last executing test programs: 2m20.754971081s ago: executing program 1 (id=937): ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f00000001c0)={0x0, 0x0, 0x0, "b75c1ee0812022a20c74ac8aa81844f78c2cd97c89e2107fcc4c00"}) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 2m20.164222429s ago: executing program 4 (id=971): r0 = syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') readlinkat(r0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000002780)=""/4112, 0x1010) 2m0.733844859s ago: executing program 1 (id=937): ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f00000001c0)={0x0, 0x0, 0x0, "b75c1ee0812022a20c74ac8aa81844f78c2cd97c89e2107fcc4c00"}) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 1m59.486002003s ago: executing program 4 (id=971): r0 = syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') readlinkat(r0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000002780)=""/4112, 0x1010) 1m36.339813369s ago: executing program 1 (id=937): ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f00000001c0)={0x0, 0x0, 0x0, "b75c1ee0812022a20c74ac8aa81844f78c2cd97c89e2107fcc4c00"}) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 1m35.523860368s ago: executing program 4 (id=971): r0 = syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') readlinkat(r0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000002780)=""/4112, 0x1010) 1m7.691363922s ago: executing program 1 (id=937): ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f00000001c0)={0x0, 0x0, 0x0, "b75c1ee0812022a20c74ac8aa81844f78c2cd97c89e2107fcc4c00"}) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 1m6.71362924s ago: executing program 4 (id=971): r0 = syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') readlinkat(r0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000002780)=""/4112, 0x1010) 43.308049394s ago: executing program 1 (id=937): ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f00000001c0)={0x0, 0x0, 0x0, "b75c1ee0812022a20c74ac8aa81844f78c2cd97c89e2107fcc4c00"}) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 39.710587692s ago: executing program 4 (id=971): r0 = syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') readlinkat(r0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000002780)=""/4112, 0x1010) 10.786591624s ago: executing program 0 (id=1805): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=@delneigh={0x24, 0x1d, 0x0, 0x70bd2b, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@NDA_NH_ID={0x8}]}, 0x24}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xe7, 0xc2, 0xf7, 0x8, 0x421, 0x335, 0x5f0e, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x2, 0xff}}]}}]}}, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x0, 0x5, 0x4, {0x2, @win={{}, 0x0, 0x0, 0x0, 0x0, 0x0}}}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, 0x0) 9.279229062s ago: executing program 2 (id=1808): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x18, 0x0, 0x0, 0x0, 0x0}) 9.206841383s ago: executing program 0 (id=1810): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 9.096263022s ago: executing program 2 (id=1812): syz_open_dev$vbi(0x0, 0x0, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(0xffffffffffffffff, 0x3b87, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000002580)={0x0, @vsock={0x28, 0x0, 0x0, @my=0x0}, @rc={0x1f, @fixed}, @xdp}) 8.987371774s ago: executing program 0 (id=1813): chdir(0x0) ioperm(0x0, 0x0, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000040)) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x18) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r1 = gettid() timer_create(0x0, &(0x7f00000001c0)={0x0, 0x0, 0x800000000004, @tid=r1}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000240)}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000300)}, {&(0x7f0000001940)="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", 0x1000}], 0x6}, 0x0) sendmsg$alg(r2, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0xfe1d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.658166551s ago: executing program 0 (id=1815): socket$inet(0x2, 0x3, 0x1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@sndrcv={0x30}, @authinfo={0x18}], 0x48}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) unshare(0x0) unshare(0x6a040000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x64, 0x6, 0x560, 0x100, 0x1d8, 0x100, 0x100, 0x2a8, 0x490, 0x490, 0x490, 0x490, 0x490, 0x6, 0x0, {[{{@ipv6={@empty, @loopback, [], [], 'gre0\x00', 'bond0\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@srh={{0x30}}]}, @common=@unspec=@CONNSECMARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x3c0}}, {{@ipv6={@mcast2, @private1, [], [], 'pim6reg1\x00', 'vlan1\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@hl={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@remote, @ipv6=@mcast1}}}, {{@ipv6={@private0, @remote, [], [], 'tunl0\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c0) syz_emit_vhci(&(0x7f0000000640)=ANY=[], 0x22) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x8, 0x7fff}) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r4, 