0xd10 [ 483.965573][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 483.981611][ T30] ? __kthread_parkme+0x169/0x1d0 [ 483.991774][ T30] ? __pfx_worker_thread+0x10/0x10 [ 483.997923][ T30] kthread+0x2f0/0x390 [ 484.002023][ T30] ? __pfx_worker_thread+0x10/0x10 [ 484.015942][ T30] ? __pfx_kthread+0x10/0x10 [ 484.021455][ T30] ret_from_fork+0x4b/0x80 [ 484.025905][ T30] ? __pfx_kthread+0x10/0x10 [ 484.051941][ T30] ret_from_fork_asm+0x1a/0x30 [ 484.066948][ T30] [ 484.070170][ T30] INFO: task jbd2/sda1-8:4641 blocked for more than 144 seconds. [ 484.085759][ T30] Not tainted 6.11.0-rc7-syzkaller #0 [ 484.093510][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 484.106426][ T30] task:jbd2/sda1-8 state:D stack:22104 pid:4641 tgid:4641 ppid:2 flags:0x00004000 [ 484.136230][ T30] Call Trace: [ 484.141371][ T30] [ 484.144336][ T30] __schedule+0x17ae/0x4a10 [ 484.164612][ T30] ? __pfx___schedule+0x10/0x10 [ 484.170429][ T30] ? __pfx_lock_release+0x10/0x10 [ 484.175508][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 484.191606][ T30] ? schedule+0x90/0x320 [ 484.195909][ T30] schedule+0x14b/0x320 [ 484.202580][ T30] io_schedule+0x8d/0x110 [ 484.216975][ T30] bit_wait_io+0x12/0xd0 [ 484.221297][ T30] __wait_on_bit+0xb0/0x2f0 [ 484.225815][ T30] ? __pfx_bit_wait_io+0x10/0x10 [ 484.242867][ T30] out_of_line_wait_on_bit+0x1d5/0x260 [ 484.253373][ T30] ? __pfx_bit_wait_io+0x10/0x10 [ 484.259275][ T30] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 484.265285][ T30] ? __pfx_wake_bit_function+0x10/0x10 [ 484.278681][ T30] jbd2_journal_commit_transaction+0x3df6/0x67e0 [ 484.285119][ T30] ? __pfx_jbd2_journal_commit_transaction+0x10/0x10 [ 484.302432][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 484.310589][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 484.324695][ T30] ? __try_to_del_timer_sync+0x2ad/0x340 [ 484.331243][ T30] ? __timer_delete_sync+0x15c/0x310 [ 484.340825][ T30] ? __timer_delete_sync+0x25d/0x310 [ 484.346157][ T30] ? __pfx___timer_delete_sync+0x10/0x10 [ 484.361789][ T30] ? __pfx_do_raw_write_lock+0x10/0x10 [ 484.371406][ T30] ? prepare_to_wait+0x184/0x210 [ 484.381414][ T30] ? schedule+0x90/0x320 [ 484.385731][ T30] kjournald2+0x41c/0x7b0 [ 484.391199][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 484.406976][ T30] ? __pfx_kjournald2+0x10/0x10 [ 484.420769][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 484.435340][ T30] ? __kthread_parkme+0x169/0x1d0 [ 484.445396][ T30] ? __pfx_kjournald2+0x10/0x10 [ 484.457160][ T30] kthread+0x2f0/0x390 [ 484.461269][ T30] ? __pfx_kjournald2+0x10/0x10 [ 484.466133][ T30] ? __pfx_kthread+0x10/0x10 [ 484.480658][ T30] ret_from_fork+0x4b/0x80 [ 484.485117][ T30] ? __pfx_kthread+0x10/0x10 [ 484.501482][ T30] ret_from_fork_asm+0x1a/0x30 [ 484.517339][ T30] [ 484.544383][ T30] INFO: task syz-executor:5210 blocked for more than 145 seconds. [ 484.561083][ T30] Not tainted 6.11.0-rc7-syzkaller #0 [ 484.577081][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 484.585778][ T30] task:syz-executor state:D stack:20752 pid:5210 tgid:5210 ppid:5208 flags:0x00000002 [ 484.604987][ T30] Call Trace: [ 484.609106][ T30] [ 484.612066][ T30] __schedule+0x17ae/0x4a10 [ 484.627709][ T30] ? __pfx___schedule+0x10/0x10 [ 484.632625][ T30] ? __pfx_lock_release+0x10/0x10 [ 484.648267][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 484.654217][ T30] ? schedule+0x90/0x320 [ 484.667574][ T30] schedule+0x14b/0x320 [ 484.671777][ T30] start_this_handle+0x55d/0x2110 [ 484.683461][ T30] ? __kasan_slab_alloc+0x66/0x80 [ 484.691465][ T30] ? __pfx_start_this_handle+0x10/0x10 [ 484.703082][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 484.710903][ T30] ? jbd2__journal_start+0x14d/0x5d0 [ 484.716213][ T30] ? rcu_is_watching+0x15/0xb0 [ 484.729983][ T30] ? jbd2__journal_start+0x14d/0x5d0 [ 484.735303][ T30] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 484.754942][ T30] ? kmem_cache_alloc_noprof+0x185/0x2a0 [ 484.765730][ T30] jbd2__journal_start+0x2da/0x5d0 [ 484.771817][ T30] __ext4_journal_start_sb+0x239/0x600 [ 484.785501][ T30] ext4_dirty_inode+0x92/0x110 [ 484.791115][ T30] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 484.797577][ T30] __mark_inode_dirty+0x325/0xe20 [ 484.802892][ T30] file_update_time+0x3ad/0x430 [ 484.816124][ T30] ext4_page_mkwrite+0x207/0xdf0 [ 484.823766][ T30] ? do_wp_page+0x71c/0x52f0 [ 484.837233][ T30] ? do_wp_page+0x22fa/0x52f0 [ 484.841951][ T30] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 484.860056][ T30] do_page_mkwrite+0x19b/0x480 [ 484.864873][ T30] do_wp_page+0x23d9/0x52f0 [ 484.874634][ T30] ? __pfx_do_wp_page+0x10/0x10 [ 484.880508][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 484.885570][ T30] ? __local_bh_enable_ip+0x168/0x200 [ 484.899887][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 484.904971][ T30] ? tcp_recvmsg+0x390/0x920 [ 484.915079][ T30] ? __lock_acquire+0x137a/0x2040 [ 484.924109][ T30] handle_pte_fault+0x115a/0x6fc0 [ 484.935493][ T30] ? __pfx_validate_chain+0x10/0x10 [ 484.941146][ T30] ? mark_lock+0x9a/0x350 [ 484.945509][ T30] ? __pfx_handle_pte_fault+0x10/0x10 [ 484.962006][ T30] ? reacquire_held_locks+0x3eb/0x690 [ 484.973286][ T30] ? lock_vma_under_rcu+0x2f9/0x6e0 [ 484.985899][ T30] ? __pfx_reacquire_held_locks+0x10/0x10 [ 484.995179][ T30] handle_mm_fault+0x1056/0x1ad0 [ 485.006449][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 485.011772][ T30] ? lock_vma_under_rcu+0x592/0x6e0 [ 485.025710][ T30] ? exc_page_fault+0x113/0x8c0 [ 485.038465][ T30] exc_page_fault+0x459/0x8c0 [ 485.043194][ T30] asm_exc_page_fault+0x26/0x30 [ 485.056065][ T30] RIP: 0033:0x7ffa8a467254 [ 485.065849][ T30] RSP: 002b:00007ffd493e73d0 EFLAGS: 00010202 [ 485.084766][ T30] RAX: 00007ffa88470000 RBX: 0000555571d0a0a0 RCX: 0000000000000007 [ 485.093923][ T30] RDX: 1ffffffff08d4e17 RSI: 0000555571c97708 RDI: 0000000000000080 [ 485.113394][ T30] RBP: 00007ffd493e78b0 R08: 0000555571c97730 R09: 00000000000029c2 [ 485.123427][ T30] R10: 00007ffa8b2c70b8 R11: 0000000000000246 R12: 00007ffd493e7700 [ 485.137321][ T30] R13: 0000000000000005 R14: 00007ffd493e7440 R15: 00007ffd493e7510 [ 485.145355][ T30] [ 485.167287][ T30] INFO: task syz.1.596:7879 blocked for more than 145 seconds. [ 485.174900][ T30] Not tainted 6.11.0-rc7-syzkaller #0 [ 485.212395][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 485.230549][ T30] task:syz.1.596 state:D stack:24672 pid:7879 tgid:7879 ppid:7325 flags:0x00004004 [ 485.254713][ T30] Call Trace: [ 485.258882][ T30] [ 485.263432][ T30] __schedule+0x17ae/0x4a10 [ 485.276469][ T30] ? __pfx___schedule+0x10/0x10 [ 485.281376][ T30] ? __pfx_lock_release+0x10/0x10 [ 485.293856][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 485.300162][ T30] ? schedule+0x90/0x320 [ 485.304433][ T30] schedule+0x14b/0x320 [ 485.316427][ T30] start_this_handle+0x55d/0x2110 [ 485.321529][ T30] ? __pfx_start_this_handle+0x10/0x10 [ 485.338297][ T30] ? srcu_read_unlock+0x1d/0x40 [ 485.343192][ T30] ? __pfx_lock_release+0x10/0x10 [ 485.356291][ T30] ? qlist_free_all+0x9e/0x140 [ 485.365319][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 485.378290][ T30] ? jbd2__journal_start+0x14d/0x5d0 [ 485.383615][ T30] ? rcu_is_watching+0x15/0xb0 [ 485.396776][ T30] ? jbd2__journal_start+0x14d/0x5d0 [ 485.402099][ T30] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 485.416076][ T30] ? kmem_cache_alloc_noprof+0x185/0x2a0 [ 485.422673][ T30] jbd2__journal_start+0x2da/0x5d0 [ 485.436138][ T30] __ext4_journal_start_sb+0x239/0x600 [ 485.445240][ T30] ext4_dirty_inode+0x92/0x110 [ 485.456717][ T30] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 485.462123][ T30] __mark_inode_dirty+0x325/0xe20 [ 485.479482][ T30] file_update_time+0x3ad/0x430 [ 485.484476][ T30] ext4_page_mkwrite+0x207/0xdf0 [ 485.497255][ T30] ? __pfx_filemap_fault+0x10/0x10 [ 485.502417][ T30] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 485.516303][ T30] ? pte_offset_map_nolock+0x137/0x1f0 [ 485.522602][ T30] do_page_mkwrite+0x19b/0x480 [ 485.528461][ T30] handle_pte_fault+0x126b/0x6fc0 [ 485.533528][ T30] ? __pfx_validate_chain+0x10/0x10 [ 485.550052][ T30] ? __free_object+0x235/0xa80 [ 485.554855][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 485.570959][ T30] ? mark_lock+0x9a/0x350 [ 485.575348][ T30] ? __pfx_handle_pte_fault+0x10/0x10 [ 485.589746][ T30] ? reacquire_held_locks+0x3eb/0x690 [ 485.595160][ T30] ? lock_vma_under_rcu+0x2f9/0x6e0 [ 485.605725][ T30] ? __pfx_reacquire_held_locks+0x10/0x10 [ 485.616432][ T30] handle_mm_fault+0x1056/0x1ad0 [ 485.621438][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 485.634820][ T30] ? lock_vma_under_rcu+0x592/0x6e0 [ 485.640890][ T30] ? exc_page_fault+0x113/0x8c0 [ 485.645768][ T30] exc_page_fault+0x459/0x8c0 [ 485.659587][ T30] asm_exc_page_fault+0x26/0x30 [ 485.664474][ T30] RIP: 0033:0x7fd81565caf6 [ 485.680148][ T30] RSP: 002b:00007fff6d93db70 EFLAGS: 00010202 [ 485.686342][ T30] RAX: 0000001b2d618000 RBX: 00007fd816465720 RCX: 0000001b2d617ff8 [ 485.699836][ T30] RDX: ffffffff814156e7 RSI: 0000000000000008 RDI: 00007fd816465720 [ 485.709100][ T30] RBP: 0000000000000064 R08: 00007fd815920000 R09: 00007fd815922000 [ 485.725992][ T30] R10: 00000000814156eb R11: 000000000000000b R12: ffffffff81415ee9 [ 485.734875][ T30] R13: 00007fd815936018 R14: 0000000000000008 R15: 000000000000012b [ 485.746426][ T30] ? __read_once_word_nocheck+0x9/0x20 [ 485.751938][ T30] ? deref_stack_reg+0x247/0x260 [ 485.765268][ T30] [ 485.784640][ T30] INFO: task syz.3.594:7883 blocked for more than 146 seconds. [ 485.800567][ T30] Not tainted 6.11.0-rc7-syzkaller #0 [ 485.813999][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 485.833232][ T30] task:syz.3.594 state:D stack:24672 pid:7883 tgid:7883 ppid:7328 flags:0x00000004 [ 485.844403][ T30] Call Trace: [ 485.856087][ T30] [ 485.859887][ T30] __schedule+0x17ae/0x4a10 [ 485.864452][ T30] ? __pfx___schedule+0x10/0x10 [ 485.870415][ T30] ? __pfx_lock_release+0x10/0x10 [ 485.890045][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 485.896008][ T30] ? schedule+0x90/0x320 [ 485.907385][ T30] schedule+0x14b/0x320 [ 485.911597][ T30] start_this_handle+0x55d/0x2110 [ 485.924864][ T30] ? __kasan_slab_alloc+0x66/0x80 [ 485.930816][ T30] ? __pfx_start_this_handle+0x10/0x10 [ 485.936331][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 485.947046][ T30] ? jbd2__journal_start+0x14d/0x5d0 [ 485.952364][ T30] ? rcu_is_watching+0x15/0xb0 [ 485.967366][ T30] ? jbd2__journal_start+0x14d/0x5d0 [ 485.972688][ T30] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 485.992233][ T30] ? kmem_cache_alloc_noprof+0x185/0x2a0 [ 486.004147][ T30] jbd2__journal_start+0x2da/0x5d0 [ 486.015035][ T30] __ext4_journal_start_sb+0x239/0x600 [ 486.020937][ T30] ext4_dirty_inode+0x92/0x110 [ 486.025732][ T30] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 486.039975][ T30] __mark_inode_dirty+0x325/0xe20 [ 486.045057][ T30] file_update_time+0x3ad/0x430 [ 486.056344][ T30] ext4_page_mkwrite+0x207/0xdf0 [ 486.061621][ T30] ? __pfx_filemap_fault+0x10/0x10 [ 486.067904][ T30] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 486.073397][ T30] ? pte_offset_map_nolock+0x137/0x1f0 [ 486.090609][ T30] do_page_mkwrite+0x19b/0x480 [ 486.095553][ T30] handle_pte_fault+0x126b/0x6fc0 [ 486.105446][ T30] ? __pfx_validate_chain+0x10/0x10 [ 486.135246][ T30] ? mark_lock+0x9a/0x350 [ 486.140472][ T30] ? mark_lock+0x9a/0x350 [ 486.144836][ T30] ? __pfx_handle_pte_fault+0x10/0x10 [ 486.151367][ T30] ? reacquire_held_locks+0x3eb/0x690 [ 486.164933][ T30] ? lock_vma_under_rcu+0x2f9/0x6e0 [ 486.171886][ T30] ? __pfx_reacquire_held_locks+0x10/0x10 [ 486.178630][ T30] handle_mm_fault+0x1056/0x1ad0 [ 486.185124][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 