last executing test programs: 2m33.152854211s ago: executing program 4 (id=351): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) readv(r1, &(0x7f0000000340)=[{&(0x7f0000001740)=""/153, 0x99}], 0x1) 2m32.171574402s ago: executing program 4 (id=352): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "2af01c3d0040fbffffffffffffff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)) ioctl$TCSETA(r1, 0x5406, &(0x7f00000001c0)={0xffff, 0x0, 0x1000, 0x38f, 0x0, "a0590469a322d928"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x4) 2m32.06990524s ago: executing program 4 (id=353): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) 2m31.906561791s ago: executing program 4 (id=354): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x2}], 0x10, 0x0, @void, @value}, 0x90) sendmsg$inet(r0, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000)=r3, 0x8) 2m30.88037351s ago: executing program 4 (id=368): mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 2m30.656699719s ago: executing program 4 (id=371): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001840)={r0, r1, 0x6, 0x0, @val=@tcx={@void, @value}}, 0x1c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r2, r3, 0x6, 0x0, @val=@tracing}, 0x40) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) 2m15.286562961s ago: executing program 32 (id=371): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001840)={r0, r1, 0x6, 0x0, @val=@tcx={@void, @value}}, 0x1c) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r2, r3, 0x6, 0x0, @val=@tracing}, 0x40) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) 1m40.060524879s ago: executing program 3 (id=679): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x40040) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000200)={r2, r3, r4, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r5, r4, 0x3, 0x0, 0x3, 0x800, {0x4, 0x1, 0x3, 0x30, 0x200, 0x2, 0x2, 0x5, 0x4cab, 0xe154, 0x1000, 0x1, 0xff, 0xf9, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) 1m39.628408611s ago: executing program 3 (id=682): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) io_setup(0xff, &(0x7f0000000380)=0x0) sendmmsg$alg(r1, &(0x7f0000000240)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x50}], 0x1, 0x840) io_submit(r2, 0x27f, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000340), 0x41}]) 1m38.562773988s ago: executing program 3 (id=690): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x1001, &(0x7f0000000040)=ANY=[@ANYRESDEC=r1, @ANYRES8=0x0, @ANYBLOB="5e4dc4016e0738da64063e91b8aaf3b2322921", @ANYRES32=r0]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m38.260358034s ago: executing program 3 (id=693): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000040)='.\x00', r0, &(0x7f0000000580)='./file0\x00', 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r2, &(0x7f00000005c0)='./file0\x00', 0x1000, &(0x7f0000000680)={0x0, 0xa, 0x80000}, 0x20) 1m38.038280942s ago: executing program 3 (id=695): ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x2, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{}, {0x4000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {}, 0xddf8ffdb}) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000040)) 1m37.418507096s ago: executing program 3 (id=700): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x3, 0x400}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x778}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x100000001}, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x5211}, 0x1}) io_uring_enter(r1, 0x389e, 0xe5cf, 0x1, 0x0, 0x0) write$P9_RSTATu(r0, &(0x7f0000000140)=ANY=[], 0x50d) 1m36.910171424s ago: executing program 33 (id=700): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r1 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x3, 0x400}, &(0x7f0000000340)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x778}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x100000001}, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x5211}, 0x1}) io_uring_enter(r1, 0x389e, 0xe5cf, 0x1, 0x0, 0x0) write$P9_RSTATu(r0, &(0x7f0000000140)=ANY=[], 0x50d) 1m36.860717654s ago: executing program 0 (id=463): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x60, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x5, 0x3003, 0x3, 0x9, 0x8}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x60}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r1 = socket(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="9f79711f8a"], 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1m19.290220634s ago: executing program 0 (id=463): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x60, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x5, 0x3003, 0x3, 0x9, 0x8}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x60}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r1 = socket(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="9f79711f8a"], 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1m5.366936903s ago: executing program 0 (id=463): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x60, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x5, 0x3003, 0x3, 0x9, 0x8}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x60}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r1 = socket(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="9f79711f8a"], 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 57.907725219s ago: executing program 6 (id=923): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 57.423348406s ago: executing program 6 (id=926): socket$netlink(0x10, 0x3, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r0], 0x448}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) 57.282108848s ago: executing program 6 (id=927): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='mmap_lock_acquire_returned\x00', r1}, 0x10) userfaultfd(0x801) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x541b, &(0x7f0000000240)={0xffffffffffffffff}) close_range(r3, 0xffffffffffffffff, 0x0) 56.923574837s ago: executing program 6 (id=928): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000002c0)='./file0/file0\x00', 0x2) 56.716743817s ago: executing program 6 (id=930): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) io_uring_setup(0x1009, &(0x7f0000000040)={0x0, 0x9f3, 0x400, 0x0, 0x4}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect(r1, &(0x7f00000004c0)=@rc={0x1f, @any, 0x4}, 0x80) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect(r2, &(0x7f00000004c0)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x8}, 0x80) close_range(r0, 0xffffffffffffffff, 0x0) 56.218985745s ago: executing program 6 (id=933): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x149400, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 55.783886532s ago: executing program 34 (id=933): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x149400, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 47.259704113s ago: executing program 0 (id=463): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x60, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x5, 0x3003, 0x3, 0x9, 0x8}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x60}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r1 = socket(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="9f79711f8a"], 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 28.298869366s ago: executing program 0 (id=463): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x60, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x5, 0x3003, 0x3, 0x9, 0x8}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x60}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r1 = socket(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="9f79711f8a"], 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 15.38074566s ago: executing program 7 (id=1140): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xb, 0x7, 0x2, 0x1, 0x1, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000040)}, 0x38) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000080)=ANY=[@ANYBLOB="01000d"]) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\\\x00\x00 \x00'}) 15.042552295s ago: executing program 7 (id=1142): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101101, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000440)=ANY=[@ANYBLOB="820000000000000071000040"]) 14.481091566s ago: executing program 7 (id=1147): mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) mknod$loop(&(0x7f00000002c0)='./file0/../file0/file0\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x28, 0x0, 0x40488060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24522716a989086f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000002680)="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", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x8, {0xffffffffffffffff, 0x2, 0x0, 0x0, 0x1, 0x4, {0x6, 0x80, 0x8, 0x8, 0x0, 0x8, 0x6, 0x800, 0x6, 0x2000, 0x7fffffff, r2, r3, 0x0, 0x6}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 14.068883886s ago: executing program 7 (id=1150): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./bus\x00') fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) 13.157087616s ago: executing program 7 (id=1154): mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000000c0)='./file0\x00') mkdirat(r0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x1607010, 0x0) 12.919477585s ago: executing program 7 (id=1158): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x59, 0x77, 0xc, 0x40, 0x9c0, 0x203, 0xd332, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xfa, 0x10, 0xc9}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) 9.857615707s ago: executing program 0 (id=463): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@newtaction={0x60, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x5, 0x3003, 0x3, 0x9, 0x8}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x60}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r1 = socket(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="9f79711f8a"], 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 5.797100685s ago: executing program 5 (id=1187): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x84, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) write$cgroup_devices(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="1e031c00008c71ef2885634a8270e7112f"], 0xffdd) 5.646284867s ago: executing program 1 (id=1188): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000059d360205f0501d09288000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f0000000a80)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000006c0)={0x1c, &(0x7f0000000580)={0x20, 0x15}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 2.621839833s ago: executing program 1 (id=1196): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000300)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x0, 0x0, 0xfffffffffffffd25) 2.399380432s ago: executing program 2 (id=1197): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f00000006c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x10000001}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000001c0)={0x42, 0x4}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2004, 0x10000001}}, 0x10, 0x0}, 0x0) 2.239757831s ago: executing program 2 (id=1198): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040), 0xc) r1 = socket$qrtr(0x2a, 0x2, 0x0) read(r0, &(0x7f0000000180)=""/119, 0x77) getpeername$qrtr(r0, 0x0, &(0x7f00000000c0)) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) ioctl$sock_qrtr_TIOCINQ(r0, 0x541b, 0x0) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1) 2.024182565s ago: executing program 5 (id=1199): pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = socket(0x2c, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r2}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000140), &(0x7f0000000080)=@udp=r2}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) 1.920790981s ago: executing program 2 (id=1200): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0}], 0x1, 0x4, &(0x7f00000000c0), 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000f1ffffff210000400000000009"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.8466219s ago: executing program 5 (id=1201): unshare(0x20400) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000380)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) lseek(r0, 0x0, 0x1) 1.642974729s ago: executing program 1 (id=1202): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000600)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "0f78fbc54b6c106c", "75fd7583f127c5c356354c80ea765edaa15f377fb214e20fda1b0241bed67dc4", "b1726789", "fb442565fb00"}, 0x38) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) 1.61958994s ago: executing program 5 (id=1203): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f00000063c0)="66b8000000000f23d80f21f86635c00000a00f23f80f84c63cbaf80c66b82141f98566efbafc0cb0cbee6426670f06660f10b300000f208267f264f00fba3d0800000000660f38801a0f78f30fc72a", 0x4f}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.342275349s ago: executing program 2 (id=1204): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0a000000020000000200000004"], 0x2d) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000002c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000a17000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x4, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000040), &(0x7f0000000080)='%-5lx \x00'}, 0x20) 1.32680407s ago: executing program 5 (id=1205): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x1b3a, 0x4) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000140)=0x6, 0x4) sendto$inet(r0, &(0x7f0000000080)='m', 0x1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}, 0x7fff}], 0x1, 0x40002100, 0x0) 1.17985324s ago: executing program 2 (id=1206): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x44, 0x0, &(0x7f0000002640)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000440)='B'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000480)={0x2020}, 0x2020) 1.008923938s ago: executing program 1 (id=1207): mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x1, 0x180, 0x20ff, 0x5, 0x100, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(r0, r0, &(0x7f0000000080), 0x7f03) 860.634199ms ago: executing program 1 (id=1208): syz_usb_connect(0x2, 0x0, 0x0, &(0x7f00000001c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x2, 0x2, 0xff, 0x10, 0xec}, 0x0, 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x26, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000040)="660fc77200f34998f3410fc736460f1a6086f2360f211e0f20c035020000000f22c0400f21ee66470f3880649d05b9800000c00f3235004000000f30430f92c6", 0x40}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 163.273449ms ago: executing program 2 (id=1209): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x1}}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r2, &(0x7f0000000080)=[{0x1e, 0x0, 0x0, 0xfd, @time, {}, {}, @result}], 0x1c) 163.058092ms ago: executing program 5 (id=1210): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1038, 0x1410, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000700)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="0000070300000780b22fb0cf8fb030313b7c0c5966"], 0x0, 0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 1 (id=1211): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000540)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000380)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x9101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) kernel console output (not intermixed with test programs): ing V4L2 extension [ 179.526294][ T5881] usb 3-1: USB disconnect, device number 7 [ 179.562050][ T5881] em28xx 3-1:0.132: Disconnecting em28xx [ 179.903259][ T5878] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 179.912757][ T5878] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 179.921564][ T5878] em28xx 3-1:0.132: No AC97 audio processor [ 179.957642][ T5878] usb 3-1: Decoder not found [ 179.963545][ T5878] em28xx 3-1:0.132: failed to create media graph [ 179.970267][ T5878] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 180.035099][ T5878] em28xx 3-1:0.132: Remote control support is not available for this card. [ 180.054358][ T5881] em28xx 3-1:0.132: Closing input extension [ 180.123993][ T5881] em28xx 3-1:0.132: Freeing device [ 180.419280][ T30] audit: type=1400 audit(1733790904.528:33): lsm=SMACK fn=smack_key_permission action=denied subject="N" object="_" requested=w pid=7563 comm="syz.3.579" key_serial=402016934 key_desc="syz," [ 180.618998][ T5834] Bluetooth: hci0: command tx timeout [ 180.672026][ T7569] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 180.734694][ T7407] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 180.793369][ T7407] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 180.816145][ T7407] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 180.862360][ T7407] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 181.015215][ T838] usb 6-1: Cannot set autoneg [ 181.022794][ T838] MOSCHIP usb-ethernet driver 6-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 181.081582][ T838] usb 6-1: USB disconnect, device number 2 [ 181.225970][ T7407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.252024][ T7587] binder: 7581:7587 ioctl c0306201 20000580 returned -14 [ 181.299835][ T7407] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.325508][ T2989] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.333701][ T2989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.401995][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.409319][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.919773][ T7407] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.155844][ T7407] veth0_vlan: entered promiscuous mode [ 182.214835][ T7407] veth1_vlan: entered promiscuous mode [ 182.289373][ T7407] veth0_macvtap: entered promiscuous mode [ 182.325681][ T7407] veth1_macvtap: entered promiscuous mode [ 182.414520][ T7407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.436354][ T7407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.506715][ T7407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.519263][ T7407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.531851][ T7407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.548388][ T7407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.563126][ T7407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.575052][ T7407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.586144][ T7407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.601367][ T7407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.616171][ T7407] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.626949][ T7407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.640765][ T7407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.652410][ T7407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.665524][ T7407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.676398][ T7407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.708820][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888027afac00: rx timeout, send abort [ 182.710983][ T7407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.721099][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888027afac00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 182.733333][ T7407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.778880][ T7407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.792261][ T7407] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.804007][ T7407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.818247][ T7407] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.949248][ T7407] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.004012][ T7407] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.035406][ T7407] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.087120][ T7407] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.118939][ T7640] random: crng reseeded on system resumption [ 183.728644][ T7659] : renamed from ipvlan1 [ 183.867109][ T6992] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.919815][ T6992] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.025692][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.078467][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.249331][ T63] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.269101][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 185.308757][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 185.320071][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 185.330277][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 185.339049][ T5840] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 185.350387][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 185.363214][ T7700] netlink: 12 bytes leftover after parsing attributes in process `syz.5.615'. [ 185.637924][ T63] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.901349][ T63] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.448757][ T63] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.846272][ T7697] chnl_net:caif_netlink_parms(): no params data found [ 187.278517][ T7736] mmap: syz.2.625 (7736) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 187.429436][ T5834] Bluetooth: hci0: command tx timeout [ 187.760428][ T63] bridge_slave_1: left allmulticast mode [ 187.777401][ T63] bridge_slave_1: left promiscuous mode [ 187.848788][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.899697][ T7720] Set syz1 is full, maxelem 65536 reached [ 188.108041][ T63] bridge_slave_0: left allmulticast mode [ 188.153063][ T63] bridge_slave_0: left promiscuous mode [ 188.164269][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.500320][ T5834] Bluetooth: hci0: command tx timeout [ 189.731398][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 189.760754][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.786401][ T63] bond0 (unregistering): Released all slaves [ 189.805894][ T5878] kernel write not supported for file /uhid (pid: 5878 comm: kworker/0:3) [ 189.902448][ T7697] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.910440][ T7697] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.918057][ T7697] bridge_slave_0: entered allmulticast mode [ 189.962062][ T7697] bridge_slave_0: entered promiscuous mode [ 190.126958][ T7697] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.137720][ T7697] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.147207][ T7697] bridge_slave_1: entered allmulticast mode [ 190.162946][ T7697] bridge_slave_1: entered promiscuous mode [ 190.291789][ T7697] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.337748][ T7697] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.388039][ T63] hsr_slave_0: left promiscuous mode [ 190.412107][ T63] hsr_slave_1: left promiscuous mode [ 190.437194][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.446236][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.456633][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.465724][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.496534][ T63] veth1_macvtap: left promiscuous mode [ 190.525931][ T63] veth0_macvtap: left promiscuous mode [ 190.542753][ T63] veth1_vlan: left promiscuous mode [ 190.563150][ T63] veth0_vlan: left promiscuous mode [ 191.113180][ T30] audit: type=1400 audit(1733790915.228:34): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=7813 comm="syz.5.644" daddr=::ffff:172.20.20.187 [ 191.572094][ T7827] netlink: 'syz.1.647': attribute type 10 has an invalid length. [ 191.580434][ T5834] Bluetooth: hci0: command tx timeout [ 192.120151][ T63] team0 (unregistering): Port device team_slave_1 removed [ 192.195262][ T63] team0 (unregistering): Port device team_slave_0 removed [ 192.786220][ T7823] bond0: entered promiscuous mode [ 192.794947][ T7823] bond_slave_0: entered promiscuous mode [ 192.812818][ T7823] bond_slave_1: entered promiscuous mode [ 192.820783][ T7823] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 192.835095][ T7823] bond0: left promiscuous mode [ 192.840271][ T7823] bond_slave_0: left promiscuous mode [ 192.845996][ T7823] bond_slave_1: left promiscuous mode [ 192.895088][ T7827] team0: Port device netdevsim0 added [ 192.995994][ T7697] team0: Port device team_slave_0 added [ 193.030317][ T7697] team0: Port device team_slave_1 added [ 193.159516][ T7697] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.166971][ T7697] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.197272][ T7697] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.226429][ T7697] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.234019][ T7697] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.277391][ T7697] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.424390][ T7697] hsr_slave_0: entered promiscuous mode [ 193.447701][ T7697] hsr_slave_1: entered promiscuous mode [ 193.462428][ T7697] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 193.475772][ T7697] Cannot create hsr debugfs directory [ 193.555705][ T7854] netlink: 4 bytes leftover after parsing attributes in process `syz.3.658'. [ 193.659151][ T5834] Bluetooth: hci0: command tx timeout [ 194.298739][ T838] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 194.465928][ T838] usb 4-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 194.486083][ T838] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.551408][ T838] usb 4-1: config 0 descriptor?? [ 194.566568][ T838] gspca_main: spca508-2.14.0 probing 8086:0110 [ 194.752065][ T7697] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 194.768838][ T838] gspca_spca508: reg_read err -32 [ 194.775046][ T838] gspca_spca508: reg_read err -32 [ 194.784001][ T838] gspca_spca508: reg_read err -32 [ 194.790298][ T838] gspca_spca508: reg_read err -32 [ 194.796959][ T838] gspca_spca508: reg_read err -32 [ 194.829062][ T7697] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 194.868070][ T7894] netlink: 'syz.5.668': attribute type 4 has an invalid length. [ 194.880248][ T7697] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 194.899148][ T7697] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 195.027617][ T838] gspca_spca508: reg write: error -71 [ 195.033853][ T838] spca508 4-1:0.0: probe with driver spca508 failed with error -71 [ 195.079178][ T838] usb 4-1: USB disconnect, device number 9 [ 195.195972][ T7697] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.263386][ T7697] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.310732][ T3555] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.317998][ T3555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.403821][ T2989] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.411058][ T2989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.988476][ T30] audit: type=1400 audit(1733790920.098:35): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=7922 comm="syz.5.678" daddr=::ffff:172.20.20.187 [ 196.478729][ T7697] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.681521][ T7697] veth0_vlan: entered promiscuous mode [ 196.704031][ T7697] veth1_vlan: entered promiscuous mode [ 196.727021][ T7697] veth0_macvtap: entered promiscuous mode [ 196.736288][ T7697] veth1_macvtap: entered promiscuous mode [ 196.751948][ T7697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.762581][ T7697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.772568][ T7697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.783497][ T7697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.794124][ T7697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.805222][ T7697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.815377][ T7697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.825926][ T7697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.835964][ T7697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.846534][ T7697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.857754][ T7697] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.867934][ T7697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.878767][ T7697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.888823][ T7697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.900543][ T7697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.910536][ T7697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.921111][ T7697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.931089][ T7697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.941905][ T7697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.952066][ T7697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.962913][ T7697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.974797][ T7697] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.986784][ T7697] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.996266][ T7697] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.005975][ T7697] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.015031][ T7697] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.272423][ T7002] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.280656][ T7002] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.341863][ T3555] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.368541][ T3555] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.320444][ T7992] loop6: detected capacity change from 0 to 524287999 [ 198.342258][ C1] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 198.352723][ C1] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 198.367242][ T992] loop: Write error at byte offset 1, length 4096. [ 198.396511][ C1] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 198.406241][ C1] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 198.710090][ T2989] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.867194][ T2989] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.878430][ T5877] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 199.062596][ T2989] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.097196][ T5877] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 199.113036][ T5877] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 199.148335][ T5877] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 199.190436][ T2989] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.201968][ T5877] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 199.229153][ T5877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.237489][ T5877] usb 2-1: Product: syz [ 199.258963][ T5877] usb 2-1: Manufacturer: syz [ 199.263652][ T5877] usb 2-1: SerialNumber: syz [ 199.530504][ T2989] bridge_slave_1: left allmulticast mode [ 199.537683][ T5877] usb 2-1: 0:2 : does not exist [ 199.548912][ T2989] bridge_slave_1: left promiscuous mode [ 199.556170][ T2989] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.574243][ T5877] usb 2-1: USB disconnect, device number 12 [ 199.605189][ T2989] bridge_slave_0: left allmulticast mode [ 199.613028][ T2989] bridge_slave_0: left promiscuous mode [ 199.643478][ T2989] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.810970][ T5841] udevd[5841]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 199.893742][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 199.917931][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 199.936354][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 199.944732][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 199.954037][ T5840] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 199.968229][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 200.256752][ T2989] erspan0 (unregistering): left promiscuous mode [ 200.302308][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.312128][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.693462][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 200.712252][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 200.722649][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 200.754747][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 200.775191][ T5840] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 200.787516][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 201.159372][ T2989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.188033][ T2989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.213221][ T2989] bond0 (unregistering): Released all slaves [ 201.398753][ T2989] bond1 (unregistering): (slave veth3): Releasing active interface [ 201.408461][ T2989] bond1 (unregistering): Released all slaves [ 201.798100][ T5834] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 201.809794][ T5834] CPU: 1 UID: 0 PID: 5834 Comm: kworker/u9:3 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 201.820813][ T5834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 201.830930][ T5834] Workqueue: hci5 hci_rx_work [ 201.835789][ T5834] Call Trace: [ 201.839120][ T5834] [ 201.842139][ T5834] dump_stack_lvl+0x241/0x360 [ 201.847019][ T5834] ? __pfx_dump_stack_lvl+0x10/0x10 [ 201.852468][ T5834] ? __pfx__printk+0x10/0x10 [ 201.857140][ T5834] ? __kmalloc_cache_noprof+0x243/0x390 [ 201.862789][ T5834] ? sysfs_create_dir_ns+0x28a/0x3a0 [ 201.868157][ T5834] sysfs_create_dir_ns+0x2ce/0x3a0 [ 201.873432][ T5834] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 201.879276][ T5834] kobject_add_internal+0x435/0x8d0 [ 201.884650][ T5834] kobject_add+0x152/0x220 [ 201.889235][ T5834] ? do_raw_spin_unlock+0x13c/0x8b0 [ 201.894507][ T5834] ? device_add+0x3e7/0xbf0 [ 201.899332][ T5834] ? __pfx_kobject_add+0x10/0x10 [ 201.904396][ T5834] ? _raw_spin_unlock+0x28/0x50 [ 201.909411][ T5834] ? get_device_parent+0x165/0x410 [ 201.914694][ T5834] device_add+0x4e5/0xbf0 [ 201.919246][ T5834] hci_conn_add_sysfs+0xe8/0x200 [ 201.924385][ T5834] le_conn_complete_evt+0xc9f/0x12e0 [ 201.929925][ T5834] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 201.935763][ T5834] ? __mutex_unlock_slowpath+0x21e/0x790 [ 201.941992][ T5834] ? __pfx___mutex_lock+0x10/0x10 [ 201.947100][ T5834] ? skb_pull_data+0x112/0x230 [ 201.951930][ T5834] hci_le_conn_complete_evt+0x18c/0x420 [ 201.957556][ T5834] hci_event_packet+0xa55/0x1540 [ 201.962573][ T5834] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 201.967963][ T5834] ? __pfx_hci_event_packet+0x10/0x10 [ 201.973408][ T5834] ? do_raw_spin_unlock+0x13c/0x8b0 [ 201.978687][ T5834] ? hci_send_to_monitor+0xd8/0x7f0 [ 201.983948][ T5834] ? kcov_remote_start+0x97/0x7d0 [ 201.989040][ T5834] hci_rx_work+0x3f3/0xdb0 [ 201.993542][ T5834] ? process_scheduled_works+0x976/0x1840 [ 201.999338][ T5834] process_scheduled_works+0xa66/0x1840 [ 202.005157][ T5834] ? __pfx_process_scheduled_works+0x10/0x10 [ 202.011321][ T5834] ? assign_work+0x364/0x3d0 [ 202.015991][ T5834] worker_thread+0x870/0xd30 [ 202.020753][ T5834] ? __kthread_parkme+0x169/0x1d0 [ 202.025841][ T5834] ? __pfx_worker_thread+0x10/0x10 [ 202.031026][ T5834] kthread+0x2f0/0x390 [ 202.035218][ T5834] ? __pfx_worker_thread+0x10/0x10 [ 202.040386][ T5834] ? __pfx_kthread+0x10/0x10 [ 202.045062][ T5834] ret_from_fork+0x4b/0x80 [ 202.049720][ T5834] ? __pfx_kthread+0x10/0x10 [ 202.054395][ T5834] ret_from_fork_asm+0x1a/0x30 [ 202.059254][ T5834] [ 202.069699][ T5834] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 202.084345][ T5834] Bluetooth: hci5: failed to register connection device [ 202.093703][ T5834] Bluetooth: hci0: command tx timeout [ 202.398623][ T5878] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 202.556440][ T8087] netlink: 80 bytes leftover after parsing attributes in process `syz.2.713'. [ 202.568402][ T5878] usb 6-1: Using ep0 maxpacket: 16 [ 202.576580][ T5878] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 202.585455][ T5878] usb 6-1: config 0 has no interface number 0 [ 202.599438][ T5878] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 202.616506][ T5878] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.626348][ T5878] usb 6-1: Product: syz [ 202.631097][ T5878] usb 6-1: Manufacturer: syz [ 202.635764][ T5878] usb 6-1: SerialNumber: syz [ 202.652909][ T5878] usb 6-1: config 0 descriptor?? [ 202.664750][ T5878] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 202.700152][ T8022] chnl_net:caif_netlink_parms(): no params data found [ 202.803379][ T2989] batadv_slave_1: left promiscuous mode [ 202.860463][ T5826] Bluetooth: hci2: command tx