last executing test programs: 7.522137832s ago: executing program 1 (id=1859): socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000000c0)) read$dsp(r1, &(0x7f00000011c0)=""/4117, 0x200021d5) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000080), 0x80, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00') fchdir(r3) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f00000004c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) sendto$inet6(r2, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$igmp6(0xa, 0x3, 0x2) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f0000000100)={0x4, r4}) ioctl$DMA_BUF_SET_NAME_A(r6, 0x40086200, &(0x7f00000001c0)='\a\x00\x00\x00\x00\x00\x00\x00-control\x00') r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) 6.998134661s ago: executing program 2 (id=1860): r0 = memfd_create(&(0x7f0000000dc0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb8\xd2\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) ftruncate(r0, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x244, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, {0x9}}}]}}]}}, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f0000000500), 0x0, 0x0) openat$bsg(0xffffff9c, 0x0, 0x40040, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) close_range(r1, 0xffffffffffffffff, 0x0) 5.494362409s ago: executing program 0 (id=1864): socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x7a2, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x9b0902, 0x0, '\x00', @p_u8=&(0x7f0000000180)=0x3}}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x3d) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) connect$inet6(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="02c9000a0006000500010842580e2a64adc9b138f92294bdeebc1ecb348ff152b7108cd561ee4d2c89f6f3bfa05c3f441bd20d1c6ba70e9ed467d5a2b8fd8f67e24d29b35829db02ea386f2b2bf9b81a0b4495877a1b5a2625e79bb29899f85cd07263597bb8ec3117c8e59fd935e3df6c7673feca56a9807ad8515d9bdb88cd8cbb8d6d5f8ba8055205a576717197c6c63a7eb9b71ca1ef176ba5aa73f8fa7bda01b1c8a997b9cbb31f7d6a43f2fd45becca37149c7e02c5e01010000f6edc52d9cd3a82bb77a32a3a7e54582bcff1cc806edd49403"], 0xf) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2b0, 0x138, 0x0, 0x148, 0x0, 0x148, 0x218, 0x240, 0x240, 0x218, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@unspec=@connlabel={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'ip6erspan0\x00'}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'veth0_vlan\x00', 'macvtap0\x00'}, 0x0, 0xc0, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x20800, 0x0) 4.343362357s ago: executing program 2 (id=1868): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x14, 0x0, 0xb, 0x3, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x1f230e12abf1efb1}, 0x4000000) 4.194226982s ago: executing program 1 (id=1869): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x44040) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000880)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) r1 = syz_io_uring_setup(0x2c92, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f0000000440)=0x0) r4 = getpid() process_vm_readv(r4, 0x0, 0x0, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = getpid() sched_setscheduler(r6, 0x2, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$inet(0x2, 0x3, 0x8) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000001dc0)=@filter={'filter\x00', 0x42, 0x4, 0xaf0, 0xffffffff, 0x0, 0x990, 0x98, 0xffffffff, 0xffffffff, 0xa58, 0xa58, 0xa58, 0xffffffff, 0x5, 0x0, {[{{@uncond, 0x74000000, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@uncond, 0x287, 0x898, 0x8f8, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[], 0x1}}, @common=@unspec=@limit={{0x48}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xb50) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000001a40)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x278, 0x358, 0x358, 0x278, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'netdevsim0\x00', 'veth0_to_bond\x00'}, 0x0, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000050000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049"}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x348) sendmmsg(r7, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1, &(0x7f0000001340)=[{0xa0, 0x0, 0x0, "7bf64001b13abcb9a2c0f1552298100ff6c3be540b24178db8d668f54c1e3a4d074dbf11abe29efc3970108b4b1b112136b12c9e8d241b01765ee394376e4892b789851a1ef044dbf0dcad8ccc3c654f539190e6e8cdc77997d55a9900791bcacd71aa81111eb115f58d44e9e42144b4a67a86272611e76de6fabef8bd1b20e2d9db65e0e1fc5213e30876"}, {0x10, 0x84, 0x8}, {0xd8, 0x118, 0xfffffffe, "31fcdd5b3b6b42ee9035e53e2b9bcc242ca33c52a65a31f1c400236cd9799754df2b15794164711f5c1167a34fbcbfd75dbae899a462030e7c7bf0c5520fbb0a928e8cf9be30e3a689bec0c8859f88e51ed123087b3125cb7dcf0bc86db76a1f95750cde869a41c77f0cd990208bb2e59c9c968b0941dcdfc37ec38c7a23335bf99a075aaf2f205cd22f10fa73830d9be1658c9da299db5caccd077fb3da5323b6772dc54c199707eeee7194a6fb60a68ada09414ab00104b4d19f396abaad02d46489d3868e50"}], 0x188}}], 0x1, 0x8841) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001880)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r9, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_io_uring_submit(r2, r3, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2, 0x2007, @fd_index=0x7, 0x100, 0x0, 0x0, 0x10, 0x1}) io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0) 4.116942957s ago: executing program 2 (id=1870): r0 = memfd_create(&(0x7f0000000dc0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb8\xd2\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r0, 0xffff) fcntl$addseals(r0, 0x409, 0x7) ftruncate(r0, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x244, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, {0x9}}}]}}]}}, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f0000000500), 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) close_range(r1, 0xffffffffffffffff, 0x0) 3.47686027s ago: executing program 0 (id=1872): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1, 0x0, {{0x29, 0x4, 0x0, 0x0, 0xa4, 0x2000, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x4, 0x0, 0x0, 0x9}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x658}, {@broadcast}, {@remote}, {@private=0xa010100}]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x8, [{@dev}, {@remote}, {@multicast2}, {@private=0xa010121, 0x1ff}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @rr={0x7, 0x3, 0x17}, @rr={0x7, 0x13, 0x0, [@remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.392171693s ago: executing program 1 (id=1873): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000180)={[], 0x401}) 3.035669765s ago: executing program 1 (id=1874): socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x7a2, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x9b0902, 0x0, '\x00', @p_u8=&(0x7f0000000180)=0x3}}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x3d) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) connect$inet6(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="02c9000a0006000500010842580e2a64adc9b138f92294bdeebc1ecb348ff152b7108cd561ee4d2c89f6f3bfa05c3f441bd20d1c6ba70e9ed467d5a2b8fd8f67e24d29b35829db02ea386f2b2bf9b81a0b4495877a1b5a2625e79bb29899f85cd07263597bb8ec3117c8e59fd935e3df6c7673feca56a9807ad8515d9bdb88cd8cbb8d6d5f8ba8055205a576717197c6c63a7eb9b71ca1ef176ba5aa73f8fa7bda01b1c8a997b9cbb31f7d6a43f2fd45becca37149c7e02c5e01010000f6edc52d9cd3a82bb77a32a3a7e54582bcff1cc806edd49403"], 0xf) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2b0, 0x138, 0x0, 0x148, 0x0, 0x148, 0x218, 0x240, 0x240, 0x218, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@unspec=@connlabel={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'ip6erspan0\x00'}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'veth0_vlan\x00', 'macvtap0\x00'}, 0x0, 0xc0, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x20800, 0x0) 2.510556396s ago: executing program 4 (id=1876): r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340), 0x106}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000b80)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000b40), 0x106}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000a00)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000009c0), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000b00)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000007c0), 0x106}}, 0x20) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 2.350939645s ago: executing program 0 (id=1877): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x3c) accept4(r0, 0x0, 0x0, 0x80800) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) socket(0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 2.350361964s ago: executing program 4 (id=1878): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x9001) mknodat$loop(r0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x1) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(0xffffffffffffffff, &(0x7f0000002380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x8695c3813aa3cd9d}}, 0x50) creat(&(0x7f0000000080)='./file0\x00', 0x40) read$FUSE(0xffffffffffffffff, &(0x7f0000006580)={0x2020, 0x0, 0x0}, 0x2020) creat(&(0x7f0000000500)='./file0\x00', 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000006500)={0x50, 0x0, r2}, 0x50) 2.239165384s ago: executing program 2 (id=1879): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f00000000c0)=0x3, 0x4) sendmmsg$inet(r0, &(0x7f0000003240)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="19", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="ae", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000001800)="f35f79", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000002ac0)='p', 0x1}], 0x1}}], 0x4, 0x4040040) sendto(r0, &(0x7f0000000180)='%', 0x300000, 0x840, 0x0, 0x60) 2.155156534s ago: executing program 2 (id=1880): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d0009058203"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 2.154156829s ago: executing program 3 (id=1881): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x14, 0x0, 0xb, 0x3, 0x0, 0x0, {0x3, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x1f230e12abf1efb1}, 0x4000000) 2.107901514s ago: executing program 4 (id=1882): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010200000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900010073797a30000000000900030073797a320000000014000480080001400000000008000240000000002c"], 0xb4}}, 0x0) 2.071510236s ago: executing program 3 (id=1883): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[], 0x58}, 0x1, 0xf00}, 0x0) 2.018043625s ago: executing program 4 (id=1884): ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0) close(r0) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @initdev={0xac, 0x1e, 0xff, 0x0}, {[@rr={0x7, 0x3}, @end, @timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@rand_addr=0x64010102}, {@broadcast}, {@multicast2}, {}, {@empty}]}]}}}}}}}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042"], 0x18}}, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) epoll_create1(0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r3, &(0x7f0000000040)={0x1f, @fixed}, 0x8) listen(r3, 0x0) accept4(r3, 0x0, 0x0, 0x0) 2.01698729s ago: executing program 3 (id=1885): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1, 0x0, {{0x29, 0x4, 0x0, 0x0, 0xa4, 0x2000, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x4, 0x0, 0x0, 0x9}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x658}, {@broadcast}, {@remote}, {@private=0xa010100}]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x8, [{@dev}, {@remote}, {@multicast2}, {@private=0xa010121, 0x1ff}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @rr={0x7, 0x3, 0x17}, @rr={0x7, 0x13, 0x0, [@remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.423745721s ago: executing program 0 (id=1886): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_io_uring_setup(0x3678, &(0x7f0000000080)={0x0, 0x1ffffd, 0x10100, 0x40000000}, &(0x7f0000000040)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 913.601944ms ago: executing program 1 (id=1887): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000180)={[], 0x401}) 911.184786ms ago: executing program 4 (id=1888): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000080)=0x33e6, 0x4) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000900)={0x0, 0x2}, 0xfc1e) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) pipe2$9p(&(0x7f0000000140), 0x80000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000003c0)=0x14) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000100)={0x0, 0x0}) r2 = openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x9) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x2) r4 = landlock_create_ruleset(&(0x7f0000000240)={0x2100, 0x3}, 0x10, 0x0) landlock_restrict_self(r4, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) r5 = creat(0x0, 0x0) timerfd_gettime(r5, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x50) getsockopt$EBT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x80, 0x0, &(0x7f0000000980)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 591.153823ms ago: executing program 3 (id=1889): r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340), 0x106}}, 0x20) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x106}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000b80)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000b40), 0x106}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000a00)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000009c0), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100), 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000b00)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000007c0), 0x106}}, 0x20) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 486.842296ms ago: executing program 1 (id=1890): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect(r1, &(0x7f0000000300)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x8}, 0x80) 305.744104ms ago: executing program 4 (id=1891): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='veno\x00', 0x5) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000002c0)=[@window, @mss, @window, @window, @mss, @mss, @timestamp], 0x7) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) 266.493036ms ago: executing program 2 (id=1892): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r4, 0x0, 0x0}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x1f, 0x4, 0x9, 0x0, r4, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r5, &(0x7f0000000300), 0x20000000}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r5, &(0x7f0000000240), &(0x7f0000000540)=""/32}, 0x20) 252.375327ms ago: executing program 3 (id=1893): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x9001) mknodat$loop(r0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x1) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(0xffffffffffffffff, &(0x7f0000002380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x0, 0x8695c3813aa3cd9d}}, 0x50) creat(&(0x7f0000000080)='./file0\x00', 0x40) read$FUSE(0xffffffffffffffff, &(0x7f0000006580)={0x2020, 0x0, 0x0}, 0x2020) creat(&(0x7f0000000500)='./file0\x00', 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000006500)={0x50, 0x0, r2}, 0x50) 241.046547ms ago: executing program 0 (id=1894): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x2c, 0x0, 0xb, 0x3, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_NAME={0xd, 0x1, '[\'+%!%-!