486.207265][ T30] ? lock_vma_under_rcu+0x592/0x6e0 [ 486.212538][ T30] ? exc_page_fault+0x113/0x8c0 [ 486.230374][ T30] exc_page_fault+0x459/0x8c0 [ 486.235131][ T30] asm_exc_page_fault+0x26/0x30 [ 486.247614][ T30] RIP: 0033:0x7fa8e165d276 [ 486.252070][ T30] RSP: 002b:00007ffcadd92f50 EFLAGS: 00010202 [ 486.265686][ T30] RAX: 0000000000007008 RBX: 00007fa8e2465720 RCX: 0000000000000000 [ 486.274784][ T30] RDX: 0000001b2d819000 RSI: 0000000000000008 RDI: 00007fa8e2465720 [ 486.296751][ T30] RBP: ffffffff820dbd72 R08: 00007fa8e0a01068 R09: 00007fa8e1922000 [ 486.304792][ T30] R10: 00000000813662f8 R11: 000000000000000b R12: 00000000000002f8 [ 486.320830][ T30] R13: 00007fa8e19360f0 R14: 00000000000000fa R15: ffffffffffff9000 [ 486.333767][ T30] ? __traverse_mounts+0x4e2/0x580 [ 486.346430][ T30] [ 486.350090][ T30] INFO: task syz.3.594:7889 blocked for more than 147 seconds. [ 486.366534][ T30] Not tainted 6.11.0-rc7-syzkaller #0 [ 486.372452][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 486.389249][ T30] task:syz.3.594 state:D stack:26672 pid:7889 tgid:7883 ppid:7328 flags:0x00004004 [ 486.407922][ T30] Call Trace: [ 486.411229][ T30] [ 486.414176][ T30] __schedule+0x17ae/0x4a10 [ 486.425170][ T30] ? __pfx___schedule+0x10/0x10 [ 486.431348][ T30] ? __pfx_lock_release+0x10/0x10 [ 486.446159][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 486.457464][ T30] ? schedule+0x90/0x320 [ 486.461752][ T30] schedule+0x14b/0x320 [ 486.465928][ T30] jbd2_log_wait_commit+0x29f/0x4a0 [ 486.481020][ T30] ? jbd2_journal_flush+0x152/0xc10 [ 486.486271][ T30] ? __pfx_jbd2_log_wait_commit+0x10/0x10 [ 486.504312][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 486.513414][ T30] jbd2_journal_flush+0x15c/0xc10 [ 486.525655][ T30] ? jbd2_journal_lock_updates+0x2b4/0x380 [ 486.532359][ T30] ? __pfx_jbd2_journal_lock_updates+0x10/0x10 [ 486.546953][ T30] ? bpf_lsm_capable+0x9/0x10 [ 486.551673][ T30] ? __pfx_jbd2_journal_flush+0x10/0x10 [ 486.568584][ T30] ? sb_start_write+0x110/0x1c0 [ 486.573488][ T30] ext4_ioctl_group_add+0x1fc/0x530 [ 486.587173][ T30] ext4_ioctl+0x1c27/0x5590 [ 486.595591][ T30] ? kasan_save_track+0x51/0x80 [ 486.606426][ T30] ? kfree+0x149/0x360 [ 486.610536][ T30] ? do_syscall_64+0xf3/0x230 [ 486.615223][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.631242][ T30] ? do_vfs_ioctl+0x1e77/0x2e50 [ 486.636169][ T30] ? __pfx_ext4_ioctl+0x10/0x10 [ 486.646250][ T30] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 486.655303][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 486.668017][ T30] ? tomoyo_path_number_perm+0x208/0x880 [ 486.673690][ T30] ? __pfx_lock_release+0x10/0x10 [ 486.689436][ T30] ? kfree+0x149/0x360 [ 486.702783][ T30] ? tomoyo_path_number_perm+0x71a/0x880 [ 486.711389][ T30] ? tomoyo_path_number_perm+0x208/0x880 [ 486.723156][ T30] ? smack_log+0x123/0x540 [ 486.728490][ T30] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 486.734501][ T30] ? __pfx_smack_log+0x10/0x10 [ 486.749217][ T30] ? smk_access+0x4ab/0x4e0 [ 486.753769][ T30] ? smk_tskacc+0x300/0x370 [ 486.764803][ T30] ? smack_file_ioctl+0x2a1/0x3a0 [ 486.773019][ T30] ? __pfx_smack_file_ioctl+0x10/0x10 [ 486.785599][ T30] ? __fget_files+0x3f6/0x470 [ 486.797810][ T30] ? __fget_files+0x29/0x470 [ 486.802445][ T30] ? bpf_lsm_file_ioctl+0x9/0x10 [ 486.817647][ T30] ? security_file_ioctl+0x87/0xb0 [ 486.822801][ T30] ? __pfx_ext4_ioctl+0x10/0x10 [ 486.836349][ T30] __se_sys_ioctl+0xfc/0x170 [ 486.841891][ T30] do_syscall_64+0xf3/0x230 [ 486.855385][ T30] ? clear_bhb_loop+0x35/0x90 [ 486.861243][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.868159][ T30] RIP: 0033:0x7fa8e177def9 [ 486.872620][ T30] RSP: 002b:00007fa8e2551038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 486.889432][ T30] RAX: ffffffffffffffda RBX: 00007fa8e1935f80 RCX: 00007fa8e177def9 [ 486.912046][ T30] RDX: 0000000020000180 RSI: 0000000040286608 RDI: 