last executing test programs: 20.684263142s ago: executing program 4 (id=1910): io_uring_setup(0x30d1, &(0x7f00000001c0)) r0 = syz_io_uring_setup(0x159e, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000700)=0x0, &(0x7f0000000140)=0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000780)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 20.497494253s ago: executing program 4 (id=1913): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000540)={'wg1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x6c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x28, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0xc4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4000000}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x2}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x6c}, 0x1, 0xba01}, 0x0) 20.256319422s ago: executing program 4 (id=1920): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @local, 0x5}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r1, @in6={{0xa, 0x0, 0x0, @empty}}, 0xfffffffd, 0x0, 0x0, 0x0, 0x5}, 0x9c) 20.091054002s ago: executing program 4 (id=1925): unshare(0x20400) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, 0x0, 0x0) setxattr$incfs_metadata(0x0, 0x0, &(0x7f0000000440)="ed3e4bf3d7fa8f8452f3e788b7e9d798dc7804c393ecdc08dd00b86e84d135553da0405dcb9c995d9438b9ed9511217f355da97cec073ccc664f682ac188ad6d84a3", 0x42, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r2 = dup(r1) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0x0) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) r5 = eventfd2(0x0, 0x0) ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f0000000180)={0x0, r5}) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000400)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x48) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000e40)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x8, 0xfffffffe}, 0x48) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x20000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000e, 0x12, r2, 0x0) unshare(0x20000600) prlimit64(0x0, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000e40)={0x0, 0xffffffffffffffff, 0x0, 0x16, &(0x7f0000000000)='/proc/3\x00\xff\xff\xffat\x00AE\xf44.\xab%j'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fstat(r5, &(0x7f0000000580)) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000400a8000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FITRIM(r7, 0x81009431, &(0x7f0000000080)) 18.93673955s ago: executing program 4 (id=1944): ustat(0x11, &(0x7f0000000600)) 18.821105103s ago: executing program 4 (id=1946): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0xf, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0xc00}}}, &(0x7f0000000100)='GPL\x00', 0x8, 0xfc, &(0x7f0000000dc0)=""/252}, 0x90) 13.808368458s ago: executing program 1 (id=2001): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_LP_INTERVAL={0x8, 0x13, 0xfffffffc}]}}}]}, 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005f3f770005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 10.796615148s ago: executing program 1 (id=2009): r0 = socket(0x15, 0x5, 0x0) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, 0x13) 10.685621346s ago: executing program 1 (id=2010): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00') openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000300)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'}) syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ptrace$getregs(0xffffffffffffffff, r1, 0x3, &(0x7f00000020c0)=""/44) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') 9.998626121s ago: executing program 0 (id=2013): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = epoll_create(0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = syz_io_uring_setup(0x3665, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0xa3d, 0x0, 0x0, 0x0, 0xff39) r5 = dup(r0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r5, &(0x7f0000000180)) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x80) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f00000003c0)=0x10000) 9.645535652s ago: executing program 1 (id=2015): socket(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) listen(0xffffffffffffffff, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, "cb00001400000000000000ffff0000e700"}) io_uring_enter(0xffffffffffffffff, 0xa3d, 0x0, 0x0, 0x0, 0x0) io_uring_setup(0x6248, &(0x7f0000000280)) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8084) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000000)=@netrom={'nr', 0x0, 0x2}, 0x10) 9.357656667s ago: executing program 0 (id=2018): r0 = openat$ttynull(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x5410, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x1}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f00000001c0)='%pi6 \x00'}, 0x20) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'tunl0\x00', &(0x7f0000000540)={'erspan0\x00', 0x0, 0x40, 0x40, 0xf88, 0xff, {{0x1b, 0x4, 0x2, 0x15, 0x6c, 0x68, 0x0, 0x6, 0x2f, 0x0, @private=0xa010101, @remote, {[@cipso={0x86, 0x57, 0x0, [{0x7, 0x8, "d7529fe64537"}, {0x2, 0x11, "69ad456bfe7e72486f0a82e7922b9b"}, {0x2, 0x12, "df77c1074ff1cd1d77d349aa1820096c"}, {0x5, 0xa, "0f0fc9a7c2a1b734"}, {0x5, 0x4, "b8aa"}, {0x925c0936f380bf58, 0xb, "8843035e84d1ba353e"}, {0x1, 0xd, "a1c4028eb268a398204c02"}]}]}}}}}) r4 = dup3(r2, r2, 0x80000) r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@bloom_filter={0x1e, 0x80, 0x5, 0x8, 0x40, r1, 0x6, '\x00', r3, r4, 0x2, 0x5, 0x0, 0xd}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xf, &(0x7f00000003c0)=ANY=[@ANYRES32=r5, @ANYBLOB], &(0x7f0000000200)='syzkaller\x00', 0x9, 0x100b, &(0x7f0000001e40)=""/4107}, 0x90) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xd) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000002100)={0x50}, 0x50) read$FUSE(0xffffffffffffffff, &(0x7f000001aa80)={0x2020}, 0x2020) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x8000008, 0x0, 0x2}, 0x48) dup(r6) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xf7}, 0x10) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000440), 0x0) r7 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r7, 0x29, 0x19, 0x0, 0x4) io_setup(0x7, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB='\\\x00\x00', @ANYRES16, @ANYBLOB="170e0000000000000000010000600500070000000000080009000000000014001f000000000000000000"], 0x5c}, 0x1, 0x0, 0x0, 0x91}, 0x0) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r8, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 8.799926526s ago: executing program 3 (id=2020): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000040)={0x0, 0x2af0f69a}) 8.668704034s ago: executing program 3 (id=2022): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1}, 0x18) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r1}, 0x18) setsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000240)=0x1, 0x4) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1, 0x0, {0x0, 0x0, 0x2}}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)='.', 0x1a000}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) 8.577776461s ago: executing program 0 (id=2023): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) io_setup(0x2e, &(0x7f0000000100)=0x0) io_submit(r1, 0x3, &(0x7f0000000500)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000540)='^', 0x1}, 0x0, 0x0]) 8.478526609s ago: executing program 1 (id=2024): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00') openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000300)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'}) syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ptrace$getregs(0xffffffffffffffff, r1, 0x3, &(0x7f00000020c0)=""/44) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') 8.478018259s ago: executing program 2 (id=2025): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) r1 = io_uring_setup(0x76b8, &(0x7f0000000040)) close(r1) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x44, &(0x7f0000000a80)={[{0x3d, 0x4e00, "ea2f47917ee91722c12489087a5cb938090556c957bbbadce994a79bbe2b43ff1745c4de8c88adbb402ba2f1f1f4966a632b93c2666290251802bdfcef"}]}) 7.450885638s ago: executing program 3 (id=2026): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="8500000019000000791000000000000063000000001000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52}, 0x37) 7.403631289s ago: executing program 1 (id=2027): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x2}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r6 = dup(r5) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r6, 0xc018937d, &(0x7f0000000240)={{0x1, 0x1, 0x18, r3}, './file0\x00'}) syncfs(r7) write$FUSE_DIRENTPLUS(r6, &(0x7f00000006c0)=ANY=[@ANYBLOB="b8"], 0xb8) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}}) r8 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r8, &(0x7f0000000080)='./file0\x00') write$FUSE_NOTIFY_DELETE(r6, &(0x7f0000000480)=ANY=[@ANYBLOB="29000000060000000000000000000000000000000000000000000000000000000000000000000000009bfc82c877d1f1cbbd39fab6bad3d8f173935e1bb807c85b397bed15e7f72de6ab4e34b605950005efcf77819532b2116eb9eeead5a2bfb5f2e20159debab8f83644650d0f0e90838ea8aa8f459b976c6dfe6635c45c90f4600b909d611f95bd16a41f69e0b25550898e01c36fecdd089035d173ecd167088fcbf84f033f699ba4b76de96c70b5f5dc5d86eb2f0dfc41bdb1b67c5d6ee5fe335ed0911eb999f3ae85b25328eed8374ff47bb5c7c2fffc32c1802091eadfa4dcfdaf1a14b309cecf13443175"], 0x29) llistxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) close(0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0x8}, {0x6}]}) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) preadv(r0, &(0x7f00000001c0)=[{&(0x7f0000001b80)=""/114, 0x4}], 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 7.264122737s ago: executing program 0 (id=2028): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xa}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xcb2}]}]}]}}]}, 0xac}}, 0x0) 7.252352838s ago: executing program 3 (id=2029): r0 = syz_io_uring_setup(0x160c, &(0x7f00000002c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000a40)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f0000000200)={r4}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000180)={0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000004000090000000000000000000300000008000200", @ANYRES32=r6], 0x1c}}, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000240)={r5, 0x3, r7, 0xffffffff}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f0000000280)={r5}) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_int(r9, &(0x7f0000000080)='hugetlb.1GB.limit_in_bytes\x00', 0x2, 0x0) io_setup(0x7, &(0x7f0000000180)=0x0) r12 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r12, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00'}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r12, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00'}) r13 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_team(r13, 0x8942, &(0x7f0000000640)) close(r12) sendfile(0xffffffffffffffff, r12, &(0x7f0000000000)=0x8, 0x9) io_submit(r11, 0x1, &(0x7f0000000640)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, r10, &(0x7f00000000c0)='p', 0x1, 0x4000000000000}]) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r8}}) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r14, &(0x7f00000001c0)=ANY=[@ANYBLOB=' '], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r14, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 6.660481575s ago: executing program 2 (id=2030): r0 = socket(0x15, 0x5, 0x0) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, 0x13) 5.384964979s ago: executing program 2 (id=2031): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x3, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000040)={0x0, 0x2af0f69a}) 5.325682183s ago: executing program 0 (id=2032): socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x4c}}, 0x0) 5.239008784s ago: executing program 3 (id=2033): socket(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) listen(0xffffffffffffffff, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, "cb00001400000000000000ffff0000e700"}) io_uring_enter(0xffffffffffffffff, 0xa3d, 0x0, 0x0, 0x0, 0x0) io_uring_setup(0x6248, &(0x7f0000000280)) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8084) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000000)=@netrom={'nr', 0x0, 0x2}, 0x10) 5.169956583s ago: executing program 2 (id=2034): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UFFDIO_CONTINUE(r1, 0x8010aa02, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800002}}) 5.066617673s ago: executing program 2 (id=2035): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x90f, 0x102) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, 0x0) mount(0x0, &(0x7f0000c7f000)='./file0\x00', &(0x7f0000df9000)='nfs4\x00', 0x0, &(0x7f0000590ffe)='v4') io_uring_setup(0x2739a, &(0x7f00000001c0)={0x0, 0x814c, 0x0, 0x2, 0x386}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f00000014c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x120) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="0900000002000000000000000f00000000000000000000002eb3c0ea9eab14b05538b7ba00607dc3c2a4bbc0cb78bbd0832519a055fb0d843321e8251fdbb69f4f33049eae36b63de230c60e77aa7d77c2548e810b8d1feb9b66cb51910dad4140fa53156a9aeecf56180a828049617700fcbe6d3ae69ea9d0003570c021ebe89b776b5d28673170b26fc0c63271788393ff742c232f7fb813dfb8100b5c094359dbe322655a24232d4443b515fed0265cbd3be69dee6d819e22eb953ffd90fb20b0185eacdb042ceafd"], 0x0) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}}) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) r6 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000240)=r6) link(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00') ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)={0x1, r6}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r5, 0x4008af22, &(0x7f00000002c0)={0x1, r6}) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000000)=0x1) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x9, 0x1}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000000c0)={r7, 0x2, 0x7, [0xc0, 0x1, 0x8000, 0xd466, 0x0, 0x9, 0x4291]}, &(0x7f0000000100)=0x16) 75.284264ms ago: executing program 3 (id=2036): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs_stats_percpu\x00') openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000300)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'}) syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ptrace$getregs(0xffffffffffffffff, r1, 0x3, &(0x7f00000020c0)=""/44) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') 2.701304ms ago: executing program 0 (id=2037): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x20, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}]}, 0x20}}, 0x0) 0s ago: executing program 2 (id=2038): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="8500000019000000791000000000000063000000001000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52}, 0x37) kernel console output (not intermixed with test programs): [1, 0] type 2 family 0 port 6081 - 0 [ 168.671825][ T6857] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.671858][ T6857] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.924541][ T2927] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.924564][ T2927] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.039286][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.039313][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.413032][ T5089] Bluetooth: hci6: command tx timeout [ 170.408893][ T7034] No such timeout policy "syz0" [ 170.691009][ T7044] syz.0.707 uses obsolete (PF_INET,SOCK_PACKET) [ 170.790708][ T7049] afs: Unknown parameter 'smackfsrootexit' [ 174.130290][ T7092] afs: Unknown parameter 'smackfsrootexit' [ 175.330744][ T62] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.499313][ T62] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.719715][ T5100] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 176.733485][ T5100] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 176.742334][ T5100] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 176.752098][ T5102] net_ratelimit: 22 callbacks suppressed [ 176.752118][ T5102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 176.774999][ T5100] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 176.783209][ T5100] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 176.791407][ T5100] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 176.866128][ T62] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.016057][ T62] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.083922][ T5102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 177.465019][ T7140] netlink: 8 bytes leftover after parsing attributes in