last executing test programs: 3.0941212s ago: executing program 0 (id=1625): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a1281) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"]) ioctl$AUTOFS_IOC_FAIL(r0, 0x4004550c, 0x200000000000000) 3.092898385s ago: executing program 2 (id=1626): socket(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x149442, 0x0) ftruncate(r0, 0x200002) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @dev}, 0x10) connect$pppl2tp(r2, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) sendfile(r2, r1, 0x0, 0x80001d00c0d0) 3.092222096s ago: executing program 4 (id=1627): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000980)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000300000002000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000002000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x210) 2.917714795s ago: executing program 0 (id=1628): setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000600)='./file1\x00', 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000a00)='./file1\x00', &(0x7f0000000000)='reiserfs\x00', 0x0, &(0x7f0000000a80)=',\x00') 2.762357785s ago: executing program 4 (id=1630): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000140)) close(r1) 2.751165936s ago: executing program 0 (id=1631): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f0000000100), 0xb) splice(r3, 0x0, r5, 0x0, 0x8000f28, 0x0) splice(r0, 0x0, r5, 0x0, 0x80, 0x0) ppoll(&(0x7f0000000040)=[{r4}], 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(r5, &(0x7f0000000100)={'syz1'}, 0x4) write(r2, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_host_features={{0x3d, 0xe}, {@none, "eca41ddd2bccc4a9"}}}, 0x11) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x0, 0x0, 0x1}, 0x48) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000440)=""/87) socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000080)={@local, r6}, 0x14) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000040)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @remote}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000100)="a0002883591ecc0e", 0x8}], 0x1}}], 0x1, 0x0) socket$inet6(0xa, 0x3, 0x88) 2.598280535s ago: executing program 2 (id=1634): rt_sigreturn() futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) rt_sigreturn() futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) 2.495791623s ago: executing program 4 (id=1636): bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000680)={'syztnl2\x00', &(0x7f00000005c0)={'gretap0\x00', 0x0, 0x80, 0x7800, 0x7f, 0x52, {{0x27, 0x4, 0x2, 0x5, 0x9c, 0x65, 0x0, 0x7, 0x2f, 0x0, @loopback, @loopback, {[@timestamp={0x44, 0x2c, 0x6a, 0x0, 0x4, [0x5, 0x1, 0x5, 0x8, 0x9, 0x6, 0x9, 0x6, 0x1ff, 0x1a]}, @timestamp_addr={0x44, 0x34, 0xa3, 0x1, 0x4, [{@broadcast, 0x3}, {@empty, 0x9}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x4}, {@rand_addr=0x64010101, 0xff}, {@rand_addr=0x64010102, 0x9}, {@rand_addr=0x64010101}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x24, 0xa4, 0x0, 0x0, [0x4, 0x9, 0x1, 0x0, 0x4, 0x40, 0x0, 0x20]}]}}}}}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x3, 0xfff, 0x45, 0x0, 0xffffffffffffffff, 0x0, '\x00', r0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/address_bits', 0x141000, 0x40) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x1, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x16, 0x100, 0x5, 0x8, 0x1000, r1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x5}, 0x48) r8 = fcntl$dupfd(r7, 0x0, r7) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x468, 0xc, 0x5002004a, 0xb, 0x310, 0xea13, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}]}}, @common=@ttl={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4c8) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec0000002100390d0000000000000000ac141400000000000000000000000000e000000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ff010000000000000000000000000001ffffffff000000000000000000000000fe880000000000000000000000000001ac141400000000000000000000000000000000000000000000000200ff010000000000000000000000000001ff020000000000000000000000000001fe800000000000000000000000000000ff02000000000000000000000000000100000000000000"], 0xec}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r10 = open_tree(0xffffffffffffff9c, &(0x7f00000014c0)='./file0\x00', 0x8001) open_tree(r10, &(0x7f0000000100)='\x00', 0x89901) 2.495590997s ago: executing program 3 (id=1637): r0 = mq_open(&(0x7f0000000040)='+:^\x00', 0x40, 0x0, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_aout(r0, 0x0, 0xa19) 2.477788456s ago: executing program 3 (id=1638): syz_open_dev$usbmon(&(0x7f0000000140), 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="60000000100001040100"/20, @ANYRES32=0x0, @ANYBLOB="7b130000000000003800128008000100677470002c00028008000100", @ANYRES32, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB="08000200", @ANYRES32, @ANYBLOB="080003000800000008000100", @ANYRES32=r0], 0x60}}, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r3, 0xffffffffffffffff, 0x0) 2.245023216s ago: executing program 3 (id=1639): r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 1.424121273s ago: executing program 3 (id=1640): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ftruncate(0xffffffffffffffff, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ftruncate(0xffffffffffffffff, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) recvfrom(r2, &(0x7f0000000140)=""/42, 0xffffffffffffff01, 0x20, 0x0, 0x0) 1.42359876s ago: executing program 0 (id=1641): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0xfd53}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x8}, 0x10) 1.34360357s ago: executing program 4 (id=1643): socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x2000000, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r1, @ANYBLOB="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"], 0x1c8}}, 0x0) 1.161016302s ago: executing program 1 (id=1644): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x4, 0x4, 0x1004}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000000bae3000000000000000000850000007b00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000640)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0) 1.139652533s ago: executing program 2 (id=1645): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000640)=""/22, 0x16}], 0x1}, 0x42) 1.10573943s ago: executing program 1 (id=1646): sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x14, 0x0, 0x0, 0x0, 0x25dfdbfe, {0x8}}, 0x14}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000180), 0x2ae, 0x0) 408.267881ms ago: executing program 1 (id=1647): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)={0x18, r1, 0x511, 0x0, 0x0, {0xa}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}}, 0x0) 407.969121ms ago: executing program 2 (id=1648): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0xfffffffe, 0x0, 0x0, 0x0, 0x1}, 0x48) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="130200006600"], 0xfe33) 386.090004ms ago: executing program 4 (id=1649): bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)="792fdcb8ca017a2aaabd19dc9d60b6ce21858e5b9937a1b006f9b252f3c635d8361a5025883c40b7b6c1aab7e264edd06fc48158f23ddb0bbdeb6d748417ae3fb46dd38f7acd61df632d27495d49de485afe08d9f6cb6636dc35359287291d4500ed8b05f0d09dd00b6ffef3a3d566420d7c4e3dad8812a7cd07795fdecc0fca3f", 0x81, 0x8080, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='reno\x00', 0x5) 375.68896ms ago: executing program 0 (id=1650): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) chdir(&(0x7f0000000100)='./file0\x00') read$FUSE(r0, &(0x7f0000002380)={0x2020}, 0x2020) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x602) 316.220624ms ago: executing program 1 (id=1651): bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000880)={0xffffffffffffffff}, 0x4) 288.512089ms ago: executing program 2 (id=1652): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000f00)=@generic={0x0, r1}, 0x18) 232.434141ms ago: executing program 1 (id=1653): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000800)="e9", 0x9500}, {&(0x7f00000017c0)="ea0189bdebb0c16d420ee9b95082abd6431cc7afc22c4a6b8adecef68f76bd81a86e89f9c80e5c868a12b09e80ba8c01eb3f4b7be71f9fc2355c336cedc15eb778e3a3b35c3f72629ea4d9ae42cf4c17255815fb8a47aafd8b8ff0c202b4e09f7c42811261b5e113fcce27b4329ccb792df14b7d6dcfaf2cf8dbb51946e89c862e9252731f680ec50326fc16386aeefe654bac24", 0x94}], 0x2, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}], 0x20}, 0x0) 184.169078ms ago: executing program 4 (id=1654): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x12, &(0x7f0000000040)=0x6, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000780)="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", 0x54e676f5, 0xc000, 0x0, 0xffffffffffffff59) r1 = dup(r0) write$P9_RLERROR(r1, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) 183.784527ms ago: executing program 3 (id=1655): gettid() r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(r0, 0x7, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x4}) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x3938700}}, 0x0) rt_sigreturn() mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) ioctl$PIO_FONT(r0, 0x5403, 0x0) timer_create(0x0, &(0x7f0000533fa0), 0x0) write$P9_RSETATTR(0xffffffffffffffff, 0x0, 0x0) r2 = dup(0xffffffffffffffff) write$P9_RGETATTR(r2, 0x0, 0x0) rt_sigreturn() close(0xffffffffffffffff) 158.783176ms ago: executing program 2 (id=1656): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x77359400}, {0x0, 0x989680}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f0000000340), 0xffffff46) sendmsg$unix(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)='D', 0x1}], 0x1}, 0x0) rt_sigreturn() r2 = creat(&(0x7f0000000080)='./file0\x00', 0x0) futex(&(0x7f0000000000)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) fallocate(r2, 0x0, 0x0, 0x8020003) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000640)=[{{&(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, 0x0, 0xffffffffffffffc4}}], 0x0, 0x0, 0x0) 115.458075ms ago: executing program 0 (id=1657): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) futex(0x0, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) userfaultfd(0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) syz_emit_vhci(0x0, 0x22) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000401c1b3e1b00000000000109026a00010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x4000) 228.165µs ago: executing program 1 (id=1658): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[0x0], 0xf4240}) 0s ago: executing program 3 (id=1659): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000640)=""/22, 0x16}], 0x1}, 0x42) kernel console output (not intermixed with test programs): the interface descriptor's value: 21 [ 331.973474][ T5084] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 331.977985][ T25] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 331.994206][ T5084] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 331.998277][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.010194][ T5084] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 332.019609][ T5084] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 332.020392][ T25] usb 5-1: config 0 descriptor?? [ 332.034609][ T5084] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 332.046698][ T5084] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 332.351773][ T9480] chnl_net:caif_netlink_parms(): no params data found [ 332.572168][ T25] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving [ 332.595481][ T25] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 332.749289][ T9480] bridge0: port 1(bridge_slave_0) entered blocking state [ 332.766170][ T9480] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.781977][ T9480] bridge_slave_0: entered allmulticast mode [ 332.798900][ T9480] bridge_slave_0: entered promiscuous mode [ 332.816681][ T9480] bridge0: port 2(bridge_slave_1) entered blocking state [ 332.823991][ T9480] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.831670][ T9480] bridge_slave_1: entered allmulticast mode [ 332.839239][ T9480] bridge_slave_1: entered promiscuous mode [ 332.905970][ T9480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 332.922004][ T9480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 333.020502][ T9480] team0: Port device team_slave_0 added [ 333.042542][ T9480] team0: Port device team_slave_1 added [ 333.209651][ T9480] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.234830][ T9480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.288970][ T9480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.327793][ T9480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.134826][ T5096] Bluetooth: hci1: command tx timeout [ 334.159049][ T9480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.185115][ C0] vkms_vblank_simulate: vblank timer overrun [ 334.285054][ T9480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.576171][ T9480] hsr_slave_0: entered promiscuous mode [ 334.591223][ T9480] hsr_slave_1: entered promiscuous mode [ 334.604941][ T5096] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 334.613041][ T5096] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 334.622146][ T5096] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 334.630659][ T5096] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 334.729483][ T9480] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 334.746132][ T9480] Cannot create hsr debugfs directory [ 334.817074][ T9474] netlink: 'syz.4.1031': attribute type 4 has an invalid length. [ 334.851904][ T9506] netlink: 'syz.4.1031': attribute type 4 has an invalid length. [ 335.081099][ T9518] vlan2: entered allmulticast mode [ 335.087442][ T9518] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 335.099516][ T9518] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 335.325148][ T5826] usb 3-1: new low-speed USB device number 29 using dummy_hcd [ 335.504599][ T9480] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.557656][ T5826] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 335.614088][ T5826] usb 3-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice=14.ec [ 335.644137][ T9480] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.660772][ T5826] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.705363][ T5826] usb 3-1: config 0 descriptor?? [ 335.757981][ T5826] ttusb_dec_send_command: command bulk message failed: error -8 [ 335.778646][ T2468] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.792252][ T5826] ttusb-dec 3-1:0.0: probe with driver ttusb-dec failed with error -8 [ 335.913222][ T9522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.933411][ T9480] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.962816][ T9522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.005788][ T9522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.014525][ T9522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.047453][ T9522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.072403][ T9522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.112821][ T9522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.115426][ T5085] usb 5-1: USB disconnect, device number 20 [ 336.131663][ T9522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.142815][ T2468] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.154305][ T5096] Bluetooth: hci1: command tx timeout [ 336.218276][ T9522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 336.265622][ T9522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.267875][ T9480] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.306844][ T5826] usb 3-1: USB disconnect, device number 29 [ 336.392217][ T2468] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.513036][ T2468] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.714667][ T5084] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 336.726374][ T5084] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 336.734684][ T5084] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 336.753257][ T5084] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 336.762644][ T5084] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 336.883367][ T5084] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 336.892966][ T9480] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 336.976900][ T9480] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 337.049479][ T9480] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 337.088405][ T2468] bridge_slave_1: left allmulticast mode [ 337.094108][ T2468] bridge_slave_1: left promiscuous mode [ 337.106816][ T2468] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.127122][ T2468] bridge_slave_0: left allmulticast mode [ 337.143094][ T2468] bridge_slave_0: left promiscuous mode [ 337.149283][ T2468] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.101572][ T5136] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 338.238177][ T5096] Bluetooth: hci1: command tx timeout [ 338.310752][ T783] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 338.333747][ T5136] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.363533][ T5136] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 338.376784][ T5136] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 338.389922][ T5136] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.390270][ T2468] dvmrp5 (unregistering): left allmulticast mode [ 338.406163][ T5136] usb 4-1: config 0 descriptor?? [ 338.506687][ T783] usb 3-1: device descriptor read/64, error -71 [ 338.529033][ T2468] team0: Port device bridge1 removed [ 338.609911][ T2468] team0: Port device bridge2 removed [ 338.660329][ T2468] team0: Port device bridge3 removed [ 338.716808][ T2468] team0: Port device bridge4 removed [ 338.784859][ T783] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 338.832349][ T5136] plantronics 0003:047F:FFFF.0017: No inputs registered, leaving [ 338.843570][ T5136] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 338.917013][ T2468] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 338.929449][ T2468] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 338.939988][ T2468] bond0 (unregistering): Released all slaves [ 338.946383][ T783] usb 3-1: device descriptor read/64, error -71 [ 338.949786][ T5096] Bluetooth: hci0: command tx timeout [ 338.962730][ T9480] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 339.068741][ T783] usb usb3-port1: attempt power cycle [ 339.514845][ T783] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 339.586359][ T783] usb 3-1: device descriptor read/8, error -71 [ 339.592984][ T2468] hsr_slave_0: left promiscuous mode [ 339.603426][ T2468] hsr_slave_1: left promiscuous mode [ 339.627193][ T2468] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 339.643761][ T2468] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 339.652794][ T2468] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 339.698110][ T2468] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 339.780677][ T2468] veth1_macvtap: left promiscuous mode [ 339.786428][ T2468] veth0_macvtap: left promiscuous mode [ 339.796404][ T2468] veth1_vlan: left promiscuous mode [ 339.806140][ T2468] veth0_vlan: left promiscuous mode [ 339.931216][ T783] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 339.975524][ T783] usb 3-1: device descriptor read/8, error -71 [ 340.135321][ T783] usb usb3-port1: unable to enumerate USB device [ 340.167710][ T5084] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 340.184277][ T5084] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 340.197554][ T5084] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 340.206053][ T5084] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 340.215202][ T5084] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 340.227883][ T5084] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 340.266195][ T5084] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 340.289904][ T5084] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 340.299073][ T5084] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 340.308024][ T5084] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 340.315058][ T5096] Bluetooth: hci1: command tx timeout [ 340.321573][ T2468] pimreg (unregistering): left allmulticast mode [ 340.923825][ T2468] team0 (unregistering): Port device team_slave_1 removed [ 340.974398][ T2468] team0 (unregistering): Port device team_slave_0 removed [ 341.026041][ T5096] Bluetooth: hci0: command tx timeout [ 341.464078][ T9571] netlink: 'syz.3.1059': attribute type 4 has an invalid length. [ 341.484019][ T9547] netlink: 'syz.3.1059': attribute type 4 has an invalid length. [ 341.505693][ T9579] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1064'. [ 341.551567][ T9580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1064'. [ 341.568654][ T9581] team0: Port device bridge6 added [ 341.575637][ T45] usb 4-1: USB disconnect, device number 20 [ 341.723279][ T9480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.822969][ T9480] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.986567][ T9541] chnl_net:caif_netlink_parms(): no params data found [ 342.022989][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.030232][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.064871][ T783] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 342.182079][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.189281][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.265200][ T783] usb 3-1: Using ep0 maxpacket: 32 [ 342.287433][ T783] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 342.299251][ T783] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 16384, setting to 64 [ 342.314978][ T5096] Bluetooth: hci3: command tx timeout [ 342.343933][ T783] usb 3-1: config 0 interface 0 has no altsetting 1 [ 342.379225][ T783] usb 3-1: New USB device found, idVendor=1199, idProduct=9004, bcdDevice= f.8c [ 342.404449][ T783] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.432088][ T783] usb 3-1: Product: syz [ 342.454781][ T783] usb 3-1: Manufacturer: syz [ 342.469396][ T783] usb 3-1: SerialNumber: syz [ 342.481121][ T9541] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.503203][ T783] usb 3-1: config 0 descriptor?? [ 342.514935][ T9541] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.525680][ T783] qmi_wwan 3-1:0.0: probe with driver qmi_wwan failed with error -22 [ 342.534195][ T9541] bridge_slave_0: entered allmulticast mode [ 342.564495][ T9541] bridge_slave_0: entered promiscuous mode [ 342.592051][ T9541] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.612800][ T9541] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.630580][ T9541] bridge_slave_1: entered allmulticast mode [ 342.646674][ T9541] bridge_slave_1: entered promiscuous mode [ 342.710115][ T9541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.741661][ T9] usb 3-1: USB disconnect, device number 34 [ 342.844284][ T9541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.980886][ T9541] team0: Port device team_slave_0 added [ 343.098146][ T2468] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.109302][ T5096] Bluetooth: hci0: command tx timeout [ 343.141131][ T9541] team0: Port device team_slave_1 added [ 343.161815][ T9573] chnl_net:caif_netlink_parms(): no params data found [ 343.198716][ T2468] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.333555][ T2468] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.497611][ T9541] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 343.504588][ T9541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.530716][ T9541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.291524][ T9541] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.299385][ T9541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.327178][ T9541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.395161][ T5096] Bluetooth: hci3: command tx timeout [ 344.467119][ T2468] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.515142][ T783] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 344.684965][ T783] usb 3-1: device descriptor read/64, error -71 [ 344.747821][ T9541] hsr_slave_0: entered promiscuous mode [ 344.775446][ T9541] hsr_slave_1: entered promiscuous mode [ 344.827506][ T9573] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.835194][ T9573] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.845114][ T9573] bridge_slave_0: entered allmulticast mode [ 344.859446][ T9573] bridge_slave_0: entered promiscuous mode [ 344.914369][ T9573] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.931025][ T9573] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.938860][ T5084] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 344.942256][ T9573] bridge_slave_1: entered allmulticast mode [ 344.950138][ T5084] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 344.961246][ T5084] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 344.964010][ T9573] bridge_slave_1: entered promiscuous mode [ 344.974463][ T783] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 344.989259][ T5084] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 345.000061][ T5084] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 345.002860][ T9480] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 345.007583][ T5084] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 345.089162][ T9573] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.141785][ T9573] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.155352][ T783] usb 3-1: device descriptor read/64, error -71 [ 345.184978][ T5096] Bluetooth: hci0: command tx timeout [ 345.243440][ T2468] bridge_slave_1: left allmulticast mode [ 345.249269][ T2468] bridge_slave_1: left promiscuous mode [ 345.255066][ T2468] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.266065][ T2468] bridge_slave_0: left allmulticast mode [ 345.271711][ T2468] bridge_slave_0: left promiscuous mode [ 345.278601][ T783] usb usb3-port1: attempt power cycle [ 345.282404][ T2468] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.598154][ T2468] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 345.612428][ T2468] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 345.628923][ T2468] bond0 (unregistering): Released all slaves [ 345.686094][ T9573] team0: Port device team_slave_0 added [ 345.698317][ T783] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 345.704323][ T9573] team0: Port device team_slave_1 added [ 345.753585][ T783] usb 3-1: device descriptor read/8, error -71 [ 345.887378][ T9573] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.906992][ T9573] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.934185][ T9573] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.950759][ T9573] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.959125][ T9573] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.986592][ T9573] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.055943][ T783] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 346.085528][ T783] usb 3-1: device descriptor read/8, error -71 [ 346.093448][ T9480] veth0_vlan: entered promiscuous mode [ 346.214491][ T783] usb usb3-port1: unable to enumerate USB device [ 346.246322][ T9480] veth1_vlan: entered promiscuous mode [ 346.258226][ T9573] hsr_slave_0: entered promiscuous mode [ 346.264595][ T9573] hsr_slave_1: entered promiscuous mode [ 346.274267][ T9573] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 346.283173][ T9573] Cannot create hsr debugfs directory [ 346.443337][ T2468] hsr_slave_0: left promiscuous mode [ 346.450633][ T2468] hsr_slave_1: left promiscuous mode [ 346.458850][ T2468] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 346.467156][ T2468] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 346.474419][ T5096] Bluetooth: hci3: command tx timeout [ 346.481946][ T2468] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 346.489457][ T2468] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 346.510973][ T2468] veth1_macvtap: left promiscuous mode [ 346.516752][ T2468] veth0_macvtap: left promiscuous mode [ 346.522361][ T2468] veth1_vlan: left promiscuous mode [ 346.527716][ T2468] veth0_vlan: left promiscuous mode [ 346.954058][ T2468] team0 (unregistering): Port device team_slave_1 removed [ 346.992973][ T2468] team0 (unregistering): Port device team_slave_0 removed [ 347.105269][ T5096] Bluetooth: hci2: command tx timeout [ 347.466778][ T9659] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1073'. [ 347.479602][ T9660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1073'. [ 347.491653][ T9661] team0: Port device bridge7 added [ 347.969776][ T9480] veth0_macvtap: entered promiscuous mode [ 348.024562][ T9480] veth1_macvtap: entered promiscuous mode [ 348.059691][ T9640] chnl_net:caif_netlink_parms(): no params data found [ 348.123073][ T9480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.146725][ T9480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.156766][ T9480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.167339][ T9480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.178925][ T9480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 348.189477][ T9480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.201005][ T9480] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 348.212294][ T9480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.222819][ T9480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.234582][ T9480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.247589][ T9480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.257586][ T9480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 348.268084][ T9480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 348.280460][ T9480] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 348.343166][ T9480] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.358213][ T9480] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.367525][ T9480] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.377313][ T9480] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.460647][ T9640] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.474268][ T9640] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.493466][ T9640] bridge_slave_0: entered allmulticast mode [ 348.501836][ T9640] bridge_slave_0: entered promiscuous mode [ 348.512322][ T9640] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.520238][ T9640] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.527909][ T9640] bridge_slave_1: entered allmulticast mode [ 348.535649][ T9640] bridge_slave_1: entered promiscuous mode [ 348.554907][ T5096] Bluetooth: hci3: command tx timeout [ 348.655092][ T2468] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.732625][ T9640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.771672][ T2468] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.793801][ T9640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 348.846726][ T9640] team0: Port device team_slave_0 added [ 348.859878][ T9640] team0: Port