0000000000000006 [ 486.921098][ T30] RBP: 00007fa8e17f09f6 R08: 0000000000000000 R09: 0000000000000000 [ 486.937218][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 486.945238][ T30] R13: 0000000000000000 R14: 00007fa8e1935f80 R15: 00007ffcadd92ed8 [ 486.961951][ T30] [ 486.965079][ T30] INFO: task syz.4.597:7886 blocked for more than 147 seconds. [ 486.983038][ T30] Not tainted 6.11.0-rc7-syzkaller #0 [ 486.992002][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 487.009957][ T30] task:syz.4.597 state:D stack:24672 pid:7886 tgid:7886 ppid:7339 flags:0x00000004 [ 487.026473][ T30] Call Trace: [ 487.029798][ T30] [ 487.032742][ T30] __schedule+0x17ae/0x4a10 [ 487.046896][ T30] ? __pfx___schedule+0x10/0x10 [ 487.051817][ T30] ? __pfx_lock_release+0x10/0x10 [ 487.065284][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 487.072542][ T30] ? schedule+0x90/0x320 [ 487.106923][ T30] schedule+0x14b/0x320 [ 487.111153][ T30] start_this_handle+0x55d/0x2110 [ 487.116208][ T30] ? __kasan_slab_alloc+0x66/0x80 [ 487.141102][ T30] ? __pfx_start_this_handle+0x10/0x10 [ 487.163927][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 487.170978][ T30] ? jbd2__journal_start+0x14d/0x5d0 [ 487.176330][ T30] ? rcu_is_watching+0x15/0xb0 [ 487.186929][ T30] ? jbd2__journal_start+0x14d/0x5d0 [ 487.192350][ T30] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 487.209591][ T30] ? kmem_cache_alloc_noprof+0x185/0x2a0 [ 487.215303][ T30] jbd2__journal_start+0x2da/0x5d0 [ 487.227862][ T30] __ext4_journal_start_sb+0x239/0x600 [ 487.233388][ T30] ext4_dirty_inode+0x92/0x110 [ 487.246884][ T30] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 487.252321][ T30] __mark_inode_dirty+0x325/0xe20 [ 487.268878][ T30] file_update_time+0x3ad/0x430 [ 487.273780][ T30] ext4_page_mkwrite+0x207/0xdf0 [ 487.279976][ T30] ? __pfx_filemap_fault+0x10/0x10 [ 487.285129][ T30] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 487.298808][ T30] ? pte_offset_map_nolock+0x137/0x1f0 [ 487.320847][ T30] do_page_mkwrite+0x19b/0x480 [ 487.325674][ T30] handle_pte_fault+0x126b/0x6fc0 [ 487.340060][ T30] ? __pfx_validate_chain+0x10/0x10 [ 487.345314][ T30] ? mark_lock+0x9a/0x350 [ 487.354516][ T30] ? mark_lock+0x9a/0x350 [ 487.363842][ T30] ? __pfx_handle_pte_fault+0x10/0x10 [ 487.379450][ T30] ? reacquire_held_locks+0x3eb/0x690 [ 487.384868][ T30] ? lock_vma_under_rcu+0x2f9/0x6e0 [ 487.403779][ T30] ? __pfx_reacquire_held_locks+0x10/0x10 [ 487.415830][ T30] handle_mm_fault+0x1056/0x1ad0 [ 487.427302][ T30] ? __pfx_handle_mm_fault+0x10/0x10 [ 487.432640][ T30] ? lock_vma_under_rcu+0x592/0x6e0 [ 487.446244][ T30] ? exc_page_fault+0x113/0x8c0 [ 487.452078][ T30] exc_page_fault+0x459/0x8c0 [ 487.464994][ T30] asm_exc_page_fault+0x26/0x30 [ 487.471042][ T30] RIP: 0033:0x7f4c7dc5d276 [ 487.475486][ T30] RSP: 002b:00007ffe94b0ae60 EFLAGS: 00010202 [ 487.490796][ T30] RAX: 0000000000001008 RBX: 00007f4c7ea65720 RCX: 0000000000000000 [ 487.501935][ T30] RDX: 0000001b2db1f000 RSI: 0000000000000008 RDI: 00007f4c7ea65720 [ 487.524175][ T30] RBP: ffffffff81cb61c6 R08: 00007f4c7d401058 R09: 00007f4c7df22000 [ 487.535495][ T30] R10: 0000000081412523 R11: 0000000000000002 R12: 0000000000000638 [ 487.552551][ T30] R13: 00007f4c7df36018 R14: 00000000000000b4 R15: fffffffffffff000 [ 487.563806][ T30] ? next_uptodate_folio+0x986/0xa40 [ 487.575270][ T30] [ 487.579399][ T30] INFO: task syz-executor:7892 blocked for more than 148 seconds. [ 487.602607][ T30] Not tainted 6.11.0-rc7-syzkaller #0 [ 487.610515][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 487.632117][ T30] task:syz-executor state:D stack:24992 pid:7892 tgid:7892 ppid:5210 flags:0x00000000 [ 487.644234][ T30] Call Trace: [ 487.656138][ T30] [ 487.659917][ T30] __schedule+0x17ae/0x4a10 [ 487.664482][ T30] ? __pfx___schedule+0x10/0x10 [ 487.670421][ T30] ? __pfx_lock_release+0x10/0x10 [ 487.675472][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 