process `syz.4.743'. [ 177.813789][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 178.280316][ T62] bridge_slave_1: left allmulticast mode [ 178.326025][ T62] bridge_slave_1: left promiscuous mode [ 178.343307][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.396785][ T62] bridge_slave_0: left allmulticast mode [ 178.418627][ T62] bridge_slave_0: left promiscuous mode [ 178.425646][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.853068][ T5089] Bluetooth: hci1: command tx timeout [ 179.279372][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 179.295248][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.307807][ T62] bond0 (unregistering): Released all slaves [ 180.061057][ T7119] chnl_net:caif_netlink_parms(): no params data found [ 180.664397][ T62] hsr_slave_0: left promiscuous mode [ 180.695337][ T62] hsr_slave_1: left promiscuous mode [ 180.706495][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.722941][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.749047][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.766957][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.829007][ T62] veth1_macvtap: left promiscuous mode [ 180.845891][ T62] veth0_macvtap: left promiscuous mode [ 180.859653][ T62] veth1_vlan: left promiscuous mode [ 180.866323][ T62] veth0_vlan: left promiscuous mode [ 180.933483][ T5089] Bluetooth: hci1: command tx timeout [ 183.017592][ T5089] Bluetooth: hci1: command tx timeout [ 183.140627][ T7250] netlink: 'syz.4.774': attribute type 13 has an invalid length. [ 183.269779][ T62] team0 (unregistering): Port device team_slave_1 removed [ 183.369026][ T62] team0 (unregistering): Port device team_slave_0 removed [ 183.514641][ T29] kauditd_printk_skb: 102 callbacks suppressed [ 183.514660][ T29] audit: type=1326 audit(1720227012.042:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7254 comm="syz.3.776" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff4e0375bd9 code=0x0 [ 184.423485][ T7119] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.455327][ T7119] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.473000][ T7119] bridge_slave_0: entered allmulticast mode [ 184.510521][ T7119] bridge_slave_0: entered promiscuous mode [ 184.537590][ T7119] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.558289][ T7119] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.575074][ T7119] bridge_slave_1: entered allmulticast mode [ 184.593202][ T7119] bridge_slave_1: entered promiscuous mode [ 184.791300][ T7267] ebt_limit: overflow, try lower: 12058624/0 [ 184.795772][ T7119] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.857226][ T7267] loop0: detected capacity change from 0 to 7 [ 184.877857][ T7119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.944278][ T7267] Dev loop0: unable to read RDB block 7 [ 184.974764][ T7267] loop0: AHDI p4 [ 184.998287][ T7267] loop0: partition table partially beyond EOD, truncated [ 185.093040][ T5089] Bluetooth: hci1: command tx timeout [ 185.132425][ T7284] autofs: Unknown parameter '0x0000000000000000' [ 185.155708][ T7119] team0: Port device team_slave_0 added [ 185.225972][ T7119] team0: Port device team_slave_1 added [ 185.255797][ T7284] netlink: 'syz.4.786': attribute type 4 has an invalid length. [ 185.336768][ T7284] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.786'. [ 186.326335][ T7119] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.379351][ T7119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.429898][ T7119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.585604][ T7119] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.622229][ T7119] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.692499][ T7119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.001385][ T7119] hsr_slave_0: entered promiscuous mode [ 187.056276][ T7119] hsr_slave_1: entered promiscuous mode [ 187.101207][ T7119] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 187.136356][ T7119] Cannot create hsr debugfs directory [ 187.200251][ T7334] overlay: Unknown parameter 'fsname' [ 187.242813][ T7336] tun0: tun_chr_ioctl cmd 1074812117 [ 187.243087][ T7333] Process accounting resumed [ 187.589657][ T7344] binder: 7342:7344 ioctl c018620c 20000100 returned -1 [ 188.053311][ T5102] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 188.062478][ T7366] overlay: Unknown parameter 'fsname' [ 188.272812][ T5102] usb 1-1: Using ep0 maxpacket: 16 [ 188.302066][ T5102] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 104 [ 188.339609][ T5102] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 188.367243][ T5102] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.402828][ T5102] usb 1-1: Product: syz [ 188.410550][ T5102] usb 1-1: Manufacturer: syz [ 188.432883][ T5102] usb 1-1: SerialNumber: syz [ 188.451592][ T5102] usb 1-1: config 0 descriptor?? [ 188.465992][ T7349] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 188.501992][ T5102] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input13 [ 188.675605][ T7385] tun0: tun_chr_ioctl cmd 1074812117 [ 188.709314][ T7389] binder: 7387:7389 ioctl c018620c 20000100 returned -1 [ 188.775353][ T5089] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 188.799146][ T5089] Bluetooth: hci6: Injecting HCI hardware error event [ 188.811498][ T5089] Bluetooth: hci6: hardware error 0x00 [ 188.841769][ T7349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.950740][ T7349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.066583][ C0] usbtouchscreen 1-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -1 [ 189.105816][ T45] usb 1-1: USB disconnect, device number 6 [ 189.144493][ T7119] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 189.220849][ T7119] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 189.272128][ T7119] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 189.337139][ T7119] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 189.345997][ T7410] overlay: Unknown parameter 'fsname' [ 189.917542][ T7119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.723960][ T7119] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.846584][ T5229] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.853829][ T5229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.896546][ T5229] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.903825][ T5229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.933883][ T5089] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 191.096892][ T7119] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 191.137484][ T7119] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 191.348066][ T7449] autofs: Unknown parameter '0x0000000000000000' [ 191.511661][ T7449] netlink: 'syz.0.836': attribute type 4 has an invalid length. [ 191.562895][ T7449] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.836'. [ 191.776551][ T7119] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.086887][ T7471] hub 9-0:1.0: USB hub found [ 192.096876][ T7471] hub 9-0:1.0: 8 ports detected [ 192.821085][ T7119] veth0_vlan: entered promiscuous mode [ 193.973824][ T7119] veth1_vlan: entered promiscuous mode [ 194.287386][ T7119] veth0_macvtap: entered promiscuous mode [ 194.358462][ T7119] veth1_macvtap: entered promiscuous mode [ 194.475229][ T7119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.537826][ T7119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.572803][ T7119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.606720][ T7119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.654225][ T7119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.695194][ T7119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.734027][ T7119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.752645][ T7119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.790165][ T7119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.811116][ T7119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.821407][ T7119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.836959][ T7501] ebt_limit: overflow, try lower: 12058624/0 [ 194.844890][ T7119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.859753][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.859858][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.903245][ T7501] loop0: detected capacity change from 0 to 7 [ 194.912251][ T7119] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.922900][ T5229] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 194.953484][ T7501] Dev loop0: unable to read RDB block 7 [ 194.974612][ T7119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.994423][ T7501] loop0: AHDI p4 [ 194.998198][ T7501] loop0: partition table partially beyond EOD, truncated [ 195.023485][ T7119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.038490][ T7119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.049815][ T7119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.061128][ T7119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.072103][ T7119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.090445][ T7119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.106243][ T4533] Dev loop0: unable to read RDB block 7 [ 195.112866][ T7119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.132277][ T4533] loop0: AHDI p4 [ 195.136320][ T7119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.138629][ T5229] usb 2-1: Using ep0 maxpacket: 16 [ 195.158043][ T4533] loop0: partition table partially beyond EOD, truncated [ 195.162752][ T7119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.189489][ T5229] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 104 [ 195.198525][ T7119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.248242][ T5229] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 195.268177][ T5229] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.311237][ T5229] usb 2-1: Product: syz [ 195.315992][ T5229] usb 2-1: Manufacturer: syz [ 195.320690][ T5229] usb 2-1: SerialNumber: syz [ 195.326282][ T7119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.390073][ T7119] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.460767][ T5229] usb 2-1: config 0 descriptor?? [ 195.464069][ T7119] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.474543][ T7119] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.484288][ T7119] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.495472][ T7119] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.498525][ T7502] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 195.755016][ T5229] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input16 [ 196.392097][ T7502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.443607][ T7502] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.760542][ T2927] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.812902][ T2927] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.978902][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.056822][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.716701][ T7566] Bluetooth: MGMT ver 1.22 [ 199.004453][ T5089] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 199.014621][ T5089] Bluetooth: hci2: Injecting HCI hardware error event [ 199.024464][ T5089] Bluetooth: hci2: hardware error 0x00 [ 199.352338][ T7569] hub 9-0:1.0: USB hub found [ 199.358492][ T7569] hub 9-0:1.0: 8 ports detected [ 199.844692][ T7561] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 199.985951][ T8] usb 2-1: USB disconnect, device number 3 [ 200.588948][ T51] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.770619][ T51] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.210297][ T7609] kAFS: unable to lookup cell '' [ 201.303576][ T51] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.133185][ T5089] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 202.153345][ T5089] Bluetooth: hci4: command 0x0406 tx timeout [ 202.164363][ T5089] Bluetooth: hci0: command 0x0406 tx timeout [ 202.176339][ T5089] Bluetooth: hci3: command 0x0406 tx timeout [ 207.220939][ T51] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.464002][ T5093] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 207.498123][ T5093] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 207.518201][ T5093] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 207.529052][ T5093] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 207.537146][ T5093] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 207.544612][ T5093] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 207.918346][ T51] bridge_slave_1: left allmulticast mode [ 207.943491][ T51] bridge_slave_1: left promiscuous mode [ 207.957992][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.809237][ T51] bridge_slave_0: left allmulticast mode [ 208.896729][ T51] bridge_slave_0: left promiscuous mode [ 208.993244][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.125848][ T7653] kAFS: unable to lookup cell '' [ 209.272471][ T5093] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 209.312964][ T5093] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 209.321964][ T5093] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 209.337560][ T5093] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 209.347609][ T5093] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 209.356215][ T5093] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 209.653806][ T5093] Bluetooth: hci1: command tx timeout [ 210.537442][ T7671] hub 9-0:1.0: USB hub found [ 210.543622][ T7671] hub 9-0:1.0: 8 ports detected [ 211.417952][ T5093] Bluetooth: hci5: command tx timeout [ 211.732932][ T5093] Bluetooth: hci1: command tx timeout [ 211.811811][ T7698] kAFS: unable to lookup cell '' [ 212.123145][ T7711] syz.0.896 (7711): attempted to duplicate a private mapping with mremap. This is not supported. [ 213.493353][ T5093] Bluetooth: hci5: command tx timeout [ 213.704071][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.735691][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.762027][ T51] bond0 (unregistering): Released all slaves [ 213.821096][ T5093] Bluetooth: hci1: command tx timeout [ 214.093086][ T5145] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 214.239577][ T7733] block nbd4: not configured, cannot reconfigure [ 214.294830][ T5145] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 214.313266][ T5145] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.345935][ T5145] usb 1-1: config 0 descriptor?? [ 214.355930][ T5145] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 214.481106][ T7741] kAFS: unable to lookup cell '' [ 214.741699][ T7632] chnl_net:caif_netlink_parms(): no params data found [ 214.760991][ T5145] gp8psk: usb out operation failed. [ 214.778771][ T5145] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 214.822902][ T5145] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 214.877177][ T5145] usb 1-1: USB disconnect, device number 7 [ 214.905848][ T51] hsr_slave_0: left promiscuous mode [ 214.946130][ T51] hsr_slave_1: left promiscuous mode [ 214.984975][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.001939][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.015417][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.025343][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.093898][ T51] veth1_macvtap: left promiscuous mode [ 215.114499][ T51] veth0_macvtap: left promiscuous mode [ 215.124853][ T51] veth1_vlan: left promiscuous mode [ 215.131490][ T51] veth0_vlan: left promiscuous mode [ 215.575692][ T5093] Bluetooth: hci5: command tx timeout [ 215.895849][ T5093] Bluetooth: hci1: command tx timeout [ 216.025862][ T51] team0 (unregistering): Port device team_slave_1 removed [ 216.071126][ T51] team0 (unregistering): Port device team_slave_0 removed [ 216.573593][ T7770] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 216.731990][ T7775] block nbd1: not configured, cannot reconfigure [ 217.128647][ T7784] hub 9-0:1.0: USB hub found [ 217.134560][ T7784] hub 9-0:1.0: 8 ports detected [ 217.654220][ T5093] Bluetooth: hci5: command tx timeout [ 217.894896][ T7632] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.920497][ T7632] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.943063][ T7632] bridge_slave_0: entered allmulticast mode [ 217.956782][ T7632] bridge_slave_0: entered promiscuous mode [ 217.975248][ T7658] chnl_net:caif_netlink_parms(): no params data found [ 217.993927][ T7632] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.009947][ T7632] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.017867][ T7632] bridge_slave_1: entered allmulticast mode [ 218.041599][ T8] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 218.044781][ T7632] bridge_slave_1: entered promiscuous mode [ 218.184759][ T7632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.242829][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 