0x1000f0000) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0xffffffffffffff4d, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001500010000000000000000000a000000080001"], 0x1c}}, 0x0) 6.443716807s ago: executing program 1 (id=937): ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f00000001c0)={0x0, 0x0, 0x0, "b75c1ee0812022a20c74ac8aa81844f78c2cd97c89e2107fcc4c00"}) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x300, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 3.559226372s ago: executing program 0 (id=1816): memfd_create(&(0x7f0000000000)='\x00', 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)=ANY=[@ANYBLOB="1c00000022000106000000000000000005000000000002"], 0x1c}], 0x1}, 0x0) syz_emit_ethernet(0x46, &(0x7f00000000c0)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra}}}}}, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x1ae) r3 = openat$cgroup_procs(r2, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000180)='0', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f0000000340), 0x0, 0x2, 0x0) accept4$unix(r5, &(0x7f0000000840), 0x0, 0x80800) r7 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r7, 0x4c81, 0xb) 3.558338795s ago: executing program 2 (id=1817): syz_emit_vhci(0x0, 0x22) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="04040a00000000000054679202ce9eaa48b326b038d97544c8b681bad547412afab3663029531077c8c4fa2f7501610d4eae6214096ae92430cd63486f07b04d9c519ab15a6e842e1352398f95ff35f5115a2c6c50f63336179b5e6b1f774a63506e8cb76bba42c6bee078240ec871a2bcf7dd5691833ac53a02f3614eae3afb9549df1b77ce0baebc9f6306644f6f08bbd3ca3229d272acd3483bf3ae4228f7a2b839594856918b10ca47ad4dc249d99c244aba27"], 0xd) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="04090003c800000000f8ffffffffffffff000002"], 0x14) write$binfmt_script(r0, &(0x7f00000005c0)={'#! ', '', [], 0xa, "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"}, 0x1fb) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f00000002c0)={0x0, &(0x7f0000000340)=""/121, 0x79}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000ac0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xffffffffffffffe1, 0x0, 0x0, 0x10001]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r2 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r2, 0x0, 0x0) r3 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r3, 0x10d, 0x3, &(0x7f0000000000), &(0x7f0000000200)=0x4) r4 = socket(0x1, 0x2, 0x1) syz_io_uring_setup(0x3ccf, &(0x7f0000000340)={0x0, 0x2ce8, 0x0, 0xffffffff, 0x319, 0x0, r1}, 0x0, 0x0) syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2) readv(r3, &(0x7f0000000100), 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x33}}) socket$xdp(0x2c, 0x3, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000f80)={0x2c, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800"/12], &(0x7f0000000480)='GPL\x00'}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x17, 0x8, 0x40, 0x42, 0x1}, 0x48) socket(0x11, 0x800000003, 0x0) 3.332367647s ago: executing program 3 (id=1819): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200001a000000bf"], 0x0}, 0x90) creat(&(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000008c0)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write(0xffffffffffffffff, &(0x7f00000002c0)="fc0000001c000704ab5b2509b86803d05fab087a0100000005481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0c1bcae5fa0f5f9dcdd51af51a", 0xb6) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x0, 0xb00, 0x0, {}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc}]}], {0x14, 0x10}}, 0xa0}}, 0x0) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000800000003003c02ffffffef3501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/zoneinfo\x00', 0x0, 0x0) 2.9204256s ago: executing program 4 (id=971): r0 = syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') readlinkat(r0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000002780)=""/4112, 0x1010) 1.252595491s ago: executing program 0 (id=1820): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r6 = inotify_init1(0x0) fcntl$setown(r6, 0x8, 0xffffffffffffffff) fcntl$getownex(r6, 0x10, &(0x7f0000000140)={0x0, 0x0}) r8 = syz_open_procfs(r7, &(0x7f0000000600)='fd/4\x00') ioctl$EXT4_IOC_GROUP_EXTEND(r8, 0x40305839, &(0x7f0000000240)) sendto(0xffffffffffffffff, &(0x7f00000000c0)="120000001200e7ef00", 0x9, 0x0, 0x0, 0x0) recvfrom$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000500)={'sit0\x00', 0x0}) 1.251369771s ago: executing program 2 (id=1821): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mlock2(&(0x7f0000ff6000/0x4000)=nil, 0x4000, 0x0) 1.250890847s ago: executing program 3 (id=1822): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000040)={0x23, 0x3, 0x18, 0x0, 0x0, 0x0, 0x0}) 1.151723406s ago: executing program 3 (id=1823): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.128824787s ago: executing program 2 (id=1824): inotify_init1(0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x4000000000000001, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710026000000000095000300"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@map, 