device team_slave_1 added [ 348.900999][ T2468] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.973838][ T2468] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.994462][ T9640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.002733][ T9640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.029319][ T9640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.050565][ T2416] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.063969][ T2416] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.075815][ T9640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.087526][ T9640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.115484][ T9640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.185266][ T5096] Bluetooth: hci2: command tx timeout [ 349.206837][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 349.215057][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.224142][ T9640] hsr_slave_0: entered promiscuous mode [ 349.231750][ T9640] hsr_slave_1: entered promiscuous mode [ 349.239063][ T9640] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 349.246846][ T9640] Cannot create hsr debugfs directory [ 349.495272][ T9541] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 349.527056][ T9541] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 349.616597][ T2468] bridge_slave_1: left allmulticast mode [ 349.622645][ T2468] bridge_slave_1: left promiscuous mode [ 349.649438][ T2468] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.659828][ T2468] bridge_slave_0: left allmulticast mode [ 349.667860][ T2468] bridge_slave_0: left promiscuous mode [ 349.673706][ T2468] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.173082][ T2468] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.190592][ T2468] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 350.208376][ T2468] bond0 (unregistering): Released all slaves [ 350.224300][ T9541] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 350.310146][ T9541] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 351.311019][ T5096] Bluetooth: hci2: command tx timeout [ 351.510348][ T2468] hsr_slave_0: left promiscuous mode [ 351.527858][ T2468] hsr_slave_1: left promiscuous mode [ 351.551459][ T2468] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 351.560289][ T2468] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 351.576290][ T2468] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 351.583750][ T2468] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 351.595290][ T25] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 351.607460][ T2468] veth1_macvtap: left promiscuous mode [ 351.612984][ T2468] veth0_macvtap: left promiscuous mode [ 351.618763][ T2468] veth1_vlan: left promiscuous mode [ 351.624113][ T2468] veth0_vlan: left promiscuous mode [ 351.756348][ T25] usb 2-1: device descriptor read/64, error -71 [ 352.025081][ T25] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 352.052662][ T2468] team0 (unregistering): Port device team_slave_1 removed [ 352.092771][ T2468] team0 (unregistering): Port device team_slave_0 removed [ 352.184906][ T25] usb 2-1: device descriptor read/64, error -71 [ 352.306224][ T25] usb usb2-port1: attempt power cycle [ 352.529402][ T9573] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 352.547100][ T9694] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1080'. [ 352.563964][ T9695] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1080'. [ 352.580371][ T9696] team0: Port device bridge8 added [ 352.625572][ T9573] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 352.651660][ T9573] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 352.690932][ T9573] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 352.715315][ T25] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 352.746456][ T25] usb 2-1: device descriptor read/8, error -71 [ 352.963443][ T9541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.025340][ T25] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 353.033166][ T9541] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.088727][ T25] usb 2-1: device descriptor read/8, error -71 [ 353.156187][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.163351][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.212346][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.219636][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.228548][ T25] usb usb2-port1: unable to enumerate USB device [ 353.267568][ T9573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.355551][ T5096] Bluetooth: hci2: command tx timeout [ 353.421807][ T9573] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.601571][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.608772][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.694205][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.701418][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.791773][ T9640] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 353.856853][ T9640] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 353.902351][ T9640] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 353.983244][ T9640] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 354.051896][ T9725] vlan2: entered allmulticast mode [ 354.060004][ T9725] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 354.081174][ T9725] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 354.146907][ T9541] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 354.387239][ T9541] veth0_vlan: entered promiscuous mode [ 354.441846][ T9541] veth1_vlan: entered promiscuous mode [ 354.472654][ T9640] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.602840][ T9541] veth0_macvtap: entered promiscuous mode [ 354.728212][ T9640] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.815699][ T5085] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.823125][ T5085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.839860][ T5085] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.847083][ T5085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.880319][ T9541] veth1_macvtap: entered promiscuous mode [ 355.059619][ T9573] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 355.106104][ T9541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.126161][ T9541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.148159][ T9541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.170096][ T9541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.198612][ T9541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.215155][ T9541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.233937][ T9541] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 355.263226][ T9765] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1088'. [ 355.303443][ T9768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1088'. [ 355.357447][ T9762] team0: Port device bridge9 added [ 355.378554][ T9541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.397770][ T9541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.409186][ T9541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.419887][ T9541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.436646][ T9541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.448100][ T9541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.470128][ T9541] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 355.530683][ T9541] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.569056][ T9541] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.578087][ T9541] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.591447][ T9541] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.309912][ T9573] veth0_vlan: entered promiscuous mode [ 356.355114][ T25] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 356.359425][ T9573] veth1_vlan: entered promiscuous mode [ 356.467014][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.506968][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.517599][ T25] usb 3-1: device descriptor read/64, error -71 [ 356.580213][ T2468] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.597739][ T9640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 356.614932][ T2468] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.626769][ T9573] veth0_macvtap: entered promiscuous mode [ 356.663989][ T9573] veth1_macvtap: entered promiscuous mode [ 356.727264][ T9573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.760922][ T9573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.784932][ T25] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 356.801722][ T9573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.824797][ T9573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.854899][ T9573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.876007][ T9573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.925197][ T9573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 356.935849][ T9573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.954574][ T9573] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 356.970681][ T25] usb 3-1: device descriptor read/64, error -71 [ 356.994127][ T9807] netlink: 'syz.0.1049': attribute type 1 has an invalid length. [ 357.021150][ T9573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.033132][ T9807] netlink: 9364 bytes leftover after parsing attributes in process `syz.0.1049'. [ 357.058066][ T9807] netlink: 'syz.0.1049': attribute type 1 has an invalid length. [ 357.066120][ T9573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.090626][ T9573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.102017][ T25] usb usb3-port1: attempt power cycle [ 357.115030][ T9573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.135442][ T9573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.153027][ T9573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.162941][ T9573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 357.183933][ T9573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.209647][ T9573] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 357.248008][ T9573] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.274828][ T9573] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.304141][ T9573] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.330612][ T9573] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.363930][ T9640] veth0_vlan: entered promiscuous mode [ 357.457138][ T9640] veth1_vlan: entered promiscuous mode [ 357.544861][ T25] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 357.595945][ T25] usb 3-1: device descriptor read/8, error -71 [ 357.661587][ T9640] veth0_macvtap: entered promiscuous mode [ 357.788637][ T9640] veth1_macvtap: entered promiscuous mode [ 357.846232][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 357.879722][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.885029][ T25] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 357.889769][ T9640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.909085][ T9640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.919149][ T9640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.929782][ T9640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 357.940087][ T9640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 357.946792][ T25] usb 3-1: device descriptor read/8, error -71 [ 357.950690][ T9640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.126285][ T9640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.904236][ T25] usb usb3-port1: unable to enumerate USB device [ 358.919104][ T9640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.950773][ T9640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 358.971013][ T9640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 358.985778][ T9640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 359.070274][ T9640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.087033][ T9640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.101802][ T9640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.121008][ T9640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.149955][ T9640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.165042][ T9] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 359.168550][ T9640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.182713][ T9640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.193505][ T9640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.203584][ T9640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.221824][ T9640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.238425][ T9640] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 359.277063][ T952] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.292742][ T9640] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.305262][ T29] audit: type=1804 audit(1719662489.037:115): pid=9844 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.1093" name="/root/syzkaller.ZMiHKn/1/file0" dev="sda1" ino=2023 res=1 errno=0 [ 359.327824][ T952] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.339087][ T9640] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.349088][ T9] usb 2-1: device descriptor read/64, error -71 [ 359.350036][ T9640] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.364273][ T9640] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.574169][ T2468] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.623978][ T2468] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.674955][ T9] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 359.700662][ T9860] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1096'. [ 359.716745][ T2416] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.728393][ T9860] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1096'. [ 359.737643][ T2416] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.765315][ T9860] team0: Device erspan0 is up. Set it down before adding it as a team port [ 359.805752][ T9857] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1095'. [ 359.855608][ T9] usb 2-1: device descriptor read/64, error -71 [ 360.008108][ T9] usb usb2-port1: attempt power cycle [ 360.445871][ T9] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 360.465997][ T5081] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 360.495885][ T9] usb 2-1: device descriptor read/8, error -71 [ 360.656625][ T5081] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 360.680788][ T5081] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 360.691594][ T5081] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 360.716178][ T5081] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 360.739142][ T5081] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 360.751159][ T5081] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 360.771359][ T5081] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 360.786229][ T9] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 360.790388][ T5081] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 360.811284][ T5081] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 360.890846][ T9] usb 2-1: device descriptor read/8, error -71 [ 360.983402][ T5081] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 361.004833][ T5081] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 361.014564][ T5081] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 361.033070][ T5081] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 361.045026][ T5081] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 361.045530][ T9] usb usb2-port1: unable to enumerate USB device [ 361.070146][ T5081] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 361.141603][ T29] audit: type=1804 audit(1719662490.887:116): pid=9887 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.1103" name="/root/syzkaller.iZ4x9P/3/file0" dev="sda1" ino=2028 res=1 errno=0 [ 361.163164][ C1] vkms_vblank_simulate: vblank timer overrun [ 361.188070][ T5081] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 361.198004][ T5081] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 361.218510][ T5081] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 361.257055][ T5081] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 361.274877][ T5081] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.299300][ T9892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.318189][ T5081] usb 4-1: Product: syz [ 361.322420][ T5081] usb 4-1: Manufacturer: syz [ 361.335214][ T9892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.348475][ T5081] usb 4-1: SerialNumber: syz [ 361.492468][ T9895] netlink: 'syz.1.1102': attribute type 1 has an invalid length. [ 361.500577][ T9895] netlink: 9364 bytes leftover after parsing attributes in process `syz.1.1102'. [ 361.511200][ T9895] netlink: 'syz.1.1102': attribute type 1 has an invalid length. [ 361.565217][ T5085] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 361.603847][ T5081] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 21 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 361.755005][ T5085] usb 5-1: device descriptor read/64, error -71 [ 362.001750][ T783] usb 4-1: USB disconnect, device number 21 [ 362.035496][ T783] usblp0: removed [ 362.038044][ T5085] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 362.316922][ T9902] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1107'. [ 362.344966][ T9902] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1107'. [ 362.372202][ T9902] team0: Device nlmon0 is of different type [ 362.612785][ T9910] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0) [ 362.622320][ T9910] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535 [ 363.061483][ T29] audit: type=1804 audit(1719662492.807:117): pid=9921 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.1115" name="/root/syzkaller.F4N0EW/184/file0" dev="sda1" ino=2022 res=1 errno=0 [ 363.345954][ T9930] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1118'. [ 363.396868][ T9930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1118'. [ 363.452409][ T9930] team0: Port device bridge10 added [ 363.767501][ T9938] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1120'. [ 363.782441][ T9938] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1120'. [ 364.644387][ T29] audit: type=1326 audit(1719662494.367:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9950 comm="syz.1.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80b6b75b99 code=0x7ffc0000 [ 364.843330][ T29] audit: type=1326 audit(1719662494.367:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9950 comm="syz.1.1127" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f80b6b75b99 code=0x7ffc0000 [ 365.117929][ T9960] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1129'. [ 365.144596][ T9960] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1129'. [ 365.162710][ T9960] team0: Device hsr_slave_1 is up. Set it down before adding it as a team port [ 365.232570][ T9962] vlan2: entered allmulticast mode [ 365.238724][ T9962] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 365.268717][ T9962] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 365.486753][ T2468] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.808349][ T2468] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.915498][ T5096] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 365.925185][ T5096] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 365.934593][ T5096] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 365.942686][ T5096] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 366.010046][ T2468] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.120507][ T5084] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 366.132531][ T5084] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 366.140585][ T5084] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 366.152905][ T5084] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 366.165802][ T5084] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 366.174636][ T5084] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 366.262249][ T2468] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.660032][ T2468] bridge_slave_1: left allmulticast mode [ 366.676445][ T2468] bridge_slave_1: left promiscuous mode [ 366.682277][ T2468] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.701427][ T2468] bridge_slave_0: left allmulticast mode [ 366.711075][ T2468] bridge_slave_0: left promiscuous mode [ 366.717901][ T2468] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.215048][ T8] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 367.425004][ T8] usb 3-1: config 1 has an invalid descriptor of length 108, skipping remainder of the config [ 367.457251][ T8] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 367.469816][ T8] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 367.479152][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 367.487487][ T8] usb 3-1: SerialNumber: syz [ 367.487982][ T2468] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 367.507122][ T2468] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 367.519100][ T2468] bond0 (unregistering): Released all slaves [ 367.582895][T10007] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1144'. [ 367.611082][T10009] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1144'. [ 367.631657][T10011] team0: Device bridge0 is up. Set it down before adding it as a team port [ 367.812457][ T8] usb 3-1: USB disconnect, device number 43 [ 368.064555][ T2468] hsr_slave_0: left promiscuous mode [ 368.113496][ T2468] hsr_slave_1: left promiscuous mode [ 368.168022][ T2468] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 368.195160][ T2468] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 368.215626][ T2468] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 368.223073][ T2468] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 368.231151][ T5096] Bluetooth: hci3: command tx timeout [ 368.285001][ T2468] veth1_macvtap: left promiscuous mode [ 368.290682][ T2468] veth0_macvtap: left promiscuous mode [ 368.296508][ T2468] veth1_vlan: left promiscuous mode [ 368.302012][ T2468] veth0_vlan: left promiscuous mode [ 370.315249][ T5096] Bluetooth: hci3: command tx timeout [ 370.359220][T10034] net_ratelimit: 6 callbacks suppressed [ 370.359235][T10034] netlink: zone id is out of range [ 370.391495][T10034] netlink: zone id is out of range [ 370.425964][T10034] netlink: zone id is out of range [ 370.437892][T10034] netlink: zone id is out of range [ 370.445696][T10034] netlink: zone id is out of range [ 370.452285][T10034] netlink: zone id is out of range [ 370.459287][T10034] netlink: zone id is out of range [ 370.471277][T10034] netlink: zone id is out of range [ 370.558327][T10034] netlink: zone id is out of range [ 370.580902][T10034] netlink: zone id is out of range [ 370.619587][ T5084] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 370.640267][T10049] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 370.648809][T10049] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 370.656988][T10049] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 370.672298][T10049] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 370.681646][T10049] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 370.911352][T10048] workqueue: Failed to create a rescuer kthread for wq "nfc6_nci_cmd_wq": -EINTR [ 370.932419][T10050] workqueue: Failed to create a rescuer kthread for wq "nfc6_nci_cmd_wq": -EINTR [ 371.324032][ T2468] team0 (unregistering): Port device team_slave_1 removed [ 371.372109][ T2468] team0 (unregistering): Port device team_slave_0 removed [ 371.798291][T10077] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1154'. [ 371.830734][T10079] team0: Port device bridge11 added [ 371.922755][ T9977] chnl_net:caif_netlink_parms(): no params data found [ 372.253092][ T9977] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.278359][ T9977] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.297739][ T9977] bridge_slave_0: entered allmulticast mode [ 372.316546][ T9977] bridge_slave_0: entered promiscuous mode [ 372.363600][T10096] vlan2: entered allmulticast mode [ 372.373836][T10096] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 372.385045][ T5096] Bluetooth: hci3: command tx timeout [ 372.397053][T10096] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 372.478804][ T9977] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.495644][ T9977] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.640533][ T9977] bridge_slave_1: entered allmulticast mode [ 372.649423][ T9977] bridge_slave_1: entered promiscuous mode [ 374.855370][T10049] Bluetooth: hci3: command tx timeout [ 374.860913][ T5096] Bluetooth: hci1: command tx timeout [ 374.964649][ T9977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.039465][ T9977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 375.243353][ T9977] team0: Port device team_slave_0 added [ 375.261800][ T9977] team0: Port device team_slave_1 added [ 375.392519][ T2468] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.423193][ T9977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 375.430991][ T5826] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 375.439078][ T9977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.473025][ T9977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 375.533579][ T2468] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.548801][ T9977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 375.556056][ T9977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.582479][ T9977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.675144][ T2468] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.675639][ T5826] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.698413][ T5826] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.708913][ T5826] usb 3-1: New USB device found, idVendor=04b4, idProduct=ed81, bcdDevice= 0.00 [ 375.718042][ T5826] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.734098][ T5826] usb 3-1: config 0 descriptor?? [ 375.775108][ T9977] hsr_slave_0: entered promiscuous mode [ 375.781896][ T9977] hsr_slave_1: entered promiscuous mode [ 375.806333][ T9977] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 375.817771][ T9977] Cannot create hsr debugfs directory [ 375.874024][ T2468] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.905941][ T5085] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 375.973255][T10043] chnl_net:caif_netlink_parms(): no params data found [ 376.119025][ T5085] usb 4-1: config 0 has no interfaces? [ 376.142703][ T5085] usb 4-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=e1.85 [ 376.161433][ T5826] cypress 0003:04B4:ED81.0018: item fetching failed at offset 6/7 [ 376.162135][ T5085] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.200761][ T5826] cypress 0003:04B4:ED81.0018: parse failed [ 376.205787][ T5085] usb 4-1: config 0 descriptor?? [ 376.220224][ T5826] cypress 0003:04B4:ED81.0018: probe with driver cypress failed with error -22 [ 376.364094][ T5826] usb 3-1: USB disconnect, device number 44 [ 376.451659][ T9] usb 4-1: USB disconnect, device number 22 [ 376.529649][T10043] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.564848][T10043] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.580525][T10043] bridge_slave_0: entered allmulticast mode [ 376.601435][T10043] bridge_slave_0: entered promiscuous mode [ 376.671033][T10043] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.687854][T10043] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.703530][T10043] bridge_slave_1: entered allmulticast mode [ 376.714560][T10043] bridge_slave_1: entered promiscuous mode [ 376.755457][ T2468] bridge_slave_1: left allmulticast mode [ 376.761375][ T2468] bridge_slave_1: left promiscuous mode [ 376.767492][ T2468] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.778521][ T2468] bridge_slave_0: left allmulticast mode [ 376.784210][ T2468] bridge_slave_0: left promiscuous mode [ 376.791046][ T2468] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.962082][ T5096] Bluetooth: hci1: command tx timeout [ 378.727632][T10169] net_ratelimit: 22 callbacks suppressed [ 378.727649][T10169] netlink: zone id is out of range [ 378.752344][T10169] netlink: zone id is out of range [ 378.778574][T10169] netlink: zone id is out of range [ 378.783823][T10169] netlink: zone id is out of range [ 378.790594][T10169] netlink: zone id is out of range [ 378.825237][T10169] netlink: zone id is out of range [ 378.831193][T10169] netlink: zone id is out of range [ 378.838725][T10169] netlink: zone id is out of range [ 378.878848][T10169] netlink: zone id is out of range [ 378.894429][T10169] netlink: zone id is out of range [ 378.951949][ T1243] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.014032][ T2468] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 379.025109][ T5096] Bluetooth: hci1: command tx timeout [ 379.035670][ T2468] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 379.054976][ T2468] bond0 (unregistering): Released all slaves [ 379.214183][T10178] vlan2: entered allmulticast mode [ 379.219946][T10178] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 379.246597][T10178] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 379.658840][T10043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 379.708382][T10043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.332278][T10043] team0: Port device team_slave_0 added [ 380.494044][T10043] team0: Port device team_slave_1 added [ 380.544490][ T2468] hsr_slave_0: left promiscuous mode [ 380.561818][ T2468] hsr_slave_1: left promiscuous mode [ 380.582909][ T2468] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 380.601752][ T2468] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 380.620663][ T2468] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 380.666136][ T2468] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 380.748457][ T2468] veth1_macvtap: left promiscuous mode [ 380.769794][ T2468] veth0_macvtap: left promiscuous mode [ 380.798156][ T2468] veth1_vlan: left promiscuous mode [ 380.803481][ T2468] veth0_vlan: left promiscuous mode [ 381.107322][ T5096] Bluetooth: hci1: command tx timeout [ 381.147258][T10215] netlink: 'syz.3.1182': attribute type 48 has an invalid length. [ 381.452878][ T2468] team0 (unregistering): Port device team_slave_1 removed [ 381.494026][ T2468] team0 (unregistering): Port device team_slave_0 removed [ 381.912761][T10043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.934588][T10043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.961245][T10043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.986445][T10043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.993501][T10043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.021683][T10043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.979200][T10049] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 383.000137][T10049] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 383.011201][T10049] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 383.040817][T10049] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 