218.259785][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 218.275392][ T8] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 218.303001][ T8] usb 2-1: New USB device found, idVendor=2040, idProduct=4902, bcdDevice=5c.30 [ 218.318379][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.333653][ T7632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.345792][ T8] usb 2-1: config 0 descriptor?? [ 218.354771][ T8] hdpvr 2-1:0.0: Could not find bulk-in endpoint [ 218.361817][ T8] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12 [ 218.572216][ T8] usb 2-1: USB disconnect, device number 4 [ 218.645771][ T7632] team0: Port device team_slave_0 added [ 218.686101][ T7632] team0: Port device team_slave_1 added [ 219.493199][ T5093] Bluetooth: hci0: command 0x0406 tx timeout [ 219.672692][ C1] sched: RT throttling activated [ 220.132152][ T7658] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.141970][ T7658] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.152900][ T7658] bridge_slave_0: entered allmulticast mode [ 220.169195][ T7658] bridge_slave_0: entered promiscuous mode [ 221.069076][ T7815] 9pnet_fd: Insufficient options for proto=fd [ 221.088770][ T7632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.108346][ T7632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.162843][ T7632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.198992][ T7632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.216633][ T7632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.291300][ T9] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 221.306321][ T7632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.417639][ T7658] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.443144][ T7658] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.494275][ T7658] bridge_slave_1: entered allmulticast mode [ 221.512988][ T9] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 221.528953][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.541487][ T7658] bridge_slave_1: entered promiscuous mode [ 221.573729][ T9] usb 2-1: config 0 descriptor?? [ 221.592523][ T9] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 221.767670][ T2927] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.810281][ T7658] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.832393][ T7658] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.896511][ T2927] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.005394][ T9] gp8psk: usb out operation failed. [ 222.021754][ T9] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 222.043750][ T9] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 222.057848][ T7632] hsr_slave_0: entered promiscuous mode [ 222.074442][ T7632] hsr_slave_1: entered promiscuous mode [ 222.080809][ T9] usb 2-1: USB disconnect, device number 5 [ 222.091875][ T7632] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 222.118759][ T7632] Cannot create hsr debugfs directory [ 222.163431][ T2927] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.196788][ T7658] team0: Port device team_slave_0 added [ 222.241499][ T7658] team0: Port device team_slave_1 added [ 222.317776][ T2927] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.370590][ T7658] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.406858][ T7658] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.433328][ T7658] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.510025][ T7658] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.529898][ T7658] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.593011][ T7658] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.955427][ T7658] hsr_slave_0: entered promiscuous mode [ 222.990741][ T7658] hsr_slave_1: entered promiscuous mode [ 223.019073][ T7658] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 223.071943][ T7658] Cannot create hsr debugfs directory [ 223.121384][ T7841] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 223.141030][ T7840] netlink: 44 bytes leftover after parsing attributes in process `syz.4.920'. [ 225.013581][ T2927] bridge_slave_1: left allmulticast mode [ 225.034407][ T2927] bridge_slave_1: left promiscuous mode [ 225.060904][ T2927] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.126727][ T7870] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 225.140093][ T2927] bridge_slave_0: left allmulticast mode [ 225.153205][ T2927] bridge_slave_0: left promiscuous mode [ 225.159241][ T2927] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.203756][ T2927] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 226.218844][ T2927] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 226.251912][ T2927] bond0 (unregistering): Released all slaves [ 226.830042][ T7896] netlink: 24 bytes leftover after parsing attributes in process `syz.4.935'. [ 227.817331][ T7902] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 228.915632][ T7913] binder: 7912:7913 ioctl c0306201 0 returned -14 [ 229.244100][ T7922] netlink: 24 bytes leftover after parsing attributes in process `syz.1.945'. [ 230.453024][ T2927] hsr_slave_0: left promiscuous mode [ 230.522447][ T2927] hsr_slave_1: left promiscuous mode [ 230.572904][ T2927] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.612058][ T2927] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.627762][ T2927] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.638173][ T2927] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.700071][ T5146] usb 4-1: ezusb_ihex_firmware_download - request "keyspan/usa28.fw" failed [ 231.435920][ T5146] usb 4-1: failed to load firmware "keyspan/usa28.fw" [ 231.443267][ T5146] keyspan 4-1:0.0: probe with driver keyspan failed with error -2 [ 231.631517][ T2927] veth1_macvtap: left promiscuous mode [ 231.723460][ T2927] veth0_macvtap: left promiscuous mode [ 231.853854][ T2927] veth1_vlan: left promiscuous mode [ 231.946163][ T2927] veth0_vlan: left promiscuous mode [ 232.006655][ T5146] usb 4-1: USB disconnect, device number 4 [ 232.209448][ T7944] binder: 7943:7944 ioctl c0306201 0 returned -14 [ 232.700646][ T7960] netlink: 24 bytes leftover after parsing attributes in process `syz.4.958'. [ 234.137713][ T7980] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.393195][ T2927] team0 (unregistering): Port device team_slave_1 removed [ 234.770330][ T2927] team0 (unregistering): Port device team_slave_0 removed [ 235.610130][ T7990] netlink: 24 bytes leftover after parsing attributes in process `syz.4.970'. [ 237.613572][ T6378] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 237.842931][ T6378] usb 1-1: Using ep0 maxpacket: 16 [ 237.851857][ T6378] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.882451][ T6378] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.912856][ T6378] usb 1-1: New USB device found, idVendor=1b96, idProduct=000c, bcdDevice= 0.00 [ 237.947072][ T6378] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.993710][ T6378] usb 1-1: config 0 descriptor?? [ 238.141619][ T7658] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 238.187651][ T7658] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 238.267906][ T7658] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 238.337549][ T7658] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 238.587018][ T8029] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.613595][ T8029] batadv_slave_0: entered allmulticast mode [ 238.614538][ T8032] netlink: 44 bytes leftover after parsing attributes in process `syz.0.973'. [ 238.673543][ T8032] netlink: 'syz.0.973': attribute type 1 has an invalid length. [ 238.733144][ T8029] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 238.881533][ T7632] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 238.928602][ T7632] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 239.017171][ T7632] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 239.107569][ T7632] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 239.457552][ T7658] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.598673][ T7658] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.647503][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.654773][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.729318][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.736582][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.874453][ T7632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.114121][ T7632] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.267689][ T5143] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.274977][ T5143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 240.401579][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.408906][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.691797][ T7632] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 241.100338][ T8069] hub 9-0:1.0: USB hub found [ 241.110488][ T8069] hub 9-0:1.0: 8 ports detected [ 242.167433][ T8075] syz.4.993: attempt to access beyond end of device [ 242.167433][ T8075] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 242.242773][ T8075] FAT-fs (nbd4): unable to read boot sector [ 242.280382][ T6378] usbhid 1-1:0.0: can't add hid device: -71 [ 242.289475][ T6378] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 242.330169][ T6378] usb 1-1: USB disconnect, device number 8 [ 242.398756][ T7658] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.743842][ T7632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.795603][ T7658] veth0_vlan: entered promiscuous mode [ 243.930648][ T7658] veth1_vlan: entered promiscuous mode [ 244.419259][ T7632] veth0_vlan: entered promiscuous mode [ 244.997588][ T7632] veth1_vlan: entered promiscuous mode [ 245.087137][ T7658] veth0_macvtap: entered promiscuous mode [ 245.146021][ T7658] veth1_macvtap: entered promiscuous mode [ 245.197704][ T7632] veth0_macvtap: entered promiscuous mode [ 245.247641][ T7632] veth1_macvtap: entered promiscuous mode [ 245.301795][ T7658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.332234][ T7658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.351851][ T7658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.373870][ T7658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.393789][ T7658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.410615][ T7658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.431851][ T7658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.451118][ T7658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.472215][ T7658] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.499467][ T8126] pim6reg: entered allmulticast mode [ 245.517910][ T8127] pim6reg: left allmulticast mode [ 245.610277][ T7658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.642855][ T7658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.662729][ T7658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.682834][ T7658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.704188][ T7658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.737504][ T7658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.767227][ T7658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.798460][ T7658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.832413][ T7658] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.861809][ T7658] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.891916][ T7658] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.919883][ T7658] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.947907][ T7658] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.964653][ T7658] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.976324][ T7658] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.106667][ T7632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.128033][ T7632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.161808][ T7632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.194321][ T7632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.207219][ T9] libceph: connect (1)[c::]:6789 error -101 [ 246.215558][ T7632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.233815][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 246.255202][ T7632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.269713][ T7632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.280873][ T8140] ceph: No mds server is up or the cluster is laggy [ 246.295912][ T7632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.308583][ T7632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.319538][ T7632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.348950][ T7632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.407872][ T7632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.468254][ T7632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.499772][ T7632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.524544][ T8156] 9pnet_fd: Insufficient options for proto=fd [ 246.542794][ T7632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.566270][ T7632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.598930][ T7632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.609792][ T7632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.622183][ T7632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.632313][ T7632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.660413][ T7632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.890026][ T7632] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.015094][ T7632] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.219809][ T7632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.467689][ T7632] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.560964][ T7632] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.569819][ T7632] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.578949][ T7632] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.875272][ T7548] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.939186][ T7548] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.159335][ T8177] hub 9-0:1.0: USB hub found [ 248.165290][ T8177] hub 9-0:1.0: 8 ports detected [ 248.785241][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.823159][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.898721][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.907712][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.922791][ T45] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 248.962124][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.972301][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.159447][ T45] usb 5-1: Using ep0 maxpacket: 16 [ 249.175747][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 249.221009][ T45] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 249.263238][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.286343][ T45] usb 5-1: config 0 descriptor?? [ 249.525801][ T6378] libceph: connect (1)[c::]:6789 error -101 [ 249.549211][ T6378] libceph: mon0 (1)[c::]:6789 connect error [ 249.601487][ T8201] ceph: No mds server is up or the cluster is laggy [ 249.700116][ T8212] overlayfs: failed to resolve './file1': -2 [ 250.378764][ T8174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.437705][ T8174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.570220][ T45] hid (null): unknown global tag 0xa5 [ 250.579906][ T6378] libceph: connect (1)[c::]:6789 error -101 [ 250.586092][ T45] hid (null): unknown global tag 0xd [ 250.591548][ T45] hid (null): unknown global tag 0xc [ 250.597150][ T6378] libceph: mon0 (1)[c::]:6789 connect error [ 250.628308][ T45] hid-generic 0003:0158:0100.0001: unknown main item tag 0x1 [ 250.640318][ T45] hid-generic 0003:0158:0100.0001: unexpected long global item [ 250.664414][ T45] hid-generic 0003:0158:0100.0001: probe with driver hid-generic failed with error -22 [ 250.694978][ T8174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.734631][ T8174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.045006][ T8] usb 5-1: USB disconnect, device number 4 [ 251.228768][ T8239] hub 9-0:1.0: USB hub found [ 251.235901][ T8239] hub 9-0:1.0: 8 ports detected [ 253.935474][ T8276] netlink: 'syz.2.1041': attribute type 12 has an invalid length. [ 254.602992][ T8] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 254.856858][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 254.895442][ T8] usb 3-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 254.917814][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.956849][ T8] usb 3-1: Product: syz [ 254.972797][ T8] usb 3-1: Manufacturer: syz [ 254.983217][ T8] usb 3-1: SerialNumber: syz [ 255.008693][ T8] usb 3-1: config 0 descriptor?? [ 255.041810][ T8] usb 3-1: Found UVC 0.00 device syz (046d:0721) [ 255.052490][ T8304] binder: transaction release 23 bad handle 1, ret = -22 [ 