\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1f230e12abf1efb1}, 0x4000000) 118.294138ms ago: executing program 0 (id=1895): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000780), 0xffffffffffffffff) open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$alg(0x26, 0x5, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) mkdir(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0xa00, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) ioctl$VIDIOC_CROPCAP(0xffffffffffffffff, 0xc02c563a, &(0x7f0000000040)={0x9, {0x0, 0x0, 0x100}}) socket$l2tp6(0xa, 0x2, 0x73) pipe2$9p(0x0, 0x0) set_mempolicy(0xc002, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001800010000000000000000000a000000000000000000000018001600140001000100000000000000000010000000000008000400", @ANYRES32, @ANYBLOB="0600150007"], 0x44}}, 0x0) sendto$netrom(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={{0x6, @rose}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x24, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x3, &(0x7f0000000240)=[{0x15, 0x0, 0x0, 0x1}, {0x54}, {0x6, 0x0, 0xa, 0x5}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) 0s ago: executing program 3 (id=1896): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_open_dev$MSR(&(0x7f0000000000), 0x200, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x7, 0x8b}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000fc0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x40}, [{}]}, 0x78) connect$unix(r4, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)="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", 0x177, 0x805, 0x0, 0x0) kernel console output (not intermixed with test programs): man_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2978.434763][T18343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2978.447154][ T5328] usb 2-1: Using ep0 maxpacket: 16 [ 2978.453499][T18343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2978.465191][ T5328] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2978.477079][ T5328] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2978.489748][T18343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2978.523877][T18343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2978.525187][ T5328] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2978.533956][T18343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2978.533984][T18343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2978.535544][T18343] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2978.551796][ T5328] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2978.585140][ T5328] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2978.608120][ T5328] usb 2-1: config 0 descriptor?? [ 2978.636092][T18343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2978.680004][T18343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2978.689921][T18343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2978.724865][T18488] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 2978.730751][T18343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2978.753824][T18343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2978.773886][T18343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2978.783895][T18343] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2978.813971][T18343] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2978.845862][T18343] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2978.914860][T18343] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2978.923618][T18343] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2978.947309][T18343] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2978.967228][T18343] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2979.076624][ T5328] microsoft 0003:045E:07DA.000C: ignoring exceeding usage max [ 2979.120050][ T5328] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.000C/input/input38 [ 2979.187166][ T5328] microsoft 0003:045E:07DA.000C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 2979.268604][T18499] netlink: 'syz.2.1667': attribute type 39 has an invalid length. [ 2979.339928][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2979.360407][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2979.386637][ T5328] usb 2-1: USB disconnect, device number 25 [ 2979.601618][T10636] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2979.650240][T10636] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2979.833763][T15451] Bluetooth: hci0: unexpected event for opcode 0x0c47 [ 2979.851790][ T5277] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 2980.220924][ T5277] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2980.232683][ T5277] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2980.284153][ T5277] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2980.302513][ T5277] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2980.319399][ T5277] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2980.424151][T16251] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 2980.504875][T18515] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 2980.674037][T16251] usb 2-1: Using ep0 maxpacket: 16 [ 2980.694037][T16251] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2980.903860][T16251] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 2980.943389][T16251] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2980.965104][ T5277] usb 1-1: config 0 descriptor?? [ 2981.007347][T16251] usb 2-1: config 0 descriptor?? [ 2981.066082][T16251] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input39 [ 2981.221077][ T29] audit: type=1400 audit(1728550805.919:450): avc: denied { read } for pid=18511 comm="syz.1.1671" name="mice" dev="devtmpfs" ino=831 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 2981.333948][ T29] audit: type=1400 audit(1728550805.919:451): avc: denied { open } for pid=18511 comm="syz.1.1671" path="/dev/input/mice" dev="devtmpfs" ino=831 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 2981.404015][ T4658] bcm5974 2-1:0.0: could not read from device [ 2981.421926][ T4658] bcm5974 2-1:0.0: could not read from device [ 2981.431826][ T4658] bcm5974 2-1:0.0: could not read from device [ 2981.440899][T16251] usb 2-1: USB disconnect, device number 26 [ 2981.447558][ T5277] usbhid 1-1:0.0: can't add hid device: -71 [ 2981.461424][ T5277] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 2981.499089][ T5277] usb 1-1: USB disconnect, device number 25 [ 2981.851829][T18526] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1673'. [ 2983.792312][T18542] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1677'. [ 2983.836152][T15451] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 2983.844769][T15451] Bluetooth: hci0: Injecting HCI hardware error event [ 2983.853154][T15451] Bluetooth: hci0: hardware error 0x00 [ 2985.783866][ T5328] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 2985.876274][T18569] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 2985.914528][T15451] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 2985.957493][ T5328] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2985.974140][ T5328] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2985.986358][ T5328] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2985.996648][ T5328] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 2986.010986][ T5328] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 2986.043475][ T5328] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2986.078356][ T5328] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2986.088642][ T5328] usb 3-1: Product: syz [ 2986.097550][ T5328] usb 3-1: Manufacturer: syz [ 2986.118347][ T5328] cdc_wdm 3-1:1.0: skipping garbage [ 2986.126966][ T5328] cdc_wdm 3-1:1.0: skipping garbage [ 2986.135472][ T5328] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 2986.142605][ T5328] cdc_wdm 3-1:1.0: Unknown control protocol [ 2986.463918][ T5328] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 2986.471156][T16251] libceph: connect (1)[c::]:6789 error -101 [ 2986.508698][T16251] libceph: mon0 (1)[c::]:6789 connect error [ 2986.564178][T18581] ceph: No mds server is up or the cluster is laggy [ 2986.663879][ T5328] usb 2-1: Using ep0 maxpacket: 32 [ 2986.873865][ T5328] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2986.884049][ T5328] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 2987.343879][ T5328] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2987.353577][ T5328] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2987.362325][ T5328] usb 2-1: Product: syz [ 2987.367865][ T5328] usb 2-1: Manufacturer: syz [ 2987.372504][ T5328] usb 2-1: SerialNumber: syz [ 2987.423991][T16251] usb 3-1: USB disconnect, device number 35 [ 2988.283701][ T29] audit: type=1326 audit(1728550812.979:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18594 comm="syz.2.1691" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fac62d7dff9 code=0x0 [ 2988.332660][T18606] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1693'. [ 2988.384444][T16251] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 2988.643950][T16251] usb 4-1: Using ep0 maxpacket: 32 [ 2988.657561][T16251] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2988.756082][T16251] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 2988.781558][T16251] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2988.792421][T16251] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2988.801102][T16251] usb 4-1: Product: syz [ 2988.805926][T16251] usb 4-1: Manufacturer: syz [ 2988.814792][T16251] usb 4-1: SerialNumber: syz [ 2989.112543][T12831] usb 2-1: USB disconnect, device number 27 [ 2990.660803][ T8348] usb 4-1: USB disconnect, device number 31 [ 2992.547360][T15451] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 2993.777068][ T5328] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 2993.977777][ T5328] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2993.996320][ T5328] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2994.040997][T15451] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 2994.051253][ T5328] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2994.079176][ T5328] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2994.111189][T18632] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2994.127891][ T5328] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 2994.423858][T16251] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 2995.537078][T16251] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2995.559312][T16251] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2995.648395][T16251] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2995.705021][T16251] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2995.793255][T18642] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 2996.062005][T16251] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 2996.146990][T18654] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1707'. [ 2996.460016][T18661] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1709'. [ 2996.608312][ T29] audit: type=1400 audit(1728550821.299:453): avc: denied { write } for pid=18656 comm="syz.2.1709" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 2997.628374][T15451] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 2997.773468][T16251] usb 2-1: USB disconnect, device number 28 [ 2998.012072][ T5277] libceph: connect (1)[c::]:6789 error -101 [ 2998.033090][ T5277] libceph: mon0 (1)[c::]:6789 connect error [ 2998.101439][T16251] usb 1-1: USB disconnect, device number 26 [ 2998.150340][T18673] ceph: No mds server is up or the cluster is laggy [ 2998.304456][T12831] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 2998.485671][T18686] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1716'. [ 2998.506131][T12831] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2998.535431][T12831] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2998.562227][T12831] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2998.578778][T12831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2998.621107][T18671] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 2998.669600][T12831] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 2998.823517][T15451] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 2999.243941][T12831] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 2999.420120][T12831] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2999.467458][T12831] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2999.501795][T12831] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2999.543897][T12831] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2999.629199][T18689] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 2999.698937][T12831] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 3000.579541][ T29] audit: type=1326 audit(1728550825.239:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18695 comm="syz.3.1720" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9c6877dff9 code=0x0 [ 3002.269331][T16251] usb 5-1: USB disconnect, device number 19 [ 3002.425106][T12831] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 3002.594878][T12831] usb 3-1: Using ep0 maxpacket: 16 [ 3002.631368][T12831] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3002.682345][T12831] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 3002.697939][T12831] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3002.714589][T12831] usb 3-1: config 0 descriptor?? [ 3002.742309][T12831] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input40 [ 3003.168043][T18716] xt_CT: You must specify a L4 protocol and not use inversions on it [ 3003.240493][T18713] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1725'. [ 3003.272467][ T4658] bcm5974 3-1:0.0: could not read from device [ 3003.285128][ T4658] bcm5974 3-1:0.0: could not read from device [ 3003.292384][ T4658] bcm5974 3-1:0.0: could not read from device [ 3003.301414][T12831] usb 3-1: USB disconnect, device number 36 [ 3003.315378][T18707] bcm5974 3-1:0.0: could not read from device [ 3003.335928][ T4658] bcm5974 3-1:0.0: could not read from device [ 3003.381205][ T4658] bcm5974 3-1:0.0: could not read from device [ 3004.428684][T16251] usb 2-1: USB disconnect, device number 29 [ 3005.101676][ T29] audit: type=1326 audit(1728550829.799:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18723 comm="syz.2.1728" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fac62d7dff9 code=0x0 [ 3005.811956][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 3006.542620][T16251] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 3006.715970][T16251] usb 5-1: Using ep0 maxpacket: 8 [ 3007.222696][T18756] netlink: 'syz.0.1739': attribute type 39 has an invalid length. [ 3007.372888][T16251] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3007.385555][T16251] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3007.398580][T16251] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 3007.407744][T16251] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3007.422952][T16251] usb 5-1: config 0 descriptor?? [ 3007.431292][T16251] iowarrior 5-1:0.0: no interrupt-in endpoint found [ 3007.497654][ T29] audit: type=1326 audit(1728550832.179:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18750 comm="syz.2.1737" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fac62d7dff9 code=0x0 [ 3007.934956][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 3008.187666][ T29] audit: type=1400 audit(1728550832.889:457): avc: denied { getopt } for pid=18775 comm="syz.2.1744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 3008.328133][ T29] audit: type=1400 audit(1728550833.009:458): avc: denied { connect } for pid=18775 comm="syz.2.1744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 3008.417494][ T29] audit: type=1400 audit(1728550833.069:459): avc: denied { setopt } for pid=18775 comm="syz.2.1744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 3008.458966][ T29] audit: type=1400 audit(1728550833.069:460): avc: denied { write } for pid=18775 comm="syz.2.1744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 3008.521672][ T29] audit: type=1400 audit(1728550833.089:461): avc: denied { read } for pid=18775 comm="syz.2.1744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 3009.243619][ T8348] usb 5-1: USB disconnect, device number 20 [ 3009.385116][T18783] netlink: 'syz.4.1745': attribute type 39 has an invalid length. [ 3013.284214][T12831] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 3013.499140][T12831] usb 5-1: Using ep0 maxpacket: 16 [ 3013.552872][T12831] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3013.573950][T12831] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 3013.623873][T12831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3013.659271][T12831] usb 5-1: config 0 descriptor?? [ 3013.681620][T12831] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input41 [ 3014.573654][ T4658] bcm5974 5-1:0.0: could not read from device [ 3014.621790][T12831] usb 5-1: USB disconnect, device number 21 [ 3014.627962][T18819] bcm5974 5-1:0.0: could not read from device [ 3015.237554][T18825] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1758'. [ 3015.534711][T18842] netlink: 'syz.1.1760': attribute type 39 has an invalid length. [ 3018.573954][T12831] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 3018.664963][ T29] audit: type=1400 audit(1728550843.359:462): avc: denied { wake_alarm } for pid=18863 comm="syz.2.1767" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 3018.903901][T12831] usb 5-1: Using ep0 maxpacket: 32 [ 3018.941657][T12831] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3018.958068][T12831] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 3019.042250][T12831] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3019.053384][T12831] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3019.065974][T17575] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 3019.076823][T12831] usb 5-1: Product: syz [ 3019.081489][T12831] usb 5-1: Manufacturer: syz [ 3019.089007][T12831] usb 5-1: SerialNumber: syz [ 3019.224442][T17575] usb 1-1: Using ep0 