383.055420][T10049] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 383.063811][T10049] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 384.885601][T10043] hsr_slave_0: entered promiscuous mode [ 384.916338][T10043] hsr_slave_1: entered promiscuous mode [ 384.939244][T10043] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 384.952441][T10043] Cannot create hsr debugfs directory [ 385.050296][ T9977] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 385.074075][ T9977] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 385.161049][ T9977] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 385.164847][ T5206] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 385.185730][T10049] Bluetooth: hci4: command tx timeout [ 385.210947][ T9977] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 385.358323][ T5206] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.374911][ T5206] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 385.405043][ T5206] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 385.414123][ T5206] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.437219][ T5206] usb 4-1: config 0 descriptor?? [ 385.655322][ T2468] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.756926][ T2468] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.783172][T10220] chnl_net:caif_netlink_parms(): no params data found [ 385.869461][ T5206] plantronics 0003:047F:FFFF.0019: No inputs registered, leaving [ 385.888577][ T5206] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 385.932321][ T2468] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.108098][ T2468] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.239070][T10220] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.256704][T10220] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.274462][T10220] bridge_slave_0: entered allmulticast mode [ 386.283345][T10220] bridge_slave_0: entered promiscuous mode [ 386.297665][T10220] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.305075][T10220] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.312320][T10220] bridge_slave_1: entered allmulticast mode [ 386.319910][T10220] bridge_slave_1: entered promiscuous mode [ 386.384394][ T5096] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 386.394484][ T5096] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 386.403665][ T5096] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 386.416286][ T5096] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 386.422128][T10220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 386.434160][ T5096] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 386.442007][ T5096] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 386.470693][ T9977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.511459][T10220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 386.618331][T10220] team0: Port device team_slave_0 added [ 386.629514][T10220] team0: Port device team_slave_1 added [ 386.663836][T10043] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 386.778072][T10043] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 386.817267][T10043] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 386.855309][T10220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 386.880660][T10220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.924071][T10220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 386.988666][ T9977] 8021q: adding VLAN 0 to HW filter on device team0 [ 387.002831][T10236] netlink: 'syz.3.1192': attribute type 4 has an invalid length. [ 387.044067][T10043] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 387.088532][ T2468] bridge_slave_1: left allmulticast mode [ 387.094347][ T2468] bridge_slave_1: left promiscuous mode [ 387.102955][ T2468] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.116454][ T2468] bridge_slave_0: left allmulticast mode [ 387.122241][ T2468] bridge_slave_0: left promiscuous mode [ 387.129906][ T2468] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.266995][ T5096] Bluetooth: hci4: command tx timeout [ 387.550352][ T2468] dvmrp5 (unregistering): left allmulticast mode [ 387.655870][ T2468] team0: Port device bridge1 removed [ 387.713096][ T2468] team0: Port device bridge2 removed [ 387.767403][ T2468] team0: Port device bridge3 removed [ 387.837571][ T2468] team0: Port device bridge4 removed [ 387.921913][ T2468] team0: Port device bridge5 removed [ 387.992599][ T2468] team0: Port device bridge6 removed [ 388.062955][ T2468] team0: Port device bridge7 removed [ 388.127859][ T2468] team0: Port device bridge8 removed [ 388.186621][ T2468] team0: Port device bridge9 removed [ 388.239364][ T2468] team0: Port device bridge10 removed [ 388.293134][ T2468] team0: Port device bridge11 removed [ 388.459202][ T2468] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 388.471217][ T2468] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 388.475081][ T5096] Bluetooth: hci0: command tx timeout [ 388.497298][ T2468] bond0 (unregistering): Released all slaves [ 388.511389][T10249] netlink: 'syz.3.1192': attribute type 4 has an invalid length. [ 388.534959][T10220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 388.550593][T10220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.585027][T10220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 388.646367][ T5206] usb 4-1: USB disconnect, device number 23 [ 388.697888][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.705093][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.743349][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.750591][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.017188][T10220] hsr_slave_0: entered promiscuous mode [ 389.027092][T10220] hsr_slave_1: entered promiscuous mode [ 389.044939][T10220] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 389.052856][T10220] Cannot create hsr debugfs directory [ 389.344781][ T5096] Bluetooth: hci4: command tx timeout [ 389.450721][ T2468] hsr_slave_0: left promiscuous mode [ 389.467930][ T2468] hsr_slave_1: left promiscuous mode [ 389.502843][ T2468] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 389.529817][ T2468] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 389.555910][ T2468] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 389.591451][ T2468] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 389.657427][ T2468] veth1_macvtap: left promiscuous mode [ 389.675039][ T2468] veth0_macvtap: left promiscuous mode [ 389.682186][ T2468] veth1_vlan: left promiscuous mode [ 389.694991][ T2468] veth0_vlan: left promiscuous mode [ 390.123192][ T2468] pimreg (unregistering): left allmulticast mode [ 390.564979][ T5096] Bluetooth: hci0: command tx timeout [ 390.761176][ T2468] team0 (unregistering): Port device team_slave_1 removed [ 390.815250][ T2468] team0 (unregistering): Port device team_slave_0 removed [ 391.425786][ T5096] Bluetooth: hci4: command tx timeout [ 391.884131][T10043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.054592][T10043] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.084574][T10245] chnl_net:caif_netlink_parms(): no params data found [ 392.199171][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.206405][ T5826] bridge0: port 1(bridge_slave_0) entered forwarding state [ 392.393586][ T783] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.400784][ T783] bridge0: port 2(bridge_slave_1) entered forwarding state [ 392.627171][ T5096] Bluetooth: hci0: command tx timeout [ 392.710659][ T2468] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.729126][T10245] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.739391][T10245] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.765080][T10245] bridge_slave_0: entered allmulticast mode [ 392.772515][T10245] bridge_slave_0: entered promiscuous mode [ 392.818634][T10245] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.852528][T10245] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.865578][T10245] bridge_slave_1: entered allmulticast mode [ 392.872939][T10245] bridge_slave_1: entered promiscuous mode [ 393.002267][ T2468] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.021983][ T9977] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 393.190273][ T2468] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.233288][T10220] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 393.299547][T10245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 393.331075][T10245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 393.342691][T10220] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 393.394307][ T2468] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.423553][T10220] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 393.441212][T10220] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 393.539474][T10245] team0: Port device team_slave_0 added [ 393.594018][T10043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 393.631667][T10245] team0: Port device team_slave_1 added [ 393.706375][T10245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 393.713340][T10245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.771798][T10245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 393.834308][T10245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 393.851051][T10245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.885097][T10245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 393.999628][T10049] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 394.015463][T10049] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 394.024006][T10049] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 394.032375][ T2468] bridge_slave_1: left allmulticast mode [ 394.039112][T10049] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 394.041117][ T2468] bridge_slave_1: left promiscuous mode [ 394.050808][T10049] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 394.055694][ T2468] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.065428][T10049] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 394.079457][ T2468] bridge_slave_0: left allmulticast mode [ 394.088229][ T2468] bridge_slave_0: left promiscuous mode [ 394.097372][ T2468] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.400969][ T2468] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 394.411835][ T2468] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 394.422623][ T2468] bond0 (unregistering): Released all slaves [ 394.541506][T10245] hsr_slave_0: entered promiscuous mode [ 394.556160][T10245] hsr_slave_1: entered promiscuous mode [ 394.563242][T10245] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 394.571720][T10245] Cannot create hsr debugfs directory [ 394.663724][T10043] veth0_vlan: entered promiscuous mode [ 394.706540][T10049] Bluetooth: hci0: command tx timeout [ 394.718484][ T9977] veth0_vlan: entered promiscuous mode [ 394.843641][T10043] veth1_vlan: entered promiscuous mode [ 394.902813][ T2468] hsr_slave_0: left promiscuous mode [ 394.913645][ T2468] hsr_slave_1: left promiscuous mode [ 394.922012][ T2468] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 394.929571][ T2468] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 394.937813][ T2468] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 394.945526][ T2468] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 394.972446][ T2468] veth1_macvtap: left promiscuous mode [ 394.979226][ T2468] veth0_macvtap: left promiscuous mode [ 394.985468][ T2468] veth1_vlan: left promiscuous mode [ 394.990802][ T2468] veth0_vlan: left promiscuous mode [ 395.507084][ T2468] team0 (unregistering): Port device team_slave_1 removed [ 395.550589][ T2468] team0 (unregistering): Port device team_slave_0 removed [ 395.916213][T10220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.967918][ T9977] veth1_vlan: entered promiscuous mode [ 396.044893][T10220] 8021q: adding VLAN 0 to HW filter on device team0 [ 396.144336][ T783] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.151512][ T783] bridge0: port 1(bridge_slave_0) entered forwarding state [ 396.159234][T10049] Bluetooth: hci2: command tx timeout [ 396.261113][T10043] veth0_macvtap: entered promiscuous mode [ 396.305174][ T783] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.312341][ T783] bridge0: port 2(bridge_slave_1) entered forwarding state [ 396.381492][ T9977] veth0_macvtap: entered promiscuous mode [ 396.417423][ T9977] veth1_macvtap: entered promiscuous mode [ 396.480562][T10043] veth1_macvtap: entered promiscuous mode [ 396.510566][T10374] chnl_net:caif_netlink_parms(): no params data found [ 396.551109][ T9977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.562424][ T9977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.573128][ T9977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.583818][ T9977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.596645][ T9977] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 396.661031][ T9977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.673787][ T9977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.687387][ T9977] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.698138][ T9977] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.710144][ T9977] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 396.726511][T10043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.737304][T10043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.748373][T10043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.759543][T10043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.769507][T10043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 396.780129][T10043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.791820][T10043] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 396.898028][ T9977] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.908206][ T9977] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.919860][ T9977] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.929127][ T9977] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.942015][T10043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.953222][T10043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.963182][T10043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.974220][T10043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 396.984864][T10043] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 396.995456][T10043] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.006748][T10043] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 397.019356][T10043] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.028803][T10043] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.038250][T10043] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.047284][T10043] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 397.080116][T10374] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.087815][T10374] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.095188][T10374] bridge_slave_0: entered allmulticast mode [ 397.101961][T10374] bridge_slave_0: entered promiscuous mode [ 397.136741][ T2468] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.169502][T10374] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.178073][T10374] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.188887][T10374] bridge_slave_1: entered allmulticast mode [ 397.196420][T10374] bridge_slave_1: entered promiscuous mode [ 397.250249][T10374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 397.319311][ T2468] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.340021][T10374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 