255.061958][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 255.072803][ T8] usb 3-1: No valid video chain found. [ 255.292229][ T8276] netlink: 'syz.2.1041': attribute type 10 has an invalid length. [ 255.410413][ T8276] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 255.458264][ T8] usb 3-1: USB disconnect, device number 5 [ 256.360384][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.369131][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.406307][ T29] audit: type=1800 audit(1720227084.932:150): pid=8336 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.0.1060" name="/" dev="fuse" ino=1 res=0 errno=0 [ 256.500062][ T8343] overlayfs: failed to resolve './file1': -2 [ 257.592232][ T8352] input: syz1 as /devices/virtual/input/input17 [ 257.884493][ T11] tipc: Subscription rejected, illegal request [ 258.021153][ T8358] use of bytesused == 0 is deprecated and will be removed in the future, [ 258.095569][ T8358] use the actual size instead. [ 258.611939][ T8370] Invalid ELF header magic: != ELF [ 258.974822][ T8378] netlink: 'syz.4.1073': attribute type 12 has an invalid length. [ 259.424058][ T5139] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 259.644307][ T5139] usb 5-1: Using ep0 maxpacket: 16 [ 259.674637][ T5139] usb 5-1: New USB device found, idVendor=046d, idProduct=0721, bcdDevice=9c.25 [ 259.709183][ T5139] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.761874][ T5139] usb 5-1: Product: syz [ 259.774932][ T5139] usb 5-1: Manufacturer: syz [ 259.779836][ T5139] usb 5-1: SerialNumber: syz [ 259.793392][ T5139] usb 5-1: config 0 descriptor?? [ 259.810911][ T5139] usb 5-1: Found UVC 0.00 device syz (046d:0721) [ 259.817592][ T5139] usb 5-1: No valid video chain found. [ 260.332948][ T8378] netlink: 'syz.4.1073': attribute type 10 has an invalid length. [ 260.348129][ T5139] libceph: connect (1)[c::]:6789 error -101 [ 260.370970][ T5139] libceph: mon0 (1)[c::]:6789 connect error [ 260.394237][ T8378] team0: Port device netdevsim0 removed [ 260.414904][ T8398] ceph: No mds server is up or the cluster is laggy [ 260.430103][ T8378] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 260.569366][ T9] usb 5-1: USB disconnect, device number 5 [ 260.679797][ T8409] Invalid ELF header magic: != ELF [ 260.936227][ T8417] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1086'. [ 261.610951][ T8427] sctp: [Deprecated]: syz.1.1088 (pid 8427) Use of struct sctp_assoc_value in delayed_ack socket option. [ 261.610951][ T8427] Use struct sctp_sack_info instead [ 262.427865][ T8443] Invalid ELF header magic: != ELF [ 262.663475][ T8449] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1098'. [ 265.434958][ T8475] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1106'. [ 265.460668][ T8478] Invalid ELF header magic: != ELF [ 265.983081][ T45] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 267.090337][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 0, changing to 7 [ 267.107643][ T45] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid wMaxPacketSize 0 [ 267.122507][ T45] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 267.142911][ T45] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 267.160552][ T45] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.183924][ T45] usb 4-1: config 0 descriptor?? [ 268.232387][ T45] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 268.246916][ T45] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 268.282490][ T45] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 268.645500][ T8535] input: syz1 as /devices/virtual/input/input18 [ 268.762405][ T35] tipc: Subscription rejected, illegal request [ 270.048477][ T5146] usb 4-1: USB disconnect, device number 5 [ 273.899489][ T8599] input: syz1 as /devices/virtual/input/input19 [ 273.986013][ T8601] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1151'. [ 274.476478][ T8610] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1154'. [ 274.527749][ T8610] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1154'. [ 275.143204][ T6378] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 276.150493][ T6378] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 276.207637][ T6378] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 276.222027][ T6378] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.412804][ T6378] usb 1-1: Product: syz [ 276.417129][ T6378] usb 1-1: Manufacturer: syz [ 276.433805][ T6378] usb 1-1: SerialNumber: syz [ 276.844020][ T6378] usb 1-1: config 0 descriptor?? [ 279.725392][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88807ea61c00: rx timeout, send abort [ 279.736497][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88807ea61c00: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 279.759279][ T6378] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 279.799611][ T6378] usb 1-1: USB disconnect, device number 9 [ 280.064129][ T5206] udevd[5206]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 280.570977][ T8716] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1189'. [ 281.032061][ T29] audit: type=1326 audit(1720227109.552:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8720 comm="syz.0.1192" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6ba1175bd9 code=0x0 [ 281.382857][ T6378] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 281.574832][ T6378] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 281.578742][ T6378] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 281.578777][ T6378] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.578802][ T6378] usb 3-1: Product: syz [ 281.578820][ T6378] usb 3-1: Manufacturer: syz [ 281.578838][ T6378] usb 3-1: SerialNumber: syz [ 281.586980][ T6378] usb 3-1: config 0 descriptor?? [ 282.103390][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 282.552860][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 282.663052][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.760788][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.867663][ T8767] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1205'. [ 282.901692][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 283.386668][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.410813][ T9] usb 1-1: config 0 descriptor?? [ 283.742903][ T8] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 283.880024][ T9] logitech 0003:046D:C20E.0003: rdesc size test failed for formula gp [ 283.973471][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 284.021099][ T9] logitech 0003:046D:C20E.0003: hidraw0: USB HID v0.00 Device [HID 046d:c20e] on usb-dummy_hcd.0-1/input0 [ 284.038814][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 284.077486][ T8] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 0 [ 284.222792][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 284.274600][ T8] usb 2-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=ee.eb [ 284.285340][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.317037][ T8] usb 2-1: Product: syz [ 284.339250][ T8] usb 2-1: Manufacturer: syz [ 284.354179][ T8] usb 2-1: SerialNumber: syz [ 284.382583][ T8] usb 2-1: config 0 descriptor?? [ 284.400569][ T8] pn533_usb 2-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 284.723127][ T8] usb 2-1: USB disconnect, device number 6 [ 284.771317][ T9] usb 1-1: USB disconnect, device number 10 [ 285.365638][ T6378] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 285.395915][ T6378] usb 3-1: USB disconnect, device number 6 [ 285.645041][ T5206] udevd[5206]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 285.953573][ T5098] Bluetooth: hci1: unexpected cc 0x1407 length: 100 > 9 [ 286.137521][ T29] audit: type=1326 audit(1720227114.662:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8808 comm="syz.1.1219" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd5ca775bd9 code=0x0 [ 287.883618][ T6378] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 288.649201][ T6378] usb 1-1: Using ep0 maxpacket: 8 [ 288.692694][ T6378] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 288.876165][ T6378] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 0 [ 288.951228][ T6378] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 289.315990][ T6378] usb 1-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=ee.eb [ 289.325438][ T6378] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.334102][ T6378] usb 1-1: Product: syz [ 289.339753][ T6378] usb 1-1: Manufacturer: syz [ 289.350871][ T6378] usb 1-1: SerialNumber: syz [ 289.415098][ T6378] usb 1-1: config 0 descriptor?? [ 289.430222][ T6378] pn533_usb 1-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 289.767459][ T8] usb 1-1: USB disconnect, device number 11 [ 289.973194][ T5098] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 289.982103][ T5098] Bluetooth: hci1: Injecting HCI hardware error event [ 289.991213][ T5098] Bluetooth: hci1: hardware error 0x00 [ 290.074345][ T5093] Bluetooth: hci1: unexpected cc 0x1407 length: 100 > 9 [ 290.081370][ T5093] Bluetooth: hci1: unexpected event for opcode 0x1407 [ 291.353252][ T8887] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1250'. [ 292.133803][ T5098] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 292.431366][ T8933] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 292.432222][ T29] audit: type=1326 audit(1720227120.952:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8930 comm="syz.2.1265" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd078b75bd9 code=0x0 [ 292.837400][ T8940] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1268'. [ 295.871142][ T29] audit: type=1326 audit(1720227124.332:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8995 comm="syz.2.1289" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd078b75bd9 code=0x0 [ 297.682854][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 297.990194][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 298.093316][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 298.123483][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 298.150573][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 298.190989][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.251755][ T9] usb 4-1: config 0 descriptor?? [ 298.687055][ T9] logitech 0003:046D:C20E.0004: rdesc size test failed for formula gp [ 298.727672][ T9] logitech 0003:046D:C20E.0004: hidraw0: USB HID v0.00 Device [HID 046d:c20e] on usb-dummy_hcd.3-1/input0 [ 300.657424][ T9061] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes [ 301.128993][ T9] usb 4-1: USB disconnect, device number 6 [ 301.458368][ T9069] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1313'. [ 302.387825][ T9083] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1320'. [ 303.009810][ T9102] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes [ 303.734820][ T9105] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 303.832770][ T45] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 304.030546][ T45] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 304.039749][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.050838][ T45] usb 2-1: config 0 descriptor?? [ 304.182909][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 304.422945][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 304.444913][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.657801][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.685876][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 304.734770][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.778737][ T9131] SET target dimension over the limit! [ 304.808491][ T9] usb 1-1: config 0 descriptor?? [ 304.861739][ T45] usb 2-1: Cannot read MAC address [ 304.891607][ T9134] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 304.923372][ T45] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -32 [ 305.283522][ T9] logitech 0003:046D:C20E.0005: rdesc size test failed for formula gp [ 305.319268][ T9] logitech 0003:046D:C20E.0005: hidraw0: USB HID v0.00 Device [HID 046d:c20e] on usb-dummy_hcd.0-1/input0 [ 306.367307][ T5146] usb 1-1: USB disconnect, device number 12 [ 306.486142][ T9] usb 2-1: USB disconnect, device number 7 [ 308.627998][ T9196] input: syz1 as /devices/virtual/input/input20 [ 308.642373][ T5146] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 308.865252][ T5146] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 309.028506][ T5146] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.049200][ T5146] usb 1-1: config 0 descriptor?? [ 310.095686][ T9210] netlink: 'syz.3.1367': attribute type 3 has an invalid length. [ 310.137889][ T9210] netlink: 'syz.3.1367': attribute type 1 has an invalid length. [ 310.164357][ T9210] netlink: 198200 bytes leftover after parsing attributes in process `syz.3.1367'. [ 310.312883][ T9214] SET target dimension over the limit! [ 310.405845][ T5146] usb 1-1: Cannot read MAC address [ 310.411278][ T5146] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -32 [ 310.656963][ T9225] netdevsim netdevsim4: Direct firmware load for ng failed with error -2 [ 310.681656][ T9225] netdevsim netdevsim4: Falling back to sysfs fallback for: ng [ 311.502449][ T9255] netlink: 'syz.3.1387': attribute type 3 has an invalid length. [ 311.512068][ T9255] netlink: 'syz.3.1387': attribute type 1 has an invalid length. [ 311.619143][ T9255] netlink: 198200 bytes leftover after parsing attributes in process `syz.3.1387'. [ 312.567589][ T9] usb 1-1: USB disconnect, device number 13 [ 313.035393][ T5098] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 313.047816][ T5098] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 313.064629][ T5098] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 313.076434][ T5098] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 313.084494][ T5098] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 313.105214][ T5098] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 313.105317][ T5100] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 313.111756][ T5098] Bluetooth: Wrong link type (-22) [ 313.112328][ T5098] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 313.131153][ T5098] Bluetooth: Wrong link type (-22) [ 313.137598][ T5098] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 313.144266][ T5098] Bluetooth: Wrong link type (-22) [ 313.150147][ T5098] Bluetooth: hci5: link tx timeout [ 313.157329][ T5098] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 313.435683][ T9283] netdevsim netdevsim3: Direct firmware load for ng failed with error -2 [ 313.471163][ T9283] netdevsim netdevsim3: Falling back to sysfs fallback for: ng [ 314.377453][ T51] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.521179][ T9279] chnl_net:caif_netlink_parms(): no params data found [ 314.719362][ T51] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.091091][ T51] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.175138][ T5100] Bluetooth: hci5: command 0x0406 tx timeout [ 315.186389][ T5093] Bluetooth: hci7: command tx timeout [ 315.421009][ T51] bond0: (slave netdevsim0): Releasing backup interface [ 315.492248][ T51] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.568298][ T9279] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.598562][ T9279] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.622552][ T9279] bridge_slave_0: entered allmulticast mode [ 315.653918][ T9279] bridge_slave_0: entered promiscuous mode [ 315.705893][ T9279] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.724042][ T9279] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.752998][ T9279] bridge_slave_1: entered allmulticast mode [ 315.814921][ T9279] bridge_slave_1: entered promiscuous mode [ 316.018793][ T9279] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.081838][ T9279] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.325469][ T9279] team0: Port device team_slave_0 added [ 316.379614][ T9279] team0: Port device team_slave_1 added [ 316.476614][ T29] audit: type=1326 audit(1720227145.002:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9368 comm="syz.0.1431" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6ba1175bd9 code=0x0 [ 316.498657][ T51] bridge_slave_1: left allmulticast mode [ 316.518773][ T51] bridge_slave_1: left promiscuous mode [ 316.537495][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.570672][ T51] bridge_slave_0: left allmulticast mode [ 316.593050][ T51] bridge_slave_0: left promiscuous mode [ 316.602920][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.776614][ T9377] kvm: kvm [9376]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x5427000000 [ 316.835094][ T9377] kvm: kvm [9376]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xe527000800 [ 316.893005][ T9377] kvm: kvm [9376]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x40027000800 [ 316.915102][ T9377] kvm: kvm [9376]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4000 [ 316.998812][ T9377] kvm: kvm [9376]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x174500004800 [ 317.037090][ T9377] kvm: kvm [9376]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x1e0000004000 [ 317.071793][ T9377] kvm: kvm [9376]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x24df00004800 [ 317.264116][ T5098] Bluetooth: hci7: command tx timeout [ 317.753685][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.760212][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.800895][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 317.836336][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 317.874518][ T51] bond0 (unregistering): Released all slaves [ 318.023424][ T9279] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.061321][ T9279] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.111040][ T9279] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.160419][ T9279] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.202438][ T9279] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.259848][ T9279] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.645593][ T9279] hsr_slave_0: entered promiscuous mode [ 318.688442][ T9279] hsr_slave_1: entered promiscuous mode [ 318.713948][ T9279] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 318.751196][ T9279] Cannot create hsr debugfs directory [ 318.800396][ T29] audit: type=1326 audit(1720227147.322:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9429 comm="syz.4.1449" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbb54d75bd9 code=0x0 [ 318.899072][ T9443] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 319.271740][ T51] hsr_slave_0: left promiscuous mode [ 319.280075][ T51] hsr_slave_1: left promiscuous mode [ 319.311004][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 319.311057][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 319.352743][ T5098] Bluetooth: hci7: command tx timeout [ 319.530321][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.530400][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 319.663241][ T51] veth1_macvtap: left promiscuous mode [ 319.663470][ T51] veth0_macvtap: left promiscuous mode [ 320.422745][ T51] veth1_vlan: left promiscuous mode [ 320.422911][ T51] veth0_vlan: left promiscuous mode [ 320.571544][ T9466] netlink: 'syz.1.1458': attribute type 3 has an invalid length. [ 320.571574][ T9466] netlink: 'syz.1.1458': attribute type 1 has an invalid length. [ 320.571592][ T9466] netlink: 198200 bytes leftover after parsing attributes in process `syz.1.1458'. [ 321.996960][ T5098] Bluetooth: hci7: command tx timeout [ 322.924697][ T9492] netlink: 207496 bytes leftover after parsing attributes in process `syz.3.1468'. [ 323.822855][ T29] audit: type=1326 audit(1720227152.342:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9494 comm="syz.4.1469" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbb54d75bd9 code=0x0 [ 325.472930][ T51] team0 (unregistering): Port device team_slave_1 removed [ 325.634937][ T51] team0 (unregistering): Port device team_slave_0 removed [ 327.960892][ T9535] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes [ 329.809448][ T9557] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 331.890179][ T9599] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1506'. [ 335.393584][ T9279] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 335.462833][ T5100] Bluetooth: hci5: command 0x0406 tx timeout [ 335.545819][ T9279] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 336.234377][ T9279] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 336.401243][ T9279] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 336.622869][ T29] audit: type=1326 audit(1720227165.142:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9668 comm="syz.4.1525" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbb54d75bd9 code=0x0 [ 336.872837][ T5229] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 337.014414][ T9279] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.072268][ T9279] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.096583][ T5229] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 337.134133][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.141398][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.184778][ T5229] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 337.191195][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.200900][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.340685][ T5229] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 4, skipping [ 337.397317][ T5229] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 337.480608][ T5229] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 337.516686][ T5229] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 337.554931][ T5229] usb 4-1: SerialNumber: syz [ 337.830153][ T5229] usb 4-1: 0:2 : does not exist [ 337.853071][ T5229] usb 4-1: unit 5 not found! [ 337.937470][ T5229] usb 4-1: USB disconnect, device number 7 [ 338.137828][ T9279] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 338.260827][ T5206] udevd[5206]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 338.437207][ T9279] veth0_vlan: entered promiscuous mode [ 338.481590][ T9279] veth1_vlan: entered promiscuous mode [ 338.774731][ T9279] veth0_macvtap: entered promiscuous mode [ 338.847491][ T9279] veth1_macvtap: entered promiscuous mode [ 339.157878][ T9279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.134449][ T9279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.165101][ T9279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.218772][ T9279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.249104][ T9279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.282759][ T9279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.318704][ T9279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.322990][ T5100] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 340.405451][ T5100] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 340.414245][ T5100] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 340.422603][ T5100] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 340.430557][ T5100] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 340.439131][ T5100] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 340.488057][ T9279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.501972][ T9279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.538622][ T9279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.581183][ T9279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.610575][ T9279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.621959][ T9279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.636779][ T9279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.019258][ T9279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.071205][ T9279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.318252][ T9279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.363484][ T9279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.424187][ T9279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.447422][ T9279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.480878][ T9279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.524814][ T9279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.556319][ T9279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.579203][ T9279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 341.905840][ T9279] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.936961][ T9279] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.961584][ T9279] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.990884][ T9279] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.085044][ T5229] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 342.103044][ T45] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 342.192874][ T2459] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.295542][ T5229] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 342.334646][ T45] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 342.346420][ T5229] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 342.361588][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.383449][ T5229] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 4, skipping [ 342.404544][ T2459] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.409792][ T45] usb 2-1: config 0 descriptor?? [ 342.428483][ T5229] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 342.449691][ T5229] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 342.469203][ T5229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 342.497085][ T5229] usb 1-1: SerialNumber: syz [ 342.539464][ T5100] Bluetooth: hci1: command tx timeout [ 342.625112][ T2459] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.757107][ T5229] usb 1-1: 0:2 : does not exist [ 342.788013][ T45] pegasus 2-1:0.0: probe with driver pegasus failed with error -71 [ 342.798766][ T5229] usb 1-1: unit 5 not found! [ 342.834530][ T45] usb 2-1: USB disconnect, device number 8 [ 342.846090][ T5229] usb 1-1: USB disconnect, device number 14 [ 342.910235][ T2459] bond0: (slave netdevsim0): Releasing backup interface [ 342.947723][ T2459] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.020200][ T2927] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.055958][ T2927] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.137405][ T5206] udevd[5206]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 343.198652][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.238528][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.524825][ T2459] bridge_slave_1: left allmulticast mode [ 343.542468][ T2459] bridge_slave_1: left promiscuous mode [ 343.582033][ T2459] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.717445][ T2459] bridge_slave_0: left allmulticast mode [ 343.735386][ T2459] bridge_slave_0: left promiscuous mode [ 343.741211][ T2459] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.613744][ T5100] Bluetooth: hci1: command tx timeout [ 345.396900][ T2459] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 345.416772][ T2459] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 345.460115][ T2459] bond0 (unregistering): Released all slaves [ 345.563479][ T9746] chnl_net:caif_netlink_parms(): no params data found [ 345.583428][ T5229] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 345.742831][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 345.824878][ T5229] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 345.854763][ T5229] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 345.872784][ T5146] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 345.894412][ T5229] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 345.915634][ T5229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.926616][ T5229] usb 1-1: config 0 descriptor?? [ 345.936557][ T5229] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 345.952498][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 345.996807][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 346.047530][ T9] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 4, skipping [ 346.092836][ T9] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 346.110116][ T9746] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.125028][ T9746] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.134141][ T5146] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 346.144044][ T5146] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.152874][ T9746] bridge_slave_0: entered allmulticast mode [ 346.160141][ T9] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 346.173310][ T9746] bridge_slave_0: entered promiscuous mode [ 346.180554][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 346.191247][ T5146] usb 3-1: config 0 descriptor?? [ 346.205772][ T9] usb 4-1: SerialNumber: syz [ 346.360817][ T9746] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.382851][ T9746] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.409642][ T9746] bridge_slave_1: entered allmulticast mode [ 346.424447][ T9746] bridge_slave_1: entered promiscuous mode [ 346.470839][ T9] usb 4-1: 0:2 : does not exist [ 346.512786][ T9] usb 4-1: unit 5 not found! [ 346.568928][ T5146] pegasus 3-1:0.0: probe with driver pegasus failed with error -71 [ 346.602105][ T9] usb 4-1: USB disconnect, device number 8 [ 346.611311][ T2459] hsr_slave_0: left promiscuous mode [ 346.639545][ T5146] usb 3-1: USB disconnect, device number 7 [ 346.647338][ T2459] hsr_slave_1: left promiscuous mode [ 346.684242][ T2459] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 346.701842][ T5100] Bluetooth: hci1: command tx timeout [ 346.735559][ T2459] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 346.786885][ T2459] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 346.802074][ T2459] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 346.860467][ T2459] veth1_macvtap: left promiscuous mode [ 346.866510][ T2459] veth0_macvtap: left promiscuous mode [ 346.872545][ T2459] veth1_vlan: left promiscuous mode [ 346.878632][ T2459] veth0_vlan: left promiscuous mode [ 346.934687][ T7411] udevd[7411]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 347.358895][ T9866] ip6t_srh: unknown srh invflags 7863 [ 347.680773][ T9881] process 'syz.1.1573' launched './file1' with NULL argv: empty string added [ 348.564792][ T2459] team0 (unregistering): Port device team_slave_1 removed [ 348.714694][ T2459] team0 (unregistering): Port device team_slave_0 removed [ 348.772973][ T5100] Bluetooth: hci1: command tx timeout [ 350.097959][ T9902] ip6t_srh: unknown srh invflags 7863 [ 350.391230][ T9746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.427038][ T930] usb 1-1: USB disconnect, device number 15 [ 350.465686][ T9746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.606849][ T9907] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1583'. [ 350.769309][ T9746] team0: Port device team_slave_0 added [ 350.811895][ T9746] team0: Port device team_slave_1 added [ 350.895260][ T9912] netdevsim netdevsim1: Direct firmware load for ng failed with error -2 [ 350.923460][ T9912] netdevsim netdevsim1: Falling back to sysfs fallback for: ng [ 351.077908][ T9746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.089600][ T9746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.136540][ T9746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.213086][ T9746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.233124][ T9746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.322148][ T9746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.408097][ T9929] ip6t_srh: unknown srh invflags 7863 [ 351.728051][ T9746] hsr_slave_0: entered promiscuous mode [ 351.762377][ T9746] hsr_slave_1: entered promiscuous mode [ 351.793101][ T9746] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 351.800747][ T9746] Cannot create hsr debugfs directory [ 353.305305][ T5098] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 353.334845][ T5098] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 353.351426][ T5098] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 353.362935][ T5098] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 353.374005][ T5098] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 353.390114][ T5098] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 353.744393][ T5098] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 353.751636][ T5098] Bluetooth: Wrong link type (-22) [ 353.757112][ T5098] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 353.763924][ T5098] Bluetooth: Wrong link type (-22) [ 353.769168][ T5098] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 353.777343][ T5098] Bluetooth: Wrong link type (-22) [ 354.176677][ T9980] netdevsim netdevsim2: Direct firmware load for ng failed with error -2 [ 354.210175][ T9980] netdevsim netdevsim2: Falling back to sysfs fallback for: ng [ 354.528349][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.837909][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.138633][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.312076][ T6378] IPVS: starting estimator thread 0... [ 355.385031][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.523027][ T5098] Bluetooth: hci0: command tx timeout [ 355.928216][ T9746] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 355.961404][ T9746] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 356.003323][T10016] IPVS: using max 15 ests per chain, 36000 per kthread [ 356.040958][ T9746] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 356.090981][ T9746] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 356.134032][ T9966] chnl_net:caif_netlink_parms(): no params data found [ 356.239229][ T5100] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 356.385306][T10034] netdevsim netdevsim3: Direct firmware load for ng failed with error -2 [ 356.416436][T10034] netdevsim netdevsim3: Falling back to sysfs fallback for: ng [ 356.478455][ T11] bridge_slave_1: left allmulticast mode [ 356.503113][ T11] bridge_slave_1: left promiscuous mode [ 356.521035][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.565626][ T11] bridge_slave_0: left allmulticast mode [ 356.571750][ T11] bridge_slave_0: left promiscuous mode [ 356.588113][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.572836][ T5100] Bluetooth: hci0: command tx timeout [ 358.239606][T10059] ip6t_srh: unknown srh invflags 7863 [ 358.247020][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 358.261499][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 358.277870][ T11] bond0 (unregistering): Released all slaves [ 358.500765][ T11] tipc: Disabling bearer [ 358.524386][ T11] tipc: Left network mode [ 358.820698][ T9966] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.906813][T10071] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 363.376643][ T5100] Bluetooth: hci0: command tx timeout [ 363.472156][ T9966] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.625352][ T9966] bridge_slave_0: entered allmulticast mode [ 363.635390][ T9966] bridge_slave_0: entered promiscuous mode [ 363.651524][ T9966] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.672832][ T9966] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.692981][ T9966] bridge_slave_1: entered allmulticast mode [ 363.742944][ T9966] bridge_slave_1: entered promiscuous mode [ 363.887792][T10082] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1637'. [ 363.990245][ T9966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 364.048490][ T9966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 364.430379][ T9966] team0: Port device team_slave_0 added [ 364.921899][ T11] hsr_slave_0: left promiscuous mode [ 364.957819][ T11] hsr_slave_1: left promiscuous mode [ 364.980464][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 365.015761][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 365.038462][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 365.329919][ T11] veth1_macvtap: left promiscuous mode [ 365.361284][ T11] veth0_macvtap: left promiscuous mode [ 365.367181][ T11] veth1_vlan: left promiscuous mode [ 365.372594][ T11] veth0_vlan: left promiscuous mode [ 365.413217][ T5100] Bluetooth: hci0: command tx timeout [ 366.563653][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8880301ff800: rx timeout, send abort [ 367.072085][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8880301ff800: abort rx timeout. Force session deactivation [ 369.280687][ T11] team0 (unregistering): Port device team_slave_1 removed [ 369.449839][ T11] team0 (unregistering): Port device team_slave_0 removed [ 369.616031][T10159] 9pnet_fd: Insufficient options for proto=fd [ 371.541791][ T9966] team0: Port device team_slave_1 added [ 371.562529][T10108] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1644'. [ 372.121210][ T9966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.149101][ T9966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.194416][ T9966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.252803][ T9966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.276009][ T9966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.424803][ T9966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.627496][T10191] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1673'. [ 372.703819][T10191] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1673'. [ 372.740778][ T9746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 372.821830][ T9966] hsr_slave_0: entered promiscuous mode [ 372.829616][ T9966] hsr_slave_1: entered promiscuous mode [ 372.875623][ T9966] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 372.885695][ T9966] Cannot create hsr debugfs directory [ 372.934905][ T29] audit: type=1326 audit(1720227201.462:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10205 comm="syz.1.1676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5ca775bd9 code=0x7ffc0000 [ 372.997152][ T29] audit: type=1326 audit(1720227201.482:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10205 comm="syz.1.1676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5ca775bd9 code=0x7ffc0000 [ 373.083509][ T29] audit: type=1326 audit(1720227201.502:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10205 comm="syz.1.1676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd5ca775bd9 code=0x7ffc0000 [ 373.132086][ T29] audit: type=1326 audit(1720227201.502:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10205 comm="syz.1.1676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5ca775bd9 code=0x7ffc0000 [ 373.189947][ T9746] 8021q: adding VLAN 0 to HW filter on device team0 [ 373.192761][ T29] audit: type=1326 audit(1720227201.512:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10205 comm="syz.1.1676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd5ca775bd9 code=0x7ffc0000 [ 373.251940][ T29] audit: type=1326 audit(1720227201.512:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10205 comm="syz.1.1676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd5ca775bd9 code=0x7ffc0000 [ 373.316992][ T29] audit: type=1326 audit(1720227201.512:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10205 comm="syz.1.1676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd5ca76cc27 code=0x7ffc0000 [ 373.386078][ T29] audit: type=1326 audit(1720227201.512:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10205 comm="syz.1.1676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd5ca7115c9 code=0x7ffc0000 [ 373.451989][ T29] audit: type=1326 audit(1720227201.512:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10205 comm="syz.1.1676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd5ca76cc27 code=0x7ffc0000 [ 373.518473][ T29] audit: type=1326 audit(1720227201.512:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10205 comm="syz.1.1676" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd5ca7115c9 code=0x7ffc0000 [ 373.579104][T10227] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1683'. [ 373.636017][T10227] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1683'. [ 373.677590][ T5143] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.684921][ T5143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 373.719872][ T5146] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.727171][ T5146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 373.849897][ T9746] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 374.462980][ T9746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 374.742773][T10276] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1694'. [ 374.751801][T10276] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1694'. [ 375.064823][ T9966] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 375.098394][ T9966] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 375.154952][ T9966] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 375.204739][ T9966] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 375.485294][ T9746] veth0_vlan: entered promiscuous mode [ 375.613084][ T9746] veth1_vlan: entered promiscuous mode [ 375.703464][ T9966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.934593][ T9966] 8021q: adding VLAN 0 to HW filter on device team0 [ 375.969401][ T9746] veth0_macvtap: entered promiscuous mode [ 376.021714][ T5143] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.029026][ T5143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.081855][ T9746] veth1_macvtap: entered promiscuous mode [ 376.111510][T10319] netlink: 'syz.2.1705': attribute type 5 has an invalid length. [ 376.157742][ T5143] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.165102][ T5143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.274645][ T9746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.314264][ T9746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.348429][ T9746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.369447][ T9746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.382796][ T9746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.394062][ T9746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.404534][ T9746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.415632][ T9746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.442698][ T9746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.466220][ T9746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.479213][ T9746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 376.520373][ T9746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.561043][ T9746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.591380][ T9746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.626869][ T9746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.658978][ T9746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.671662][ T9746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.690770][ T9746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.743003][ T9746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.798296][ T9746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 376.862111][ T9746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.070130][ T9746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 377.326876][ T9746] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.368460][ T9746] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.397933][ T9746] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.432906][ T9746] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.839993][ T7548] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.884209][ T7548] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.020482][ T7548] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.064636][ T7548] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.518273][ T9966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 379.203364][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.209738][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.392528][ T9966] veth0_vlan: entered promiscuous mode [ 379.441347][ T9966] veth1_vlan: entered promiscuous mode [ 379.578428][ T9966] veth0_macvtap: entered promiscuous mode [ 379.635700][ T9966] veth1_macvtap: entered promiscuous mode [ 379.639506][T10378] 9pnet_fd: Insufficient options for proto=fd [ 379.664186][ T29] kauditd_printk_skb: 92 callbacks suppressed [ 379.664208][ T29] audit: type=1326 audit(1720227208.192:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10384 comm="syz.4.1726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde49575bd9 code=0x7ffc0000 [ 379.745524][ T29] audit: type=1326 audit(1720227208.192:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10384 comm="syz.4.1726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde49575bd9 code=0x7ffc0000 [ 379.781628][ T9966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.805586][ T29] audit: type=1326 audit(1720227208.202:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10384 comm="syz.4.1726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=424 compat=0 ip=0x7fde49575bd9 code=0x7ffc0000 [ 379.849248][ T9966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.867320][ T29] audit: type=1326 audit(1720227208.202:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10384 comm="syz.4.1726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde49575bd9 code=0x7ffc0000 [ 379.908916][ T9966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.919789][ T29] audit: type=1326 audit(1720227208.202:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10384 comm="syz.4.1726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde49575bd9 code=0x7ffc0000 [ 379.945730][ T29] audit: type=1326 audit(1720227208.202:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10384 comm="syz.4.1726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fde49575bd9 code=0x7ffc0000 [ 379.972395][ T29] audit: type=1326 audit(1720227208.202:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10384 comm="syz.4.1726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde49575bd9 code=0x7ffc0000 [ 380.006649][ T9966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.015468][ T29] audit: type=1326 audit(1720227208.202:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10384 comm="syz.4.1726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fde49575bd9 code=0x7ffc0000 [ 380.039471][ T29] audit: type=1326 audit(1720227208.202:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10384 comm="syz.4.1726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde49575bd9 code=0x7ffc0000 [ 380.062869][ T29] audit: type=1326 audit(1720227208.212:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10384 comm="syz.4.1726" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7fde49575bd9 code=0x7ffc0000 [ 380.091839][ T9966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.116241][ T9966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.141177][ T9966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.179610][ T9966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.191502][ T9966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.224283][ T9966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.240223][ T9966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 380.268378][ T9966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.361668][ T9966] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 381.248846][ T9966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.297639][ T9966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.324524][ T9966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.340028][ T9966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.352131][ T9966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.387553][ T9966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.405565][ T9966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.419786][ T9966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.446695][ T9966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.462194][ T9966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.510247][ T9966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.529424][ T9966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.583754][ T9966] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 381.636074][ T9966] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.660612][ T9966] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.681282][ T9966] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.690737][ T9966] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.504044][ T2459] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.540425][ T2459] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.707927][ T2927] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.721222][T10413] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.731666][ T2927] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.891452][T10413] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 384.013712][T10421] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 384.107061][T10414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 384.151591][T10423] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1596'. [ 384.539182][T10413] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 385.586404][T10451] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1747'. [ 385.794068][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 385.794091][ T29] audit: type=1326 audit(1720227214.292:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10447 comm="syz.3.1746" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc75eb75bd9 code=0x0 [ 386.207958][ T29] audit: type=1326 audit(1720227214.732:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10452 comm="syz.2.1748" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcdaad75bd9 code=0x0 [ 387.645543][ T5146] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 388.045048][ T5146] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 388.067651][ T5146] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 388.278868][ T5146] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 388.293333][ T5146] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.122500][ T5146] usb 5-1: Product: syz [ 389.148141][ T5146] usb 5-1: Manufacturer: syz [ 389.162712][ T5146] usb 5-1: SerialNumber: syz [ 389.186549][ T5146] usb 5-1: can't set config #1, error -71 [ 389.216594][ T5146] usb 5-1: USB disconnect, device number 6 [ 389.509853][T10503] cgroup: Bad value for 'name' [ 392.528448][T10525] sch_tbf: burst 0 is lower than