maxpacket: 16 [ 3019.226447][T17575] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3019.226489][T17575] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 3019.226515][T17575] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3019.231674][T17575] usb 1-1: config 0 descriptor?? [ 3019.270503][T17575] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input42 [ 3019.342855][T18854] sctp: [Deprecated]: syz.4.1763 (pid 18854) Use of int in max_burst socket option deprecated. [ 3019.342855][T18854] Use struct sctp_assoc_value instead [ 3019.668096][T12831] usb 5-1: USB disconnect, device number 22 [ 3019.784001][ T4658] bcm5974 1-1:0.0: could not read from device [ 3019.830743][T17575] usb 1-1: USB disconnect, device number 27 [ 3019.838528][T18870] bcm5974 1-1:0.0: could not read from device [ 3020.390191][T18887] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1774'. [ 3020.404147][ T5277] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 3020.603898][ T5277] usb 4-1: Using ep0 maxpacket: 32 [ 3020.707439][ T5277] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3020.847920][ T5277] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 3020.918067][T15451] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 3021.087678][ T5277] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3021.129902][ T5277] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3021.166161][ T5277] usb 4-1: Product: syz [ 3021.171407][ T5277] usb 4-1: Manufacturer: syz [ 3021.178235][ T5277] usb 4-1: SerialNumber: syz [ 3021.313916][T15437] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 3021.482511][T18885] sctp: [Deprecated]: syz.3.1772 (pid 18885) Use of int in max_burst socket option deprecated. [ 3021.482511][T18885] Use struct sctp_assoc_value instead [ 3021.544633][T15437] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3021.602886][T15437] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 3021.655387][T15437] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3021.669128][T15437] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3021.693097][T18891] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 3021.711881][T15437] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 3021.910942][T18898] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1776'. [ 3021.941625][T18905] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1777'. [ 3022.149258][ T5277] usb 5-1: USB disconnect, device number 23 [ 3023.028638][T15451] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 3023.069333][T12831] usb 4-1: USB disconnect, device number 32 [ 3023.240221][ T29] audit: type=1400 audit(1728550847.939:463): avc: denied { ioctl } for pid=18914 comm="syz.3.1780" path="socket:[134745]" dev="sockfs" ino=134745 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 3023.336405][T15451] Bluetooth: hci4: link tx timeout [ 3023.342107][T15451] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 3023.395383][ T8348] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 3024.493000][ T8348] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3024.506559][ T8348] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 3024.531301][ T8348] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3024.557392][ T8348] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3024.584656][T18913] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 3024.602666][ T8348] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 3024.828974][T12831] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 3025.085702][T12831] usb 4-1: Using ep0 maxpacket: 16 [ 3025.097772][T12831] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3025.117338][T12831] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 3025.139361][T12831] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3025.165098][T12831] usb 4-1: config 0 descriptor?? [ 3025.199790][T12831] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input43 [ 3025.434255][T15451] Bluetooth: hci4: command 0x0406 tx timeout [ 3025.583895][ T4658] bcm5974 4-1:0.0: could not read from device [ 3025.591992][ T4658] bcm5974 4-1:0.0: could not read from device [ 3025.668721][T12831] usb 4-1: USB disconnect, device number 33 [ 3025.681243][T18924] bcm5974 4-1:0.0: could not read from device [ 3025.814250][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 3025.820594][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 3025.857221][ T4658] bcm5974 4-1:0.0: could not read from device [ 3028.367023][T15437] usb 5-1: USB disconnect, device number 24 [ 3028.763914][T12831] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 3028.834075][T15437] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 3028.924099][T12831] usb 2-1: Using ep0 maxpacket: 8 [ 3028.934211][T12831] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3028.950865][T12831] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3028.970349][T12831] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 3028.979794][T12831] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3028.996502][T12831] usb 2-1: config 0 descriptor?? [ 3029.004950][T12831] iowarrior 2-1:0.0: no interrupt-in endpoint found [ 3029.023946][T15437] usb 5-1: Using ep0 maxpacket: 8 [ 3029.071785][T15437] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3029.082065][T15437] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 3029.091286][T15437] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3029.102731][T15437] usb 5-1: config 0 descriptor?? [ 3029.110827][T15437] iowarrior 5-1:0.0: no interrupt-in endpoint found [ 3034.236719][ T5328] usb 2-1: USB disconnect, device number 30 [ 3034.252132][T17575] usb 5-1: USB disconnect, device number 25 [ 3036.364168][ T29] audit: type=1400 audit(1728550861.019:464): avc: denied { read } for pid=18966 comm="syz.0.1796" name="card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 3036.725807][ T29] audit: type=1400 audit(1728550861.029:465): avc: denied { open } for pid=18966 comm="syz.0.1796" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 3036.761557][ T29] audit: type=1400 audit(1728550861.289:466): avc: denied { ioctl } for pid=18966 comm="syz.0.1796" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 3037.973412][T18971] bio_check_eod: 2 callbacks suppressed [ 3037.989177][T18971] syz.2.1794: attempt to access beyond end of device [ 3037.989177][T18971] nbd2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 3038.187087][T18971] getblk(): invalid block size 512 requested [ 3038.410194][T18971] logical block size: 1024 [ 3039.013253][T18965] nbd2: detected capacity change from 0 to 12 [ 3041.826250][T18971] CPU: 1 UID: 0 PID: 18971 Comm: syz.2.1794 Not tainted 6.12.0-rc2-syzkaller-00061-gb983b271662b #0 [ 3041.837187][T18971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 3041.847262][T18971] Call Trace: [ 3041.850552][T18971] [ 3041.853500][T18971] dump_stack_lvl+0x16c/0x1f0 [ 3041.858214][T18971] __getblk_slow+0x4fe/0x5c0 [ 3041.862835][T18971] ? __pfx___might_resched+0x10/0x10 [ 3041.868143][T18971] ? fs_reclaim_acquire+0xae/0x160 [ 3041.873285][T18971] bdev_getblk+0xb1/0xc0 [ 3041.877567][T18971] __bread_gfp+0x86/0x340 [ 3041.881928][T18971] udf_read_tagged+0xae/0x740 [ 3041.886635][T18971] udf_check_anchor_block+0x8a/0x4b0 [ 3041.891946][T18971] ? udf_get_last_block+0x1cf/0x2b0 [ 3041.897177][T18971] ? __pfx_udf_check_anchor_block+0x10/0x10 [ 3041.903094][T18971] ? __brelse+0x8c/0xb0 [ 3041.907275][T18971] udf_load_vrs+0x3b0/0x1050 [ 3041.911895][T18971] ? __pfx_udf_load_vrs+0x10/0x10 [ 3041.916937][T18971] ? lockdep_init_map_type+0x16d/0x7d0 [ 3041.922418][T18971] ? __pfx_udf_get_last_session+0x10/0x10 [ 3041.928189][T18971] udf_fill_super+0x79b/0x1e00 [ 3041.932990][T18971] ? __pfx_udf_fill_super+0x10/0x10 [ 3041.938210][T18971] ? lockdep_hardirqs_on+0x7c/0x110 [ 3041.943449][T18971] ? __pfx_udf_fill_super+0x10/0x10 [ 3041.948686][T18971] get_tree_bdev+0x36f/0x610 [ 3041.953311][T18971] ? __pfx_udf_fill_super+0x10/0x10 [ 3041.958528][T18971] ? __pfx_get_tree_bdev+0x10/0x10 [ 3041.963669][T18971] ? __sanitizer_cov_trace_pc+0x46/0x70 [ 3041.969256][T18971] ? bpf_lsm_capable+0x9/0x10 [ 3041.973966][T18971] vfs_get_tree+0x8f/0x380 [ 3041.978423][T18971] path_mount+0x14e6/0x1f20 [ 3041.982967][T18971] ? kmem_cache_free+0x152/0x4b0 [ 3041.987945][T18971] ? __pfx_path_mount+0x10/0x10 [ 3041.992852][T18971] ? putname+0x12e/0x170 [ 3041.997125][T18971] __x64_sys_mount+0x294/0x320 [ 3042.001930][T18971] ? __pfx___x64_sys_mount+0x10/0x10 [ 3042.007243][T18971] ? xfd_validate_state+0x5d/0x180 [ 3042.012380][T18971] do_syscall_64+0xcd/0x250 [ 3042.016939][T18971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3042.022863][T18971] RIP: 0033:0x7fac62d7dff9 [ 3042.027296][T18971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3042.046951][T18971] RSP: 002b:00007fac63b9a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3042.055487][T18971] RAX: ffffffffffffffda RBX: 00007fac62f36058 RCX: 00007fac62d7dff9 [ 3042.063478][T18971] RDX: 0000000020000040 RSI: 0000000020004a00 RDI: 0000000020000000 [ 3042.071476][T18971] RBP: 00007fac62df0296 R08: 0000000000000000 R09: 0000000000000000 [ 3042.079471][T18971] R10: 0000000000008007 R11: 0000000000000246 R12: 0000000000000000 [ 3042.087480][T18971] R13: 0000000000000000 R14: 00007fac62f36058 R15: 00007ffd9c2b6bd8 [ 3042.095501][T18971] [ 3044.724207][T18971] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 3044.740910][T18957] Buffer I/O error on dev nbd2, logical block 0, async page read [ 3044.864358][T18976] block nbd2: shutting down sockets [ 3045.446221][T18957] Buffer I/O error on dev nbd2, logical block 1, async page read [ 3045.460367][T18971] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=0, location=0 [ 3045.470487][T18957] Buffer I/O error on dev nbd2, logical block 2, async page read [ 3047.237245][T18957] Buffer I/O error on dev nbd2, logical block 3, async page read [ 3047.245159][T18957] Buffer I/O error on dev nbd2, logical block 4, async page read [ 3047.254368][T18957] Buffer I/O error on dev nbd2, logical block 5, async page read [ 3047.292334][T18971] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=1, location=1 [ 3047.322736][T18957] Buffer I/O error on dev nbd2, logical block 6, async page read [ 3048.093834][T18957] Buffer I/O error on dev nbd2, logical block 7, async page read [ 3048.136106][T18971] getblk(): invalid block size 512 requested [ 3048.144149][T18957] Buffer I/O error on dev nbd2, logical block 0, async page read [ 3049.114186][T18957] Buffer I/O error on dev nbd2, logical block 1, async page read [ 3049.133910][T18971] logical block size: 1024 [ 3049.138397][T18971] CPU: 0 UID: 0 PID: 18971 Comm: syz.2.1794 Not tainted 6.12.0-rc2-syzkaller-00061-gb983b271662b #0 [ 3049.149195][T18971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 3049.159277][T18971] Call Trace: [ 3049.162562][T18971] [ 3049.165504][T18971] dump_stack_lvl+0x16c/0x1f0 [ 3049.170205][T18971] __getblk_slow+0x4fe/0x5c0 [ 3049.174829][T18971] ? __pfx___might_resched+0x10/0x10 [ 3049.180128][T18971] ? fs_reclaim_acquire+0xae/0x160 [ 3049.185276][T18971] bdev_getblk+0xb1/0xc0 [ 3049.189570][T18971] __bread_gfp+0x86/0x340 [ 3049.193938][T18971] udf_read_tagged+0xae/0x740 [ 3049.198652][T18971] udf_check_anchor_block+0x8a/0x4b0 [ 3049.203972][T18971] ? udf_get_last_block+0x1cf/0x2b0 [ 3049.209212][T18971] ? __pfx_udf_check_anchor_block+0x10/0x10 [ 3049.215139][T18971] ? __brelse+0x8c/0xb0 [ 3049.219353][T18971] udf_load_vrs+0x668/0x1050 [ 3049.223986][T18971] ? __pfx_udf_load_vrs+0x10/0x10 [ 3049.229023][T18971] ? lockdep_init_map_type+0x16d/0x7d0 [ 3049.234500][T18971] ? __pfx_udf_get_last_session+0x10/0x10 [ 3049.240267][T18971] udf_fill_super+0x79b/0x1e00 [ 3049.245054][T18971] ? __pfx_udf_fill_super+0x10/0x10 [ 3049.250268][T18971] ? lockdep_hardirqs_on+0x7c/0x110 [ 3049.255492][T18971] ? __pfx_udf_fill_super+0x10/0x10 [ 3049.260710][T18971] get_tree_bdev+0x36f/0x610 [ 3049.265320][T18971] ? __pfx_udf_fill_super+0x10/0x10 [ 3049.270531][T18971] ? __pfx_get_tree_bdev+0x10/0x10 [ 3049.275673][T18971] ? __sanitizer_cov_trace_pc+0x46/0x70 [ 3049.281266][T18971] ? bpf_lsm_capable+0x9/0x10 [ 3049.285961][T18971] vfs_get_tree+0x8f/0x380 [ 3049.290422][T18971] path_mount+0x14e6/0x1f20 [ 3049.294984][T18971] ? kmem_cache_free+0x152/0x4b0 [ 3049.299940][T18971] ? __pfx_path_mount+0x10/0x10 [ 3049.304835][T18971] ? putname+0x12e/0x170 [ 3049.309101][T18971] __x64_sys_mount+0x294/0x320 [ 3049.313899][T18971] ? __pfx___x64_sys_mount+0x10/0x10 [ 3049.319210][T18971] ? xfd_validate_state+0x5d/0x180 [ 3049.324343][T18971] do_syscall_64+0xcd/0x250 [ 3049.328893][T18971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3049.334809][T18971] RIP: 0033:0x7fac62d7dff9 [ 3049.339237][T18971] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3049.358888][T18971] RSP: 002b:00007fac63b9a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 3049.367343][T18971] RAX: ffffffffffffffda RBX: 00007fac62f36058 RCX: 00007fac62d7dff9 [ 3049.375341][T18971] RDX: 0000000020000040 RSI: 0000000020004a00 RDI: 0000000020000000 [ 3049.383321][T18971] RBP: 00007fac62df0296 R08: 0000000000000000 R09: 0000000000000000 [ 3049.391318][T18971] R10: 0000000000008007 R11: 0000000000000246 R12: 0000000000000000 [ 3049.399298][T18971] R13: 0000000000000000 R14: 00007fac62f36058 R15: 00007ffd9c2b6bd8 [ 3049.407292][T18971] [ 3049.414110][T18957] ldm_validate_partition_table(): Disk read failed. [ 3049.422084][T18957] Dev nbd2: unable to read RDB block 0 [ 3049.677549][ T4610] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 3049.860635][T18971] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 3049.888642][ T4610] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 3049.981182][T18957] buffer_io_error: 86 callbacks suppressed [ 3049.981239][T18957] Buffer I/O error on dev nbd2, logical block 0, async page read [ 3050.074354][ T4610] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 3050.349895][ T4610] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 3051.333585][T18957] Buffer I/O error on dev nbd2, logical block 1, async page read [ 3051.398118][T18957] Buffer I/O error on dev nbd2, logical block 2, async page read [ 3051.475930][T18957] Buffer I/O error on dev nbd2, logical block 3, async page read [ 3051.582078][T18957] Buffer I/O error on dev nbd2, logical block 4, async page read [ 3051.676078][T18957] Buffer I/O error on dev nbd2, logical block 5, async page read [ 3051.676179][ T4610] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 3053.159772][ T4610] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 3053.556681][T18957] Buffer I/O error on dev nbd2, logical block 6, async page read [ 3053.564975][T18957] Buffer I/O error on dev nbd2, logical block 7, async page read [ 3053.573699][T18957] Buffer I/O error on dev nbd2, logical block 0, async page read [ 3056.245357][T18957] Buffer I/O error on dev nbd2, logical block 1, async page read [ 3056.253231][T18957] Buffer I/O error on dev nbd2, logical block 2, async page read [ 3056.255819][T15451] Bluetooth: hci3: command tx timeout [ 3056.564323][T18957] Buffer I/O error on dev nbd2, logical block 3, async page read [ 3057.465532][T18957] Buffer I/O error on dev nbd2, logical block 4, async page read [ 3058.313917][T15451] Bluetooth: hci3: command tx timeout [ 3060.513946][T15451] Bluetooth: hci3: command tx timeout [ 3064.785311][T15451] Bluetooth: hci3: command tx timeout [ 3066.287364][T18957] Buffer I/O error on dev nbd2, logical block 5, async page read [ 3066.341152][T18957] Buffer I/O error on dev nbd2, logical block 6, async page read [ 3066.393833][T18957] Buffer I/O error on dev nbd2, logical block 7, async page read [ 3067.031367][T18957] Buffer I/O error on dev nbd2, logical block 0, async page read [ 3069.393911][T18957] Buffer I/O error on dev nbd2, logical block 1, async page read [ 3069.435650][T18957] Buffer I/O error on dev nbd2, logical block 2, async page read [ 3070.465215][T18957] Buffer I/O error on dev nbd2, logical block 3, async page read [ 3070.473001][T18957] Buffer I/O error on dev nbd2, logical block 4, async page read [ 3070.577536][T18957] Buffer I/O error on dev nbd2, logical block 5, async page read [ 3070.643509][T18957] Buffer I/O error on dev nbd2, logical block 6, async page read [ 3070.715456][T18957] nbd2: unable to read partition table [ 3070.717938][T18971] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 3070.721285][T18957] nbd2: partition table beyond EOD, [ 3070.736815][T18971] I/O error, dev nbd2, sector 10 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3070.737470][T15451] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 3070.742596][T18971] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=5, location=5 [ 3070.756591][T15451] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 3070.758995][T18971] I/O