397.410396][ T2468] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.468445][T10374] team0: Port device team_slave_0 added [ 397.501152][ T2468] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.536278][T10374] team0: Port device team_slave_1 added [ 397.575856][T10220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 397.637949][T10374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 397.645437][T10374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.672585][T10374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 397.685828][T10374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 397.692793][T10374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 397.722987][T10374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 397.780846][T10245] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 397.791914][T10245] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 397.795749][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 397.815215][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.871481][T10245] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 397.949577][T10245] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 398.008811][T10374] hsr_slave_0: entered promiscuous mode [ 398.016033][T10374] hsr_slave_1: entered promiscuous mode [ 398.036316][ T2468] bridge_slave_1: left allmulticast mode [ 398.053682][ T2468] bridge_slave_1: left promiscuous mode [ 398.060555][ T2468] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.083192][ T2468] bridge_slave_0: left allmulticast mode [ 398.091720][ T2468] bridge_slave_0: left promiscuous mode [ 398.097662][ T2468] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.226533][T10049] Bluetooth: hci2: command tx timeout [ 398.419413][ T2468] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 398.430506][ T2468] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 398.442055][ T2468] bond0 (unregistering): Released all slaves [ 398.462263][T10220] veth0_vlan: entered promiscuous mode [ 398.532080][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.542181][T10220] veth1_vlan: entered promiscuous mode [ 398.564827][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.644228][ T1040] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.660811][ T1040] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.838504][T10422] binder: 10421:10422 ioctl c0306201 0 returned -14 [ 398.851501][T10422] binder: 10421:10422 ioctl c0306201 0 returned -14 [ 398.912274][T10220] veth0_macvtap: entered promiscuous mode [ 398.929079][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.939198][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.065888][ T2468] hsr_slave_0: left promiscuous mode [ 399.072044][ T2468] hsr_slave_1: left promiscuous mode [ 399.084429][ T2468] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 399.094493][ T2468] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 399.135902][ T2468] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 399.143372][ T2468] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 399.215553][ T2468] veth1_macvtap: left promiscuous mode [ 399.222301][ T2468] veth0_macvtap: left promiscuous mode [ 399.234934][ T2468] veth1_vlan: left promiscuous mode [ 399.240356][ T2468] veth0_vlan: left promiscuous mode [ 399.895028][ T25] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 400.152985][ T25] usb 2-1: string descriptor 0 read error: -22 [ 400.170987][ T25] usb 2-1: New USB device found, idVendor=30c9, idProduct=0093, bcdDevice=18.c6 [ 400.211495][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.251188][ T25] usb 2-1: config 0 descriptor?? [ 400.267309][ T25] usb 2-1: Found UVC 0.00 device (30c9:0093) [ 400.274303][ T25] usb 2-1: No valid video chain found. [ 400.307539][T10049] Bluetooth: hci2: command tx timeout [ 400.830030][ T2468] team0 (unregistering): Port device team_slave_1 removed [ 400.907325][ T2468] team0 (unregistering): Port device team_slave_0 removed [ 401.400024][T10220] veth1_macvtap: entered promiscuous mode [ 401.547901][T10220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 401.563533][T10220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.579908][T10220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 401.599934][T10220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.613991][T10220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 401.627390][T10220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.669533][T10220] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 401.718535][T10220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 401.731974][T10220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.745611][T10220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 401.764100][T10220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.780945][T10220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 401.792757][T10220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.830877][T10220] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 401.909034][T10220] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.922190][T10220] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.934888][T10220] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.946108][T10220] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.168770][T10245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 402.341706][T10245] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.385438][T10049] Bluetooth: hci2: command tx timeout [ 402.482551][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.489771][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.527362][T10480] usb 2-1: USB disconnect, device number 39 [ 402.580014][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.595617][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.660320][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.667529][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 402.752630][T10374] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 402.784438][T10374] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 402.801388][T10374] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 402.830554][ T1040] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.854492][T10374] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 402.874284][ T1040] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.875730][ T5085] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 403.115157][ T5085] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 403.177853][ T5085] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 403.203117][ T5085] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.239763][ T5085] usb 5-1: Product: syz [ 403.244065][ T5085] usb 5-1: Manufacturer: syz [ 403.278661][ T5085] usb 5-1: SerialNumber: syz [ 403.294284][T10374] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.307018][ T5085] usb 5-1: config 0 descriptor?? [ 403.375875][T10374] 8021q: adding VLAN 0 to HW filter on device team0 [ 403.399788][ T783] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.407019][ T783] bridge0: port 1(bridge_slave_0) entered forwarding state [ 403.514892][ T783] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.522196][ T783] bridge0: port 2(bridge_slave_1) entered forwarding state [ 403.669896][T10245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 403.946126][T10245] veth0_vlan: entered promiscuous mode [ 404.011918][T10245] veth1_vlan: entered promiscuous mode [ 404.199805][T10245] veth0_macvtap: entered promiscuous mode [ 404.223294][T10245] veth1_macvtap: entered promiscuous mode [ 404.279556][T10245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 404.315326][T10245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.342632][T10245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 404.352778][ T29] audit: type=1326 audit(1719662534.087:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10488 comm="syz.4.1210" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efecdd75b99 code=0x0 [ 404.364745][T10245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.406449][T10245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 404.420784][T10245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.431100][T10245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 404.441996][T10245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.456882][T10245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 404.473253][T10245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 404.516552][T10245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.574840][T10245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 404.600267][T10245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.643964][T10245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 404.670553][T10245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.684812][T10245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 404.704510][T10245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 404.734166][T10245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 404.874280][T10245] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.905464][T10245] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.919018][T10245] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 404.930252][T10245] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.053118][T10374] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 405.171390][ T1040] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.191736][ T1040] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.281113][ T2425] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.303657][ T2425] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.344465][T10374] veth0_vlan: entered promiscuous mode [ 405.365112][ T783] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 405.381845][T10374] veth1_vlan: entered promiscuous mode [ 405.529683][T10374] veth0_macvtap: entered promiscuous mode [ 405.548486][T10374] veth1_macvtap: entered promiscuous mode [ 405.577906][ T783] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 405.635634][ T783] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 405.649412][ T783] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 405.658913][ T783] usb 2-1: SerialNumber: syz [ 405.661375][T10374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.669051][ T783] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 405.682939][T10374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.693672][T10374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.707380][T10374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.720478][T10374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.733250][T10374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.770384][T10374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.787713][T10374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.801766][T10374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 405.819465][T10374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 405.890610][T10374] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 405.959471][T10374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.012467][T10374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.028961][T10374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.047909][T10374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.058958][T10374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.085331][T10374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.095534][T10374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.095556][T10374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.095572][T10374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 406.095586][T10374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 406.097572][T10374] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 406.208772][T10374] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.224442][T10374] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.240115][T10374] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.262666][ T5085] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 406.278523][T10374] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.291671][ T5085] usb 5-1: USB disconnect, device number 23 [ 407.086659][ T5448] udevd[5448]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 407.195414][T10564] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1224'. [ 407.308399][T10564] team0: Device batadv0 is up. Set it down before adding it as a team port [ 407.351975][T10573] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1228'. [ 407.486091][ T2425] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.534787][ T2425] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.622697][T10580] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1230'. [ 407.638432][ T2468] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.669140][ T2468] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.214984][T10593] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1234'. [ 408.852352][T10615] fuse: Bad value for 'fd' [ 409.066988][T10623] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1238'. [ 409.096456][T10623] team0: Device veth0_to_team is up. Set it down before adding it as a team port [ 409.906131][ T5085] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 410.363350][T10629] capability: warning: `syz.2.1242' uses deprecated v2 capabilities in a way that may be insecure [ 410.451735][ T5085] usb 4-1: config 0 has no interfaces? [ 410.460940][T10646] fuse: Bad value for 'fd' [ 410.465579][ T5085] usb 4-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 410.465609][ T5085] usb 4-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 410.465631][ T5085] usb 4-1: Manufacturer: syz [ 410.465646][ T5085] usb 4-1: SerialNumber: syz [ 410.469307][ T5085] usb 4-1: config 0 descriptor?? [ 410.557302][ T29] audit: type=1804 audit(1719662540.307:121): pid=10650 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.1.1243" name="/root/syzkaller.iZ6nfo/15/file0" dev="sda1" ino=2037 res=1 errno=0 [ 411.052082][T10669] fuse: Bad value for 'fd' [ 411.252805][T10631] Bluetooth: MGMT ver 1.22 [ 411.334966][T10674] netlink: 116 bytes leftover after parsing attributes in process `syz.4.1250'. [ 411.796553][T10683] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1252'. [ 411.842179][T10683] team0: Device veth0_to_bond is up. Set it down before adding it as a team port [ 412.043289][ T5131] usb 4-1: USB disconnect, device number 24 [ 413.803279][T10713] fuse: Bad value for 'fd' [ 414.024812][ T8] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 414.155107][T10722] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1263'. [ 414.223950][ T8] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x7F has an invalid bInterval 0, changing to 7 [ 414.272719][ T8] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 414.276221][T10726] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1265'. [ 414.289181][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.301629][ T8] usb 3-1: Product: syz [ 414.306082][ T8] usb 3-1: Manufacturer: syz [ 414.310684][ T8] usb 3-1: SerialNumber: syz [ 414.337393][T10729] team0: Device vcan0 is of different type [ 414.771382][T10733] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1267'. [ 415.870589][ T8] cdc_ncm 3-1:1.0: bind() failure [ 415.907510][ T8] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 415.945195][ T8] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 