device veth1_to_bridge mtu (1514) ! [ 392.812719][ T5142] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 393.020619][ T5142] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 393.034589][ T5142] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 393.076440][ T5142] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 393.086025][ T5142] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.103371][ T5142] usb 3-1: Product: syz [ 393.111107][ T5142] usb 3-1: Manufacturer: syz [ 393.124593][ T5142] usb 3-1: SerialNumber: syz [ 393.149165][ T5142] cdc_ncm 3-1:1.0: NCM or ECM functional descriptors missing [ 393.164792][ T5142] cdc_ncm 3-1:1.0: bind() failure [ 393.292782][ T45] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 393.413186][T10526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.434491][T10526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 393.496204][ T45] usb 5-1: config 0 has an invalid interface number: 204 but max is 1 [ 393.525090][ T45] usb 5-1: config 0 has no interface number 1 [ 393.564541][ T45] usb 5-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=b9.bf [ 393.594023][T10560] cgroup: Bad value for 'name' [ 393.604279][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.617299][ T45] usb 5-1: Product: syz [ 393.621780][ T45] usb 5-1: Manufacturer: syz [ 393.627708][ T5142] usb 3-1: USB disconnect, device number 8 [ 393.636791][ T45] usb 5-1: SerialNumber: syz [ 393.680057][ T45] usb 5-1: config 0 descriptor?? [ 394.231048][ T45] snd-usb-audio 5-1:0.204: probe with driver snd-usb-audio failed with error -22 [ 394.290597][ T45] usb 5-1: USB disconnect, device number 7 [ 395.722441][T10577] sch_tbf: burst 0 is lower than device veth1_to_bridge mtu (1514) ! [ 396.583756][T10589] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 397.169336][T10608] sp0: Synchronizing with TNC [ 397.204322][ T5145] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 397.405132][ T5145] usb 1-1: Using ep0 maxpacket: 8 [ 397.428158][ T5145] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 397.575801][ T6378] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 397.626663][ T5145] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 397.642673][ T5145] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 397.843365][ T6378] usb 5-1: config 0 has an invalid interface number: 204 but max is 1 [ 397.958586][ T6378] usb 5-1: config 0 has no interface number 1 [ 398.080512][ T6378] usb 5-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=b9.bf [ 398.342729][ T6378] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.370726][ T5145] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 398.378116][ T6378] usb 5-1: Product: syz [ 398.388680][ T5145] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 398.399982][ T6378] usb 5-1: Manufacturer: syz [ 398.410519][ T6378] usb 5-1: SerialNumber: syz [ 398.415550][ T5145] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 398.442759][ T5145] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 398.475775][ T5145] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 398.481156][ T6378] usb 5-1: config 0 descriptor?? [ 398.513833][ T6378] snd-usb-audio 5-1:0.204: probe with driver snd-usb-audio failed with error -22 [ 398.529246][ T5145] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 398.550720][ T5145] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 398.584936][ T5145] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 398.605563][ T5145] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 398.628609][ T5145] usb 1-1: string descriptor 0 read error: -22 [ 398.635552][ T5145] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 398.648635][ T5145] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.689404][ T5145] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 398.760734][ T5145] usb 5-1: USB disconnect, device number 8 [ 399.336928][ T5145] usb 1-1: USB disconnect, device number 16 [ 401.409484][T10661] netlink: 'syz.0.1810': attribute type 1 has an invalid length. [ 403.478006][T10751] netlink: 'syz.4.1824': attribute type 1 has an invalid length. [ 403.494863][ T5143] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 404.552895][ T5143] usb 4-1: Using ep0 maxpacket: 8 [ 404.565329][ T5143] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 404.587600][ T5143] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 404.603254][ T5143] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 404.617550][ T5143] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 404.642429][ T5143] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 404.660390][ T5143] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 404.676629][ T5143] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 404.687884][ T5143] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 404.712279][ T5143] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 404.733061][ T5143] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 404.747847][T10769] cgroup: Bad value for 'name' [ 404.758893][ T5143] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 404.788225][ T5143] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 404.830850][ T5143] usb 4-1: string descriptor 0 read error: -22 [ 404.843339][ T5143] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 404.872084][ T5143] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.902157][ T5143] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 404.945919][T10777] netlink: 'syz.4.1836': attribute type 1 has an invalid length. [ 406.236465][ T5229] usb 4-1: USB disconnect, device number 9 [ 406.803118][T10794] sch_tbf: burst 0 is lower than device veth1_to_bridge mtu (1514) ! [ 407.588785][T10813] netlink: 'syz.1.1849': attribute type 1 has an invalid length. [ 408.328140][T10844] sch_tbf: burst 0 is lower than device veth1_to_bridge mtu (1514) ! [ 408.373348][ T45] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 408.603997][ T45] usb 5-1: Using ep0 maxpacket: 32 [ 408.624950][ T45] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 408.751236][ T45] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 408.866387][ T45] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 409.019227][T10857] netlink: 'syz.0.1866': attribute type 5 has an invalid length. [ 409.051673][ T45] usb 5-1: config 1 has no interface number 0 [ 409.190747][ T45] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 409.255847][ T45] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 409.311886][ T45] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 409.339563][T10859] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1868'. [ 409.359175][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.401072][T10859] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 409.407672][T10859] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 409.416174][T10859] vhci_hcd vhci_hcd.0: Device attached [ 409.432771][T10862] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0 [ 409.446650][ T45] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 409.450502][T10711] vhci_hcd: stop threads [ 409.450519][T10711] vhci_hcd: release socket [ 409.450542][T10711] vhci_hcd: disconnect device [ 409.961702][ T45] snd_usb_pod 5-1:1.1: set_interface failed [ 409.973175][ T45] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 409.980552][ T45] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 410.006731][ T45] usb 5-1: USB disconnect, device number 9 [ 411.000687][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 411.035694][T10891] sch_tbf: burst 0 is lower than device veth1_to_bridge mtu (1514) ! [ 411.344039][T10902] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1884'. [ 411.365099][T10902] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 411.385456][T10902] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 411.438450][T10902] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 411.454682][T10902] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 411.755752][ T29] audit: type=1800 audit(1720227240.282:285): pid=10918 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.3.1890" name="SYSV00000000" dev="hugetlbfs" ino=4 res=0 errno=0 [ 412.310786][T10929] netlink: 'syz.3.1895': attribute type 21 has an invalid length. [ 412.350939][T10929] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1895'. [ 412.385556][T10929] netlink: 'syz.3.1895': attribute type 4 has an invalid length. [ 412.418870][T10929] netlink: 'syz.3.1895': attribute type 5 has an invalid length. [ 412.542788][T10929] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1895'. [ 412.692044][ T29] audit: type=1800 audit(1720227241.212:286): pid=10954 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.1906" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 413.290208][ T29] audit: type=1800 audit(1720227241.812:287): pid=10991 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.0.1922" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 413.310036][ C1] vkms_vblank_simulate: vblank timer overrun [ 413.539277][T10988] vivid-000: disconnect [ 413.645482][T10995] vivid-000: reconnect [ 413.942765][T11000] netlink: 'syz.4.1925': attribute type 21 has an invalid length. [ 413.990669][T11000] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1925'. [ 414.016294][T11000] netlink: 'syz.4.1925': attribute type 4 has an invalid length. [ 414.036097][T11000] netlink: 'syz.4.1925': attribute type 5 has an invalid length. [ 414.062886][T11000] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1925'. [ 414.921492][T11043] Cannot find add_set index 0 as target [ 415.289147][ T29] audit: type=1800 audit(1720227243.812:288): pid=11059 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.1950" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 415.308937][ C1] vkms_vblank_simulate: vblank timer overrun [ 415.595899][ T5098] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 415.632317][ T5098] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 415.642407][ T5098] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 415.656658][ T5098] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 415.666677][ T5098] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 415.680028][ T5098] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 415.828412][ T62] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.045605][ T62] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.166820][ T62] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.328655][T11086] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 416.402104][ T62] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.689617][T11071] chnl_net:caif_netlink_parms(): no params data found [ 416.852041][ T62] bridge_slave_1: left allmulticast mode [ 416.862392][ T62] bridge_slave_1: left promiscuous mode [ 416.869337][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.887149][ T62] bridge_slave_0: left allmulticast mode [ 416.899796][ T62] bridge_slave_0: left promiscuous mode [ 416.908295][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.292501][T11138] binder: 11137:11138 ioctl c00c620f 20000040 returned -22 [ 417.374076][T11140] netlink: 'syz.2.1978': attribute type 1 has an invalid length. [ 417.383657][T11140] netlink: 9348 bytes leftover after parsing attributes in process `syz.2.1978'. [ 417.394668][T11140] netlink: 'syz.2.1978': attribute type 1 has an invalid length. [ 417.669352][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 417.690126][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 417.712341][ T62] bond0 (unregistering): Released all slaves [ 417.732973][ T5098] Bluetooth: hci1: command tx timeout [ 417.915566][T11143] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1979'. [ 417.936920][T11143] netlink: 'syz.2.1979': attribute type 19 has an invalid length. [ 418.558113][T11071] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.565607][T11071] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.591657][T11071] bridge_slave_0: entered allmulticast mode [ 418.599861][T11071] bridge_slave_0: entered promiscuous mode [ 418.615909][T11071] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.632559][T11071] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.640265][T11071] bridge_slave_1: entered allmulticast mode [ 418.651152][T11071] bridge_slave_1: entered promiscuous mode [ 418.698036][T11183] sch_tbf: burst 0 is lower than device veth1_to_bridge mtu (1514) ! [ 418.930352][T11071] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 418.968570][T11071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.000272][ T62] hsr_slave_0: left promiscuous mode [ 419.011926][ T62] hsr_slave_1: left promiscuous mode [ 419.024587][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 419.047995][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 419.070152][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 419.092491][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 419.112882][ T5145] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 419.146622][ T62] veth1_macvtap: left promiscuous mode [ 419.159105][ T62] veth0_macvtap: left promiscuous mode [ 419.167720][ T62] veth1_vlan: left promiscuous mode [ 419.178856][ T62] veth0_vlan: left promiscuous mode [ 419.303885][ T5145] usb 4-1: Using ep0 maxpacket: 32 [ 419.323763][ T5145] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 419.348423][ T5145] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 419.361018][ T5145] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 419.373639][ T5145] usb 4-1: config 1 has no interface number 0 [ 419.382177][ T5145] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 419.400746][ T5145] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 419.413248][T11211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2000'. [ 419.599577][ T5145] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 419.630377][ T5145] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.709850][ T5145] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 419.812791][ T5098] Bluetooth: hci1: command tx timeout [ 419.985109][ T5145] snd_usb_pod 4-1:1.1: set_interface failed [ 420.013595][ T5145] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 420.038134][ T5145] snd_usb_pod 4-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 420.082220][ T5145] usb 4-1: USB disconnect, device number 10 [ 421.495358][ T5098] Bluetooth: hci5: unexpected event for opcode 0x2002 [ 421.614889][ T29] audit: type=1326 audit(1720227250.142:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11224 comm="syz.3.2004" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc75eb75bd9 code=0x0 [ 421.725895][ T62] team0 (unregistering): Port device team_slave_1 removed [ 421.783900][ T62] team0 (unregistering): Port device team_slave_0 removed [ 421.893045][ T5098] Bluetooth: hci1: command tx timeout [ 422.351549][T11216] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2001'. [ 422.372663][T11216] netlink: 'syz.1.2001': attribute type 19 has an invalid length. [ 422.658977][T11071] team0: Port device team_slave_0 added [ 422.694893][T11071] team0: Port device team_slave_1 added [ 423.011851][T11071] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 423.019695][T11071] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 423.049972][T11071] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 423.132303][T11071] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 423.167496][T11250] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2011'. [ 423.181717][T11071] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 423.209272][T11240] vivid-000: disconnect [ 423.209521][T11071] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 423.233844][T11240] vivid-000: reconnect [ 423.768064][T11071] hsr_slave_0: entered promiscuous mode [ 423.809390][T11071] hsr_slave_1: entered promiscuous mode [ 423.973669][ T5098] Bluetooth: hci1: command tx timeout [ 424.029905][T11071] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 424.066651][T11071] Cannot create hsr debugfs directory [ 424.954860][T11280] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2022'. [ 425.343782][ T5146] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 425.534099][ T5146] usb 3-1: Using ep0 maxpacket: 32 [ 425.542434][ T5146] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 425.543140][T11071] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 425.552426][ T5146] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 425.566964][ T5146] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 425.571654][T11071] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 425.577360][ T5146] usb 3-1: config 1 has no interface number 0 [ 425.583378][ T5098] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 425.590098][ T5146] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 