error, dev nbd2, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3070.769034][T15451] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 3070.774963][T18971] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=4, location=4 [ 3070.785182][T15451] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 3070.791145][T18971] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3070.876827][T18971] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=3, location=3 [ 3071.257738][T15451] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 3071.363949][T18957] truncated [ 3072.464028][T15451] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 3072.564456][T18971] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 3074.080653][T18957] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3074.815638][T18957] buffer_io_error: 1 callbacks suppressed [ 3074.815692][T18957] Buffer I/O error on dev nbd2, logical block 0, async page read [ 3074.953139][T18957] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3074.985051][T18957] Buffer I/O error on dev nbd2, logical block 1, async page read [ 3074.995791][T18957] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3075.027165][T18957] Buffer I/O error on dev nbd2, logical block 2, async page read [ 3075.373906][ T4610] Bluetooth: hci6: command tx timeout [ 3079.760115][T18957] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3080.033863][ T4610] Bluetooth: hci6: command tx timeout [ 3081.865049][T18957] Buffer I/O error on dev nbd2, logical block 3, async page read [ 3081.878589][T18957] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3081.995601][T18957] Buffer I/O error on dev nbd2, logical block 0, async page read [ 3082.006245][T18957] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3082.108555][T15451] Bluetooth: hci6: command tx timeout [ 3082.141217][T15454] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 3082.153561][T15454] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 3082.185302][T15454] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 3082.314899][T18957] Buffer I/O error on dev nbd2, logical block 1, async page read [ 3082.321737][T15454] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 3082.323956][T18957] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3082.330502][T15454] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 3082.395885][T18957] Buffer I/O error on dev nbd2, logical block 2, async page read [ 3082.422169][T18996] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 3082.422693][T15454] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 3082.430083][T18996] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 3082.501165][T18996] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 3082.517436][T18957] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3082.541918][T15454] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 3082.552884][T15454] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 3082.562389][T15454] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 3084.163856][T18995] Bluetooth: hci6: command tx timeout [ 3084.165582][T18996] Bluetooth: hci4: command 0x0406 tx timeout [ 3084.235642][T18996] Bluetooth: hci2: command 0x0406 tx timeout [ 3084.753335][T18957] Buffer I/O error on dev nbd2, logical block 3, async page read [ 3084.756883][T15454] Bluetooth: hci7: command tx timeout [ 3085.211580][T18971] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 3085.225214][T18957] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3085.621601][T18971] I/O error, dev nbd2, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3085.679316][T18971] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=2, location=2 [ 3088.279178][T18996] Bluetooth: hci7: command tx timeout [ 3088.280746][T11697] Bluetooth: hci1: command tx timeout [ 3088.291255][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 3088.294116][T18957] Buffer I/O error on dev nbd2, logical block 0, async page read [ 3088.297608][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 3088.305630][T18957] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3088.384614][T18957] Buffer I/O error on dev nbd2, logical block 1, async page read [ 3088.395509][T18957] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3088.404954][T18957] Buffer I/O error on dev nbd2, logical block 0, async page read [ 3088.414016][T18957] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3088.423853][T18957] Buffer I/O error on dev nbd2, logical block 1, async page read [ 3088.433313][T18957] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3088.442830][T18957] Buffer I/O error on dev nbd2, logical block 0, async page read [ 3088.451969][T18957] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3088.461296][T18957] Buffer I/O error on dev nbd2, logical block 1, async page read [ 3089.469898][T18971] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3089.491925][T18971] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=1, location=1 [ 3089.501298][T18957] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3089.517490][T18957] Buffer I/O error on dev nbd2, logical block 0, async page read [ 3090.569328][ T7923] Bluetooth: hci7: command tx timeout [ 3090.574853][ T7923] Bluetooth: hci1: command tx timeout [ 3090.585994][T18957] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3090.596268][T18957] Buffer I/O error on dev nbd2, logical block 1, async page read [ 3090.604492][T18957] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3090.613585][T18957] Buffer I/O error on dev nbd2, logical block 0, async page read [ 3091.624334][T18957] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3091.626014][T18167] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3091.633398][T18957] Buffer I/O error on dev nbd2, logical block 1, async page read [ 3091.633551][T18957] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3092.703805][T11697] Bluetooth: hci1: command tx timeout [ 3092.709260][T11697] Bluetooth: hci7: command tx timeout [ 3092.773366][T18957] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3092.776045][T18971] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3093.753927][T18971] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=0, location=0 [ 3093.764096][T18957] buffer_io_error: 1 callbacks suppressed [ 3093.764115][T18957] Buffer I/O error on dev nbd2, logical block 1, async page read [ 3093.813890][T18957] ldm_validate_partition_table(): Disk read failed. [ 3093.820577][T18957] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3093.842136][T18957] Buffer I/O error on dev nbd2, logical block 0, async page read [ 3093.844014][T18971] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 3093.852392][T18957] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3093.870916][T18957] Buffer I/O error on dev nbd2, logical block 1, async page read [ 3093.950404][T18957] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3094.179525][T18957] Buffer I/O error on dev nbd2, logical block 0, async page read [ 3095.072917][T11697] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 3095.081901][T11697] Bluetooth: hci1: command tx timeout [ 3095.083434][T18957] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3095.108238][T18957] Buffer I/O error on dev nbd2, logical block 1, async page read [ 3095.206400][T18971] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 3095.207297][T18996] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 3095.216405][T18957] Buffer I/O error on dev nbd2, logical block 0, async page read [ 3095.224272][T18996] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 3095.297065][T18996] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 3095.298240][T18167] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3095.305475][T18996] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 3095.395055][T18996] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 3095.408191][T18971] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=0, location=0 [ 3095.420396][T18957] Buffer I/O error on dev nbd2, logical block 0, async page read [ 3096.797951][T18971] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 3097.805008][ T7923] Bluetooth: hci5: Opcode 0x0c16 failed: -110 [ 3097.818340][T18957] Dev nbd2: unable to read RDB block 0 [ 3097.824850][T18957] blk_print_req_error: 3 callbacks suppressed [ 3097.824869][T18957] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3097.841368][T18971] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 3097.844425][T18957] Buffer I/O error on dev nbd2, logical block 0, async page read [ 3097.850181][T18996] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 3097.860033][T18957] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3097.866490][T18996] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 3097.886157][T18996] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 3097.891084][T18957] Buffer I/O error on dev nbd2, logical block 0, async page read [ 3097.894235][T18996] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 3097.901179][T18957] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3097.909523][T18996] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 3097.927390][T18996] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 3097.986968][T18957] Buffer I/O error on dev nbd2, logical block 0, async page read [ 3098.024198][T18957] nbd2: unable to read partition table [ 3098.031468][T18957] nbd2: partition table beyond EOD, truncated [ 3099.680615][T18957] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3099.692494][T18957] Buffer I/O error on dev nbd2, logical block 0, async page read [ 3099.712545][T18957] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3099.725069][T18957] Buffer I/O error on dev nbd2, logical block 0, async page read [ 3099.749516][T18957] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3099.758750][T18957] Buffer I/O error on dev nbd2, logical block 0, async page read [ 3099.769989][T18957] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3099.784406][T18957] Buffer I/O error on dev nbd2, logical block 0, async page read [ 3099.799511][T18957] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3099.808781][T18957] Buffer I/O error on dev nbd2, logical block 0, async page read [ 3100.239649][T18167] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3100.290581][T18983] chnl_net:caif_netlink_parms(): no params data found [ 3100.442283][T18167] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3100.592117][T18988] chnl_net:caif_netlink_parms(): no params data found [ 3100.693052][T18983] bridge0: port 1(bridge_slave_0) entered blocking state [ 3100.703340][T18983] bridge0: port 1(bridge_slave_0) entered disabled state [ 3100.711476][T18983] bridge_slave_0: entered allmulticast mode [ 3100.718821][T18983] bridge_slave_0: entered promiscuous mode [ 3100.728963][T18983] bridge0: port 2(bridge_slave_1) entered blocking state [ 3100.736887][T18983] bridge0: port 2(bridge_slave_1) entered disabled state [ 3100.744838][T18983] bridge_slave_1: entered allmulticast mode [ 3100.751749][T18983] bridge_slave_1: entered promiscuous mode [ 3100.832070][T18993] chnl_net:caif_netlink_parms(): no params data found [ 3100.867047][T18988] bridge0: port 1(bridge_slave_0) entered blocking state [ 3100.880334][T18988] bridge0: port 1(bridge_slave_0) entered disabled state [ 3100.887863][T18988] bridge_slave_0: entered allmulticast mode [ 3100.895284][T18988] bridge_slave_0: entered promiscuous mode [ 3100.902955][T18988] bridge0: port 2(bridge_slave_1) entered blocking state [ 3100.912759][T18988] bridge0: port 2(bridge_slave_1) entered disabled state [ 3100.920115][T18988] bridge_slave_1: entered allmulticast mode [ 3100.927383][T18988] bridge_slave_1: entered promiscuous mode [ 3100.965217][T18983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3100.977732][T18983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3101.008868][T18988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3101.025071][T18988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3101.071883][T18983] team0: Port device team_slave_0 added [ 3101.131070][T18983] team0: Port device team_slave_1 added [ 3101.205766][T18988] team0: Port device team_slave_0 added [ 3101.221705][T18992] chnl_net:caif_netlink_parms(): no params data found [ 3101.252492][T18983] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3101.260968][T18983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3101.287140][T18983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3101.300547][T18983] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3101.307663][T18983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3101.334675][T18983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3101.352775][T18988] team0: Port device team_slave_1 added [ 3101.383399][T18993] bridge0: port 1(bridge_slave_0) entered blocking state [ 3101.390705][T18993] bridge0: port 1(bridge_slave_0) entered disabled state [ 3101.398401][T18993] bridge_slave_0: entered allmulticast mode [ 3101.405979][T18993] bridge_slave_0: entered promiscuous mode [ 3101.426987][T18167] bridge_slave_1: left allmulticast mode [ 3101.432662][T18167] bridge_slave_1: left promiscuous mode [ 3101.438624][T18167] bridge0: port 2(bridge_slave_1) entered disabled state [ 3101.448381][T18167] bridge_slave_0: left allmulticast mode [ 3101.454224][T18167] bridge_slave_0: left promiscuous mode [ 3101.459886][T18167] bridge0: port 1(bridge_slave_0) entered disabled state [ 3101.829373][T18167] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3101.838457][ T7923] Bluetooth: hci5: command tx timeout [ 3101.850053][T18167] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3101.862431][T18167] bond0 (unregistering): Released all slaves [ 3101.919587][T18993] bridge0: port 2(bridge_slave_1) entered blocking state [ 3101.930790][T18993] bridge0: port 2(bridge_slave_1) entered disabled state [ 3101.939487][T18993] bridge_slave_1: entered allmulticast mode [ 3101.946667][T18993] bridge_slave_1: entered promiscuous mode [ 3102.003500][T18988] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3102.010659][T18988] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3102.039686][T18988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3102.103010][T18983] hsr_slave_0: entered promiscuous mode [ 3102.109787][T18983] hsr_slave_1: entered promiscuous mode [ 3102.117706][T18983] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3102.125814][T18983] Cannot create hsr debugfs directory [ 3102.131801][T18988] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3102.140610][T18988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3102.166800][T18988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3102.206317][T18993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3102.217949][T18993] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3102.337597][T18992] bridge0: port 1(bridge_slave_0) entered blocking state [ 3102.345715][T18992] bridge0: port 1(bridge_slave_0) entered disabled state [ 3102.352934][T18992] bridge_slave_0: entered allmulticast mode [ 3102.360056][T18992] bridge_slave_0: entered promiscuous mode [ 3102.369629][T18992] bridge0: port 2(bridge_slave_1) entered blocking state [ 3102.376883][T18992] bridge0: port 2(bridge_slave_1) entered disabled state [ 3102.384517][T18992] bridge_slave_1: entered allmulticast mode [ 3102.391379][T18992] bridge_slave_1: entered promiscuous mode [ 3102.402637][T18993] team0: Port device team_slave_0 added [ 3102.414375][T19001] chnl_net:caif_netlink_parms(): no params data found [ 3102.451012][T18988] hsr_slave_0: entered promiscuous mode [ 3102.462543][T18988] hsr_slave_1: entered promiscuous mode [ 3102.468902][T18988] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3102.476839][T18988] Cannot create hsr debugfs directory [ 3102.498212][T18167] hsr_slave_0: left promiscuous mode [ 3102.505950][T18167] hsr_slave_1: left promiscuous mode [ 3102.511978][T18167] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3102.520441][T18167] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3102.528523][T18167] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3102.536469][T18167] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3102.563470][T18167] veth1_macvtap: left promiscuous mode [ 3102.569116][T18167] veth0_macvtap: left promiscuous mode [ 3102.574792][T18167] veth1_vlan: left promiscuous mode [ 3102.580069][T18167] veth0_vlan: left promiscuous mode [ 3103.032869][T18167] team0 (unregistering): Port device team_slave_1 removed [ 3103.076288][T18167] team0 (unregistering): Port device team_slave_0 removed [ 3103.496121][T18993] team0: Port device team_slave_1 added [ 