487.690512][ T30] ? schedule+0x90/0x320 [ 487.694806][ T30] schedule+0x14b/0x320 [ 487.704008][ T30] start_this_handle+0x55d/0x2110 [ 487.715009][ T30] ? jbd2__journal_start+0x14d/0x5d0 [ 487.726803][ T30] ? __pfx_start_this_handle+0x10/0x10 [ 487.732326][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 487.748482][ T30] ? jbd2__journal_start+0x14d/0x5d0 [ 487.753812][ T30] ? rcu_is_watching+0x15/0xb0 [ 487.766875][ T30] ? jbd2__journal_start+0x14d/0x5d0 [ 487.772206][ T30] ? kmem_cache_alloc_noprof+0x185/0x2a0 [ 487.785397][ T30] jbd2__journal_start+0x2da/0x5d0 [ 487.791690][ T30] __ext4_journal_start_sb+0x239/0x600 [ 487.805593][ T30] __ext4_new_inode+0x12dc/0x4260 [ 487.812742][ T30] ? __pfx___ext4_new_inode+0x10/0x10 [ 487.826698][ T30] ? smack_inode_permission+0x2dc/0x380 [ 487.832289][ T30] ext4_mkdir+0x425/0xcf0 [ 487.844752][ T30] ? __pfx_ext4_mkdir+0x10/0x10 [ 487.852126][ T30] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 487.867245][ T30] ? security_inode_mkdir+0xc2/0x110 [ 487.872576][ T30] vfs_mkdir+0x2f9/0x4f0 [ 487.877997][ T30] do_mkdirat+0x264/0x3a0 [ 487.882368][ T30] ? __check_object_size+0x49c/0x900 [ 487.895911][ T30] ? __pfx_do_mkdirat+0x10/0x10 [ 487.901636][ T30] ? getname_flags+0x1e3/0x540 [ 487.914636][ T30] __x64_sys_mkdir+0x6c/0x80 [ 487.921072][ T30] do_syscall_64+0xf3/0x230 [ 487.928193][ T30] ? clear_bhb_loop+0x35/0x90 [ 487.932911][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.949505][ T30] RIP: 0033:0x7f52bbd7c767 [ 487.953958][ T30] RSP: 002b:00007ffed4e307c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 487.966422][ T30] RAX: ffffffffffffffda RBX: 00007ffed4e30912 RCX: 00007f52bbd7c767 [ 487.974428][ T30] RDX: 000000000df72535 RSI: 00000000000001c0 RDI: 00007ffed4e30900 [ 487.991778][ T30] RBP: f49998db0aa753ff R08: 0000000000000004 R09: 0000000000000001 [ 488.003868][ T30] R10: 00007f52bcad10b8 R11: 0000000000000246 R12: 8421084210842109 [ 488.017004][ T30] R13: 00007ffed4e30912 R14: 00007f52bbe11aa0 R15: 000000000df72535 [ 488.033790][ T30] [ 488.065447][ T30] [ 488.065447][ T30] Showing all locks held in the system: [ 488.083484][ T30] 1 lock held by khungtaskd/30: [ 488.090333][ T30] #0: ffffffff8e738320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 488.110764][ T30] 4 locks held by kworker/u8:3/52: [ 488.115936][ T30] #0: ffff888020ebb948 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 488.136441][ T30] #1: ffffc90000bc7d00 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 488.157387][ T30] #2: ffff888034ee60e0 (&type->s_umount_key#31){++++}-{3:3}, at: super_trylock_shared+0x22/0xf0 [ 488.175692][ T30] #3: ffff888034ee8b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x1bf/0x3c0 [ 488.204982][ T30] 4 locks held by kworker/u8:5/136: [ 488.213185][ T30] #0: ffff88801b6e3148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 488.235960][ T30] #1: ffffc90002d2fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 488.254882][ T30] #2: ffffffff8fa6d390 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 488.266252][ T30] #3: ffff88802c33d428 (&wg->device_update_lock){+.+.}-{3:3}, at: wg_destruct+0x110/0x2e0 [ 488.286963][ T30] 3 locks held by kworker/u8:12/2999: [ 488.292375][ T30] 2 locks held by getty/4981: [ 488.305675][ T30] #0: ffff88803008c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 488.326424][ T30] #1: ffffc900031232f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 488.351762][ T30] 2 locks held by syz-executor/5210: [ 488.364342][ T30] #0: ffff88802965b2f8 (&vma->vm_lock->lock){++++}-{3:3}, at: lock_vma_under_rcu+0x2f9/0x6e0 [ 488.377117][ T30] #1: ffff888034ee6518 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1f0/0xdf0 [ 488.394918][ T30] 2 locks held by syz.1.596/7879: [ 488.400939][ T30] #0: ffff888024d5c070 (&vma->vm_lock->lock){++++}-{3:3}, at: lock_vma_under_rcu+0x2f9/0x6e0 [ 488.416964][ T30] #1: ffff888034ee6518 