timeout [ 202.883656][ T2989] hsr_slave_0: left promiscuous mode [ 202.899398][ T2989] hsr_slave_1: left promiscuous mode [ 202.914087][ T2989] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.938055][ T2989] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.970320][ T2989] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.977826][ T2989] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.002662][ T2989] veth1_macvtap: left promiscuous mode [ 203.008462][ T2989] veth0_macvtap: left promiscuous mode [ 203.014562][ T2989] veth1_vlan: left promiscuous mode [ 203.020995][ T2989] veth0_vlan: left promiscuous mode [ 203.124882][ T5826] Bluetooth: hci1: unexpected Set CIG Parameters response data [ 204.121213][ T5878] gspca_spca1528: reg_w err -71 [ 204.127898][ T5878] spca1528 6-1:0.1: probe with driver spca1528 failed with error -71 [ 204.128791][ T2989] team0 (unregistering): Port device team_slave_1 removed [ 204.138941][ T5826] Bluetooth: hci0: command tx timeout [ 204.151050][ T5878] usb 6-1: USB disconnect, device number 3 [ 204.215248][ T2989] team0 (unregistering): Port device team_slave_0 removed [ 204.832874][ T8119] netlink: 140 bytes leftover after parsing attributes in process `syz.5.723'. [ 204.863706][ T8119] netlink: 140 bytes leftover after parsing attributes in process `syz.5.723'. [ 204.948537][ T5826] Bluetooth: hci2: command tx timeout [ 204.959144][ T8122] netlink: 'syz.1.724': attribute type 1 has an invalid length. [ 205.167881][ T8122] 8021q: adding VLAN 0 to HW filter on device bond1 [ 205.222053][ T8127] 8021q: adding VLAN 0 to HW filter on device bond1 [ 205.240032][ T8127] bond1: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 205.252438][ T8127] bond1: (slave ip6tnl1): Error -95 calling set_mac_address [ 205.489072][ T8022] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.528190][ T8022] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.565237][ T8022] bridge_slave_0: entered allmulticast mode [ 205.576217][ T8022] bridge_slave_0: entered promiscuous mode [ 205.643131][ T8022] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.658736][ T8022] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.681621][ T8022] bridge_slave_1: entered allmulticast mode [ 205.709706][ T8022] bridge_slave_1: entered promiscuous mode [ 205.852278][ T8048] chnl_net:caif_netlink_parms(): no params data found [ 205.906778][ T8022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.922640][ T8022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.173398][ T8022] team0: Port device team_slave_0 added [ 206.214946][ T8022] team0: Port device team_slave_1 added [ 206.221929][ T5826] Bluetooth: hci0: command tx timeout [ 206.348642][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 206.380625][ T8048] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.387930][ T8048] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.396179][ T8048] bridge_slave_0: entered allmulticast mode [ 206.435052][ T8048] bridge_slave_0: entered promiscuous mode [ 206.491477][ T8048] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.520452][ T8048] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.527746][ T8048] bridge_slave_1: entered allmulticast mode [ 206.613921][ T8048] bridge_slave_1: entered promiscuous mode [ 206.768663][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 206.808083][ T2989] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.854278][ T8022] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.873080][ T8022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.907389][ T8022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.028526][ T5826] Bluetooth: hci2: command tx timeout [ 207.054942][ T2989] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.104586][ T5879] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 207.121133][ T8022] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.148527][ T8022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.181418][ T5826] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 207.191258][ T5826] Bluetooth: hci1: Injecting HCI hardware error event [ 207.202066][ T5840] Bluetooth: hci1: hardware error 0x00 [ 207.211280][ T8022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.250061][ T8048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.263046][ T8048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.282774][ T5879] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.307810][ T5879] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.334805][ T2989] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.338395][ T5879] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 207.365221][ T5879] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.392187][ T5879] usb 2-1: config 0 descriptor?? [ 207.411053][ T8048] team0: Port device team_slave_0 added [ 207.421857][ T8022] hsr_slave_0: entered promiscuous mode [ 207.428865][ T8022] hsr_slave_1: entered promiscuous mode [ 207.435681][ T8022] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 207.446454][ T8022] Cannot create hsr debugfs directory [ 207.486580][ T2989] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.530756][ T8048] team0: Port device team_slave_1 added [ 207.770021][ T8048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.797494][ T8048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.841234][ T5879] cp2112 0003:10C4:EA90.000C: unknown main item tag 0x0 [ 207.859166][ T8048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.875488][ T5879] cp2112 0003:10C4:EA90.000C: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 207.900723][ T8048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.907745][ T8048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.940445][ T8048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.042067][ T5879] cp2112 0003:10C4:EA90.000C: error requesting version [ 208.052943][ T5879] cp2112 0003:10C4:EA90.000C: probe with driver cp2112 failed with error -71 [ 208.071398][ T5879] usb 2-1: USB disconnect, device number 13 [ 208.242772][ T8048] hsr_slave_0: entered promiscuous mode [ 208.268890][ T8048] hsr_slave_1: entered promiscuous mode [ 208.275122][ T8048] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 208.296263][ T8048] Cannot create hsr debugfs directory [ 208.303038][ T5826] Bluetooth: hci0: command tx timeout [ 208.311153][ T2989] bridge_slave_1: left allmulticast mode [ 208.316875][ T2989] bridge_slave_1: left promiscuous mode [ 208.326599][ T2989] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.335613][ T2989] bridge_slave_0: left allmulticast mode [ 208.342008][ T2989] bridge_slave_0: left promiscuous mode [ 208.347756][ T2989] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.834085][ T30] audit: type=1326 audit(1733790932.938:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8205 comm="syz.5.741" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f439057fed9 code=0x0 [ 208.910835][ T2989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.923266][ T2989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.938504][ T2989] bond0 (unregistering): Released all slaves [ 209.108584][ T5826] Bluetooth: hci2: command tx timeout [ 209.141089][ T8022] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 209.175154][ T8022] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 209.260282][ T5840] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 209.314146][ T8022] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 209.334118][ T8022] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 209.387433][ T2989] hsr_slave_0: left promiscuous mode [ 209.394124][ T2989] hsr_slave_1: left promiscuous mode [ 209.404125][ T2989] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.413696][ T2989] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.423208][ T2989] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.431332][ T2989] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.453980][ T2989] veth1_macvtap: left promiscuous mode [ 209.459967][ T2989] veth0_macvtap: left promiscuous mode [ 209.465727][ T2989] veth1_vlan: left promiscuous mode [ 209.473790][ T2989] veth0_vlan: left promiscuous mode [ 210.103781][ T8222] netlink: 'syz.1.745': attribute type 4 has an invalid length. [ 210.162545][ T8224] netlink: 'syz.1.745': attribute type 4 has an invalid length. [ 210.602775][ T2989] team0 (unregistering): Port device team_slave_1 removed [ 210.657866][ T2989] team0 (unregistering): Port device team_slave_0 removed [ 211.683216][ T8022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.714760][ T8022] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.827718][ T6992] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.834932][ T6992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.902143][ T6992] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.909457][ T6992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.393165][ T8048] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 212.448088][ T8048] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 212.484720][ T8048] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 212.524047][ T8048] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 212.771616][ T8022] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.910551][ T8048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.927079][ T8048] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.964384][ T8048] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 212.975588][ T8048] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 212.990652][ T2989] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.998099][ T2989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.056058][ T2989] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.063269][ T2989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.626584][ T8048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.846807][ T8048] veth0_vlan: entered promiscuous mode [ 213.890488][ T8022] veth0_vlan: entered promiscuous mode [ 213.958998][ T8048] veth1_vlan: entered promiscuous mode [ 213.991016][ T8022] veth1_vlan: entered promiscuous mode [ 214.066986][ T8048] veth0_macvtap: entered promiscuous mode [ 214.107303][ T8048] veth1_macvtap: entered promiscuous mode [ 214.156736][ T8022] veth0_macvtap: entered promiscuous mode [ 214.187186][ T8048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.207143][ T8048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.230277][ T8048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.257971][ T8048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.281206][ T8048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.294987][ T8048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.316321][ T8048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.329422][ T8048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.341844][ T8048] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.353800][ T8022] veth1_macvtap: entered promiscuous mode [ 214.433557][ T8048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.471457][ T8048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.498465][ T8048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.532060][ T8048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.565909][ T8048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.588413][ T8048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.615846][ T8048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.637805][ T8048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.660537][ T8048] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.682505][ T8022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.693040][ T8330] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 214.698553][ T8330] netlink: 8 bytes leftover after parsing attributes in process `syz.1.769'. [ 214.721800][ T8022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.736806][ T8022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.757621][ T8022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.767902][ T8022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.778745][ T8022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.788995][ T8022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.799889][ T8022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.810823][ T8022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.824243][ T8022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.835999][ T8022] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.854320][ T8330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.868507][ T8330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.881116][ T8330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.894064][ T8330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.904829][ T8330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.916555][ T8330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.934991][ T8330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.950740][ T8330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.966484][ T8330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.987291][ T8330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.016868][ T8022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.048382][ T8022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.058774][ T8022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.069625][ T8022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.080212][ T8022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.091177][ T8022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.102093][ T8022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.113236][ T8022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.124299][ T8022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.138400][ T8022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.153837][ T8022] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.191669][ T8048] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.223199][ T8048] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.252865][ T8048] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.269881][ T8048] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.292392][ T8022] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.318308][ T8022] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.328480][ T8022] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.339416][ T8022] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.496190][ T30] audit: type=1400 audit(1733790939.598:37): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=8343 comm="syz.1.775" [ 215.524455][ T8342] block nbd2: shutting down sockets [ 215.668131][ T3555] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.685858][ T3555] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.756522][ T6992] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.785025][ T6992] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.837128][ T8349] netlink: 60 bytes leftover after parsing attributes in process `syz.1.776'. [ 215.880627][ T3555] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.907467][ T3555] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.208669][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.233890][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.624369][ T8377] netlink: 'syz.1.781': attribute type 10 has an invalid length. [ 216.719125][ T8377] team0: Port device netdevsim0 removed [ 216.739063][ T8377] bond0: (slave netdevsim0): no link monitoring support [ 216.747059][ T8377] bond0: (slave netdevsim0): MII and ETHTOOL support not available for slave, and arp_interval/arp_ip_target module parameters not specified, thus bonding will not detect link failures! see bonding.txt for details [ 216.788402][ T5881] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 216.798872][ T8377] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 216.978922][ T5881] usb 7-1: Using ep0 maxpacket: 32 [ 217.008682][ T5881] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 217.025482][ T2989] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.037314][ T5881] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 217.053779][ T5881] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 217.083764][ T5881] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 217.112469][ T5881] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.152704][ T5881] usb 7-1: config 0 descriptor?? [ 217.158703][ T8373] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 217.196526][ T5881] hub 7-1:0.0: USB hub found [ 217.299675][ T2989] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.414665][ T5881] hub 7-1:0.0: 2 ports detected [ 217.423156][ T2989] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.533042][ T2989] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.738489][ T5826] Bluetooth: hci3: command 0x0406 tx timeout [ 217.795845][ T2989] bridge_slave_1: left allmulticast mode [ 217.817218][ T2989] bridge_slave_1: left promiscuous mode [ 217.824076][ T5881] hub 7-1:0.0: set hub depth failed [ 217.838845][ T2989] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.867584][ T5881] usb 7-1: USB disconnect, device number 2 [ 217.899720][ T2989] bridge_slave_0: left allmulticast mode [ 217.905849][ T8401] vivid-000: disconnect [ 217.908338][ T2989] bridge_slave_0: left promiscuous mode [ 217.915885][ T2989] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.945776][ T8398] vivid-000: reconnect [ 218.341812][ T8409] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 218.351815][ T5881] IPVS: starting estimator thread 0... [ 218.470986][ T5826] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 218.482769][ T5826] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 218.490063][ T8411] IPVS: using max 19 ests per chain, 45600 per kthread [ 218.505622][ T5826] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 218.552274][ T5826] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 218.568726][ T5826] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 218.578614][ T5826] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 219.796602][ T2989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.866427][ T2989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.954940][ T2989] bond0 (unregistering): Released all slaves [ 220.461828][ T8462] Illegal XDP return value 4294967294 on prog (id 123) dev N/A, expect packet loss! [ 220.619092][ T5840] Bluetooth: hci2: command tx timeout [ 221.082591][ T8485] vivid-007: disconnect [ 221.475441][ T2989] hsr_slave_0: left promiscuous mode [ 221.490426][ T2989] hsr_slave_1: left promiscuous mode [ 221.529266][ T2989] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.542775][ T2989] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.609414][ T2989] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.647357][ T8477] vivid-007: reconnect [ 221.651775][ T2989] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.692477][ T8497] block device autoloading is deprecated and will be removed. [ 221.752134][ T2989] veth1_macvtap: left promiscuous mode [ 221.780577][ T2989] veth0_macvtap: left promiscuous mode [ 221.798449][ T2989] veth1_vlan: left promiscuous mode [ 221.803810][ T2989] veth0_vlan: left promiscuous mode [ 222.708545][ T5840] Bluetooth: hci2: command tx timeout [ 222.718949][ T2989] team0 (unregistering): Port device team_slave_1 removed [ 222.766102][ T2989] team0 (unregistering): Port device team_slave_0 removed [ 223.353990][ T8415] chnl_net:caif_netlink_parms(): no params data found [ 223.698655][ T8529] kvm: MONITOR instruction emulated as NOP! [ 223.836715][ T8415] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.846771][ T8415] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.854128][ T8415] bridge_slave_0: entered allmulticast mode [ 223.861887][ T8415] bridge_slave_0: entered promiscuous mode [ 223.869753][ T8415] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.876973][ T8415] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.884250][ T8415] bridge_slave_1: entered allmulticast mode [ 223.891422][ T8415] bridge_slave_1: entered promiscuous mode [ 224.085105][ T8415] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.138037][ T8415] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.249320][ T8415] team0: Port device team_slave_0 added [ 224.272264][ T8415] team0: Port device team_slave_1 added [ 224.420101][ T8415] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.448593][ T8415] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.556607][ T8415] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.660880][ T8415] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.710430][ T8415] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.772655][ T8415] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.783622][ T5840] Bluetooth: hci2: command tx timeout [ 224.995798][ T8415] hsr_slave_0: entered promiscuous mode [ 225.040689][ T8415] hsr_slave_1: entered promiscuous mode [ 225.098774][ T8415] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 225.132636][ T8415] Cannot create hsr debugfs directory [ 225.487511][ T8580] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 226.734555][ T30] audit: type=1400 audit(1733790950.848:38): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=8628 comm="syz.5.849" daddr=::ffff:0.0.0.0 dest=20011 [ 226.811216][ T8415] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 226.858626][ T5840] Bluetooth: hci2: command tx timeout [ 226.872549][ T8415] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 226.938220][ T8415] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 226.993798][ T8415] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 227.090043][ T8415] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.161669][ T8415] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.231968][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.239157][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.305547][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.312739][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.690704][ T5879] kernel write not supported for file /556/projid_map (pid: 5879 comm: kworker/0:4) [ 227.893547][ T8415] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.069735][ T8415] veth0_vlan: entered promiscuous mode [ 228.109263][ T8415] veth1_vlan: entered promiscuous mode [ 228.220363][ T8415] veth0_macvtap: entered promiscuous mode [ 228.240201][ T8415] veth1_macvtap: entered promiscuous mode [ 228.313233][ T8415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.324139][ T8415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.334887][ T8415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.346166][ T8415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.356448][ T8415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.367215][ T8415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.377406][ T8415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.388433][ T8415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.398609][ T8415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.409364][ T8415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.427023][ T8415] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.437975][ T8415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.448551][ T8415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.458993][ T8415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.470126][ T8415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.480045][ T8415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.490593][ T8415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.500612][ T8415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.511150][ T8415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.521069][ T8415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.532178][ T8415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.543862][ T8415] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.553860][ T8415] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.562712][ T8415] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.571533][ T8415] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.580361][ T8415] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.006023][ T6992] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.055696][ T6992] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.130645][ T6992] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.166206][ T6992] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.892422][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.021857][ T5879] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 231.023399][ T5836] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 231.198591][ T5836] usb 3-1: Using ep0 maxpacket: 8 [ 231.200336][ T5879] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 231.207516][ T5836] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 231.218482][ T5879] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 231.232153][ T5836] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.253777][ T5879] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 231.259805][ T5836] usb 3-1: config 0 descriptor?? [ 231.263878][ T5879] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.281210][ T5879] usb 2-1: Product: syz [ 231.285430][ T5879] usb 2-1: Manufacturer: syz [ 231.290185][ T5879] usb 2-1: SerialNumber: syz [ 231.335074][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.430550][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.563636][ T5879] usb 2-1: 0:2 : does not exist [ 231.578408][ T5879] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 231.599705][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.612125][ T5879] usb 2-1: USB disconnect, device number 14 [ 231.831329][ T6259] udevd[6259]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 232.052366][ T12] bridge_slave_1: left allmulticast mode [ 232.058113][ T12] bridge_slave_1: left promiscuous mode [ 232.075324][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.107229][ T12] bridge_slave_0: left allmulticast mode [ 232.118642][ T12] bridge_slave_0: left promiscuous mode [ 232.124519][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.511203][ T5826] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 232.540080][ T5826] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 232.556083][ T5826] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 232.582003][ T5826] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 232.591532][ T5826] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 232.614722][ T5826] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 232.704451][ T5836] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 232.715056][ T5836] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 232.729784][ T5836] asix 3-1:0.0: probe with driver asix failed with error -71 [ 232.752723][ T5836] usb 3-1: USB disconnect, device number 8 [ 233.227560][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 233.248443][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 233.260726][ T12] bond0 (unregistering): Released all slaves [ 234.359955][ T8809] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 234.367854][ T8809] overlayfs: failed to set xattr on upper [ 234.375161][ T8809] overlayfs: ...falling back to redirect_dir=nofollow. [ 234.454295][ T12] hsr_slave_0: left promiscuous mode [ 234.523542][ T8812] netlink: 16 bytes leftover after parsing attributes in process `syz.1.898'. [ 234.565504][ T12] hsr_slave_1: left promiscuous mode [ 234.586550][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.595470][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.604810][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.652164][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.698385][ T5826] Bluetooth: hci2: command tx timeout [ 234.719991][ T12] veth1_macvtap: left promiscuous mode [ 234.725725][ T12] veth0_macvtap: left promiscuous mode [ 234.734804][ T12] veth1_vlan: left promiscuous mode [ 234.740446][ T12] veth0_vlan: left promiscuous mode [ 235.889012][ T12] team0 (unregistering): Port device team_slave_1 removed [ 236.072735][ T12] team0 (unregistering): Port device team_slave_0 removed [ 236.781314][ T5826] Bluetooth: hci2: command tx timeout [ 237.035814][ T8812] netlink: 'syz.1.898': attribute type 1 has an invalid length. [ 237.046987][ T8812] netlink: 36 bytes leftover after parsing attributes in process `syz.1.898'. [ 237.440732][ T8880] netlink: 4 bytes leftover after parsing attributes in process `syz.2.917'. [ 237.620402][ T8764] chnl_net:caif_netlink_parms(): no params data found [ 237.648601][ T5906] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 237.808402][ T5906] usb 6-1: Using ep0 maxpacket: 32 [ 237.820429][ T5906] usb 6-1: config 0 has an invalid interface number: 12 but max is 0 [ 237.828935][ T5906] usb 6-1: config 0 has no interface number 0 [ 237.835080][ T5906] usb 6-1: config 0 interface 12 has no altsetting 0 [ 237.883987][ T5906] usb 6-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 237.915447][ T5906] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.948132][ T5906] usb 6-1: Product: syz [ 237.958369][ T5906] usb 6-1: Manufacturer: syz [ 237.963182][ T5906] usb 6-1: SerialNumber: syz [ 237.989313][ T5906] usb 6-1: config 0 descriptor?? [ 238.296690][ T8764] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.325101][ T8764] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.333030][ T8764] bridge_slave_0: entered allmulticast mode [ 238.341079][ T8764] bridge_slave_0: entered promiscuous mode [ 238.348992][ T8764] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.356191][ T8764] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.364501][ T8764] bridge_slave_1: entered allmulticast mode [ 238.371664][ T8764] bridge_slave_1: entered promiscuous mode [ 238.426726][ T8764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.455301][ T8764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.553368][ T8764] team0: Port device team_slave_0 added [ 238.579285][ T8764] team0: Port device team_slave_1 added [ 238.608620][ T5836] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 238.691575][ T8764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.702816][ T8764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.733550][ T8764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.746710][ T8764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.754076][ T8764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.782203][ T8764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.825252][ T5836] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 238.845757][ T5836] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 238.868381][ T5826] Bluetooth: hci2: command tx timeout [ 238.876555][ T5836] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 238.885270][ T8764] hsr_slave_0: entered promiscuous mode [ 238.885964][ T5836] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.900814][ T5836] usb 3-1: Product: syz [ 238.901983][ T8764] hsr_slave_1: entered promiscuous mode [ 238.905085][ T5836] usb 3-1: Manufacturer: syz [ 238.915826][ T5836] usb 3-1: SerialNumber: syz [ 238.925710][ T8764] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 238.939919][ T8764] Cannot create hsr debugfs directory [ 239.156664][ T5836] usb 3-1: 0:2 : does not exist [ 239.179087][ T5836] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 239.241444][ T5836] usb 3-1: USB disconnect, device number 9 [ 239.428519][ T5906] f81534 6-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -71 [ 239.436977][ T5906] f81534 6-1:0.12: f81534_find_config_idx: read failed: -71 [ 239.452827][ T5906] f81534 6-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 239.471411][ T5906] f81534 6-1:0.12: probe with driver f81534 failed with error -71 [ 239.501523][ T5906] usb 6-1: USB disconnect, device number 4 [ 239.513791][ T6259] udevd[6259]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 239.942471][ T29] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.197553][ T29] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.358679][ T30] audit: type=1400 audit(1733790964.478:39): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=8954 comm="syz.2.936" daddr=::ffff:172.20.20.37 [ 240.592523][ T29] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.769607][ T29] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.899333][ T8972] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 240.921840][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 240.927614][ T8972] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 240.938345][ T5834] Bluetooth: hci2: command tx timeout [ 240.939002][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 240.952738][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 240.978547][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 240.987293][ T5840] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 240.995188][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 241.177224][ T8764] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 241.270555][ T8764] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 241.291462][ T8764] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 241.502792][ T8764] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 241.526942][ T29] bridge_slave_1: left allmulticast mode [ 241.544059][ T29] bridge_slave_1: left promiscuous mode [ 241.596629][ T29] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.708573][ T29] bridge_slave_0: left allmulticast mode [ 241.714527][ T29] bridge_slave_0: left promiscuous mode [ 241.721958][ T29] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.888602][ T5881] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 242.048442][ T5881] usb 2-1: device descriptor read/64, error -71 [ 242.369830][ T29] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 242.390195][ T29] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 242.406138][ T29] bond0 (unregistering): Released all slaves [ 242.756707][ T9026] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 242.799519][ T9026] overlayfs: failed to set xattr on upper [ 242.805329][ T9026] overlayfs: ...falling back to redirect_dir=nofollow. [ 242.853820][ T9026] overlayfs: ...falling back to index=off. [ 242.888485][ T9026] overlayfs: ...falling back to uuid=null. [ 242.899557][ T9026] overlayfs: ...falling back to xino=off. [ 243.018538][ T5826] Bluetooth: hci0: command tx timeout [ 243.109415][ T8971] chnl_net:caif_netlink_parms(): no params data found [ 243.187352][ T29] hsr_slave_0: left promiscuous mode [ 243.206466][ T29] hsr_slave_1: left promiscuous mode [ 243.222034][ T29] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.235026][ T29] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.246938][ T29] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.265014][ T29] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.291265][ T29] veth1_macvtap: left promiscuous mode [ 243.296842][ T29] veth0_macvtap: left promiscuous mode [ 243.303076][ T29] veth1_vlan: left promiscuous mode [ 243.308533][ T29] veth0_vlan: left promiscuous mode [ 243.844659][ T29] team0 (unregistering): Port device team_slave_1 removed [ 243.896758][ T29] team0 (unregistering): Port device team_slave_0 removed [ 244.547833][ T8764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.573340][ T8764] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.605277][ T8764] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 244.616290][ T8764] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 244.636537][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.643724][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.663182][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.670375][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.072426][ T8971] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.093997][ T8971] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.103014][ T5826] Bluetooth: hci0: command tx timeout [ 245.121722][ T8971] bridge_slave_0: entered allmulticast mode [ 245.133582][ T8971] bridge_slave_0: entered promiscuous mode [ 245.189778][ T8971] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.198586][ T8971] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.205824][ T8971] bridge_slave_1: entered