3103.567307][T18992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3103.612503][T18993] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3103.619884][T18993] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3103.646372][T18993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3103.688173][T18992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3103.716211][T18993] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3103.723187][T18993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3103.750046][T18993] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3103.767727][T19001] bridge0: port 1(bridge_slave_0) entered blocking state [ 3103.786754][T19001] bridge0: port 1(bridge_slave_0) entered disabled state [ 3103.794445][T19001] bridge_slave_0: entered allmulticast mode [ 3103.801526][T19001] bridge_slave_0: entered promiscuous mode [ 3103.877441][T19001] bridge0: port 2(bridge_slave_1) entered blocking state [ 3103.894505][T19001] bridge0: port 2(bridge_slave_1) entered disabled state [ 3103.901770][T19001] bridge_slave_1: entered allmulticast mode [ 3103.914937][T19001] bridge_slave_1: entered promiscuous mode [ 3103.924114][ T7923] Bluetooth: hci5: command tx timeout [ 3103.987821][T18992] team0: Port device team_slave_0 added [ 3104.071619][T19001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3104.100630][T18992] team0: Port device team_slave_1 added [ 3104.166886][T19001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3104.258276][T18992] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3104.275952][T18992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3104.302969][T18992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3104.317941][T18992] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3104.325202][T18992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3104.351252][T18992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3104.366334][T18993] hsr_slave_0: entered promiscuous mode [ 3104.372902][T18993] hsr_slave_1: entered promiscuous mode [ 3104.379620][T18993] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3104.387637][T18993] Cannot create hsr debugfs directory [ 3104.421915][T18988] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3104.446507][T19001] team0: Port device team_slave_0 added [ 3104.481653][T19001] team0: Port device team_slave_1 added [ 3104.511414][T19001] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3104.518623][T19001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3104.544832][T19001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3104.590771][T18988] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3104.622720][T19001] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3104.629785][T19001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3104.656388][T19001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3104.703683][T18988] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3104.755964][T19001] hsr_slave_0: entered promiscuous mode [ 3104.762533][T19001] hsr_slave_1: entered promiscuous mode [ 3104.769825][T19001] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3104.784949][T19001] Cannot create hsr debugfs directory [ 3104.805904][T18992] hsr_slave_0: entered promiscuous mode [ 3104.812119][T18992] hsr_slave_1: entered promiscuous mode [ 3104.818776][T18992] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3104.826956][T18992] Cannot create hsr debugfs directory [ 3104.878265][T18988] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3105.024390][T18167] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3105.240622][T18167] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3105.361658][T18167] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3105.516115][T18167] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3105.538317][T18996] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 3105.566515][T18996] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 3105.575416][T18996] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 3105.583691][T18996] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 3105.593900][T18996] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 3105.601409][T18996] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 3105.672181][T18988] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 3105.725528][T18983] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3105.776971][T18988] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 3105.791945][T18988] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 3105.806788][T18988] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 3105.861892][T18983] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3105.982147][T18983] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3105.994117][ T7923] Bluetooth: hci5: command tx timeout [ 3106.101787][T18983] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3106.317634][T18167] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3106.490997][T18167] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3106.624600][T18167] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3106.658391][T19061] chnl_net:caif_netlink_parms(): no params data found [ 3106.716262][T18167] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3106.776680][T18988] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3106.841265][T19061] bridge0: port 1(bridge_slave_0) entered blocking state [ 3106.850134][T19061] bridge0: port 1(bridge_slave_0) entered disabled state [ 3106.857477][T19061] bridge_slave_0: entered allmulticast mode [ 3106.864986][T19061] bridge_slave_0: entered promiscuous mode [ 3106.872618][T19061] bridge0: port 2(bridge_slave_1) entered blocking state [ 3106.887647][T19061] bridge0: port 2(bridge_slave_1) entered disabled state [ 3106.895161][T19061] bridge_slave_1: entered allmulticast mode [ 3106.905017][T19061] bridge_slave_1: entered promiscuous mode [ 3106.948849][T18988] 8021q: adding VLAN 0 to HW filter on device team0 [ 3107.063575][T19061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3107.195772][T19061] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3107.252939][T18149] bridge0: port 1(bridge_slave_0) entered blocking state [ 3107.260124][T18149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3107.376293][T19061] team0: Port device team_slave_0 added [ 3107.383018][T18167] bridge_slave_1: left allmulticast mode [ 3107.390876][T18167] bridge_slave_1: left promiscuous mode [ 3107.401538][T18167] bridge0: port 2(bridge_slave_1) entered disabled state [ 3107.413233][T18167] bridge_slave_0: left allmulticast mode [ 3107.430542][T18167] bridge_slave_0: left promiscuous mode [ 3107.443870][T18167] bridge0: port 1(bridge_slave_0) entered disabled state [ 3107.467384][T18167] bridge_slave_1: left allmulticast mode [ 3107.473071][T18167] bridge_slave_1: left promiscuous mode [ 3107.483940][T18167] bridge0: port 2(bridge_slave_1) entered disabled state [ 3107.503605][T18167] bridge_slave_0: left allmulticast mode [ 3107.511330][T18167] bridge_slave_0: left promiscuous mode [ 3107.518209][T18167] bridge0: port 1(bridge_slave_0) entered disabled state [ 3107.530970][T18167] bridge_slave_1: left allmulticast mode [ 3107.536885][T18167] bridge_slave_1: left promiscuous mode [ 3107.542571][T18167] bridge0: port 2(bridge_slave_1) entered disabled state [ 3107.551757][T18167] bridge_slave_0: left allmulticast mode [ 3107.557885][T18167] bridge_slave_0: left promiscuous mode [ 3107.563542][T18167] bridge0: port 1(bridge_slave_0) entered disabled state [ 3107.574814][T18167] bridge_slave_1: left allmulticast mode [ 3107.580497][T18167] bridge_slave_1: left promiscuous mode [ 3107.586483][T18167] bridge0: port 2(bridge_slave_1) entered disabled state [ 3107.599661][T18167] bridge_slave_0: left allmulticast mode [ 3107.605852][T18167] bridge_slave_0: left promiscuous mode [ 3107.611556][T18167] bridge0: port 1(bridge_slave_0) entered disabled state [ 3107.686950][ T7923] Bluetooth: hci0: command tx timeout [ 3108.085340][ T7923] Bluetooth: hci5: command tx timeout [ 3108.671773][T18167] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3108.683206][T18167] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3108.703048][T18167] bond0 (unregistering): Released all slaves [ 3108.832933][T18167] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3108.847045][T18167] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3108.858805][T18167] bond0 (unregistering): Released all slaves [ 3108.979793][T18167] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3108.993524][T18167] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3109.010630][T18167] bond0 (unregistering): Released all slaves [ 3109.138779][T18167] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3109.154445][T18167] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3109.165880][T18167] bond0 (unregistering): Released all slaves [ 3109.180584][T18149] bridge0: port 2(bridge_slave_1) entered blocking state [ 3109.187706][T18149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3109.214879][T19061] team0: Port device team_slave_1 added [ 3109.427398][T19061] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3109.434746][T19061] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3109.461665][T19061] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3109.521717][T19061] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3109.530029][T19061] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3109.556105][T19061] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3109.651891][T19061] hsr_slave_0: entered promiscuous mode [ 3109.658435][T19061] hsr_slave_1: entered promiscuous mode [ 3109.664708][T19061] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3109.672397][T19061] Cannot create hsr debugfs directory [ 3109.754947][ T7923] Bluetooth: hci0: command tx timeout [ 3109.906514][T18992] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 3109.928734][T18992] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 3109.968706][T18992] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 3109.984661][T18992] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 3110.629334][T18988] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3110.708057][T18996] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 3110.722801][T18996] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 3110.755101][T18996] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 3110.774076][T18996] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 3110.792404][T18996] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 3110.802246][T15454] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 3110.810905][T18996] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 3110.820368][ T7923] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 3110.833102][ T7923] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 3110.845868][T18996] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 3110.853521][T18996] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 3110.863884][T18996] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 3111.385564][T18167] hsr_slave_0: left promiscuous mode [ 3111.391574][T18167] hsr_slave_1: left promiscuous mode [ 3111.398208][T18167] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3111.406305][T18167] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3111.414718][T18167] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3111.422146][T18167] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3111.439746][T18167] hsr_slave_0: left promiscuous mode [ 3111.449714][T18167] hsr_slave_1: left promiscuous mode [ 3111.458397][T18167] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3111.468154][T18167] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3111.478625][T18167] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3111.486463][T18167] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3111.500754][T18167] hsr_slave_0: left promiscuous mode [ 3111.511874][T18167] hsr_slave_1: left promiscuous mode [ 3111.518110][T18167] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3111.526142][T18167] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3111.534792][T18167] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3111.542234][T18167] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3111.556049][T18167] hsr_slave_0: left promiscuous mode [ 3111.561835][T18167] hsr_slave_1: left promiscuous mode [ 3111.568383][T18167] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3111.576985][T18167] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3111.585272][T18167] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3111.592686][T18167] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3111.650776][T18167] veth1_macvtap: left promiscuous mode [ 3111.656419][T18167] veth0_macvtap: left promiscuous mode [ 3111.661974][T18167] veth1_vlan: left promiscuous mode [ 3111.668605][T18167] veth0_vlan: left promiscuous mode [ 3111.674831][T18167] veth1_macvtap: left promiscuous mode [ 3111.680374][T18167] veth0_macvtap: left promiscuous mode [ 3111.687310][T18167] veth1_vlan: left promiscuous mode [ 3111.692591][T18167] veth0_vlan: left promiscuous mode [ 3111.698712][T18167] veth1_macvtap: left promiscuous mode [ 3111.704337][T18167] veth0_macvtap: left promiscuous mode [ 3111.709940][T18167] veth1_vlan: left promiscuous mode [ 3111.715891][T18167] veth0_vlan: left promiscuous mode [ 3111.721630][T18167] veth1_macvtap: left promiscuous mode [ 3111.727590][T18167] veth0_macvtap: left promiscuous mode [ 3111.733161][T18167] veth1_vlan: left promiscuous mode [ 3111.739056][T18167] veth0_vlan: left promiscuous mode [ 3111.833958][T11697] Bluetooth: hci0: command tx timeout [ 3112.483108][T18996] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 3112.504602][T18996] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 3112.512605][T18996] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 3112.521153][T18996] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 3112.528909][T18996] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 3112.537615][T18996] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 3112.613605][T18167] team0 (unregistering): Port device team_slave_1 removed [ 3112.662916][T18167] team0 (unregistering): Port device team_slave_0 removed [ 3112.874481][T18996] Bluetooth: hci2: command tx timeout [ 3112.955232][T18996] Bluetooth: hci1: command tx timeout [ 3113.428478][T18167] team0 (unregistering): Port device team_slave_1 removed [ 3113.466876][T18167] team0 (unregistering): Port device team_slave_0 removed [ 3113.915743][T18996] Bluetooth: hci0: command tx timeout [ 3114.259396][T18167] team0 (unregistering): Port device team_slave_1 removed [ 3114.307012][T18167] team0 (unregistering): Port device team_slave_0 removed [ 3114.638322][T18996] Bluetooth: hci3: command tx timeout [ 3114.954364][T18996] Bluetooth: hci2: command tx timeout [ 3115.048746][T18996] Bluetooth: hci1: command tx timeout [ 3115.060228][T18167] team0 (unregistering): Port device team_slave_1 removed [ 3115.102901][T18167] team0 (unregistering): Port device team_slave_0 removed [ 3115.571151][T19001] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 3115.626273][T19001] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 3115.654828][T19001] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 3115.669070][T19001] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 3116.065124][T19116] chnl_net:caif_netlink_parms(): no params data found [ 3116.158210][T19112] chnl_net:caif_netlink_parms(): no params data found [ 3116.399945][T19001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3116.585959][T19061] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 3116.622283][T19116] bridge0: port 1(bridge_slave_0) entered blocking state [ 3116.654678][T19116] bridge0: port 1(bridge_slave_0) entered disabled state [ 3116.661991][T19116] bridge_slave_0: entered allmulticast mode [ 3116.695070][T19116] bridge_slave_0: entered promiscuous mode [ 3116.723869][T18996] Bluetooth: hci3: command tx timeout [ 3116.760269][T19061] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 3116.770529][T19116] bridge0: port 2(bridge_slave_1) entered blocking state [ 3116.777963][T19116] bridge0: port 2(bridge_slave_1) entered disabled state [ 3116.786321][T19116] bridge_slave_1: entered allmulticast mode [ 3116.793410][T19116] bridge_slave_1: entered promiscuous mode [ 3116.822294][T19001] 8021q: adding VLAN 0 to HW filter on device team0 [ 3116.845147][T19112] bridge0: port 1(bridge_slave_0) entered blocking state [ 3116.852279][T19112] bridge0: port 1(bridge_slave_0) entered disabled state [ 3116.859614][T19112] bridge_slave_0: entered allmulticast mode [ 3116.866902][T19112] bridge_slave_0: entered promiscuous mode [ 3116.877160][T19061] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 3116.916980][T19116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3116.930486][T19116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3116.944176][T19112] bridge0: port 2(bridge_slave_1) entered blocking state [ 3116.951390][T19112] bridge0: port 2(bridge_slave_1) entered disabled state [ 3116.959292][T19112] bridge_slave_1: entered allmulticast mode [ 3116.966634][T19112] bridge_slave_1: entered promiscuous mode [ 3116.982009][T19061] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 3116.995728][T19128] chnl_net:caif_netlink_parms(): no params data found [ 3117.008966][ T5579] bridge0: port 1(bridge_slave_0) entered blocking state [ 3117.016088][ T5579] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3117.044074][T18996] Bluetooth: hci2: command tx timeout [ 3117.075532][T19116] team0: Port device team_slave_0 added [ 3117.092591][T19112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3117.113974][T18996] Bluetooth: hci1: command tx timeout [ 3117.118152][T19116] team0: Port device team_slave_1 added [ 3117.190743][ T5579] bridge0: port 2(bridge_slave_1) entered blocking state [ 3117.197925][ T5579] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3117.209212][T19112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3117.240157][T19116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3117.247180][T19116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3117.276219][T19116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3117.291508][T19116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3117.299345][T19116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3117.325936][T19116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3117.416643][T19112] team0: Port device team_slave_0 added [ 3117.449360][T19112] team0: Port device team_slave_1 added [ 3117.480102][T19116] hsr_slave_0: entered promiscuous mode [ 3117.494792][T19116] hsr_slave_1: entered promiscuous mode [ 3117.525080][T19128] bridge0: port 1(bridge_slave_0) entered blocking state [ 3117.532199][T19128] bridge0: port 1(bridge_slave_0) entered disabled state [ 3117.554316][T19128] bridge_slave_0: entered allmulticast mode [ 3117.561363][T19128] bridge_slave_0: entered promiscuous mode [ 3117.588529][T19128] bridge0: port 2(bridge_slave_1) entered blocking state [ 3117.602303][T19128] bridge0: port 2(bridge_slave_1) entered disabled state [ 3117.610086][T19128] bridge_slave_1: entered allmulticast mode [ 3117.620554][T19128] bridge_slave_1: entered promiscuous mode [ 3117.745583][T19112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3117.752663][T19112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3117.779548][T19112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3117.792416][T19112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3117.801949][T19112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3117.830035][T19112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3117.879668][T19128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3117.905829][T19128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3118.027422][T19112] hsr_slave_0: entered promiscuous mode [ 3118.034623][T19112] hsr_slave_1: entered promiscuous mode [ 3118.041059][T19112] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3118.048749][T19112] Cannot create hsr debugfs directory [ 3118.116926][T19061] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3118.140471][T19128] team0: Port device team_slave_0 added [ 3118.157583][T19128] team0: Port device team_slave_1 added [ 3118.295318][T19128] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3118.302312][T19128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3118.340820][T19128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3118.366264][T19128] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3118.373247][T19128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3118.411874][T19128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3118.540378][T19061] 8021q: adding VLAN 0 to HW filter on device team0 [ 3118.590976][T19128] hsr_slave_0: entered promiscuous mode [ 3118.615572][T19128] hsr_slave_1: entered promiscuous mode [ 3118.623809][T19128] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3118.631386][T19128] Cannot create hsr debugfs directory [ 3118.794074][T18996] Bluetooth: hci3: command tx timeout [ 3118.825594][ T8134] bridge0: port 1(bridge_slave_0) entered blocking state [ 3118.832747][ T8134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3118.842942][ T8134] bridge0: port 2(bridge_slave_1) entered blocking state [ 3118.850117][ T8134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3119.043062][T19001] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3119.132422][T18996] Bluetooth: hci2: command tx timeout [ 3119.172031][T19061] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3119.194783][T18996] Bluetooth: hci1: command tx timeout [ 3119.477075][T19001] veth0_vlan: entered promiscuous mode [ 3119.603481][T19001] veth1_vlan: entered promiscuous mode [ 3119.792291][T19061] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3119.937194][T19001] veth0_macvtap: entered promiscuous mode [ 3119.976048][T19001] veth1_macvtap: entered promiscuous mode [ 3120.076336][T19061] veth0_vlan: entered promiscuous mode [ 3120.138924][T19061] veth1_vlan: entered promiscuous mode [ 3120.183026][T19001] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3120.202126][T19116] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 3120.215804][T19116] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 3120.257738][T19116] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 3120.278106][T19116] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 3120.327030][T18167] bridge_slave_1: left allmulticast mode [ 3120.332730][T18167] bridge_slave_1: left promiscuous mode [ 3120.340673][T18167] bridge0: port 2(bridge_slave_1) entered disabled state [ 3120.365685][T18167] bridge_slave_0: left allmulticast mode [ 3120.371380][T18167] bridge_slave_0: left promiscuous mode [ 3120.381678][T18167] bridge0: port 1(bridge_slave_0) entered disabled state [ 3120.400464][T18167] bridge_slave_1: left allmulticast mode [ 3120.413889][T18167] bridge_slave_1: left promiscuous mode [ 3120.419623][T18167] bridge0: port 2(bridge_slave_1) entered disabled state [ 3120.446748][T18167] bridge_slave_0: left allmulticast mode [ 3120.452422][T18167] bridge_slave_0: left promiscuous mode [ 3120.463270][T18167] bridge0: port 1(bridge_slave_0) entered disabled state [ 3120.481968][T18167] bridge_slave_1: left allmulticast mode [ 3120.506538][T18167] bridge_slave_1: left promiscuous mode [ 3120.512248][T18167] bridge0: port 2(bridge_slave_1) entered disabled state [ 3120.531931][T18167] bridge_slave_0: left allmulticast mode [ 3120.541325][T18167] bridge_slave_0: left promiscuous mode [ 3120.554177][T18167] bridge0: port 1(bridge_slave_0) entered disabled state [ 3120.577007][T18167] bridge_slave_1: left allmulticast mode [ 3120.582689][T18167] bridge_slave_1: left promiscuous mode [ 3120.598878][T18167] bridge0: port 2(bridge_slave_1) entered disabled state [ 3120.612322][T18167] bridge_slave_0: left allmulticast mode [ 3120.618142][T18167] bridge_slave_0: left promiscuous mode [ 3120.625235][T18167] bridge0: port 1(bridge_slave_0) entered disabled state [ 3120.877274][T18996] Bluetooth: hci3: command tx timeout [ 3121.138235][T18167] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3121.150648][T18167] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3121.163850][T18167] bond0 (unregistering): Released all slaves [ 3121.284706][T18167] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3121.296476][T18167] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3121.307112][T18167] bond0 (unregistering): Released all slaves [ 3121.321519][T18167] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3121.332640][T18167] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3121.346988][T18167] bond0 (unregistering): Released all slaves [ 3121.361021][T18167] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3121.372055][T18167] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3121.386835][T18167] bond0 (unregistering): Released all slaves [ 3121.402556][T19001] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3121.464120][T19001] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3121.472878][T19001] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3121.483089][T19001] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3121.499149][T19001] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3121.530989][T19061] veth0_macvtap: entered promiscuous mode [ 3121.580995][T19061] veth1_macvtap: entered promiscuous mode [ 3121.677057][T18167] hsr_slave_0: left promiscuous mode [ 3121.689642][T18167] hsr_slave_1: left promiscuous mode [ 3121.710527][T18167] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3121.718468][T18167] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3121.730401][T18167] hsr_slave_0: left promiscuous mode [ 3121.741185][T18167] hsr_slave_1: left promiscuous mode [ 3121.748654][T18167] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3121.764337][T18167] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3121.780996][T18167] hsr_slave_0: left promiscuous mode [ 3121.787004][T18167] hsr_slave_1: left promiscuous mode [ 3121.793032][T18167] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3121.805495][T18167] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3121.819808][T18167] hsr_slave_0: left promiscuous mode [ 3121.826212][T18167] hsr_slave_1: left promiscuous mode [ 3121.832023][T18167] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3121.840171][T18167] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3122.093230][T18167] team0 (unregistering): Port device team_slave_1 removed [ 3122.123390][T18167] team0 (unregistering): Port device team_slave_0 removed [ 3122.513091][T18167] team0 (unregistering): Port device team_slave_1 removed [ 3122.568481][T18167] team0 (unregistering): Port device team_slave_0 removed [ 3123.110048][T18167] team0 (unregistering): Port device team_slave_1 removed [ 3123.153603][T18167] team0 (unregistering): Port device team_slave_0 removed [ 3123.473632][T18167] team0 (unregistering): Port device team_slave_1 removed [ 3123.512519][T18167] team0 (unregistering): Port device team_slave_0 removed [ 3123.806333][T10636] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3123.817385][T10636] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3123.827106][T19061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3123.841994][T19061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3123.853436][T19061] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3123.912100][T19061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3123.925249][T19061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3123.937119][T19061] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3123.992315][T19061] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3124.009831][T19061] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3124.018673][T19061] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3124.028181][T19061] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3124.042213][ T8134] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3124.051328][ T8134] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3124.331087][T19112] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 3124.363086][T19112] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 3124.396598][ T5992] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3124.420788][T19112] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 3124.429508][ T5992] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3124.441973][T19112] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 3125.244619][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3125.267481][T19116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3125.281858][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3125.446667][T19116] 8021q: adding VLAN 0 to HW filter on device team0 [ 3125.520357][T19128] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 3125.539513][T19128] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 3125.741574][T10636] bridge0: port 1(bridge_slave_0) entered blocking state [ 3125.748854][T10636] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3125.761178][T10636] bridge0: port 2(bridge_slave_1) entered blocking state [ 3125.768383][T10636] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3126.724102][T19128] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 3126.808454][T19260] xt_limit: Overflow, try lower: 0/0 [ 3127.088785][T19128] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 3127.293475][T19112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3127.415229][T19112] 8021q: adding VLAN 0 to HW filter on device team0 [ 3127.505273][ T5992] bridge0: port 1(bridge_slave_0) entered blocking state [ 3127.512424][ T5992] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3127.534038][ T5992] bridge0: port 2(bridge_slave_1) entered blocking state [ 3127.541235][ T5992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3127.619503][T19128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3127.659033][T19116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3127.742714][T19112] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 3127.783826][T19112] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3127.840566][T19128] 8021q: adding VLAN 0 to HW filter on device team0 [ 3127.885107][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 3127.892252][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3127.951444][ T5579] bridge0: port 2(bridge_slave_1) entered blocking state [ 3127.958704][ T5579] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3128.213625][T19116] veth0_vlan: entered promiscuous mode [ 3128.243680][T19112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3128.273387][T19116] veth1_vlan: entered promiscuous mode [ 3128.367873][T19116] veth0_macvtap: entered promiscuous mode [ 3128.382457][T19112] veth0_vlan: entered promiscuous mode [ 3128.394603][T19116] veth1_macvtap: entered promiscuous mode [ 3128.419973][T19112] veth1_vlan: entered promiscuous mode [ 3128.436097][T19128] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3128.452966][T19116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3128.465918][T19116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3128.478186][T19116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3128.489743][T19116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3128.500979][T19116] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3128.532239][T19116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3128.545970][T19116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3128.562370][T19116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3128.579017][T19116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3128.591118][T19116] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3128.629085][T19116] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3128.643038][T19116] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3128.653573][T19116] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3128.665163][T19116] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3128.733106][T19112] veth0_macvtap: entered promiscuous mode [ 3128.748821][T19128] veth0_vlan: entered promiscuous mode [ 3128.779406][T19112] veth1_macvtap: entered promiscuous mode [ 3128.840128][T19128] veth1_vlan: entered promiscuous mode [ 3128.868009][T19112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3128.899228][T19112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3128.921620][T19112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3128.933855][T19112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3128.943821][T19112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3128.968861][T19112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3128.991091][T19112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3129.036336][T19112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3129.056572][T19112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3129.066515][T19112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3129.077496][T19112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3129.087943][T19112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3129.098886][T19112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3129.111651][T19112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3129.129318][T18167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3129.147126][T18167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3129.178564][T19112] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3129.189322][T19112] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3129.198768][T19112] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3129.223542][T19112] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3129.263566][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3129.266987][T19128] veth0_macvtap: entered promiscuous mode [ 3129.278172][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3129.294549][T12831] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 3129.325806][T19128] veth1_macvtap: entered promiscuous mode [ 3129.431032][T19128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3129.443230][T19128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3129.460081][T19128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3129.470892][T19128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3129.481680][T12831] usb 4-1: Using ep0 maxpacket: 32 [ 3129.488925][T12831] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3129.499279][T12831] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 3129.508488][T19128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3129.520829][T19128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3129.532562][T12831] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3129.541822][T12831] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3129.550290][T12831] usb 4-1: Product: syz [ 3129.554814][T12831] usb 4-1: Manufacturer: syz [ 3129.559418][T12831] usb 4-1: SerialNumber: syz [ 3129.567021][T19128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3129.584303][T19128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3129.626722][T19128] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3129.639166][T18166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3129.651282][T18166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3129.666190][T19128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3129.709951][T19128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3129.727959][T19128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3129.738911][T19128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3129.749263][T19128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3129.768284][T19128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3129.778824][T19128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3129.801387][T19128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3129.815233][T19128] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3129.844648][T19292] sctp: [Deprecated]: syz.3.1810 (pid 19292) Use of int in max_burst socket option deprecated. [ 3129.844648][T19292] Use struct sctp_assoc_value instead [ 3129.873536][T19128] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3129.933309][T19128] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3129.950475][T19128] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3129.964266][T19128] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3130.029173][T10636] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3130.067521][T10636] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3130.180431][ T5277] usb 4-1: USB disconnect, device number 34 [ 3130.353231][T10636] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3130.362259][T12831] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 3130.381917][T10636] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3130.449325][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3130.465465][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3130.720518][T19308] xt_limit: Overflow, try lower: 0/0 [ 3130.965493][T12831] usb 2-1: Using ep0 maxpacket: 8 [ 3131.243767][T12831] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3131.255222][T12831] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 3131.264408][T12831] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3131.287001][T12831] usb 2-1: config 0 descriptor?? [ 3131.294660][T12831] iowarrior 2-1:0.0: no interrupt-in endpoint found [ 3131.605743][ T29] audit: type=1326 audit(1728550956.309:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19316 comm="syz.2.1814" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa0f9f7dff9 code=0x0 [ 3131.869084][T18996] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 3132.344531][T13588] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 3132.572621][T13588] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3132.583934][T13588] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 3132.606203][T13588] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3132.644971][T13588] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3132.687118][T19328] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 3132.709226][T13588] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 3133.176428][ T5277] usb 2-1: USB disconnect, device number 31 [ 3133.604336][T19340] xt_limit: Overflow, try lower: 0/0 [ 3134.208479][T15556] usb 4-1: USB disconnect, device number 35 [ 3134.301194][T19345] syz.0.1823: attempt to access beyond end of device [ 3134.301194][T19345] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 3134.343855][T19345] syz.0.1823: attempt to access beyond end of device [ 3134.343855][T19345] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 3134.378411][T19347] nbd0: detected capacity change from 0 to 12 [ 3134.390192][T19345] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 3134.405175][T19345] block nbd0: Send control failed (result -89) [ 3134.418916][T19345] block nbd0: Request send failed, requeueing [ 3134.429055][T18996] block nbd0: Receive control failed (result -32) [ 3134.592147][T19357] syz.1.1825: attempt to access beyond end of device [ 3134.592147][T19357] nbd1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 3134.623409][ T8390] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 3134.634823][ T26] block nbd0: Dead connection, failed to find a fallback [ 3134.642742][ T26] block nbd0: shutting down sockets [ 3134.649574][ T26] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3134.661144][T18998] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3134.679805][T18998] Buffer I/O error on dev nbd0, logical block 0, async page read [ 3134.690368][T19345] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=0, location=0 [ 3134.704307][T18998] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3134.728421][T19357] syz.1.1825: attempt to access beyond end of device [ 3134.728421][T19357] nbd1: rw=0, sector=512, nr_sectors = 2 limit=0 [ 3134.792323][T18998] Buffer I/O error on dev nbd0, logical block 1, async page read [ 3134.792697][T19357] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 3134.800671][T18998] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3134.800714][T18998] Buffer I/O error on dev nbd0, logical block 2, async page read [ 3134.800826][T18998] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3134.800866][T18998] Buffer I/O error on dev nbd0, logical block 3, async page read [ 3134.801010][T18998] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3134.822127][T19357] syz.1.1825: attempt to access beyond end of device [ 3134.822127][T19357] nbd1: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 3134.828927][T18998] Buffer I/O error on dev nbd0, logical block 0, async page read [ 3134.829339][T18998] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3134.838330][ T8390] usb 3-1: Using ep0 maxpacket: 16 [ 3134.845981][T18998] Buffer I/O error on dev nbd0, logical block 1, async page read [ 3134.863615][ T8390] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3134.868049][T18998] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3134.876345][T19345] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3134.884983][T18998] Buffer I/O error on dev nbd0, logical block 2, async page read [ 3134.885122][T18998] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3134.918750][T19345] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=1, location=1 [ 3134.927671][T18998] Buffer I/O error on dev nbd0, logical block 3, async page read [ 3134.927847][T18998] Buffer I/O error on dev nbd0, logical block 0, async page read [ 3134.970062][ T8390] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 3134.970126][ T8390] usb 3-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 3134.970161][ T8390] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3134.996660][T18998] Buffer I/O error on dev nbd0, logical block 1, async page read [ 3135.007436][T18998] ldm_validate_partition_table(): Disk read failed. [ 3135.017423][T18998] Dev nbd0: unable to read RDB block 0 [ 3135.024877][T18998] nbd0: unable to read partition table [ 3135.030623][T18998] nbd0: partition table beyond EOD, truncated [ 3135.045235][T19357] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 3135.048823][T18998] ldm_validate_partition_table(): Disk read failed. [ 3135.056007][ T8390] usb 3-1: config 0 descriptor?? [ 3135.062915][T18998] Dev nbd0: unable to read RDB block 0 [ 3135.073408][T18998] nbd0: unable to read partition table [ 3135.074441][T19357] syz.1.1825: attempt to access beyond end of device [ 3135.074441][T19357] nbd1: rw=0, sector=64, nr_sectors = 4 limit=0 [ 3135.079445][T18998] nbd0: partition table beyond EOD, truncated [ 3135.120353][T19357] syz.1.1825: attempt to access beyond end of device [ 3135.120353][T19357] nbd1: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 3135.122534][T19345] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 3135.157890][T19345] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 3135.163963][T19353] nbd1: detected capacity change from 0 to 12 [ 3135.167754][T19345] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=2, location=2 [ 3135.183251][T19345] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=1, location=1 [ 3135.192909][T19345] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=0, location=0 [ 3135.206028][T19345] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 3135.218863][T18957] block nbd1: Send control failed (result -89) [ 3135.219590][T19345] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 3135.235320][T19345] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=0, location=0 [ 3135.244652][T19345] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 3135.256959][T19345] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 3135.265574][T18957] block nbd1: Request send failed, requeueing [ 3135.282499][T19357] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 3135.318767][T18996] block nbd1: Receive control failed (result -32) [ 3135.323069][T18957] block nbd1: Dead connection, failed to find a fallback [ 3135.332576][T18957] block nbd1: shutting down sockets [ 3135.355164][T18957] ldm_validate_partition_table(): Disk read failed. [ 3135.355917][T19357] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=0, location=0 [ 3135.362649][T18957] Dev nbd1: unable to read RDB block 0 [ 3135.371078][T19357] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=1, location=1 [ 3135.371204][T19357] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 3135.377125][T19357] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 3135.411461][T19357] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=0, location=0 [ 3135.424529][T19357] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 3135.435930][T19357] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 3135.446863][T18957] nbd1: unable to read partition table [ 3135.452785][T18957] nbd1: partition table beyond EOD, truncated [ 3135.475280][T18957] ldm_validate_partition_table(): Disk read failed. [ 3135.482458][T18957] Dev nbd1: unable to read RDB block 0 [ 3135.497557][T18957] nbd1: unable to read partition table [ 3135.503453][T18957] nbd1: partition table beyond EOD, truncated [ 3136.102176][T19372] usb usb8: usbfs: interface 0 claimed by hub while 'syz.2.1824' sets config #0 [ 3136.138813][T19372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3136.855112][T19371] xt_limit: Overflow, try lower: 0/0 [ 3137.156910][T19372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3137.325354][T19377] input: syz0 as /devices/virtual/input/input44 [ 3137.376227][T19375] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1830'. [ 3137.653154][T19388] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1835'. [ 3137.963333][T19394] xt_limit: Overflow, try lower: 0/0 [ 3138.464550][T15556] usb 3-1: USB disconnect, device number 37 [ 3138.470618][T13588] usb 2-1: new low-speed USB device number 32 using dummy_hcd [ 3138.638738][T13588] usb 2-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 3138.670046][T13588] usb 2-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 3138.727352][T13588] usb 2-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 3138.739317][T13588] usb 2-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 3138.825548][T13588] usb 2-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 3138.870965][T18996] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 3138.881940][T13588] usb 2-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 3138.926918][T13588] usb 2-1: string descriptor 0 read error: -22 [ 3138.954069][T13588] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 3138.963153][T13588] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3138.973890][ T8390] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 3138.990102][T13588] adutux 2-1:168.0: interrupt endpoints not found [ 3139.147268][ T8390] usb 5-1: Using ep0 maxpacket: 32 [ 3139.154999][ T8390] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 3139.163346][ T8390] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 3139.181989][ T8390] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 3139.206057][ T8390] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 3139.243775][ T8390] usb 5-1: config 0 interface 0 has no altsetting 0 [ 3139.264089][T16252] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 3139.291188][ T8390] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 3139.320437][ T8390] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 3139.332272][ T5328] usb 2-1: USB disconnect, device number 32 [ 3139.390700][ T8390] usb 5-1: Product: syz [ 3139.399746][ T8390] usb 5-1: Manufacturer: syz [ 3139.404460][ T8390] usb 5-1: SerialNumber: syz [ 3139.448027][ T8390] usb 5-1: config 0 descriptor?? [ 3139.472483][ T8390] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 3139.487952][ T8390] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 3139.703429][T16252] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3139.714527][T16252] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 3139.724828][T16252] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3139.734524][T16252] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3140.462259][T19406] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 3140.615381][T16252] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 3141.168050][T19427] xt_limit: Overflow, try lower: 0/0 [ 3142.095522][T19430] input: syz0 as /devices/virtual/input/input45 [ 3143.109067][ T8390] usb 1-1: USB disconnect, device number 28 [ 3144.191470][T19454] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1857'. [ 3144.243852][T19455] nbd2: detected capacity change from 0 to 12 [ 3144.269983][T18957] block nbd2: Send control failed (result -89) [ 3144.288414][T18957] block nbd2: Request send failed, requeueing [ 3144.314124][T18996] block nbd2: Receive control failed (result -32) [ 3144.335936][ T26] block nbd2: Dead connection, failed to find a fallback [ 3144.343053][ T26] block nbd2: shutting down sockets [ 3144.348386][ T26] blk_print_req_error: 186 callbacks suppressed [ 3144.348402][ T26] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3144.363910][ T26] buffer_io_error: 177 callbacks suppressed [ 3144.363929][ T26] Buffer I/O error on dev nbd2, logical block 0, async page read [ 3144.377887][T18957] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3144.443933][T18957] Buffer I/O error on dev nbd2, logical block 0, async page read [ 3144.511916][T18957] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3144.528556][T18957] Buffer I/O error on dev nbd2, logical block 0, async page read [ 3144.576690][T18957] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3144.607466][T18957] Buffer I/O error on dev nbd2, logical block 0, async page read [ 3144.643235][T18957] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3144.680892][T18957] Buffer I/O error on dev nbd2, logical block 0, async page read [ 3144.730068][T18957] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3144.743446][T18957] Buffer I/O error on dev nbd2, logical block 0, async page read [ 3144.778838][T18957] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3144.832806][T18957] Buffer I/O error on dev nbd2, logical block 0, async page read [ 3144.861907][T18957] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3144.871163][T18957] Buffer I/O