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1f0/0xdf0 [ 488.443101][ T30] 2 locks held by syz.0.595/7885: [ 488.448676][ T30] 2 locks held by syz.3.594/7883: [ 488.453716][ T30] #0: ffff8880647e3a90 (&vma->vm_lock->lock){++++}-{3:3}, at: lock_vma_under_rcu+0x2f9/0x6e0 [ 488.473409][ T30] #1: ffff888034ee6518 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1f0/0xdf0 [ 488.486109][ T30] 2 locks held by syz.3.594/7889: [ 488.498405][ T30] #0: ffff888034ee6420 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write_file+0x61/0x200 [ 488.514792][ T30] #1: ffff888034eea160 (&journal->j_barrier){+.+.}-{3:3}, at: jbd2_journal_lock_updates+0x2b4/0x380 [ 488.529197][ T30] 2 locks held by syz.4.597/7886: [ 488.534246][ T30] #0: ffff888061a5dd18 (&vma->vm_lock->lock){++++}-{3:3}, at: lock_vma_under_rcu+0x2f9/0x6e0 [ 488.558888][ T30] #1: ffff888034ee6518 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1f0/0xdf0 [ 488.577924][ T30] 2 locks held by syz-executor/7892: [ 488.583272][ T30] #0: ffff888034ee6420 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x3f/0x90 [ 488.602573][ T30] #1: ffff888044653fc8 (&type->i_mutex_dir_key#3/1){+.+.}-{3:3}, at: filename_create+0x260/0x540 [ 488.615336][ T30] [ 488.624871][ T30] ============================================= [ 488.624871][ T30] [ 488.635804][ T30] NMI backtrace for cpu 0 [ 488.640186][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc7-syzkaller #0 [ 488.649048][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 488.659110][ T30] Call Trace: [ 488.662399][ T30] [ 488.665335][ T30] dump_stack_lvl+0x241/0x360 [ 488.670028][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 488.675234][ T30] ? __pfx__printk+0x10/0x10 [ 488.679829][ T30] ? vprintk_emit+0x667/0x7c0 [ 488.684517][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 488.689558][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 488.694518][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 488.699986][ T30] ? _printk+0xd5/0x120 [ 488.704149][ T30] ? __pfx__printk+0x10/0x10 [ 488.708747][ T30] ? __wake_up_klogd+0xcc/0x110 [ 488.713611][ T30] ? __pfx__printk+0x10/0x10 [ 488.718211][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 488.723246][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 488.729239][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 488.735236][ T30] watchdog+0xff4/0x1040 [ 488.739498][ T30] ? watchdog+0x1ea/0x1040 [ 488.743936][ T30] ? __pfx_watchdog+0x10/0x10 [ 488.748629][ T30] kthread+0x2f0/0x390 [ 488.752711][ T30] ? __pfx_watchdog+0x10/0x10 [ 488.757400][ T30] ? __pfx_kthread+0x10/0x10 [ 488.762003][ T30] ret_from_fork+0x4b/0x80 [ 488.766434][ T30] ? __pfx_kthread+0x10/0x10 [ 488.771038][ T30] ret_from_fork_asm+0x1a/0x30 [ 488.775827][ T30] [ 488.780764][ T30] Sending NMI from CPU 0 to CPUs 1: [ 488.786797][ C1] NMI backtrace for cpu 1 [ 488.786810][ C1] CPU: 1 UID: 0 PID: 7885 Comm: syz.0.595 Not tainted 6.11.0-rc7-syzkaller #0 [ 488.786829][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 488.786839][ C1] RIP: 0010:__sanitizer_cov_trace_cmp8+0x11/0x90 [ 488.786867][ C1] Code: 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 4c 8b 04 24 65 48 8b 0c 25 c0 d6 03 00 <65> 8b 05 f0 47 70 7e 25 00 01 ff 00 74 10 3d 00 01 00 00 75 57 83 [ 488.786881][ C1] RSP: 0018:ffffc90004b9fd08 EFLAGS: 00000246 [ 488.786895][ C1] RAX: 1ffff11005d988ab RBX: 0000000000000000 RCX: ffff88802ecc3c00 [ 488.786908][ C1] RDX: ffff88802ecc3c00 RSI: 0000000000000000 RDI: 00007fb95900d0e8 [ 488.786919][ C1] RBP: dffffc0000000000 R08: ffffffff815b0954 R09: 1ffff92000973fb6 [ 488.786931][ C1] R10: dffffc0000000000 R11: fffff52000973fb7 R12: 0000000000000002 [ 488.786943][ C1] R13: ffff88802ecc3c00 R14: 00007fb95900d0e8 R15: 0000000000000002 [ 488.786954][ C1] FS: 00007fb95900d6c0(0000) GS:ffff8880b8900000(0000) knlGS:0000000000000000 [ 488.786968][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 488.786980][ C1] CR2: 000000002006b000 CR3: 0000000012624000 CR4: 00000000003506f0 [ 488.786994][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 488.787004][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 488.787014][ C1] Call Trace: [ 488.787020][ C1] [ 488.787028][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 488.787049][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 488.787072][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 488.787092][ C1] ? nmi_handle+0x2a/0x5a0 [ 488.787116][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 488.787135][ C1] ? nmi_handle+0x14f/0x5a0 [ 488.787150][ C1] ? nmi_handle+0x2a/0x5a0 [ 488.787166][ C1] ? __sanitizer_cov_trace_cmp8+0x11/0x90 [ 488.787187][ C1] ? default_do_nmi+0x63/0x160 [ 488.787209][ C1] ? exc_nmi+0x123/0x1f0 [ 488.787234][ C1] ? end_repeat_nmi+0xf/0x53 [ 488.787258][ C1] ? do_sigaltstack+0x314/0x610 [ 488.787283][ C1] ? __sanitizer_cov_trace_cmp8+0x11/0x90 [ 488.787304][ C1] ? __sanitizer_cov_trace_cmp8+0x11/0x90 [ 488.787326][ C1] ? __sanitizer_cov_trace_cmp8+0x11/0x90 [ 488.787347][ C1] [ 488.787353][ C1] [ 488.787358][ C1] do_sigaltstack+0x314/0x610 [ 488.787386][ C1] restore_altstack+0x10c/0x150 [ 488.787409][ C1] ? __pfx_restore_altstack+0x10/0x10 [ 488.787434][ C1] ? __task_pid_nr_ns+0x28/0x450 [ 488.787451][ C1] ? restore_signal_shadow_stack+0x392/0x450 [ 488.787469][ C1] __do_sys_rt_sigreturn+0x20d/0x270 [ 488.787492][ C1] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 488.787514][ C1] ? do_syscall_64+0x100/0x230 [ 488.787532][ C1] ? do_syscall_64+0xb6/0x230 [ 488.787550][ C1] do_syscall_64+0xf3/0x230 [ 488.787566][ C1] ? clear_bhb_loop+0x35/0x90 [ 488.787587][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.787607][ C1] RIP: 0033:0x7fb95817def7 [ 488.787620][ C1] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 488.787633][ C1] RSP: 002b:00007fb95900d0e8 EFLAGS: 00000246 [ 488.787645][ C1] RAX: 00000000000000ca RBX: 00007fb958335f88 RCX: 00007fb95817def9 [ 488.787656][ C1] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb958335f88 [ 488.787667][ C1] RBP: 00007fb958335f80 R08: 0000000000000000 R09: 0000000000000000 [ 488.787677][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb958335f8c [ 488.787688][ C1] R13: 0000000000000000 R14: 00007ffeae053390 R15: 00007ffeae053478 [ 488.787708][ C1] [ 489.202096][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 489.208983][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc7-syzkaller #0 [ 489.217755][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 489.227817][ T30] Call Trace: [ 489.231102][ T30] [ 489.234040][ T30] dump_stack_lvl+0x241/0x360 [ 489.238737][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 489.243942][ T30] ? __pfx__printk+0x10/0x10 [ 489.248535][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 489.254540][ T30] ? vscnprintf+0x5d/0x90 [ 489.258889][ T30] panic+0x349/0x860 [ 489.262792][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 489.268957][ T30] ? __pfx_panic+0x10/0x10 [ 489.273382][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 489.278764][ T30] ? __irq_work_queue_local+0x137/0x410 [ 489.284325][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 489.289711][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 489.295877][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 489.302047][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 489.308215][ T30] watchdog+0x1033/0x1040 [ 489.312564][ T30] ? watchdog+0x1ea/0x1040 [ 489.317001][ T30] ? __pfx_watchdog+0x10/0x10 [ 489.321696][ T30] kthread+0x2f0/0x390 [ 489.325779][ T30] ? __pfx_watchdog+0x10/0x10 [ 489.330466][ T30] ? __pfx_kthread+0x10/0x10 [ 489.335071][ T30] ret_from_fork+0x4b/0x80 [ 489.339502][ T30] ? __pfx_kthread+0x10/0x10 [ 489.344108][ T30] ret_from_fork_asm+0x1a/0x30 [ 489.348891][ T30] [ 489.352300][ T30] Kernel Offset: disabled [ 489.356622][ T30] Rebooting in 86400 seconds..