allmulticast mode [ 245.251318][ T9086] netlink: 'syz.1.966': attribute type 1 has an invalid length. [ 245.259860][ T8971] bridge_slave_1: entered promiscuous mode [ 245.444544][ T8971] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.618410][ T8764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.637379][ T8971] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.697533][ T9097] netlink: 'syz.1.970': attribute type 10 has an invalid length. [ 245.759194][ T9097] syz_tun: entered promiscuous mode [ 245.809049][ T9097] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 245.853919][ T8971] team0: Port device team_slave_0 added [ 245.871354][ T8971] team0: Port device team_slave_1 added [ 245.888531][ T838] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 245.965573][ T8764] veth0_vlan: entered promiscuous mode [ 245.995279][ T8971] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.018690][ T8971] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.074320][ T838] usb 6-1: Using ep0 maxpacket: 16 [ 246.083654][ T8971] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.095234][ T838] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 246.104702][ T838] usb 6-1: config 0 has no interface number 0 [ 246.116901][ T8971] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.127230][ T8971] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.178290][ T838] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=29.82 [ 246.187641][ T838] usb 6-1: New USB device strings: Mfr=83, Product=5, SerialNumber=10 [ 246.198088][ T8971] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.212268][ T838] usb 6-1: Product: syz [ 246.216477][ T838] usb 6-1: Manufacturer: syz [ 246.244471][ T838] usb 6-1: SerialNumber: syz [ 246.274814][ T838] usb 6-1: config 0 descriptor?? [ 246.294866][ T8764] veth1_vlan: entered promiscuous mode [ 246.306285][ T838] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 246.364868][ T8971] hsr_slave_0: entered promiscuous mode [ 246.377575][ T838] snd-usb-audio 6-1:0.1: probe with driver snd-usb-audio failed with error -2 [ 246.401133][ T8971] hsr_slave_1: entered promiscuous mode [ 246.421433][ T8971] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 246.451616][ T8971] Cannot create hsr debugfs directory [ 246.515297][ T5841] udevd[5841]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 246.552282][ T838] usb 6-1: USB disconnect, device number 5 [ 246.740739][ T8764] veth0_macvtap: entered promiscuous mode [ 246.823420][ T9126] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 246.834177][ T8764] veth1_macvtap: entered promiscuous mode [ 246.847064][ T9126] overlayfs: failed to set xattr on upper [ 246.853469][ T9126] overlayfs: ...falling back to redirect_dir=nofollow. [ 246.863046][ T9126] overlayfs: ...falling back to metacopy=off. [ 246.870971][ T9126] overlayfs: ...falling back to uuid=null. [ 246.914377][ T8764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.962316][ T8764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.987467][ T8764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.001941][ T8764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.039256][ T8764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.058284][ T8764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.088445][ T8764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 247.103386][ T8764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.115083][ T8764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.134121][ T8764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.162870][ T8764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.178497][ T5826] Bluetooth: hci0: command tx timeout [ 247.191188][ T8764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.226071][ T8764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.247511][ T8764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.268715][ T8764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.288427][ T8764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.309468][ T8764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.361963][ T8764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.434751][ T8764] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.467624][ T8764] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.487800][ T8764] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.508163][ T8764] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.717101][ T8971] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 247.765577][ T8971] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 247.816958][ T3555] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.856494][ T3555] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.945740][ T8971] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 247.997978][ T8971] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 248.044544][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.088548][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.286283][ T8971] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.381688][ T8971] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.593018][ T2989] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.600673][ T2989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.661485][ T8971] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 248.672127][ T8971] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 248.739270][ T29] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.746441][ T29] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.029085][ T6993] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.169125][ T6993] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.230360][ T8971] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.260829][ T5826] Bluetooth: hci0: command tx timeout [ 249.284257][ T6993] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.432437][ T6993] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.654463][ T6993] bridge_slave_1: left allmulticast mode [ 249.669696][ T6993] bridge_slave_1: left promiscuous mode [ 249.675524][ T6993] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.700657][ T6993] bridge_slave_0: left allmulticast mode [ 249.706374][ T6993] bridge_slave_0: left promiscuous mode [ 249.713942][ T6993] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.387588][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 250.405178][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 250.415369][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 250.424078][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 250.439793][ T5840] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 250.453268][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 250.776815][ T6993] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.793122][ T6993] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.803648][ T6993] bond0 (unregistering): Released all slaves [ 251.043406][ T9245] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 251.966078][ T9277] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 252.298354][ T5909] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 252.468577][ T5909] usb 6-1: Using ep0 maxpacket: 32 [ 252.504458][ T5909] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.530536][ T5909] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.545742][ T5909] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 252.557714][ T5909] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.577198][ T5909] usb 6-1: config 0 descriptor?? [ 252.589108][ T5909] hub 6-1:0.0: USB hub found [ 252.615650][ T9289] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1013'. [ 252.633845][ T5840] Bluetooth: hci2: command tx timeout [ 252.813563][ T5909] hub 6-1:0.0: 1 port detected [ 253.830341][ T5909] hub 6-1:0.0: hub_hub_status failed (err = -32) [ 253.837367][ T5909] hub 6-1:0.0: config failed, can't get hub status (err -32) [ 253.851389][ T5909] usbhid 6-1:0.0: can't add hid device: -32 [ 253.857723][ T5909] usbhid 6-1:0.0: probe with driver usbhid failed with error -32 [ 253.910437][ T5909] usb 6-1: USB disconnect, device number 6 [ 254.574431][ T6993] hsr_slave_0: left promiscuous mode [ 254.592279][ T6993] hsr_slave_1: left promiscuous mode [ 254.666177][ T6993] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.696141][ T6993] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.703680][ T5840] Bluetooth: hci2: command tx timeout [ 254.730771][ T6993] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.748747][ T6993] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.794865][ T6993] veth1_macvtap: left promiscuous mode [ 254.815075][ T6993] veth0_macvtap: left promiscuous mode [ 254.856305][ T6993] veth1_vlan: left promiscuous mode [ 254.872708][ T5878] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 254.912923][ T6993] veth0_vlan: left promiscuous mode [ 255.148510][ T5878] usb 6-1: Using ep0 maxpacket: 16 [ 255.457535][ T5878] usb 6-1: unable to get BOS descriptor or descriptor too short [ 255.507808][ T5878] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 255.526424][ T5878] usb 6-1: can't read configurations, error -71 [ 256.419050][ T9356] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 256.778567][ T5840] Bluetooth: hci2: command tx timeout [ 256.860756][ T6993] team0 (unregistering): Port device team_slave_1 removed [ 257.030445][ T6993] team0 (unregistering): Port device team_slave_0 removed [ 258.151684][ T8971] veth0_vlan: entered promiscuous mode [ 258.319749][ T8971] veth1_vlan: entered promiscuous mode [ 258.443028][ T9228] chnl_net:caif_netlink_parms(): no params data found [ 258.461409][ T9395] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 258.634720][ T8971] veth0_macvtap: entered promiscuous mode [ 258.727023][ T9403] syzkaller0: entered promiscuous mode [ 258.732732][ T9403] syzkaller0: entered allmulticast mode [ 258.796034][ T8971] veth1_macvtap: entered promiscuous mode [ 258.859122][ T5840] Bluetooth: hci2: command tx timeout [ 259.043717][ T5909] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 259.205279][ T5909] usb 2-1: Using ep0 maxpacket: 32 [ 259.237884][ T5909] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 259.247419][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.258443][ T5909] usb 2-1: Product: syz [ 259.262691][ T5909] usb 2-1: Manufacturer: syz [ 259.267318][ T5909] usb 2-1: SerialNumber: syz [ 259.283448][ T5909] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 260.146214][ T5909] gspca_stk1135: reg_w 0x5 err -71 [ 260.160909][ T5909] gspca_stk1135: serial bus timeout: status=0x00 [ 260.167353][ T5909] gspca_stk1135: Sensor write failed [ 260.178381][ T5909] gspca_stk1135: serial bus timeout: status=0x00 [ 260.185362][ T5909] gspca_stk1135: Sensor write failed [ 260.191690][ T5909] gspca_stk1135: serial bus timeout: status=0x00 [ 260.198414][ T5909] gspca_stk1135: Sensor read failed [ 260.203676][ T5909] gspca_stk1135: serial bus timeout: status=0x00 [ 260.211370][ T5909] gspca_stk1135: Sensor read failed [ 260.216637][ T5909] gspca_stk1135: Detected sensor type unknown (0x0) [ 260.223898][ T5909] gspca_stk1135: serial bus timeout: status=0x00 [ 260.231581][ T5909] gspca_stk1135: Sensor read failed [ 260.236882][ T5909] gspca_stk1135: serial bus timeout: status=0x00 [ 260.246435][ T5909] gspca_stk1135: Sensor read failed [ 260.252080][ T5909] gspca_stk1135: serial bus timeout: status=0x00 [ 260.258772][ T5909] gspca_stk1135: Sensor write failed [ 260.264122][ T5909] gspca_stk1135: serial bus timeout: status=0x00 [ 260.271674][ T5909] gspca_stk1135: Sensor write failed [ 260.281465][ T5909] stk1135 2-1:64.0: probe with driver stk1135 failed with error -71 [ 260.312092][ T5909] usb 2-1: USB disconnect, device number 17 [ 261.084653][ T9427] gretap0: entered promiscuous mode [ 261.092347][ T9427] vlan2: entered promiscuous mode [ 261.149953][ T9228] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.170272][ T9228] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.177910][ T9228] bridge_slave_0: entered allmulticast mode [ 261.216562][ T9228] bridge_slave_0: entered promiscuous mode [ 261.226358][ T9228] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.251024][ T9228] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.260018][ T9228] bridge_slave_1: entered allmulticast mode [ 261.260969][ T9432] tipc: Failed to remove unknown binding: 66,1,1/0:3307551403/3307551405 [ 261.267115][ T9228] bridge_slave_1: entered promiscuous mode [ 261.295707][ T8971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.310901][ T9430] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 261.318000][ T8971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.328073][ T9430] overlayfs: failed to set xattr on upper [ 261.334574][ T9430] overlayfs: ...falling back to redirect_dir=nofollow. [ 261.341944][ T8971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.348575][ T9430] overlayfs: ...falling back to index=off. [ 261.358882][ T9430] overlayfs: ...falling back to uuid=null. [ 261.374910][ T8971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.394977][ T8971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.414485][ T8971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.429824][ T8971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 261.445832][ T8971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.458068][ T8971] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.510046][ T8971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.530749][ T8971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.558808][ T8971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.588523][ T8971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.612089][ T8971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.643959][ T8971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.688322][ T8971] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 261.708779][ T8971] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.727127][ T8971] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.742132][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.792976][ T9228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.820811][ T8971] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.838297][ T8971] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.847066][ T8971] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.875542][ T8971] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.899600][ T9228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.030816][ T9228] team0: Port device team_slave_0 added [ 262.089933][ T9228] team0: Port device team_slave_1 added [ 262.159281][ T9228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.166297][ T9228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.196933][ T9228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.232709][ T9228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.241251][ T9228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.268066][ T9228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.290613][ T6993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.312160][ T6993] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.386255][ T2989] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.405310][ T9228] hsr_slave_0: entered promiscuous mode [ 262.414358][ T2989] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.430966][ T9228] hsr_slave_1: entered promiscuous mode [ 262.445347][ T9228] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 262.453636][ T9228] Cannot create hsr debugfs directory [ 263.370958][ T5836] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 263.528578][ T5836] usb 3-1: Using ep0 maxpacket: 16 [ 263.535628][ T5836] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 263.580058][ T5836] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 263.599991][ T5836] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.608063][ T5836] usb 3-1: Product: syz [ 263.612962][ T5836] usb 3-1: Manufacturer: syz [ 263.617603][ T5836] usb 3-1: SerialNumber: syz [ 263.632527][ T5836] r8152-cfgselector 3-1: Unknown version 0x0000 [ 264.011521][ T9228] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 264.101760][ T9228] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 264.127552][ T5879] r8152-cfgselector 3-1: USB disconnect, device number 10 [ 264.245610][ T9228] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 264.324367][ T9228] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 264.532478][ T9228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.585639][ T9228] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.633702][ T29] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.640928][ T29] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.709776][ T6993] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.716936][ T6993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.374557][ T9228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.500682][ T9549] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 265.560824][ T9228] veth0_vlan: entered promiscuous mode [ 265.624482][ T9228] veth1_vlan: entered promiscuous mode [ 265.761241][ T9228] veth0_macvtap: entered promiscuous mode [ 265.795600][ T9228] veth1_macvtap: entered promiscuous mode [ 265.869595][ T9560] netlink: 'syz.7.1065': attribute type 4 has an invalid length. [ 265.943205][ T9562] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1067'. [ 265.947182][ T9228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.960452][ T9560] netlink: 'syz.7.1065': attribute type 4 has an invalid length. [ 265.974902][ T9228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.985093][ T9228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.997129][ T9228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.008505][ T9228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.021091][ T9228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.031513][ T9228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.031654][ T9567] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1067'. [ 266.053258][ T9228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.064292][ T9228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.075411][ T9228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.087645][ T9228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.135632][ T9562] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1067'. [ 266.185913][ T9228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.209952][ T9228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.242746][ T9228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.261263][ T9228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.271441][ T9228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.282301][ T9228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.317699][ T9228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.339697][ T9228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.351874][ T9228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.362473][ T9228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.373807][ T9228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.392166][ T9574] netlink: 120 bytes leftover after parsing attributes in process `syz.7.1069'. [ 266.402355][ T9574] tc_dump_action: action bad kind [ 266.417253][ T9228] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.434164][ T9228] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.443378][ T9228] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.453845][ T9228] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.559233][ T9577] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1070'. [ 266.672549][ T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.708509][ T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.782642][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.834664][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.200800][ T9596] input input20: cannot allocate more than FF_MAX_EFFECTS effects [ 267.298386][ T1205] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 267.468771][ T5879] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 267.470838][ T1205] usb 2-1: config 0 interface 0 has no altsetting 0 [ 267.498335][ T1205] usb 2-1: New USB device found, idVendor=0451, idProduct=f430, bcdDevice=42.7a [ 267.519468][ T1205] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.552518][ T1205] usb 2-1: config 0 descriptor?? [ 267.570175][ T1205] ti_usb_3410_5052 2-1:0.0: required endpoints missing [ 267.628438][ T5879] usb 3-1: Using ep0 maxpacket: 16 [ 267.649490][ T5879] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 267.663787][ T5879] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 267.677316][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.686479][ T5879] usb 3-1: Product: syz [ 267.692159][ T5879] usb 3-1: Manufacturer: syz [ 267.696967][ T5879] usb 3-1: SerialNumber: syz [ 267.701760][ T5878] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 267.758851][ T5879] usb 3-1: config 0 descriptor?? [ 267.811772][ T5879] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 267.820663][ T29] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.884108][ T5878] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 267.904971][ T5878] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 267.926275][ T5878] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 267.948727][ T5878] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.957876][ T5878] usb 8-1: Product: syz [ 267.963082][ T5878] usb 8-1: Manufacturer: syz [ 267.969068][ T5878] usb 8-1: SerialNumber: syz [ 268.027803][ T838] usb 3-1: USB disconnect, device number 11 [ 268.043682][ T5879] usb 2-1: USB disconnect, device number 18 [ 268.049263][ T2989] usb 3-1: Failed to submit usb control message: -71 [ 268.057835][ T2989] usb 3-1: unable to send the bmi data to the device: -71 [ 268.120480][ T2989] usb 3-1: unable to get target info from device [ 268.131007][ T2989] usb 3-1: could not get target info (-71) [ 268.137274][ T2989] usb 3-1: could not probe fw (-71) [ 268.288627][ T5878] usb 8-1: 0:2 : does not exist [ 268.295628][ T29] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.301157][ T5878] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 268.344271][ T5878] usb 8-1: USB disconnect, device number 2 [ 268.431515][ T29] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.539869][ T5841] udevd[5841]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 268.667190][ T29] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.884989][ T29] bridge_slave_1: left allmulticast mode [ 268.894525][ T29] bridge_slave_1: left promiscuous mode [ 268.908600][ T29] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.928976][ T29] bridge_slave_0: left allmulticast mode [ 268.934720][ T29] bridge_slave_0: left promiscuous mode [ 268.941376][ T29] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.171205][ T9641] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 269.191590][ T9641] overlayfs: failed to set xattr on upper [ 269.197413][ T9641] overlayfs: ...falling back to redirect_dir=nofollow. [ 269.241425][ T9641] overlayfs: ...falling back to metacopy=off. [ 269.287799][ T9641] overlayfs: ...falling back to index=off. [ 269.318506][ T9641] overlayfs: ...falling back to uuid=null. [ 269.479304][ T9652] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1082'. [ 269.572508][ T30] audit: type=1400 audit(1733790993.688:40): lsm=SMACK fn=smk_ipv6_check action=denied subject="_" object="]-{" requested=w pid=9653 comm="syz.5.1083" [ 269.849281][ T5826] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 269.868916][ T5826] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 269.880936][ T5826] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 269.913256][ T5826] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 269.928154][ T5826] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 269.937587][ T5826] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 270.045516][ T5878] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 270.147524][ T29] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 270.162584][ T29] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 270.172838][ T29] bond0 (unregistering): Released all slaves [ 270.210296][ T9669] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 270.215434][ T5878] usb 6-1: Using ep0 maxpacket: 8 [ 270.217586][ T9669] IPv6: NLM_F_CREATE should be set when creating new route [ 270.229964][ T9669] IPv6: NLM_F_CREATE should be set when creating new route [ 270.256020][ T5878] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 270.288371][ T5878] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.327481][ T5878] usb 6-1: config 0 descriptor?? [ 270.664558][ T9673] batadv_slave_1: entered promiscuous mode [ 270.760201][ T9674] batadv_slave_1: left promiscuous mode [ 271.312299][ T29] hsr_slave_0: left promiscuous mode [ 271.321439][ T29] hsr_slave_1: left promiscuous mode [ 271.328937][ T29] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.355519][ T29] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.366141][ T29] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.380381][ T29] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.425177][ T29] veth1_macvtap: left promiscuous mode [ 271.439698][ T29] veth0_macvtap: left promiscuous mode [ 271.451876][ T29] veth1_vlan: left promiscuous mode [ 271.467420][ T29] veth0_vlan: left promiscuous mode [ 271.539207][ T1205] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 271.712454][ T1205] usb 3-1: Using ep0 maxpacket: 32 [ 271.760451][ T1205] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 271.778445][ T1205] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.786501][ T1205] usb 3-1: Product: syz [ 271.804035][ T1205] usb 3-1: Manufacturer: syz [ 271.811396][ T1205] usb 3-1: SerialNumber: syz [ 271.836479][ T1205] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 271.980159][ T5840] Bluetooth: hci2: command tx timeout [ 272.014041][ T5878] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 272.046923][ T5878] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 272.097548][ T5878] asix 6-1:0.0: probe with driver asix failed with error -71 [ 272.127097][ T5878] usb 6-1: USB disconnect, device number 9 [ 272.658948][ T1205] gspca_stk1135: reg_w 0x0 err -110 [ 272.666588][ T1205] gspca_stk1135: serial bus timeout: status=0x00 [ 272.694306][ T1205] gspca_stk1135: Sensor write failed [ 272.718570][ T1205] gspca_stk1135: serial bus timeout: status=0x00 [ 272.744984][ T1205] gspca_stk1135: Sensor write failed [ 272.785046][ T1205] gspca_stk1135: serial bus timeout: status=0x00 [ 272.819029][ T1205] gspca_stk1135: Sensor read failed [ 272.846816][ T1205] gspca_stk1135: serial bus timeout: status=0x00 [ 272.908514][ T1205] gspca_stk1135: Sensor read failed [ 272.944088][ T1205] gspca_stk1135: Detected sensor type unknown (0x0) [ 272.953786][ T1205] gspca_stk1135: serial bus timeout: status=0x00 [ 272.991269][ T1205] gspca_stk1135: Sensor read failed [ 272.996568][ T1205] gspca_stk1135: serial bus timeout: status=0x00 [ 273.011694][ T1205] gspca_stk1135: Sensor read failed [ 273.016979][ T1205] gspca_stk1135: serial bus timeout: status=0x00 [ 273.035717][ T1205] gspca_stk1135: Sensor write failed [ 273.060062][ T1205] gspca_stk1135: serial bus timeout: status=0x00 [ 273.070830][ T29] team0 (unregistering): Port device team_slave_1 removed [ 273.091064][ T1205] gspca_stk1135: Sensor write failed [ 273.108583][ T1205] stk1135 3-1:64.0: probe with driver stk1135 failed with error -110 [ 273.126123][ T9738] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1105'. [ 273.135671][ T1205] usb 3-1: USB disconnect, device number 12 [ 273.225938][ T29] team0 (unregistering): Port device team_slave_0 removed [ 273.555732][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 273.564549][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 274.070593][ T5840] Bluetooth: hci2: command tx timeout [ 274.346166][ T6259] udevd (6259) used greatest stack depth: 17456 bytes left [ 274.463914][ T9762] netlink: 'syz.7.1114': attribute type 4 has an invalid length. [ 274.487098][ T9758] netlink: 'syz.7.1114': attribute type 4 has an invalid length. [ 274.565572][ T9664] chnl_net:caif_netlink_parms(): no params data found [ 275.122898][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 275.689637][ T9783] netlink: 'syz.1.1119': attribute type 1 has an invalid length. [ 275.741641][ T9787] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1119'. [ 275.786729][ T9787] batadv1: entered promiscuous mode [ 275.792800][ T9787] batadv1: entered allmulticast mode [ 275.958712][ T1205] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 276.138585][ T5840] Bluetooth: hci2: command tx timeout [ 276.149774][ T1205] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 276.157968][ T1205] usb 8-1: config 0 has no interface number 0 [ 276.165863][ T1205] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.177531][ T1205] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.187956][ T1205] usb 8-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 276.197181][ T1205] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.209595][ T1205] usb 8-1: config 0 descriptor?? [ 276.640503][ T1205] hid (null): global environment stack underflow [ 276.652991][ T1205] uclogic 0003:5543:0522.000D: global environment stack underflow [ 276.663144][ T1205] uclogic 0003:5543:0522.000D: item 0 1 1 11 parsing failed [ 276.671261][ T1205] uclogic 0003:5543:0522.000D: parse failed [ 276.677422][ T1205] uclogic 0003:5543:0522.000D: probe with driver uclogic failed with error -22 [ 276.880542][ T5879] usb 8-1: USB disconnect, device number 3 [ 277.673293][ T30] audit: type=1326 audit(1733791001.788:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9811 comm="syz.7.1124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0b9b7fed9 code=0x7fc00000 [ 277.706688][ T30] audit: type=1326 audit(1733791001.818:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9811 comm="syz.7.1124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=208 compat=0 ip=0x7fb0b9b7fed9 code=0x7fc00000 [ 277.728688][ T30] audit: type=1326 audit(1733791001.818:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9811 comm="syz.7.1124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0b9b7fed9 code=0x7fc00000 [ 278.218413][ T5826] Bluetooth: hci2: command tx timeout [ 278.441663][ T9783] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 278.442969][ T9806] tipc: Started in network mode [ 278.456933][ T9806] tipc: Node identity f7, cluster identity 4711 [ 278.463715][ T9806] tipc: Node number set to 247 [ 278.584915][ T9664] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.611388][ T9664] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.650683][ T9664] bridge_slave_0: entered allmulticast mode [ 278.671499][ T9664] bridge_slave_0: entered promiscuous mode [ 278.723930][ T9664] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.731285][ T9664] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.738803][ T9664] bridge_slave_1: entered allmulticast mode [ 278.746377][ T9664] bridge_slave_1: entered promiscuous mode [ 278.819643][ T9664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.832335][ T9664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.259410][ T9664] team0: Port device team_slave_0 added [ 279.267992][ T9664] team0: Port device team_slave_1 added [ 279.384636][ T9664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.405470][ T9664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.456256][ T9664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.470271][ T9664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.477362][ T9664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.579553][ T9664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.891467][ T9664] hsr_slave_0: entered promiscuous mode [ 279.918536][ T9664] hsr_slave_1: entered promiscuous mode [ 279.944943][ T9664] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 279.969149][ T9664] Cannot create hsr debugfs directory [ 280.227601][ T5840] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 280.234480][ T5826] Bluetooth: hci4: command 0x1003 tx timeout [ 280.709117][ T5840] block nbd1: Receive control failed (result -32) [ 280.723738][ T9886] block nbd1: shutting down sockets [ 280.852729][ T9892] warning: `syz.7.1140' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 281.482706][ T9664] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 281.531115][ T9664] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 281.571126][ T9664] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 281.601796][ T9664] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 281.854412][ T9664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.874135][ T9664] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.912288][ T2989] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.919494][ T2989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.013366][ T29] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.020565][ T29] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.986133][ T9664] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 283.135259][ T9664] veth0_vlan: entered promiscuous mode [ 283.193071][ T9664] veth1_vlan: entered promiscuous mode [ 283.286469][ T9664] veth0_macvtap: entered promiscuous mode [ 283.310919][ T9664] veth1_macvtap: entered promiscuous mode [ 283.365702][ T9664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.377819][ T9664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.387889][ T9664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.398698][ T9664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.408797][ T9664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.420146][ T9664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.441993][ T9664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.472070][ T9664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.492477][ T9664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.511720][ T9664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.543556][ T9664] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 283.630888][ T9664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.658315][ T9664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.668189][ T9664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.679697][ T9664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.692577][ T9664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.703467][ T9664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.713658][ T9664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.725073][ T9664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.735975][ T9664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.746906][ T9664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.757951][ T9974] syz.1.1161[9974] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 283.758052][ T9974] syz.1.1161[9974] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 283.760224][ T9664] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 283.802356][ T9974] syz.1.1161[9974] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 283.826184][ T9664] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.849013][ T9664] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.857768][ T9664] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.866617][ T9664] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 284.153616][ T2989] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.161644][ T2989] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.235834][ T6989] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.274470][ T6989] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.299393][ T5826] Bluetooth: hci5: command 0x0406 tx timeout [ 284.878346][ T5879] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 285.043501][ T5879] usb 3-1: config 0 interface 0 has no altsetting 0 [ 285.052410][ T5879] usb 3-1: New USB device found, idVendor=0451, idProduct=f430, bcdDevice=42.7a [ 285.083438][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.096676][ T5879] usb 3-1: config 0 descriptor?? [ 285.111524][ T5879] ti_usb_3410_5052 3-1:0.0: required endpoints