415.978347][ T8] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 416.024972][ T8] usb 3-1: USB disconnect, device number 45 [ 417.512209][T10778] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1277'. [ 417.526989][T10778] bridge_slave_0: left allmulticast mode [ 417.532679][T10778] bridge_slave_0: left promiscuous mode [ 417.559364][T10778] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.625776][T10778] team0: Device bridge_slave_0 is up. Set it down before adding it as a team port [ 417.663162][T10779] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 419.451160][T10814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.464261][T10814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.736547][T10821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.763464][T10821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.802080][T10828] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1291'. [ 419.842635][T10828] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1291'. [ 421.583826][T10852] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1297'. [ 422.509381][T10868] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1302'. [ 422.964171][T10871] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1302'. [ 423.323555][T10872] team0: Port device bridge2 added [ 423.603259][T10879] net_ratelimit: 6 callbacks suppressed [ 423.603278][T10879] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 423.754832][ T45] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 423.968250][ T45] usb 4-1: config 0 has no interfaces? [ 423.980590][ T45] usb 4-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 424.002351][ T45] usb 4-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 424.015631][ T45] usb 4-1: Manufacturer: syz [ 424.020262][ T45] usb 4-1: SerialNumber: syz [ 424.046072][ T45] usb 4-1: config 0 descriptor?? [ 424.184979][ T5131] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 424.204062][ T11] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 424.244209][T10889] bond_slave_0: entered promiscuous mode [ 424.250442][T10889] bond_slave_1: entered promiscuous mode [ 424.252699][T10888] bond_slave_0: left promiscuous mode [ 424.252814][T10888] bond_slave_1: left promiscuous mode [ 424.396389][ T5131] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 424.417647][ T5131] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 424.436715][ T5131] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 424.446974][ T5131] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.459720][ T5131] usb 3-1: config 0 descriptor?? [ 424.462717][T10900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 424.512135][T10900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 424.699441][ T45] usb 4-1: USB disconnect, device number 25 [ 424.919703][ T5131] plantronics 0003:047F:FFFF.001A: No inputs registered, leaving [ 424.934610][ T5131] plantronics 0003:047F:FFFF.001A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 425.331487][T10917] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1315'. [ 425.352147][T10917] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1315'. [ 425.369883][T10917] team0: Port device bridge3 added [ 426.502429][T10950] netlink: 'syz.1.1321': attribute type 1 has an invalid length. [ 426.696855][T10952] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1322'. [ 426.773309][T10956] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.826630][T10956] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.877509][ T29] audit: type=1800 audit(1719662556.627:122): pid=10957 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.1323" name="file1" dev="sda1" ino=2042 res=0 errno=0 [ 427.287677][T10884] netlink: 'syz.2.1307': attribute type 4 has an invalid length. [ 427.448147][T10884] netlink: 'syz.2.1307': attribute type 4 has an invalid length. [ 427.645525][T10963] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1326'. [ 427.716123][T10963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.760699][T10965] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1327'. [ 427.777834][T10963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.843840][T10965] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1327'. [ 427.900328][T10965] team0: Port device bridge1 added [ 429.043022][ T5085] usb 3-1: USB disconnect, device number 46 [ 429.415401][T11020] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1341'. [ 429.497831][T11024] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1341'. [ 429.617412][T11020] team0: Port device bridge1 added [ 429.625943][T11025] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1342'. [ 429.712167][T11023] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1342'. [ 429.891757][T11026] team0: Port device bridge1 added [ 430.127584][T11037] sctp: [Deprecated]: syz.2.1347 (pid 11037) Use of struct sctp_assoc_value in delayed_ack socket option. [ 430.127584][T11037] Use struct sctp_sack_info instead [ 430.755408][T11051] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1353'. [ 430.774276][T11051] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1353'. [ 430.799386][T10480] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 430.808002][ T8] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 430.820409][T11051] team0: Port device bridge4 added [ 430.937244][T11054] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 431.007255][T10480] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 431.020841][ T8] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x7F has an invalid bInterval 0, changing to 7 [ 431.036803][T10480] usb 4-1: New USB device found, idVendor=1e2d, idProduct=0069, bcdDevice=f7.47 [ 431.047577][T10480] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.055849][ T8] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 431.067629][T10480] usb 4-1: Product: syz [ 431.071811][T10480] usb 4-1: Manufacturer: syz [ 431.076518][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.085937][T10480] usb 4-1: SerialNumber: syz [ 431.137457][ T8] usb 3-1: Product: syz [ 431.953169][ T8] usb 3-1: Manufacturer: syz [ 431.960446][ T8] usb 3-1: SerialNumber: syz [ 431.966490][T10480] usb 4-1: config 0 descriptor?? [ 431.974049][T10480] cdc_ether 4-1:0.0: invalid descriptor buffer length [ 431.982295][T10480] usb 4-1: bad CDC descriptors [ 432.190121][ T9] usb 4-1: USB disconnect, device number 26 [ 432.772231][ T29] audit: type=1800 audit(1719662562.517:123): pid=11079 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.1361" name="bus" dev="sda1" ino=2063 res=0 errno=0 [ 432.794965][ T29] audit: type=1800 audit(1719662562.517:124): pid=11079 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.4.1361" name="bus" dev="sda1" ino=2063 res=0 errno=0 [ 433.075812][ T8] cdc_ncm 3-1:1.0: bind() failure [ 433.091649][ T8] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 433.114016][ T8] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 433.784417][ T8] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 433.795873][ T8] usb 3-1: USB disconnect, device number 47 [ 433.986854][T11095] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1365'. [ 434.052594][T11103] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1365'. [ 434.292090][T11095] team0: Port device bridge2 added [ 434.526611][T11104] vlan2: entered allmulticast mode [ 434.534893][T11104] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 435.023098][T11104] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 435.031199][T11113] dccp_xmit_packet: Payload too large (65475) for featneg. [ 437.184741][ T29] audit: type=1326 audit(1719662565.967:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11121 comm="syz.2.1374" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f12fbb75b99 code=0x0 [ 437.339875][T11141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.357375][T11141] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.531902][ T29] audit: type=1326 audit(1719662568.277:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11169 comm="syz.1.1382" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f234cd75b99 code=0x0 [ 438.938823][T11178] hub 9-0:1.0: USB hub found [ 438.997305][T11178] hub 9-0:1.0: 8 ports detected [ 439.905413][ T29] audit: type=1326 audit(1719662569.537:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11187 comm="syz.3.1389" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efec0175b99 code=0x0 [ 440.376144][ T29] audit: type=1804 audit(1719662570.117:128): pid=11208 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.1393" name="/root/syzkaller.Uk6sPr/46/cgroup.controllers" dev="sda1" ino=2062 res=1 errno=0 [ 440.425577][ T1243] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.515838][T11213] IPVS: persistence engine module ip_vs_pe_si not found [ 441.580088][T11232] netlink: 'syz.3.1396': attribute type 4 has an invalid length. [ 441.615327][T11231] netlink: 'syz.4.1398': attribute type 4 has an invalid length. [ 441.655724][T11232] netlink: 'syz.3.1396': attribute type 4 has an invalid length. [ 441.681632][T11234] netlink: 'syz.4.1398': attribute type 4 has an invalid length. [ 443.012943][ T29] audit: type=1326 audit(1719662572.757:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11252 comm="syz.1.1404" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f234cd75b99 code=0x0 [ 443.476583][T11262] hub 9-0:1.0: USB hub found [ 443.493417][T11262] hub 9-0:1.0: 8 ports detected [ 446.075058][ T783] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 446.189437][ T29] audit: type=1800 audit(1719662575.937:130): pid=11302 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.1418" name="/" dev="9p" ino=2 res=0 errno=0 [ 446.209466][T11311] netlink: 'syz.2.1420': attribute type 4 has an invalid length. [ 446.280910][ T783] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x7F has an invalid bInterval 0, changing to 7 [ 446.300405][T11311] netlink: 'syz.2.1420': attribute type 4 has an invalid length. [ 446.326762][ T783] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 446.336115][ T783] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.344207][ T783] usb 5-1: Product: syz [ 446.348963][ T783] usb 5-1: Manufacturer: syz [ 446.357226][ T783] usb 5-1: SerialNumber: syz [ 448.329174][ T783] cdc_ncm 5-1:1.0: bind() failure [ 448.353643][ T783] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 448.374598][ T783] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 448.404287][ T783] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 448.429649][ T783] usb 5-1: USB disconnect, device number 24 [ 449.095335][T11344] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1430'. [ 451.734902][T10480] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 451.941230][T10480] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x7F has an invalid bInterval 0, changing to 7 [ 452.119030][T10480] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 452.226613][T10480] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.320037][T10480] usb 5-1: Product: syz [ 452.472519][T10480] usb 5-1: Manufacturer: syz [ 452.477239][T10480] usb 5-1: SerialNumber: syz [ 453.024860][T10049] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 453.036380][T10049] Bluetooth: hci3: Injecting HCI hardware error event [ 453.045835][T10049] Bluetooth: hci3: hardware error 0x00 [ 453.823733][T11401] netlink: zone id is out of range [ 453.911338][T11401] netlink: zone id is out of range [ 453.917918][T11401] netlink: zone id is out of range [ 453.925117][T11401] netlink: zone id is out of range [ 453.935232][T11401] netlink: zone id is out of range [ 453.940474][T11401] netlink: zone id is out of range [ 453.946717][T11401] netlink: zone id is out of range [ 453.965779][T11401] netlink: zone id is out of range [ 453.985352][T11401] netlink: zone id is out of range [ 453.995169][ T29] audit: type=1326 audit(1719662583.727:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11410 comm="syz.2.1447" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f12fbb75b99 code=0x0 [ 454.042804][T11401] netlink: zone id is out of range [ 454.507082][T10480] cdc_ncm 5-1:1.0: bind() failure [ 454.534134][T10480] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 454.545128][T10480] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 454.557486][T10480] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 454.581109][T10480] usb 5-1: USB disconnect, device number 25 [ 455.240107][T11421] hub 9-0:1.0: USB hub found [ 455.253082][T11421] hub 9-0:1.0: 8 ports detected [ 455.597763][ T29] audit: type=1326 audit(1719662585.347:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11418 comm="syz.1.1450" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f234cd75b99 code=0x0 [ 455.848620][T10049] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 456.704845][T10049] Bluetooth: hci1: command tx timeout [ 457.620116][T11460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.649875][T11460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.755468][T11467] netlink: 'syz.1.1461': attribute type 4 has an invalid length. [ 457.830826][T11468] netlink: 'syz.1.1461': attribute type 4 has an invalid length. [ 458.540960][ T29] audit: type=1804 audit(1719662588.257:133): pid=11483 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.4.1466" name="/root/syzkaller.Uk6sPr/59/file0" dev="sda1" ino=2061 res=1 errno=0 [ 459.007866][ T29] audit: type=1326 audit(1719662588.437:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11476 comm="syz.2.1464" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f12fbb75b99 code=0x0 [ 459.025026][T11489] loop0: detected capacity change from 0 to 7 [ 459.090194][T11489] Dev loop0: unable to read RDB block 7 [ 459.096388][T11489] loop0: unable to read partition table [ 459.260613][T11489] loop0: partition table beyond EOD, truncated [ 459.288537][T11489] loop_reread_partitions: partition scan of loop0 (被xڬdƤݡ [ 459.288537][T11489] ) failed (rc=-5) [ 460.337949][T11509] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 460.375333][T11509] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 460.383874][T11509] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 460.394894][T11509] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 460.670739][T11524] net_ratelimit: 38 callbacks suppressed [ 460.670759][T11524] netlink: zone id is out of range [ 460.696123][T11524] netlink: zone id is out of range [ 460.727647][T11524] netlink: zone id is out of range [ 460.734225][T11524] netlink: zone id is out of range [ 460.740487][T11524] netlink: zone id is out of range [ 460.749725][T11524] netlink: zone id is out of range [ 460.755078][T11524] netlink: zone id is out of range [ 460.760585][T11524] netlink: zone id is out of range [ 460.770523][T11524] netlink: zone id is out of range [ 460.783365][T11524] netlink: zone id is out of range [ 461.207937][ T29] audit: type=1326 audit(1719662590.847:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11531 comm="syz.1.1480" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f234cd75b99 code=0x0 [ 462.754654][T11560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.930022][T11560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.706868][T11565] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 463.719157][T11568] netlink: 'syz.1.1490': attribute type 4 has an invalid length. [ 463.740487][T11565] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 463.759438][T11565] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 