error on dev nbd2, logical block 0, async page read [ 3144.879234][T18957] ldm_validate_partition_table(): Disk read failed. [ 3144.886505][T18957] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3144.895705][T18957] Buffer I/O error on dev nbd2, logical block 0, async page read [ 3144.905188][T18957] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3144.914833][T18957] Buffer I/O error on dev nbd2, logical block 0, async page read [ 3144.922977][T18957] Dev nbd2: unable to read RDB block 0 [ 3144.928890][T18957] nbd2: unable to read partition table [ 3144.934686][T18957] nbd2: partition table beyond EOD, truncated [ 3144.964861][T18957] ldm_validate_partition_table(): Disk read failed. [ 3144.972215][T18957] Dev nbd2: unable to read RDB block 0 [ 3144.978124][T18957] nbd2: unable to read partition table [ 3144.983966][T18957] nbd2: partition table beyond EOD, truncated [ 3145.000850][T19456] ldm_validate_partition_table(): Disk read failed. [ 3145.011521][T19456] Dev nbd2: unable to read RDB block 0 [ 3145.019575][T19456] nbd2: unable to read partition table [ 3145.028694][T19456] nbd2: partition table beyond EOD, truncated [ 3145.073344][T19456] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 3145.093093][T19456] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=5, location=5 [ 3145.106605][T19456] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=4, location=4 [ 3145.117431][T19456] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=3, location=3 [ 3145.134162][T19456] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 3145.151333][T19456] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 3145.175300][T19456] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=2, location=2 [ 3145.207131][T19456] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=1, location=1 [ 3145.219233][T19456] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=0, location=0 [ 3145.248256][T19456] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 3145.271316][T19456] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 3145.324168][T19456] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=0, location=0 [ 3145.339791][T19456] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 3145.354247][T19456] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 3145.675789][T19402] ldusb 5-1:0.0: Couldn't submit HID_REQ_SET_REPORT -110 [ 3145.748184][T15556] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 3145.767735][ T5328] usb 5-1: USB disconnect, device number 26 [ 3145.776409][ T5328] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 3145.933793][T15556] usb 3-1: Using ep0 maxpacket: 16 [ 3145.941504][T15556] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3146.817825][T15556] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 3146.846151][T15556] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3146.960427][T15556] usb 3-1: config 0 descriptor?? [ 3147.012762][T15556] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input46 [ 3147.270994][ T4658] bcm5974 3-1:0.0: could not read from device [ 3147.289600][T19465] bcm5974 3-1:0.0: could not read from device [ 3147.327391][ T4658] bcm5974 3-1:0.0: could not read from device [ 3147.339200][ T8390] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 3147.340081][T15556] usb 3-1: USB disconnect, device number 38 [ 3147.494058][T19484] nbd4: detected capacity change from 0 to 12 [ 3147.505524][T19484] block nbd4: Send control failed (result -89) [ 3147.520072][T19484] block nbd4: Request send failed, requeueing [ 3147.555485][ T8390] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3147.567921][T18996] block nbd4: Receive control failed (result -32) [ 3147.578519][ T26] block nbd4: Dead connection, failed to find a fallback [ 3147.585767][ T26] block nbd4: shutting down sockets [ 3147.596379][ T8390] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 3147.604264][T19484] ldm_validate_partition_table(): Disk read failed. [ 3147.614795][ T8390] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3147.624131][ T8390] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3147.640253][T19476] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 3147.643270][T19484] Dev nbd4: unable to read RDB block 0 [ 3147.666116][ T8390] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 3147.677629][T19484] nbd4: unable to read partition table [ 3147.713529][T19484] nbd4: partition table beyond EOD, truncated [ 3147.735239][T19484] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 3147.781849][T18957] ldm_validate_partition_table(): Disk read failed. [ 3147.811008][T19484] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=5, location=5 [ 3147.822709][T18957] Dev nbd4: unable to read RDB block 0 [ 3147.824803][T19484] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=4, location=4 [ 3147.838763][T19484] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=3, location=3 [ 3147.849236][T19484] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 3147.857989][T18957] nbd4: unable to read partition table [ 3147.859715][T19484] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 3147.883987][T18957] nbd4: partition table beyond EOD, truncated [ 3147.915594][T18957] ldm_validate_partition_table(): Disk read failed. [ 3147.923032][T18957] Dev nbd4: unable to read RDB block 0 [ 3147.934120][T19484] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=2, location=2 [ 3147.936688][T18957] nbd4: unable to read partition table [ 3147.969613][T19484] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=1, location=1 [ 3147.971484][ T8390] usb 1-1: USB disconnect, device number 29 [ 3148.009416][T18957] nbd4: partition table beyond EOD, truncated [ 3148.014040][T19484] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=0, location=0 [ 3148.071239][T19484] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 3148.124277][T19484] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 3148.215075][T19484] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=0, location=0 [ 3148.232145][T19484] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 3148.272645][T19484] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 3148.581816][T19494] xt_limit: Overflow, try lower: 0/0 [ 3148.636645][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 3148.645425][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 3148.734998][ T5328] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 3149.104279][ T5328] usb 3-1: Using ep0 maxpacket: 16 [ 3149.111556][ T5328] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3149.133823][ T5328] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 3149.153649][ T5328] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3149.185109][ T5328] usb 3-1: config 0 descriptor?? [ 3149.200333][ T5328] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input47 [ 3149.529804][ T4658] bcm5974 3-1:0.0: could not read from device [ 3149.536570][ T8390] usb 3-1: USB disconnect, device number 39 [ 3149.554576][T19493] bcm5974 3-1:0.0: could not read from device [ 3149.563574][ T4658] bcm5974 3-1:0.0: could not read from device [ 3149.590585][T18998] bcm5974 3-1:0.0: could not read from device [ 3149.609634][ T4658] bcm5974 3-1:0.0: could not read from device [ 3149.924684][ T5328] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 3150.140049][ T29] audit: type=1326 audit(1728550974.819:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19516 comm="syz.0.1877" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f14fdd7dff9 code=0x0 [ 3150.251576][T19522] fuse: Bad value for 'fd' [ 3150.429780][ T5328] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 3150.441180][ T5328] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 3150.451353][ T5328] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3150.460649][ T5328] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3150.485287][T19510] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 3150.498693][ T5328] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 3150.625383][ T8390] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 3150.775703][T15556] usb 2-1: USB disconnect, device number 33 [ 3150.793973][ T8390] usb 3-1: Using ep0 maxpacket: 8 [ 3150.816996][ T8390] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 3150.838041][ T8390] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 3150.854871][ T8390] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 3150.869546][ T8390] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3150.880200][ T8390] usb 3-1: config 0 descriptor?? [ 3151.135660][ T8390] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 3151.433309][T19524] iowarrior 3-1:0.0: Error -90 while submitting URB [ 3151.522274][T19524] iowarrior 3-1:0.0: Error -90 while submitting URB [ 3151.593889][ T5328] usb 3-1: USB disconnect, device number 40 [ 3151.618683][ T5328] iowarrior 3-1:0.0: I/O-Warror #0 now disconnected [ 3151.926432][T19543] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 3152.310831][T19561] fuse: Bad value for 'fd' [ 3152.948020][T19549] [ 3152.950485][T19549] ====================================================== [ 3152.957522][T19549] WARNING: possible circular locking dependency detected [ 3152.964560][T19549] 6.12.0-rc2-syzkaller-00061-gb983b271662b #0 Not tainted [ 3152.971698][T19549] ------------------------------------------------------ [ 3152.978735][T19549] syz.1.1890/19549 is trying to acquire lock: [ 3152.984818][T19549] ffff888072215258 (sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM){+.+.}-{0:0}, at: rfcomm_sk_state_change+0x6d/0x3b0 [ 3152.996398][T19549] [ 3152.996398][T19549] but task is already holding lock: [ 3153.003772][T19549] ffff88804e50cd28 (&d->lock){+.+.}-{3:3}, at: __rfcomm_dlc_close+0x235/0x700 [ 3153.012728][T19549] [ 3153.012728][T19549] which lock already depends on the new lock. [ 3153.012728][T19549] [ 3153.023169][T19549] [ 3153.023169][T19549] the existing dependency chain (in reverse order) is: [ 3153.032209][T19549] [ 3153.032209][T19549] -> #2 (&d->lock){+.+.}-{3:3}: [ 3153.039296][T19549] __mutex_lock+0x175/0x9c0 [ 3153.044375][T19549] rfcomm_dev_ioctl+0x1115/0x1ca0 [ 3153.049964][T19549] rfcomm_sock_ioctl+0xb4/0xe0 [ 3153.055286][T19549] sock_do_ioctl+0x116/0x280 [ 3153.060454][T19549] sock_ioctl+0x228/0x6c0 [ 3153.065343][T19549] __x64_sys_ioctl+0x18f/0x220 [ 3153.070688][T19549] do_syscall_64+0xcd/0x250 [ 3153.075755][T19549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3153.082201][T19549] [ 3153.082201][T19549] -> #1 (rfcomm_dev_lock){+.+.}-{3:3}: [ 3153.089890][T19549] __mutex_lock+0x175/0x9c0 [ 3153.094948][T19549] rfcomm_dev_get+0x6e/0x2b0 [ 3153.100086][T19549] rfcomm_dev_ioctl+0x378/0x1ca0 [ 3153.105591][T19549] rfcomm_sock_ioctl+0xb4/0xe0 [ 3153.110911][T19549] sock_do_ioctl+0x116/0x280 [ 3153.116061][T19549] sock_ioctl+0x228/0x6c0 [ 3153.120954][T19549] __x64_sys_ioctl+0x18f/0x220 [ 3153.126277][T19549] do_syscall_64+0xcd/0x250 [ 3153.131335][T19549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3153.137790][T19549] [ 3153.137790][T19549] -> #0 (sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM){+.+.}-{0:0}: [ 3153.147217][T19549] __lock_acquire+0x250b/0x3ce0 [ 3153.152597][T19549] lock_acquire.part.0+0x11b/0x380 [ 3153.158236][T19549] lock_sock_nested+0x3a/0xf0 [ 3153.163473][T19549] rfcomm_sk_state_change+0x6d/0x3b0 [ 3153.169306][T19549] __rfcomm_dlc_close+0x28c/0x700 [ 3153.174878][T19549] rfcomm_dlc_close+0x1eb/0x240 [ 3153.180270][T19549] __rfcomm_sock_close+0xa7/0x230 [ 3153.185826][T19549] rfcomm_sock_shutdown+0xd5/0x230 [ 3153.191468][T19549] rfcomm_sock_release+0x5d/0x140 [ 3153.197019][T19549] __sock_release+0xb0/0x270 [ 3153.202154][T19549] sock_close+0x1c/0x30 [ 3153.206837][T19549] __fput+0x3f6/0xb60 [ 3153.211349][T19549] task_work_run+0x14e/0x250 [ 3153.216466][T19549] get_signal+0x1ca/0x2770 [ 3153.221413][T19549] arch_do_signal_or_restart+0x90/0x7e0 [ 3153.227501][T19549] syscall_exit_to_user_mode+0x150/0x2a0 [ 3153.233668][T19549] do_syscall_64+0xda/0x250 [ 3153.238729][T19549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3153.245175][T19549] [ 3153.245175][T19549] other info that might help us debug this: [ 3153.245175][T19549] [ 3153.255398][T19549] Chain exists of: [ 3153.255398][T19549] sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM --> rfcomm_dev_lock --> &d->lock [ 3153.255398][T19549] [ 3153.269595][T19549] Possible unsafe locking scenario: [ 3153.269595][T19549] [ 3153.277060][T19549] CPU0 CPU1 [ 3153.282419][T19549] ---- ---- [ 3153.287794][T19549] lock(&d->lock); [ 3153.291599][T19549] lock(rfcomm_dev_lock); [ 3153.298535][T19549] lock(&d->lock); [ 3153.304869][T19549] lock(sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM); [ 3153.311044][T19549] [ 3153.311044][T19549] *** DEADLOCK *** [ 3153.311044][T19549] [ 3153.319179][T19549] 3 locks held by syz.1.1890/19549: [ 3153.324379][T19549] #0: ffff8880799d7a08 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: __sock_release+0x86/0x270 [ 3153.334928][T19549] #1: ffffffff90173448 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_dlc_close+0x33/0x240 [ 3153.344355][T19549] #2: ffff88804e50cd28 (&d->lock){+.+.}-{3:3}, at: __rfcomm_dlc_close+0x235/0x700 [ 3153.353696][T19549] [ 3153.353696][T19549] stack backtrace: [ 3153.359605][T19549] CPU: 1 UID: 0 PID: 19549 Comm: syz.1.1890 Not tainted 6.12.0-rc2-syzkaller-00061-gb983b271662b #0 [ 3153.370366][T19549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 3153.380416][T19549] Call Trace: [ 3153.383693][T19549] [ 3153.386649][T19549] dump_stack_lvl+0x116/0x1f0 [ 3153.391341][T19549] print_circular_bug+0x41c/0x610 [ 3153.396381][T19549] check_noncircular+0x31a/0x400 [ 3153.401337][T19549] ? __pfx_check_noncircular+0x10/0x10 [ 3153.406819][T19549] ? __schedule+0xefd/0x5750 [ 3153.411417][T19549] ? lockdep_lock+0xc6/0x200 [ 3153.416019][T19549] ? __pfx_lockdep_lock+0x10/0x10 [ 3153.421051][T19549] __lock_acquire+0x250b/0x3ce0 [ 3153.425910][T19549] ? __pfx___lock_acquire+0x10/0x10 [ 3153.431119][T19549] ? preempt_schedule_common+0x44/0xc0 [ 3153.436584][T19549] lock_acquire.part.0+0x11b/0x380 [ 3153.441710][T19549] ? rfcomm_sk_state_change+0x6d/0x3b0 [ 3153.447193][T19549] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 3153.452840][T19549] ? rcu_is_watching+0x12/0xc0 [ 3153.457633][T19549] ? trace_lock_acquire+0x14a/0x1d0 [ 3153.462859][T19549] ? rfcomm_sk_state_change+0x6d/0x3b0 [ 3153.468337][T19549] ? lock_acquire+0x2f/0xb0 [ 3153.472874][T19549] ? rfcomm_sk_state_change+0x6d/0x3b0 [ 3153.478337][T19549] lock_sock_nested+0x3a/0xf0 [ 3153.483043][T19549] ? rfcomm_sk_state_change+0x6d/0x3b0 [ 3153.488506][T19549] rfcomm_sk_state_change+0x6d/0x3b0 [ 3153.493817][T19549] __rfcomm_dlc_close+0x28c/0x700 [ 3153.498879][T19549] rfcomm_dlc_close+0x1eb/0x240 [ 3153.503762][T19549] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 3153.509673][T19549] __rfcomm_sock_close+0xa7/0x230 [ 3153.514705][T19549] rfcomm_sock_shutdown+0xd5/0x230 [ 3153.519817][T19549] rfcomm_sock_release+0x5d/0x140 [ 3153.524851][T19549] __sock_release+0xb0/0x270 [ 3153.529456][T19549] ? __pfx_sock_close+0x10/0x10 [ 3153.534324][T19549] sock_close+0x1c/0x30 [ 3153.538486][T19549] __fput+0x3f6/0xb60 [ 3153.542472][T19549] ? _raw_spin_unlock_irq+0x23/0x50 [ 3153.547675][T19549] task_work_run+0x14e/0x250 [ 3153.552266][T19549] ? __pfx_task_work_run+0x10/0x10 [ 3153.557378][T19549] ? finish_task_switch.isra.0+0x217/0xcc0 [ 3153.563188][T19549] get_signal+0x1ca/0x2770 [ 3153.567613][T19549] ? __schedule+0xefd/0x5750 [ 3153.572208][T19549] ? __pfx___schedule+0x10/0x10 [ 3153.577067][T19549] ? __pfx_get_signal+0x10/0x10 [ 3153.581937][T19549] arch_do_signal_or_restart+0x90/0x7e0 [ 3153.587504][T19549] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 3153.593675][T19549] syscall_exit_to_user_mode+0x150/0x2a0 [ 3153.599345][T19549] do_syscall_64+0xda/0x250 [ 3153.603888][T19549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 3153.609793][T19549] RIP: 0033:0x7f1fc5b7dff9 [ 3153.614207][T19549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3153.633826][T19549] RSP: 002b:00007f1fc6982038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 3153.642249][T19549] RAX: fffffffffffffffc RBX: 00007f1fc5d35f80 RCX: 00007f1fc5b7dff9 [ 3153.650223][T19549] RDX: 0000000000000080 RSI: 0000000020000300 RDI: 0000000000000004 [ 3153.658197][T19549] RBP: 00007f1fc5bf0296 R08: 0000000000000000 R09: 0000000000000000 [ 3153.666182][T19549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3153.674162][T19549] R13: 0000000000000000 R14: 00007f1fc5d35f80 R15: 00007ffc0fa809d8 [ 3153.682150][T19549] [ 3153.803506][ T29] audit: type=1326 audit(1728550978.499:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19565 comm="syz.0.1895" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f14fdd7dff9 code=0x0