missing [ 285.198604][ T838] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 285.368418][ T838] usb 6-1: Using ep0 maxpacket: 32 [ 285.389885][ T838] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 285.400025][ T838] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.411429][ T1205] usb 3-1: USB disconnect, device number 13 [ 285.422519][ T838] usb 6-1: config 0 descriptor?? [ 285.430565][ T838] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 286.284634][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 286.378326][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 286.398307][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 286.508330][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 286.591875][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 286.923609][ T6992] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.076896][ T6992] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.089498][ T838] gspca_vc032x: reg_w err -71 [ 287.098262][ T838] gspca_vc032x: I2c Bus Busy Wait 00 [ 287.108012][ T838] gspca_vc032x: I2c Bus Busy Wait 00 [ 287.114151][ T838] gspca_vc032x: I2c Bus Busy Wait 00 [ 287.119618][ T838] gspca_vc032x: I2c Bus Busy Wait 00 [ 287.124966][ T838] gspca_vc032x: I2c Bus Busy Wait 00 [ 287.131656][ T838] gspca_vc032x: I2c Bus Busy Wait 00 [ 287.137001][ T838] gspca_vc032x: I2c Bus Busy Wait 00 [ 287.143196][ T838] gspca_vc032x: I2c Bus Busy Wait 00 [ 287.148766][ T838] gspca_vc032x: I2c Bus Busy Wait 00 [ 287.154176][ T838] gspca_vc032x: I2c Bus Busy Wait 00 [ 287.159548][ T838] gspca_vc032x: I2c Bus Busy Wait 00 [ 287.165006][ T838] gspca_vc032x: I2c Bus Busy Wait 00 [ 287.170466][ T838] gspca_vc032x: I2c Bus Busy Wait 00 [ 287.175882][ T838] gspca_vc032x: I2c Bus Busy Wait 00 [ 287.181306][ T838] gspca_vc032x: I2c Bus Busy Wait 00 [ 287.184055][ T6992] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.186687][ T838] gspca_vc032x: I2c Bus Busy Wait 00 [ 287.207531][ T838] gspca_vc032x: I2c Bus Busy Wait 00 [ 287.212938][ T838] gspca_vc032x: I2c Bus Busy Wait 00 [ 287.218590][ T838] gspca_vc032x: Unknown sensor... [ 287.223687][ T838] vc032x 6-1:0.0: probe with driver vc032x failed with error -22 [ 287.233712][ T838] usb 6-1: USB disconnect, device number 10 [ 287.260739][ T6992] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.357222][ T6992] bridge_slave_1: left allmulticast mode [ 287.363093][ T6992] bridge_slave_1: left promiscuous mode [ 287.369464][ T6992] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.378598][ T6992] bridge_slave_0: left allmulticast mode [ 287.384290][ T6992] bridge_slave_0: left promiscuous mode [ 287.391712][ T6992] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.775547][ T6992] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 287.787021][ T6992] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 287.797564][ T6992] bond0 (unregistering): Released all slaves [ 288.110916][ T6992] hsr_slave_0: left promiscuous mode [ 288.126684][ T6992] hsr_slave_1: left promiscuous mode [ 288.139978][ T6992] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 288.166082][ T6992] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 288.184756][ T6992] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.198576][ T6992] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 288.253743][ T6992] veth1_macvtap: left promiscuous mode [ 288.268549][ T6992] veth0_macvtap: left promiscuous mode [ 288.284426][ T6992] veth1_vlan: left promiscuous mode [ 288.298595][ T6992] veth0_vlan: left promiscuous mode [ 288.338545][ T1205] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 288.536127][ T1205] usb 3-1: config 0 has no interfaces? [ 288.546899][ T1205] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 288.556709][ T1205] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.569572][ T1205] usb 3-1: Product: syz [ 288.573993][ T1205] usb 3-1: Manufacturer: syz [ 288.574945][ T5826] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 288.579869][ T1205] usb 3-1: SerialNumber: syz [ 288.592035][ T5826] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 288.594143][ T1205] usb 3-1: config 0 descriptor?? [ 288.612134][ T5826] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 288.624388][ T5826] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 288.632169][ T5826] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 288.652894][ T5826] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 288.861395][ T5879] usb 3-1: USB disconnect, device number 14 [ 289.036722][ T6992] team0 (unregistering): Port device team_slave_1 removed [ 289.087924][ T6992] team0 (unregistering): Port device team_slave_0 removed [ 289.749878][T10057] tipc: Enabling of bearer rejected, failed to enable media [ 290.224239][T10066] chnl_net:caif_netlink_parms(): no params data found [ 290.425906][T10066] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.443760][T10066] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.458649][T10066] bridge_slave_0: entered allmulticast mode [ 290.466466][T10066] bridge_slave_0: entered promiscuous mode [ 290.546067][T10099] syzkaller0: entered promiscuous mode [ 290.579352][T10099] syzkaller0: entered allmulticast mode [ 290.711064][ T5909] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 290.718678][ T5840] Bluetooth: hci2: command tx timeout [ 290.894665][ T5909] usb 2-1: Using ep0 maxpacket: 32 [ 290.906528][ T5909] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 290.916012][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.926288][ T5909] usb 2-1: config 0 descriptor?? [ 290.934400][ T5909] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 292.792392][ T5840] Bluetooth: hci2: command tx timeout [ 292.817473][ T5909] gspca_nw80x: reg_w err -71 [ 292.822363][ T5909] nw80x 2-1:0.0: probe with driver nw80x failed with error -71 [ 292.832344][ T5909] usb 2-1: USB disconnect, device number 19 [ 293.892244][T10066] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.899797][T10066] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.906999][T10066] bridge_slave_1: entered allmulticast mode [ 293.914412][T10066] bridge_slave_1: entered promiscuous mode [ 293.962563][T10066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.987956][T10066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 294.083137][T10066] team0: Port device team_slave_0 added [ 294.104001][T10066] team0: Port device team_slave_1 added [ 294.182986][T10066] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 294.208322][T10066] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.265812][T10066] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 294.319938][T10066] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 294.333681][T10066] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.359687][ C1] vkms_vblank_simulate: vblank timer overrun [ 294.376184][T10066] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 294.561054][T10066] hsr_slave_0: entered promiscuous mode [ 294.596281][T10066] hsr_slave_1: entered promiscuous mode [ 294.611810][T10066] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 294.638342][T10066] Cannot create hsr debugfs directory [ 294.858645][ T5840] Bluetooth: hci2: command tx timeout [ 294.993819][T10166] binder: 10165:10166 ioctl 4018620d 0 returned -22 [ 295.061215][T10170] binder: 10165:10170 ioctl c0306201 0 returned -14 [ 295.357446][T10066] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 295.371113][T10066] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 295.389695][T10066] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 295.411203][T10066] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 295.560281][T10066] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.597537][T10066] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.612205][ T29] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.619378][ T29] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.642010][ T2911] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.649213][ T2911] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.057878][T10066] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 296.104423][T10208] ======================================================= [ 296.104423][T10208] WARNING: The mand mount option has been deprecated and [ 296.104423][T10208] and is ignored by this kernel. Remove the mand [ 296.104423][T10208] option from the mount to silence this warning. [ 296.104423][T10208] ======================================================= [ 296.139320][ C1] vkms_vblank_simulate: vblank timer overrun [ 296.177712][T10066] veth0_vlan: entered promiscuous mode [ 296.208860][ T5879] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 296.234328][T10066] veth1_vlan: entered promiscuous mode [ 296.299567][T10066] veth0_macvtap: entered promiscuous mode [ 296.333569][T10066] veth1_macvtap: entered promiscuous mode [ 296.361950][T10066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.386873][T10066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.397096][ T5879] usb 6-1: Using ep0 maxpacket: 8 [ 296.400479][T10066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.411971][ T5879] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.412747][T10066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.435486][ T5879] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.440849][T10066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.448704][ T5879] usb 6-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 296.465276][ T5879] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.474545][T10066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.485599][ T5879] usb 6-1: config 0 descriptor?? [ 296.494832][T10066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.505906][T10066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.517948][T10066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 296.529669][T10066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.541326][T10066] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 296.569993][T10066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.580675][T10066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.590648][T10066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.606665][T10066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.616611][T10066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.636503][T10066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.647625][T10066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.660875][T10066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.670854][T10066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.681516][T10066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.704816][T10066] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 296.723433][ T7002] [ 296.726214][ T7002] ============================= [ 296.731943][ T7002] WARNING: suspicious RCU usage [ 296.736834][ T7002] 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 Not tainted [ 296.744610][ T7002] ----------------------------- [ 296.750078][ T7002] net/sched/sch_generic.c:1290 suspicious rcu_dereference_protected() usage! [ 296.759134][ T7002] [ 296.759134][ T7002] other info that might help us debug this: [ 296.759134][ T7002] [ 296.769507][ T7002] [ 296.769507][ T7002] rcu_scheduler_active = 2, debug_locks = 1 [ 296.777595][ T7002] 3 locks held by kworker/u8:18/7002: [ 296.783123][ T7002] #0: ffff888061c15148 ((wq_completion)bond0#4){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 296.794342][ T7002] #1: ffffc9000f1ffd00 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 296.807352][ T7002] #2: ffffffff8e937ae0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x174/0x3170 [ 296.817178][ T7002] [ 296.817178][ T7002] stack backtrace: [ 296.823199][ T7002] CPU: 0 UID: 0 PID: 7002 Comm: kworker/u8:18 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 296.834155][ T7002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 296.844301][ T7002] Workqueue: bond0 bond_mii_monitor [ 296.849564][ T7002] Call Trace: [ 296.852855][ T7002] [ 296.855800][ T7002] dump_stack_lvl+0x241/0x360 [ 296.860512][ T7002] ? __pfx_dump_stack_lvl+0x10/0x10 [ 296.865816][ T7002] ? __pfx__printk+0x10/0x10 [ 296.870425][ T7002] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 296.876434][ T7002] lockdep_rcu_suspicious+0x226/0x340 [ 296.881825][ T7002] dev_deactivate_queue+0x8f/0x160 [ 296.886952][ T7002] dev_deactivate_many+0xc8/0xb10 [ 296.891992][ T7002] ? mark_lock+0x9a/0x360 [ 296.896347][ T7002] dev_deactivate+0x184/0x280 [ 296.901037][ T7002] ? __pfx_dev_deactivate+0x10/0x10 [ 296.906242][ T7002] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 296.912152][ T7002] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 296.918498][ T7002] ? rfc2863_policy+0x1db/0x3b0 [ 296.923386][ T7002] linkwatch_do_dev+0x10a/0x170 [ 296.928273][ T7002] ethtool_op_get_link+0x15/0x60 [ 296.933234][ T7002] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 296.938889][ T7002] bond_check_dev_link+0x1f1/0x3f0 [ 296.944050][ T7002] ? __pfx_bond_check_dev_link+0x10/0x10 [ 296.949729][ T7002] bond_mii_monitor+0x49a/0x3170 [ 296.954702][ T7002] ? __lock_acquire+0x1397/0x2100 [ 296.959745][ T7002] ? bond_mii_monitor+0x174/0x3170 [ 296.964881][ T7002] ? do_raw_spin_unlock+0x13c/0x8b0 [ 296.970106][ T7002] ? __pfx_bond_mii_monitor+0x10/0x10 [ 296.975513][ T7002] ? __pfx_lock_acquire+0x10/0x10 [ 296.980560][ T7002] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 296.986647][ T7002] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 296.993002][ T7002] ? process_scheduled_works+0x976/0x1840 [ 296.998749][ T7002] process_scheduled_works+0xa66/0x1840 [ 297.004347][ T7002] ? __pfx_process_scheduled_works+0x10/0x10 [ 297.010362][ T7002] ? assign_work+0x364/0x3d0 [ 297.014981][ T7002] worker_thread+0x870/0xd30 [ 297.019590][ T7002] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 297.025503][ T7002] ? __kthread_parkme+0x169/0x1d0 [ 297.030541][ T7002] ? __pfx_worker_thread+0x10/0x10 [ 297.035663][ T7002] kthread+0x2f0/0x390 [ 297.039752][ T7002] ? __pfx_worker_thread+0x10/0x10 [ 297.044878][ T7002] ? __pfx_kthread+0x10/0x10 [ 297.049486][ T7002] ret_from_fork+0x4b/0x80 [ 297.053910][ T7002] ? __pfx_kthread+0x10/0x10 [ 297.058516][ T7002] ret_from_fork_asm+0x1a/0x30 [ 297.063320][ T7002] [ 297.078455][ T5840] Bluetooth: hci2: command tx timeout [ 297.086765][ T5879] steelseries 0003:1038:1410.000E: item fetching failed at offset 5/7 [ 297.095944][ T5879] steelseries 0003:1038:1410.000E: parse failed [ 297.102571][ T5879] steelseries 0003:1038:1410.000E: probe with driver steelseries failed with error -22 [ 297.107847][ T7002] [ 297.114738][ T7002] ============================= [ 297.119777][ T7002] WARNING: suspicious RCU usage [ 297.124715][ T7002] 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 Not tainted [ 297.131926][ T7002] ----------------------------- [ 297.136819][ T7002] ./include/linux/rtnetlink.h:156 suspicious rcu_dereference_protected() usage! [ 297.146386][ T7002] [ 297.146386][ T7002] other info that might help us debug this: [ 297.146386][ T7002] [ 297.157234][ T7002] [ 297.157234][ T7002] rcu_scheduler_active = 2, debug_locks = 1 [ 297.165373][ T7002] 3 locks held by kworker/u8:18/7002: [ 297.170833][ T7002] #0: ffff888061c15148 ((wq_completion)bond0#4){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 297.182193][ T7002] #1: ffffc9000f1ffd00 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 297.195415][ T7002] #2: ffffffff8e937ae0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x174/0x3170 [ 297.205226][ T7002] [ 297.205226][ T7002] stack backtrace: [ 297.211225][ T7002] CPU: 1 UID: 0 PID: 7002 Comm: kworker/u8:18 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 297.222199][ T7002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 297.232269][ T7002] Workqueue: bond0 bond_mii_monitor [ 297.237499][ T7002] Call Trace: [ 297.240799][ T7002] [ 297.243750][ T7002] dump_stack_lvl+0x241/0x360 [ 297.248458][ T7002] ? __pfx_dump_stack_lvl+0x10/0x10 [ 297.253689][ T7002] ? __pfx__printk+0x10/0x10 [ 297.258312][ T7002] lockdep_rcu_suspicious+0x226/0x340 [ 297.263708][ T7002] dev_deactivate_many+0x18f/0xb10 [ 297.268836][ T7002] ? mark_lock+0x9a/0x360 [ 297.273184][ T7002] dev_deactivate+0x184/0x280 [ 297.277875][ T7002] ? __pfx_dev_deactivate+0x10/0x10 [ 297.283087][ T7002] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 297.288996][ T7002] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 297.295343][ T7002] ? rfc2863_policy+0x1db/0x3b0 [ 297.300219][ T7002] linkwatch_do_dev+0x10a/0x170 [ 297.305122][ T7002] ethtool_op_get_link+0x15/0x60 [ 297.310071][ T7002] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 297.315713][ T7002] bond_check_dev_link+0x1f1/0x3f0 [ 297.320852][ T7002] ? __pfx_bond_check_dev_link+0x10/0x10 [ 297.326518][ T7002] bond_mii_monitor+0x49a/0x3170 [ 297.331491][ T7002] ? __lock_acquire+0x1397/0x2100 [ 297.336533][ T7002] ? bond_mii_monitor+0x174/0x3170 [ 297.341665][ T7002] ? do_raw_spin_unlock+0x13c/0x8b0 [ 297.346892][ T7002] ? __pfx_bond_mii_monitor+0x10/0x10 [ 297.352298][ T7002] ? __pfx_lock_acquire+0x10/0x10 [ 297.357338][ T7002] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 297.363337][ T7002] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 297.369688][ T7002] ? process_scheduled_works+0x976/0x1840 [ 297.375430][ T7002] process_scheduled_works+0xa66/0x1840 [ 297.381018][ T7002] ? __pfx_process_scheduled_works+0x10/0x10 [ 297.387026][ T7002] ? assign_work+0x364/0x3d0 [ 297.391729][ T7002] worker_thread+0x870/0xd30 [ 297.396338][ T7002] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 297.402248][ T7002] ? __kthread_parkme+0x169/0x1d0 [ 297.407296][ T7002] ? __pfx_worker_thread+0x10/0x10 [ 297.412434][ T7002] kthread+0x2f0/0x390 [ 297.416523][ T7002] ? __pfx_worker_thread+0x10/0x10 [ 297.421647][ T7002] ? __pfx_kthread+0x10/0x10 [ 297.426250][ T7002] ret_from_fork+0x4b/0x80 [ 297.430677][ T7002] ? __pfx_kthread+0x10/0x10 [ 297.435282][ T7002] ret_from_fork_asm+0x1a/0x30 [ 297.440078][ T7002] [ 297.443186][ C1] vkms_vblank_simulate: vblank timer overrun [ 297.473584][ T5879] usb 6-1: USB