463.795898][T11565] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 463.817246][T11572] netlink: 'syz.1.1490': attribute type 4 has an invalid length. [ 463.934844][ T9] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 464.140263][ T9] usb 4-1: config 0 has an invalid descriptor of length 206, skipping remainder of the config [ 464.179875][ T9] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 8 [ 464.220676][ T9] usb 4-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice= 0.00 [ 464.280212][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 464.309309][ T9] usb 4-1: SerialNumber: syz [ 464.338785][ T9] usb 4-1: config 0 descriptor?? [ 466.195275][ T9] usb 4-1: USB disconnect, device number 27 [ 466.319464][T11596] 9pnet_fd: Insufficient options for proto=fd [ 466.945290][ T4481] Bluetooth: hci5: command 0x1003 tx timeout [ 466.955866][T10049] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 467.052764][T11621] fuse: Bad value for 'fd' [ 470.001034][T10480] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 470.024934][ T45] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 470.197232][T10480] usb 5-1: config 0 has an invalid descriptor of length 206, skipping remainder of the config [ 470.215000][ T45] usb 4-1: device descriptor read/64, error -71 [ 470.222339][T10480] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 8 [ 470.245018][T11643] 9pnet_fd: Insufficient options for proto=fd [ 470.276027][T10480] usb 5-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice= 0.00 [ 470.295032][T10480] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 470.313382][T10480] usb 5-1: SerialNumber: syz [ 470.323593][T10480] usb 5-1: config 0 descriptor?? [ 470.509144][ T45] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 470.589342][ T1040] Bluetooth: hci5: Frame reassembly failed (-84) [ 471.781338][T10480] usb 5-1: USB disconnect, device number 26 [ 472.305038][ T25] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 472.806190][T10049] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 472.807670][ T4481] Bluetooth: hci5: command 0x1003 tx timeout [ 473.066841][ T25] usb 5-1: device descriptor read/64, error -71 [ 473.082170][T11683] 9pnet_fd: Insufficient options for proto=fd [ 473.266923][T11695] 9pnet_fd: Insufficient options for proto=fd [ 473.366356][ T25] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 474.289302][ T25] usb 5-1: device descriptor read/64, error -71 [ 474.420735][ T25] usb usb5-port1: attempt power cycle [ 474.874996][ T25] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 474.935452][ T25] usb 5-1: device descriptor read/8, error -71 [ 475.007434][T11725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.041418][T11725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.056512][T11728] 9pnet_fd: Insufficient options for proto=fd [ 475.073781][T11725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.100594][T11725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.163007][ T5096] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 476.026812][T11746] vlan2: entered allmulticast mode [ 476.048202][T11746] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 476.624886][ T5096] Bluetooth: hci5: command 0x1003 tx timeout [ 476.694955][T10049] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 476.969411][T11760] 9pnet_fd: Insufficient options for proto=fd [ 477.956986][ T29] audit: type=1326 audit(1719662607.297:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11764 comm="syz.2.1560" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f12fbb75b99 code=0x0 [ 478.575922][T11789] vlan3: entered promiscuous mode [ 478.596233][T11789] vlan3: entered allmulticast mode [ 478.613624][T11789] hsr_slave_1: entered allmulticast mode [ 478.868100][T11802] netlink: 'syz.2.1569': attribute type 4 has an invalid length. [ 481.226184][T11838] 9pnet_fd: Insufficient options for proto=fd [ 482.201151][ T45] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 482.474852][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 482.614923][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 482.649738][ T45] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 483.389130][ T45] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 483.407475][ T45] usb 3-1: Manufacturer: syz [ 483.412106][ T45] usb 3-1: SerialNumber: syz [ 483.445887][ T45] usb 3-1: config 0 descriptor?? [ 483.471282][ T45] hub 3-1:0.0: bad descriptor, ignoring hub [ 483.494795][ T45] hub 3-1:0.0: probe with driver hub failed with error -5 [ 483.529570][ T45] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input10 [ 483.585209][ T45] usbtouchscreen 3-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8 [ 483.663676][ T45] usbtouchscreen 3-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 483.741451][ T45] usb 3-1: USB disconnect, device number 48 [ 485.055288][T11915] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1599'. [ 485.374986][T10480] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 485.596930][T11934] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 486.306449][T10480] usb 5-1: Using ep0 maxpacket: 8 [ 486.326518][T10480] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 486.334003][T10480] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 486.365863][T10480] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 486.380458][T10480] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 486.423924][T10480] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 486.433019][T10480] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 486.450002][T10480] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 486.462779][T10480] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 486.479048][ T5134] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.506486][T10480] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 486.524778][T10480] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 486.558818][T10480] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 486.594934][T10480] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 486.622038][T10480] usb 5-1: string descriptor 0 read error: -22 [ 486.631339][T10480] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 486.655541][T10480] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.678825][T10480] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 486.901200][ T783] usb 5-1: USB disconnect, device number 31 [ 487.255143][T11976] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 488.136251][T11987] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 488.149702][ T29] audit: type=1804 audit(1719662617.897:137): pid=11985 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.2.1626" name="/root/syzkaller.ZN3zvW/76/file0" dev="sda1" ino=2062 res=1 errno=0 [ 488.165596][T11980] team_slave_0: entered promiscuous mode [ 488.177628][T11980] team_slave_1: entered promiscuous mode [ 488.235468][T11980] team_slave_0: left promiscuous mode [ 488.241047][T11980] team_slave_1: left promiscuous mode [ 488.319201][T11990] REISERFS warning (device nullb0): super-6502 reiserfs_getopt: unknown mount option "" [ 488.743176][T12015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1638'. [ 488.759482][T12015] gtp0: entered promiscuous mode [ 488.784925][T12015] gtp0: entered allmulticast mode [ 488.988588][T12021] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 489.948684][ C1] net_ratelimit: 6 callbacks suppressed [ 489.948706][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 490.799594][T12044] netlink: 495 bytes leftover after parsing attributes in process `syz.2.1648'. [ 491.138018][T12063] ------------[ cut here ]------------ [ 491.143652][T12063] WARNING: CPU: 1 PID: 12063 at mm/page_alloc.c:4659 __alloc_pages_noprof+0x36a/0x6c0 [ 491.153508][T12063] Modules linked in: [ 491.157753][T12063] CPU: 1 PID: 12063 Comm: syz.1.1658 Not tainted 6.10.0-rc5-syzkaller-00243-g6c0483dbfe72 #0 [ 491.168064][T12063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 491.178231][T12063] RIP: 0010:__alloc_pages_noprof+0x36a/0x6c0 [ 491.184270][T12063] Code: a9 00 00 08 00 0f 85 12 01 00 00 44 89 e9 81 e1 7f ff ff ff a9 00 00 04 00 44 0f 45 e9 e9 02 01 00 00 c6 05 27 f6 aa 0d 01 90 <0f> 0b 90 83 fb 0a 0f 86 6c fd ff ff 45 31 ed 48 c7 44 24 20 0e 36 [ 491.204043][T12063] RSP: 0018:ffffc9000e94f880 EFLAGS: 00010246 [ 491.210355][T12063] RAX: 0000000000000000 RBX: 000000000000000b RCX: 0000000000000000 [ 491.218408][T12063] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000e94f908 [ 491.227468][T12063] RBP: ffffc9000e94f998 R08: ffffc9000e94f907 R09: 0000000000000000 [ 491.236472][T12063] R10: ffffc9000e94f8e0 R11: fffff52001d29f21 R12: 1ffff92001d29f18 [ 491.244469][T12063] R13: 0000000000040dc0 R14: dffffc0000000000 R15: 1ffff92001d29f14 [ 491.252634][T12063] FS: 00007f234dabf6c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 491.261910][T12063] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 491.272870][T12063] CR2: 00000000203d0000 CR3: 000000007d804000 CR4: 00000000003506f0 [ 491.280984][T12063] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 491.289068][T12063] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 491.297130][T12063] Call Trace: [ 491.300422][T12063] [ 491.303365][T12063] ? __warn+0x163/0x4e0 [ 491.307598][T12063] ? __alloc_pages_noprof+0x36a/0x6c0 [ 491.313005][T12063] ? report_bug+0x2b3/0x500 [ 491.317619][T12063] ? __alloc_pages_noprof+0x36a/0x6c0 [ 491.323026][T12063] ? handle_bug+0x3e/0x70 [ 491.328378][T12063] ? exc_invalid_op+0x1a/0x50 [ 491.333087][T12063] ? asm_exc_invalid_op+0x1a/0x20 [ 491.338993][T12063] ? __alloc_pages_noprof+0x36a/0x6c0 [ 491.344401][T12063] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 491.350249][T12063] ? irqentry_exit+0x63/0x90 [ 491.354982][T12063] __kmalloc_large_node+0x8b/0x1d0 [ 491.360125][T12063] ? drm_mode_create_lease_ioctl+0x580/0x1dc0 [ 491.366261][T12063] __kmalloc_noprof+0x2aa/0x400 [ 491.371143][T12063] ? _copy_from_user+0xa6/0xe0 [ 491.376007][T12063] drm_mode_create_lease_ioctl+0x580/0x1dc0 [ 491.381943][T12063] ? __pfx_drm_mode_create_lease_ioctl+0x10/0x10 [ 491.388387][T12063] ? do_raw_spin_unlock+0x13c/0x8b0 [ 491.393606][T12063] ? _raw_spin_unlock+0x28/0x50 [ 491.398531][T12063] drm_ioctl_kernel+0x33a/0x440 [ 491.403411][T12063] ? __pfx_drm_mode_create_lease_ioctl+0x10/0x10 [ 491.409818][T12063] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 491.415299][T12063] ? __might_fault+0xc6/0x120 [ 491.420025][T12063] drm_ioctl+0x611/0xad0 [ 491.424273][T12063] ? __pfx_drm_mode_create_lease_ioctl+0x10/0x10 [ 491.431665][T12063] ? __pfx_drm_ioctl+0x10/0x10 [ 491.437287][T12063] ? bpf_lsm_file_ioctl+0x9/0x10 [ 491.442257][T12063] ? security_file_ioctl+0x87/0xb0 [ 491.447464][T12063] ? __pfx_drm_ioctl+0x10/0x10 [ 491.452253][T12063] __se_sys_ioctl+0xfc/0x170 [ 491.456994][T12063] do_syscall_64+0xf3/0x230 [ 491.461529][T12063] ? clear_bhb_loop+0x35/0x90 [ 491.466324][T12063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.472257][T12063] RIP: 0033:0x7f234cd75b99 [ 491.476797][T12063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 491.496626][T12063] RSP: 002b:00007f234dabf048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 491.505218][T12063] RAX: ffffffffffffffda RBX: 00007f234cf03fa0 RCX: 00007f234cd75b99 [ 491.513210][T12063] RDX: 0000000020000040 RSI: 00000000c01864c6 RDI: 0000000000000003 [ 491.521249][T12063] RBP: 00007f234cdf677e R08: 0000000000000000 R09: 0000000000000000 [ 491.529287][T12063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 491.538355][T12063] R13: 000000000000000b R14: 00007f234cf03fa0 R15: 00007ffcd2e8ea18 [ 491.547366][T12063] [ 491.550402][T12063] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 491.557680][T12063] CPU: 1 PID: 12063 Comm: syz.1.1658 Not tainted 6.10.0-rc5-syzkaller-00243-g6c0483dbfe72 #0 [ 491.567923][T12063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 491.578071][T12063] Call Trace: [ 491.581360][T12063] [ 491.584294][T12063] dump_stack_lvl+0x241/0x360 [ 491.589025][T12063] ? __pfx_dump_stack_lvl+0x10/0x10 [ 491.594259][T12063] ? __pfx__printk+0x10/0x10 [ 491.598865][T12063] ? vscnprintf+0x5d/0x90 [ 491.603202][T12063] panic+0x349/0x860 [ 491.607105][T12063] ? __warn+0x172/0x4e0 [ 491.611278][T12063] ? __pfx_panic+0x10/0x10 [ 491.615714][T12063] __warn+0x346/0x4e0 [ 491.619711][T12063] ? __alloc_pages_noprof+0x36a/0x6c0 [ 491.625108][T12063] report_bug+0x2b3/0x500 [ 491.629454][T12063] ? __alloc_pages_noprof+0x36a/0x6c0 [ 491.634833][T12063] handle_bug+0x3e/0x70 [ 491.638996][T12063] exc_invalid_op+0x1a/0x50 [ 491.643490][T12063] asm_exc_invalid_op+0x1a/0x20 [ 491.648336][T12063] RIP: 0010:__alloc_pages_noprof+0x36a/0x6c0 [ 491.654318][T12063] Code: a9 00 00 08 00 0f 85 12 01 00 00 44 89 e9 81 e1 7f ff ff ff a9 00 00 04 00 44 0f 45 e9 e9 02 01 00 00 c6 05 27 f6 aa 0d 01 90 <0f> 0b 90 83 fb 0a 0f 86 6c fd ff ff 45 31 ed 48 c7 44 24 20 0e 36 [ 491.673920][T12063] RSP: 0018:ffffc9000e94f880 EFLAGS: 00010246 [ 491.679982][T12063] RAX: 0000000000000000 RBX: 000000000000000b RCX: 0000000000000000 [ 491.687944][T12063] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc9000e94f908 [ 491.695904][T12063] RBP: ffffc9000e94f998 R08: ffffc9000e94f907 R09: 0000000000000000 [ 491.703862][T12063] R10: ffffc9000e94f8e0 R11: fffff52001d29f21 R12: 1ffff92001d29f18 [ 491.711821][T12063] R13: 0000000000040dc0 R14: dffffc0000000000 R15: 1ffff92001d29f14 [ 491.719797][T12063] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 491.725514][T12063] ? irqentry_exit+0x63/0x90 [ 491.730106][T12063] __kmalloc_large_node+0x8b/0x1d0 [ 491.735228][T12063] ? drm_mode_create_lease_ioctl+0x580/0x1dc0 [ 491.741298][T12063] __kmalloc_noprof+0x2aa/0x400 [ 491.746151][T12063] ? _copy_from_user+0xa6/0xe0 [ 491.750909][T12063] drm_mode_create_lease_ioctl+0x580/0x1dc0 [ 491.756807][T12063] ? __pfx_drm_mode_create_lease_ioctl+0x10/0x10 [ 491.763132][T12063] ? do_raw_spin_unlock+0x13c/0x8b0 [ 491.768336][T12063] ? _raw_spin_unlock+0x28/0x50 [ 491.773174][T12063] drm_ioctl_kernel+0x33a/0x440 [ 491.778018][T12063] ? __pfx_drm_mode_create_lease_ioctl+0x10/0x10 [ 491.784335][T12063] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 491.789694][T12063] ? __might_fault+0xc6/0x120 [ 491.794451][T12063] drm_ioctl+0x611/0xad0 [ 491.798685][T12063] ? __pfx_drm_mode_create_lease_ioctl+0x10/0x10 [ 491.805007][T12063] ? __pfx_drm_ioctl+0x10/0x10 [ 491.809769][T12063] ? bpf_lsm_file_ioctl+0x9/0x10 [ 491.814697][T12063] ? security_file_ioctl+0x87/0xb0 [ 491.819800][T12063] ? __pfx_drm_ioctl+0x10/0x10 [ 491.824551][T12063] __se_sys_ioctl+0xfc/0x170 [ 491.829141][T12063] do_syscall_64+0xf3/0x230 [ 491.833641][T12063] ? clear_bhb_loop+0x35/0x90 [ 491.838322][T12063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.844209][T12063] RIP: 0033:0x7f234cd75b99 [ 491.848617][T12063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 491.868386][T12063] RSP: 002b:00007f234dabf048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 491.876793][T12063] RAX: ffffffffffffffda RBX: 00007f234cf03fa0 RCX: 00007f234cd75b99 [ 491.884756][T12063] RDX: 0000000020000040 RSI: 00000000c01864c6 RDI: 0000000000000003 [ 491.892720][T12063] RBP: 00007f234cdf677e R08: 0000000000000000 R09: 0000000000000000 [ 491.900676][T12063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 491.908634][T12063] R13: 000000000000000b R14: 00007f234cf03fa0 R15: 00007ffcd2e8ea18 [ 491.916606][T12063] [ 491.919830][T12063] Kernel Offset: disabled [ 491.924143][T12063] Rebooting in 86400 seconds..