425.602695][ T5098] Bluetooth: hci5: Injecting HCI hardware error event [ 425.617383][ T5146] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 425.618586][ T5098] Bluetooth: hci5: hardware error 0x00 [ 425.631252][ T5146] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 425.665177][T11071] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 425.678272][ T5146] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.694018][T11071] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 425.718572][ T5146] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 425.879165][T11071] 8021q: adding VLAN 0 to HW filter on device bond0 [ 426.018683][T11071] 8021q: adding VLAN 0 to HW filter on device team0 [ 426.048785][ T5146] snd_usb_pod 3-1:1.1: set_interface failed [ 426.091309][ T5146] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 426.103643][ T5145] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.110947][ T5145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 426.123847][ T5146] snd_usb_pod 3-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 426.138399][ T5146] usb 3-1: USB disconnect, device number 9 [ 426.149797][ T5145] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.157080][ T5145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 426.175776][ T29] audit: type=1326 audit(1720227254.692:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11288 comm="syz.1.2027" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd5ca775bd9 code=0x0 [ 426.231812][ C0] hrtimer: interrupt took 27537598 ns [ 426.295686][ T29] audit: type=1326 audit(1720227254.802:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11294 comm="syz.3.2029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75eb75bd9 code=0x7fc00000 [ 426.352837][ T29] audit: type=1326 audit(1720227254.862:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11294 comm="syz.3.2029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc75eb75bd9 code=0x7fc00000 [ 427.995795][ T5098] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 428.058009][ T29] audit: type=1326 audit(1720227256.542:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11294 comm="syz.3.2029" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc75eb75bd9 code=0x7fc00000 [ 444.800326][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 444.806979][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.972970][ T5100] Bluetooth: hci7: command 0x0406 tx timeout [ 606.452557][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 606.459608][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P11318/1:b.el [ 606.468261][ C1] rcu: (detected by 1, t=10503 jiffies, g=46037, q=630 ncpus=2) [ 606.476006][ C1] task:syz-executor state:R running task stack:24672 pid:11318 tgid:11318 ppid:5071 flags:0x00000002 [ 606.489091][ C1] Call Trace: [ 606.492411][ C1] [ 606.495461][ C1] __schedule+0x1796/0x49d0 [ 606.500026][ C1] ? 0xffffffffa0003c00 [ 606.504217][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 606.510602][ C1] ? __pfx___schedule+0x10/0x10 [ 606.515488][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 606.521520][ C1] ? preempt_schedule_irq+0xf0/0x1c0 [ 606.526835][ C1] preempt_schedule_irq+0xfb/0x1c0 [ 606.531974][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 606.537738][ C1] irqentry_exit+0x5e/0x90 [ 606.542187][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 606.548288][ C1] RIP: 0010:page_ext_get+0xc5/0x2a0 [ 606.553524][ C1] Code: ff c6 05 ea 30 92 0d 01 48 c7 c7 e0 eb d7 8b be 0f 03 00 00 48 c7 c2 00 ee d7 8b e8 b5 80 6e ff 49 bf 00 00 00 00 00 fc ff df <48> b8 00 00 00 00 00 16 00 00 48 01 c3 49 89 dc 49 c1 fc 06 48 bd [ 606.574483][ C1] RSP: 0018:ffffc900090ef710 EFLAGS: 00000293 [ 606.582357][ C1] RAX: ffffffff820446c3 RBX: ffffea00018d5140 RCX: ffff888025d01e00 [ 606.590367][ C1] RDX: 0000000000000000 RSI: ffffffff8c1f15e0 RDI: ffffffff8c1f15a0 [ 606.598379][ C1] RBP: 0000000000000001 R08: ffffffff820446b1 R09: 1ffffffff25ee2b0 [ 606.606385][ C1] R10: dffffc0000000000 R11: fffffbfff25ee2b1 R12: 0000000000102dc2 [ 606.614647][ C1] R13: 0000000000000001 R14: ffffffff82044680 R15: dffffc0000000000 [ 606.623536][ C1] ? page_ext_get+0x20/0x2a0 [ 606.628733][ C1] ? page_ext_get+0x51/0x2a0 [ 606.634935][ C1] ? page_ext_get+0x63/0x2a0 [ 606.639772][ C1] __set_page_owner+0x9e/0x800 [ 606.644608][ C1] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 606.651264][ C1] ? __pfx_lock_release+0x10/0x10 [ 606.656339][ C1] ? __pfx___set_page_owner+0x10/0x10 [ 606.661748][ C1] ? do_raw_spin_trylock+0xc8/0x1f0 [ 606.666999][ C1] post_alloc_hook+0x1f3/0x230 [ 606.671797][ C1] get_page_from_freelist+0x2e4c/0x2f10 [ 606.677409][ C1] ? __alloc_pages_noprof+0x166/0x6c0 [ 606.682825][ C1] ? alloc_pages_bulk_noprof+0x729/0xd40 [ 606.688503][ C1] ? prepare_alloc_pages+0x369/0x5d0 [ 606.693829][ C1] __alloc_pages_noprof+0x256/0x6c0 [ 606.699062][ C1] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 606.704834][ C1] alloc_pages_mpol_noprof+0x3e8/0x680 [ 606.710332][ C1] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 606.716348][ C1] ? rcu_is_watching+0x15/0xb0 [ 606.721149][ C1] ? trace_kmalloc+0x1f/0xd0 [ 606.725768][ C1] ? __vmalloc_node_range_noprof+0x5dd/0x1460 [ 606.731867][ C1] ? alloc_pages_noprof+0xef/0x170 [ 606.737012][ C1] __vmalloc_node_range_noprof+0x971/0x1460 [ 606.742942][ C1] ? __pfx_smack_log+0x10/0x10 [ 606.747770][ C1] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 606.754152][ C1] vmalloc_user_noprof+0x74/0x80 [ 606.759121][ C1] ? kcov_ioctl+0x59/0x640 [ 606.763562][ C1] kcov_ioctl+0x59/0x640 [ 606.767830][ C1] ? bpf_lsm_file_ioctl+0x9/0x10 [ 606.772794][ C1] ? security_file_ioctl+0x87/0xb0 [ 606.777932][ C1] ? __pfx_kcov_ioctl+0x10/0x10 [ 606.782812][ C1] __se_sys_ioctl+0xfc/0x170 [ 606.787441][ C1] do_syscall_64+0xf3/0x230 [ 606.791981][ C1] ? clear_bhb_loop+0x35/0x90 [ 606.796786][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.802712][ C1] RIP: 0033:0x7fb2c2d757db [ 606.807151][ C1] RSP: 002b:00007ffdbde78860 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 606.815604][ C1] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fb2c2d757db [ 606.823700][ C1] RDX: 0000000000040000 RSI: ffffffff80086301 RDI: 00000000000000e0 [ 606.833193][ C1] RBP: 00007fb2c2f046b8 R08: 00000000000000da R09: 0000000000000000 [ 606.842488][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000c [ 606.851194][ C1] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000009 [ 606.861764][ C1] [ 606.864900][ C1] rcu: rcu_preempt kthread starved for 10454 jiffies! g46037 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 606.876121][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 606.886118][ C1] rcu: RCU grace-period kthread stack dump: [ 606.892026][ C1] task:rcu_preempt state:R running task stack:26448 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 606.903887][ C1] Call Trace: [ 606.907184][ C1] [ 606.910141][ C1] __schedule+0x1796/0x49d0 [ 606.914793][ C1] ? __pfx___schedule+0x10/0x10 [ 606.919673][ C1] ? __pfx_lock_release+0x10/0x10 [ 606.924721][ C1] ? __asan_memset+0x23/0x50 [ 606.929351][ C1] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 606.935184][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 606.941543][ C1] ? schedule+0x90/0x320 [ 606.945808][ C1] schedule+0x14b/0x320 [ 606.949996][ C1] schedule_timeout+0x1be/0x310 [ 606.954881][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 606.960290][ C1] ? __pfx_process_timeout+0x10/0x10 [ 606.965609][ C1] ? prepare_to_swait_event+0x32e/0x350 [ 606.971200][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 606.976099][ C1] ? __pfx_rcu_implicit_dynticks_qs+0x10/0x10 [ 606.982201][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 606.987602][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 606.993568][ C1] ? finish_swait+0xd4/0x1e0 [ 606.998222][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 607.002861][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 607.008086][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 607.014028][ C1] ? __kthread_parkme+0x169/0x1d0 [ 607.019086][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 607.024313][ C1] kthread+0x2f0/0x390 [ 607.028425][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 607.033657][ C1] ? __pfx_kthread+0x10/0x10 [ 607.038281][ C1] ret_from_fork+0x4b/0x80 [ 607.042731][ C1] ? __pfx_kthread+0x10/0x10 [ 607.047365][ C1] ret_from_fork_asm+0x1a/0x30 [ 607.052185][ C1] [ 607.055227][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 607.061565][ C1] CPU: 1 PID: 5139 Comm: kworker/1:3 Not tainted 6.10.0-rc6-syzkaller-00210-gd270dd21bee0 #0 [ 607.071830][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 607.081906][ C1] Workqueue: events_power_efficient gc_worker [ 607.088025][ C1] RIP: 0010:kvm_wait+0x250/0x2c0 [ 607.093000][ C1] Code: 3b 45 0f b6 f6 44 89 ff 44 89 f6 e8 8a df 55 00 e8 f5 42 5d 00 45 38 f7 75 15 66 90 e8 f9 de 55 00 0f 00 2d f2 d7 87 0a fb f4 50 fe ff ff e8 e6 de 55 00 fb e9 45 fe ff ff 89 d9 80 e1 07 38 [ 607.112721][ C1] RSP: 0018:ffffc90000a17d60 EFLAGS: 00000246 [ 607.118830][ C1] RAX: ffffffff814047c7 RBX: ffff88807e198150 RCX: ffff8880660c0000 [ 607.126848][ C1] RDX: 0000000000000301 RSI: ffffffff8bcabb40 RDI: ffffffff8c1f1600 [ 607.134854][ C1] RBP: ffffc90000a17e30 R08: ffffffff92f71647 R09: 1ffffffff25ee2c8 [ 607.143207][ C1] R10: dffffc0000000000 R11: fffffbfff25ee2c9 R12: 1ffff92000142fb0 [ 607.151204][ C1] R13: dffffc0000000000 R14: 0000000000000003 R15: 0000000000000003 [ 607.159374][ C1] FS: 0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 607.168325][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 607.174936][ C1] CR2: 00007f3fff903ff8 CR3: 0000000023a4c000 CR4: 00000000003506f0 [ 607.183204][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 607.191295][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 607.199377][ C1] Call Trace: [ 607.202693][ C1] [ 607.205562][ C1] ? rcu_check_gp_kthread_starvation+0x278/0x310 [ 607.211935][ C1] ? print_other_cpu_stall+0x1470/0x15a0 [ 607.217609][ C1] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 607.223458][ C1] ? __pfx_lock_release+0x10/0x10 [ 607.228622][ C1] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 607.234895][ C1] ? rcu_sched_clock_irq+0x9f4/0x10a0 [ 607.240304][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 607.245987][ C1] ? hrtimer_run_queues+0x16c/0x460 [ 607.251259][ C1] ? update_process_times+0x1ce/0x230 [ 607.256682][ C1] ? tick_nohz_handler+0x37c/0x500 [ 607.261989][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 607.267524][ C1] ? __hrtimer_run_queues+0x551/0xd50 [ 607.272940][ C1] ? ktime_get_update_offsets_now+0x3c/0x250 [ 607.278980][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 607.284748][ C1] ? hrtimer_interrupt+0x396/0x990 [ 607.289924][ C1] ? __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 607.296118][ C1] ? sysvec_apic_timer_interrupt+0x52/0xc0 [ 607.301961][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 607.308162][ C1] ? kvm_wait+0x247/0x2c0 [ 607.312581][ C1] ? kvm_wait+0x250/0x2c0 [ 607.318536][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 607.326454][ C1] ? __pfx_kvm_wait+0x10/0x10 [ 607.331394][ C1] __pv_queued_spin_lock_slowpath+0x8d0/0xdc0 [ 607.337891][ C1] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 607.344707][ C1] queued_spin_lock_slowpath+0x42/0x50 [ 607.351818][ C1] do_raw_spin_lock+0x272/0x370 [ 607.357904][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 607.366281][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 607.371997][ C1] ? cfg80211_inform_single_bss_data+0xd78/0x2360 [ 607.378482][ C1] ? cfg80211_inform_single_bss_data+0xd78/0x2360 [ 607.385025][ C1] ? cfg80211_inform_single_bss_data+0xfc2/0x2360 [ 607.391507][ C1] cfg80211_inform_single_bss_data+0xfc2/0x2360 [ 607.397822][ C1] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 607.404538][ C1] ? validate_chain+0x11e/0x5900 [ 607.409529][ C1] ? validate_chain+0x11e/0x5900 [ 607.414514][ C1] ? deref_stack_reg+0x1c7/0x260 [ 607.419519][ C1] ? cfg80211_inform_bss_data+0x3c5/0x5a70 [ 607.425397][ C1] cfg80211_inform_bss_data+0x3dd/0x5a70 [ 607.431092][ C1] ? ret_from_fork_asm+0x19/0x30 [ 607.436078][ C1] ? validate_chain+0x11e/0x5900 [ 607.441051][ C1] ? arch_stack_walk+0x17b/0x1b0 [ 607.446070][ C1] ? __pfx_validate_chain+0x10/0x10 [ 607.451945][ C1] ? validate_chain+0x11e/0x5900 [ 607.459849][ C1] ? __pfx_validate_chain+0x10/0x10 [ 607.466846][ C1] ? __read_once_word_nocheck+0x9/0x20 [ 607.473046][ C1] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 607.483629][ C1] ? __pfx_validate_chain+0x10/0x10 [ 607.490059][ C1] ? mark_lock+0x9a/0x350 [ 607.495575][ C1] ? __lock_acquire+0x1346/0x1fd0 [ 607.501676][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 607.507123][ C1] ? ieee80211_bss_info_update+0x3d9/0xbc0 [ 607.513078][ C1] cfg80211_inform_bss_frame_data+0x3bc/0x720 [ 607.519225][ C1] ? ieee80211_bss_info_update+0x3d9/0xbc0 [ 607.525096][ C1] ieee80211_bss_info_update+0x8a7/0xbc0 [ 607.530783][ C1] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 607.536996][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 607.543353][ C1] ? kcov_remote_start+0x9e/0x7e0 [ 607.548411][ C1] ? ieee80211_get_channel_khz+0x173/0x920 [ 607.554250][ C1] ieee80211_scan_rx+0x526/0x9c0 [ 607.559249][ C1] ieee80211_rx_list+0x2b00/0x3780 [ 607.564401][ C1] ? __lock_acquire+0x1346/0x1fd0 [ 607.569482][ C1] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 607.574995][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 607.580054][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 607.586065][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 607.592429][ C1] ? ieee80211_rx_napi+0xd6/0x3c0 [ 607.597486][ C1] ieee80211_rx_napi+0x18a/0x3c0 [ 607.602465][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 607.608840][ C1] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 607.614341][ C1] ? skb_dequeue+0x113/0x150 [ 607.618968][ C1] ieee80211_handle_queued_frames+0xe7/0x1e0 [ 607.624998][ C1] tasklet_action_common+0x321/0x4d0 [ 607.630318][ C1] ? __pfx_tasklet_action_common+0x10/0x10 [ 607.636258][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 607.642618][ C1] ? workqueue_softirq_action+0xca/0x140 [ 607.648292][ C1] handle_softirqs+0x2c4/0x970 [ 607.653085][ C1] ? __irq_exit_rcu+0xf4/0x1c0 [ 607.657878][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 607.663192][ C1] ? irqtime_account_irq+0xd4/0x1e0 [ 607.668431][ C1] __irq_exit_rcu+0xf4/0x1c0 [ 607.673048][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 607.678283][ C1] irq_exit_rcu+0x9/0x30 [ 607.682554][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 607.688267][ C1] [ 607.692791][ C1] [ 607.696035][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 607.702453][ C1] RIP: 0010:lock_acquire+0x264/0x550 [ 607.708308][ C1] Code: 2b 00 74 08 4c 89 f7 e8 ba 29 86 00 f6 44 24 61 02 0f 85 85 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 607.730316][ C1] RSP: 0018:ffffc9000458f900 EFLAGS: 00000206 [ 607.736710][ C1] RAX: 0000000000000001 RBX: 1ffff920008b1f2c RCX: 0000000000000001 [ 607.744709][ C1] RDX: dffffc0000000000 RSI: ffffffff8bcaccc0 RDI: ffffffff8c1f1600 [ 607.752716][ C1] RBP: ffffc9000458fa48 R08: ffffffff92f71587 R09: 1ffffffff25ee2b0 [ 607.760715][ C1] R10: dffffc0000000000 R11: fffffbfff25ee2b1 R12: 1ffff920008b1f28 [ 607.768714][ C1] R13: dffffc0000000000 R14: ffffc9000458f960 R15: 0000000000000246 [ 607.776736][ C1] ? gc_worker+0x26b/0x1530 [ 607.781283][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 607.786352][ C1] ? gc_worker+0x26b/0x1530 [ 607.790893][ C1] ? __pfx___might_resched+0x10/0x10 [ 607.796299][ C1] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 607.802605][ C1] gc_worker+0x28c/0x1530 [ 607.806968][ C1] ? gc_worker+0x26b/0x1530 [ 607.811504][ C1] ? gc_worker+0x26b/0x1530 [ 607.816071][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 607.822098][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 607.828483][ C1] ? __pfx_gc_worker+0x10/0x10 [ 607.833292][ C1] ? process_scheduled_works+0x945/0x1830 [ 607.839043][ C1] process_scheduled_works+0xa2c/0x1830 [ 607.844656][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 607.850700][ C1] ? assign_work+0x364/0x3d0 [ 607.855359][ C1] worker_thread+0x86d/0xd50 [ 607.859991][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 607.865928][ C1] ? __kthread_parkme+0x169/0x1d0 [ 607.871077][ C1] ? __pfx_worker_thread+0x10/0x10 [ 607.876243][ C1] kthread+0x2f0/0x390 [ 607.880357][ C1] ? __pfx_worker_thread+0x10/0x10 [ 607.885503][ C1] ? __pfx_kthread+0x10/0x10 [ 607.890151][ C1] ret_from_fork+0x4b/0x80 [ 607.894619][ C1] ? __pfx_kthread+0x10/0x10 [ 607.899246][ C1] ret_from_fork_asm+0x1a/0x30 [ 607.904065][ C1]