disconnect, device number 11 [ 297.482406][ T7002] BUG: sleeping function called from invalid context at net/core/dev.c:11403 [ 297.495394][ T7002] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 7002, name: kworker/u8:18 [ 297.505289][ T7002] preempt_count: 0, expected: 0 [ 297.515615][ T7002] RCU nest depth: 1, expected: 0 [ 297.520653][ T7002] 3 locks held by kworker/u8:18/7002: [ 297.526046][ T7002] #0: ffff888061c15148 ((wq_completion)bond0#4){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 297.542015][ T7002] #1: ffffc9000f1ffd00 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 297.557853][ T7002] #2: ffffffff8e937ae0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x174/0x3170 [ 297.569504][ T7002] CPU: 0 UID: 0 PID: 7002 Comm: kworker/u8:18 Not tainted 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 297.580486][ T7002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 297.590587][ T7002] Workqueue: bond0 bond_mii_monitor [ 297.595830][ T7002] Call Trace: [ 297.599131][ T7002] [ 297.602076][ T7002] dump_stack_lvl+0x241/0x360 [ 297.606767][ T7002] ? __pfx_dump_stack_lvl+0x10/0x10 [ 297.611992][ T7002] ? __pfx__printk+0x10/0x10 [ 297.616637][ T7002] __might_resched+0x5d4/0x780 [ 297.621422][ T7002] ? dev_deactivate_many+0x25f/0xb10 [ 297.626733][ T7002] ? __pfx___might_resched+0x10/0x10 [ 297.632070][ T7002] ? __local_bh_enable_ip+0x168/0x200 [ 297.637496][ T7002] ? dev_deactivate_many+0x250/0xb10 [ 297.642818][ T7002] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 297.648570][ T7002] ? do_raw_spin_unlock+0x13c/0x8b0 [ 297.653832][ T7002] synchronize_net+0x1b/0x50 [ 297.658467][ T7002] dev_deactivate_many+0x4a7/0xb10 [ 297.663611][ T7002] ? dev_deactivate_many+0x250/0xb10 [ 297.668948][ T7002] dev_deactivate+0x184/0x280 [ 297.673678][ T7002] ? __pfx_dev_deactivate+0x10/0x10 [ 297.678910][ T7002] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 297.684824][ T7002] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 297.691173][ T7002] ? rfc2863_policy+0x1db/0x3b0 [ 297.696056][ T7002] linkwatch_do_dev+0x10a/0x170 [ 297.700931][ T7002] ethtool_op_get_link+0x15/0x60 [ 297.705886][ T7002] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 297.711534][ T7002] bond_check_dev_link+0x1f1/0x3f0 [ 297.716693][ T7002] ? __pfx_bond_check_dev_link+0x10/0x10 [ 297.722380][ T7002] bond_mii_monitor+0x49a/0x3170 [ 297.727357][ T7002] ? __lock_acquire+0x1397/0x2100 [ 297.732400][ T7002] ? bond_mii_monitor+0x174/0x3170 [ 297.737542][ T7002] ? do_raw_spin_unlock+0x13c/0x8b0 [ 297.742777][ T7002] ? __pfx_bond_mii_monitor+0x10/0x10 [ 297.748185][ T7002] ? __pfx_lock_acquire+0x10/0x10 [ 297.753239][ T7002] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 297.759269][ T7002] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 297.765640][ T7002] ? process_scheduled_works+0x976/0x1840 [ 297.771384][ T7002] process_scheduled_works+0xa66/0x1840 [ 297.776976][ T7002] ? __pfx_process_scheduled_works+0x10/0x10 [ 297.782987][ T7002] ? assign_work+0x364/0x3d0 [ 297.787608][ T7002] worker_thread+0x870/0xd30 [ 297.792218][ T7002] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 297.798133][ T7002] ? __kthread_parkme+0x169/0x1d0 [ 297.803173][ T7002] ? __pfx_worker_thread+0x10/0x10 [ 297.808301][ T7002] kthread+0x2f0/0x390 [ 297.812387][ T7002] ? __pfx_worker_thread+0x10/0x10 [ 297.817513][ T7002] ? __pfx_kthread+0x10/0x10 [ 297.822125][ T7002] ret_from_fork+0x4b/0x80 [ 297.826561][ T7002] ? __pfx_kthread+0x10/0x10 [ 297.831170][ T7002] ret_from_fork_asm+0x1a/0x30 [ 297.835968][ T7002] [ 297.849790][ T7002] [ 297.852167][ T7002] ============================= [ 297.857546][ T7002] WARNING: suspicious RCU usage [ 297.863005][ T7002] 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 Tainted: G W [ 297.871702][ T7002] ----------------------------- [ 297.876570][ T7002] kernel/rcu/tree_exp.h:949 Illegal synchronize_rcu_expedited() in RCU read-side critical section! [ 297.887348][ T7002] [ 297.887348][ T7002] other info that might help us debug this: [ 297.887348][ T7002] [ 297.897692][ T7002] [ 297.897692][ T7002] rcu_scheduler_active = 2, debug_locks = 1 [ 297.905938][ T7002] 3 locks held by kworker/u8:18/7002: [ 297.911394][ T7002] #0: ffff888061c15148 ((wq_completion)bond0#4){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 297.922588][ T7002] #1: ffffc9000f1ffd00 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 297.935619][ T7002] #2: ffffffff8e937ae0 (rcu_read_lock){....}-{1:3}, at: bond_mii_monitor+0x174/0x3170 [ 297.945429][ T7002] [ 297.945429][ T7002] stack backtrace: [ 297.951528][ T7002] CPU: 0 UID: 0 PID: 7002 Comm: kworker/u8:18 Tainted: G W 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 297.963988][ T7002] Tainted: [W]=WARN [ 297.967808][ T7002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 297.977874][ T7002] Workqueue: bond0 bond_mii_monitor [ 297.983115][ T7002] Call Trace: [ 297.986416][ T7002] [ 297.989368][ T7002] dump_stack_lvl+0x241/0x360 [ 297.994083][ T7002] ? __pfx_dump_stack_lvl+0x10/0x10 [ 297.999324][ T7002] ? __pfx__printk+0x10/0x10 [ 298.003975][ T7002] lockdep_rcu_suspicious+0x226/0x340 [ 298.009398][ T7002] synchronize_rcu_expedited+0x12e/0x830 [ 298.015071][ T7002] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 298.021263][ T7002] ? add_taint+0x99/0xe0 [ 298.025535][ T7002] ? __might_resched+0x5e0/0x780 [ 298.030497][ T7002] ? __local_bh_enable_ip+0x168/0x200 [ 298.035888][ T7002] ? dev_deactivate_many+0x250/0xb10 [ 298.041196][ T7002] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 298.046955][ T7002] ? do_raw_spin_unlock+0x13c/0x8b0 [ 298.052176][ T7002] dev_deactivate_many+0x4a7/0xb10 [ 298.057306][ T7002] ? dev_deactivate_many+0x250/0xb10 [ 298.062620][ T7002] dev_deactivate+0x184/0x280 [ 298.067344][ T7002] ? __pfx_dev_deactivate+0x10/0x10 [ 298.072583][ T7002] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 298.078525][ T7002] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 298.084886][ T7002] ? rfc2863_policy+0x1db/0x3b0 [ 298.089769][ T7002] linkwatch_do_dev+0x10a/0x170 [ 298.094661][ T7002] ethtool_op_get_link+0x15/0x60 [ 298.099620][ T7002] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 298.105284][ T7002] bond_check_dev_link+0x1f1/0x3f0 [ 298.110431][ T7002] ? __pfx_bond_check_dev_link+0x10/0x10 [ 298.116111][ T7002] bond_mii_monitor+0x49a/0x3170 [ 298.121070][ T7002] ? __lock_acquire+0x1397/0x2100 [ 298.126120][ T7002] ? bond_mii_monitor+0x174/0x3170 [ 298.131275][ T7002] ? do_raw_spin_unlock+0x13c/0x8b0 [ 298.136530][ T7002] ? __pfx_bond_mii_monitor+0x10/0x10 [ 298.141944][ T7002] ? __pfx_lock_acquire+0x10/0x10 [ 298.146981][ T7002] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 298.152989][ T7002] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 298.159369][ T7002] ? process_scheduled_works+0x976/0x1840 [ 298.165132][ T7002] process_scheduled_works+0xa66/0x1840 [ 298.170741][ T7002] ? __pfx_process_scheduled_works+0x10/0x10 [ 298.176783][ T7002] ? assign_work+0x364/0x3d0 [ 298.181430][ T7002] worker_thread+0x870/0xd30 [ 298.186068][ T7002] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 298.191989][ T7002] ? __kthread_parkme+0x169/0x1d0 [ 298.197040][ T7002] ? __pfx_worker_thread+0x10/0x10 [ 298.202159][ T7002] kthread+0x2f0/0x390 [ 298.206245][ T7002] ? __pfx_worker_thread+0x10/0x10 [ 298.211379][ T7002] ? __pfx_kthread+0x10/0x10 [ 298.215997][ T7002] ret_from_fork+0x4b/0x80 [ 298.220433][ T7002] ? __pfx_kthread+0x10/0x10 [ 298.225064][ T7002] ret_from_fork_asm+0x1a/0x30 [ 298.229896][ T7002] [ 298.238888][ T7002] ------------[ cut here ]------------ [ 298.244376][ T7002] Voluntary context switch within RCU read-side critical section! [ 298.244469][ T7002] WARNING: CPU: 0 PID: 7002 at kernel/rcu/tree_plugin.h:331 rcu_note_context_switch+0xcf4/0xff0 [ 298.262692][ T7002] Modules linked in: [ 298.266608][ T7002] CPU: 0 UID: 0 PID: 7002 Comm: kworker/u8:18 Tainted: G W 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 298.279049][ T7002] Tainted: [W]=WARN [ 298.282903][ T7002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 298.292995][ T7002] Workqueue: bond0 bond_mii_monitor [ 298.298246][ T7002] RIP: 0010:rcu_note_context_switch+0xcf4/0xff0 [ 298.304535][ T7002] Code: 00 ba 02 00 00 00 e8 7b 13 fe ff 4c 8b b4 24 80 00 00 00 eb 91 c6 05 66 9a 7c 0e 01 90 48 c7 c7 00 ed 0b 8c e8 0d 30 da ff 90 <0f> 0b 90 90 e9 3b f4 ff ff 90 0f 0b 90 45 84 ed 0f 84 00 f4 ff ff [ 298.324177][ T7002] RSP: 0018:ffffc9000f1ff100 EFLAGS: 00010046 [ 298.330294][ T7002] RAX: 8913d9eb14270e00 RBX: ffff88803046de44 RCX: ffff88803046da00 [ 298.338305][ T7002] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 298.346313][ T7002] RBP: ffffc9000f1ff250 R08: ffffffff81600962 R09: 1ffff110170c519a [ 298.354325][ T7002] R10: dffffc0000000000 R11: ffffed10170c519b R12: ffff88803046da00 [ 298.362335][ T7002] R13: 0000000000000000 R14: 1ffff92001e3fe38 R15: dffffc0000000000 [ 298.370343][ T7002] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 298.379309][ T7002] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 298.385915][ T7002] CR2: 0000001b2e80eff8 CR3: 000000000e736000 CR4: 00000000003526f0 [ 298.393912][ T7002] Call Trace: [ 298.397210][ T7002] [ 298.400161][ T7002] ? __warn+0x165/0x4d0 [ 298.404352][ T7002] ? rcu_note_context_switch+0xcf4/0xff0 [ 298.410005][ T7002] ? report_bug+0x2b3/0x500 [ 298.414536][ T7002] ? rcu_note_context_switch+0xcf4/0xff0 [ 298.420200][ T7002] ? handle_bug+0x60/0x90 [ 298.424562][ T7002] ? exc_invalid_op+0x1a/0x50 [ 298.429278][ T7002] ? asm_exc_invalid_op+0x1a/0x20 [ 298.434347][ T7002] ? __warn_printk+0x292/0x360 [ 298.439139][ T7002] ? rcu_note_context_switch+0xcf4/0xff0 [ 298.444808][ T7002] ? mark_lock+0x9a/0x360 [ 298.449164][ T7002] ? __lock_acquire+0x1397/0x2100 [ 298.454257][ T7002] ? __pfx_rcu_note_context_switch+0x10/0x10 [ 298.460267][ T7002] ? mark_lock+0x9a/0x360 [ 298.464631][ T7002] ? rcu_is_watching+0x15/0xb0 [ 298.469422][ T7002] __schedule+0x34b/0x4be0 [ 298.473911][ T7002] ? __pfx___schedule+0x10/0x10 [ 298.478792][ T7002] ? schedule+0x90/0x320 [ 298.483080][ T7002] ? __pfx_lock_release+0x10/0x10 [ 298.488119][ T7002] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 298.494030][ T7002] ? kthread_data+0x52/0xd0 [ 298.498554][ T7002] ? wq_worker_sleeping+0x66/0x240 [ 298.503709][ T7002] ? schedule+0x90/0x320 [ 298.507994][ T7002] schedule+0x14b/0x320 [ 298.512206][ T7002] synchronize_rcu_expedited+0x70a/0x830 [ 298.517876][ T7002] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 298.524047][ T7002] ? __pfx_autoremove_wake_function+0x10/0x10 [ 298.530140][ T7002] ? add_taint+0x99/0xe0 [ 298.534430][ T7002] ? __might_resched+0x5e0/0x780 [ 298.539414][ T7002] ? __local_bh_enable_ip+0x168/0x200 [ 298.544863][ T7002] ? dev_deactivate_many+0x250/0xb10 [ 298.550200][ T7002] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 298.555954][ T7002] ? do_raw_spin_unlock+0x13c/0x8b0 [ 298.561179][ T7002] dev_deactivate_many+0x4a7/0xb10 [ 298.566303][ T7002] ? dev_deactivate_many+0x250/0xb10 [ 298.571611][ T7002] dev_deactivate+0x184/0x280 [ 298.576334][ T7002] ? __pfx_dev_deactivate+0x10/0x10 [ 298.581560][ T7002] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 298.587467][ T7002] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 298.593824][ T7002] ? rfc2863_policy+0x1db/0x3b0 [ 298.598715][ T7002] linkwatch_do_dev+0x10a/0x170 [ 298.603598][ T7002] ethtool_op_get_link+0x15/0x60 [ 298.608554][ T7002] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 298.614242][ T7002] bond_check_dev_link+0x1f1/0x3f0 [ 298.619402][ T7002] ? __pfx_bond_check_dev_link+0x10/0x10 [ 298.625107][ T7002] bond_mii_monitor+0x49a/0x3170 [ 298.630112][ T7002] ? __lock_acquire+0x1397/0x2100 [ 298.635175][ T7002] ? bond_mii_monitor+0x174/0x3170 [ 298.640330][ T7002] ? do_raw_spin_unlock+0x13c/0x8b0 [ 298.645579][ T7002] ? __pfx_bond_mii_monitor+0x10/0x10 [ 298.650994][ T7002] ? __pfx_lock_acquire+0x10/0x10 [ 298.656069][ T7002] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 298.662061][ T7002] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 298.668421][ T7002] ? process_scheduled_works+0x976/0x1840 [ 298.674187][ T7002] process_scheduled_works+0xa66/0x1840 [ 298.679797][ T7002] ? __pfx_process_scheduled_works+0x10/0x10 [ 298.685826][ T7002] ? assign_work+0x364/0x3d0 [ 298.690456][ T7002] worker_thread+0x870/0xd30 [ 298.695086][ T7002] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 298.701008][ T7002] ? __kthread_parkme+0x169/0x1d0 [ 298.706068][ T7002] ? __pfx_worker_thread+0x10/0x10 [ 298.711203][ T7002] kthread+0x2f0/0x390 [ 298.715312][ T7002] ? __pfx_worker_thread+0x10/0x10 [ 298.720447][ T7002] ? __pfx_kthread+0x10/0x10 [ 298.725093][ T7002] ret_from_fork+0x4b/0x80 [ 298.729556][ T7002] ? __pfx_kthread+0x10/0x10 [ 298.734179][ T7002] ret_from_fork_asm+0x1a/0x30 [ 298.738990][ T7002] [ 298.742055][ T7002] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 298.749366][ T7002] CPU: 0 UID: 0 PID: 7002 Comm: kworker/u8:18 Tainted: G W 6.13.0-rc2-syzkaller-00018-g7cb1b4663150 #0 [ 298.761817][ T7002] Tainted: [W]=WARN [ 298.765634][ T7002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 298.775696][ T7002] Workqueue: bond0 bond_mii_monitor [ 298.780933][ T7002] Call Trace: [ 298.784248][ T7002] [ 298.787201][ T7002] dump_stack_lvl+0x241/0x360 [ 298.791908][ T7002] ? __pfx_dump_stack_lvl+0x10/0x10 [ 298.797225][ T7002] ? __pfx__printk+0x10/0x10 [ 298.801840][ T7002] ? _printk+0xd5/0x120 [ 298.806027][ T7002] ? __init_begin+0x41000/0x41000 [ 298.811080][ T7002] ? vscnprintf+0x5d/0x90 [ 298.815468][ T7002] panic+0x349/0x880 [ 298.819389][ T7002] ? __warn+0x174/0x4d0 [ 298.823573][ T7002] ? __pfx_panic+0x10/0x10 [ 298.828010][ T7002] ? ret_from_fork_asm+0x1a/0x30 [ 298.832981][ T7002] __warn+0x344/0x4d0 [ 298.837003][ T7002] ? rcu_note_context_switch+0xcf4/0xff0 [ 298.842677][ T7002] report_bug+0x2b3/0x500 [ 298.847040][ T7002] ? rcu_note_context_switch+0xcf4/0xff0 [ 298.852686][ T7002] handle_bug+0x60/0x90 [ 298.856882][ T7002] exc_invalid_op+0x1a/0x50 [ 298.861413][ T7002] asm_exc_invalid_op+0x1a/0x20 [ 298.866314][ T7002] RIP: 0010:rcu_note_context_switch+0xcf4/0xff0 [ 298.872596][ T7002] Code: 00 ba 02 00 00 00 e8 7b 13 fe ff 4c 8b b4 24 80 00 00 00 eb 91 c6 05 66 9a 7c 0e 01 90 48 c7 c7 00 ed 0b 8c e8 0d 30 da ff 90 <0f> 0b 90 90 e9 3b f4 ff ff 90 0f 0b 90 45 84 ed 0f 84 00 f4 ff ff [ 298.892329][ T7002] RSP: 0018:ffffc9000f1ff100 EFLAGS: 00010046 [ 298.898447][ T7002] RAX: 8913d9eb14270e00 RBX: ffff88803046de44 RCX: ffff88803046da00 [ 298.906446][ T7002] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 298.914447][ T7002] RBP: ffffc9000f1ff250 R08: ffffffff81600962 R09: 1ffff110170c519a [ 298.922432][ T7002] R10: dffffc0000000000 R11: ffffed10170c519b R12: ffff88803046da00 [ 298.930424][ T7002] R13: 0000000000000000 R14: 1ffff92001e3fe38 R15: dffffc0000000000 [ 298.938458][ T7002] ? __warn_printk+0x292/0x360 [ 298.943280][ T7002] ? mark_lock+0x9a/0x360 [ 298.947668][ T7002] ? __lock_acquire+0x1397/0x2100 [ 298.952743][ T7002] ? __pfx_rcu_note_context_switch+0x10/0x10 [ 298.958755][ T7002] ? mark_lock+0x9a/0x360 [ 298.963100][ T7002] ? rcu_is_watching+0x15/0xb0 [ 298.967881][ T7002] __schedule+0x34b/0x4be0 [ 298.972352][ T7002] ? __pfx___schedule+0x10/0x10 [ 298.977242][ T7002] ? schedule+0x90/0x320 [ 298.981499][ T7002] ? __pfx_lock_release+0x10/0x10 [ 298.986552][ T7002] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 298.992480][ T7002] ? kthread_data+0x52/0xd0 [ 298.997093][ T7002] ? wq_worker_sleeping+0x66/0x240 [ 299.002249][ T7002] ? schedule+0x90/0x320 [ 299.006510][ T7002] schedule+0x14b/0x320 [ 299.010694][ T7002] synchronize_rcu_expedited+0x70a/0x830 [ 299.016396][ T7002] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 299.022589][ T7002] ? __pfx_autoremove_wake_function+0x10/0x10 [ 299.028682][ T7002] ? add_taint+0x99/0xe0 [ 299.032969][ T7002] ? __might_resched+0x5e0/0x780 [ 299.037962][ T7002] ? __local_bh_enable_ip+0x168/0x200 [ 299.043358][ T7002] ? dev_deactivate_many+0x250/0xb10 [ 299.048673][ T7002] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 299.054443][ T7002] ? do_raw_spin_unlock+0x13c/0x8b0 [ 299.059702][ T7002] dev_deactivate_many+0x4a7/0xb10 [ 299.064845][ T7002] ? dev_deactivate_many+0x250/0xb10 [ 299.070162][ T7002] dev_deactivate+0x184/0x280 [ 299.074884][ T7002] ? __pfx_dev_deactivate+0x10/0x10 [ 299.080106][ T7002] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 299.086064][ T7002] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 299.092420][ T7002] ? rfc2863_policy+0x1db/0x3b0 [ 299.097292][ T7002] linkwatch_do_dev+0x10a/0x170 [ 299.102162][ T7002] ethtool_op_get_link+0x15/0x60 [ 299.107129][ T7002] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 299.112779][ T7002] bond_check_dev_link+0x1f1/0x3f0 [ 299.117911][ T7002] ? __pfx_bond_check_dev_link+0x10/0x10 [ 299.123572][ T7002] bond_mii_monitor+0x49a/0x3170 [ 299.128549][ T7002] ? __lock_acquire+0x1397/0x2100 [ 299.133610][ T7002] ? bond_mii_monitor+0x174/0x3170 [ 299.138776][ T7002] ? do_raw_spin_unlock+0x13c/0x8b0 [ 299.144012][ T7002] ? __pfx_bond_mii_monitor+0x10/0x10 [ 299.149443][ T7002] ? __pfx_lock_acquire+0x10/0x10 [ 299.154570][ T7002] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 299.160591][ T7002] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 299.166972][ T7002] ? process_scheduled_works+0x976/0x1840 [ 299.172743][ T7002] process_scheduled_works+0xa66/0x1840 [ 299.178409][ T7002] ? __pfx_process_scheduled_works+0x10/0x10 [ 299.184434][ T7002] ? assign_work+0x364/0x3d0 [ 299.189059][ T7002] worker_thread+0x870/0xd30 [ 299.193682][ T7002] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 299.199597][ T7002] ? __kthread_parkme+0x169/0x1d0 [ 299.204645][ T7002] ? __pfx_worker_thread+0x10/0x10 [ 299.209775][ T7002] kthread+0x2f0/0x390 [ 299.213872][ T7002] ? __pfx_worker_thread+0x10/0x10 [ 299.218996][ T7002] ? __pfx_kthread+0x10/0x10 [ 299.223611][ T7002] ret_from_fork+0x4b/0x80 [ 299.228029][ T7002] ? __pfx_kthread+0x10/0x10 [ 299.232639][ T7002] ret_from_fork_asm+0x1a/0x30 [ 299.237425][ T7002] [ 299.240930][ T7002] Kernel Offset: disabled [ 299.245331][ T7002] Rebooting in 86400 seconds..