0xffffffffffffffff, 0x0, 0x0, 0x4, @prog_fd}, 0x20) 247.504887ms ago: executing program 3 (id=1825): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00'}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r0, 0xffffffffffffffff, 0x2b, 0x0, @val=@netkit={@prog_id}}, 0x40) 108.241087ms ago: executing program 3 (id=1826): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}], {0x14, 0x10}}, 0xac}}, 0x0) 57.193217ms ago: executing program 2 (id=1827): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x297880, 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000002100)='./file0/file0\x00', 0x0, 0x2187017, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0/file0\x00', &(0x7f00000001c0), 0x0, 0x0) 0s ago: executing program 3 (id=1828): syz_open_dev$vbi(0x0, 0x0, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(0xffffffffffffffff, 0x3b87, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_SIOCADDRT(r3, 0x890b, &(0x7f0000002580)={0x0, @vsock={0x28, 0x0, 0x0, @my=0x0}, @rc={0x1f, @fixed}, @xdp}) kernel console output (not intermixed with test programs): s: Directory 'hsr0' with parent 'hsr' already present! [ 500.235012][T10669] Cannot create hsr debugfs directory [ 501.378115][T10752] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1520'. [ 501.461237][T10752] : entered promiscuous mode [ 501.612554][ T12] bridge_slave_1: left allmulticast mode [ 501.622853][ T12] bridge_slave_1: left promiscuous mode [ 501.629050][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.648926][ T12] bridge_slave_0: left allmulticast mode [ 501.659900][ T12] bridge_slave_0: left promiscuous mode [ 501.670375][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.857389][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.864322][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.362328][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 502.374220][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 502.388362][ T12] bond0 (unregistering): Released all slaves [ 502.704568][T10643] 8021q: adding VLAN 0 to HW filter on device bond0 [ 502.900420][T10643] 8021q: adding VLAN 0 to HW filter on device team0 [ 502.930196][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.937428][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 502.976884][ T6151] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.984099][ T6151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 503.018415][ T12] hsr_slave_0: left promiscuous mode [ 503.027154][ T12] hsr_slave_1: left promiscuous mode [ 503.033604][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 503.042381][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 503.051768][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 503.059712][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 503.085533][ T12] veth1_macvtap: left promiscuous mode [ 503.091148][ T12] veth0_macvtap: left promiscuous mode [ 503.097294][ T12] veth1_vlan: left promiscuous mode [ 503.102640][ T12] veth0_vlan: left promiscuous mode [ 503.125422][ T5265] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 503.315067][ T6151] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 503.324574][ T5265] usb 4-1: Using ep0 maxpacket: 16 [ 503.336938][ T5265] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 503.362556][ T5265] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 503.372404][ T5265] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 503.386551][ T5265] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 503.395796][ T5265] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.416341][ T5265] usb 4-1: config 0 descriptor?? [ 503.521461][ T6151] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 503.541655][ T6151] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.575605][ T6151] usb 3-1: config 0 descriptor?? [ 503.587131][ T6151] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 503.812748][ T12] team0 (unregistering): Port device team_slave_1 removed [ 503.862180][ T5265] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0016/input/input24 [ 503.880367][ T5265] microsoft 0003:045E:07DA.0016: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 503.897129][ T12] team0 (unregistering): Port device team_slave_0 removed [ 504.124489][ T5265] usb 4-1: USB disconnect, device number 27 [ 504.416501][ T6151] gspca_cpia1: usb_control_msg 02, error -71 [ 504.423463][ T6151] gspca_cpia1: usb_control_msg 05, error -71 [ 504.440543][ T6151] gspca_cpia1: usb_control_msg 04, error -71 [ 504.450174][ T6151] cpia1 3-1:0.0: probe with driver cpia1 failed with error -71 [ 504.462039][ T6151] usb 3-1: USB disconnect, device number 29 [ 504.942683][T10643] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 505.107436][T10643] veth0_vlan: entered promiscuous mode [ 505.146437][T10643] veth1_vlan: entered promiscuous mode [ 505.245944][T10643] veth0_macvtap: entered promiscuous mode [ 505.275482][ T5260] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 505.293163][T10643] veth1_macvtap: entered promiscuous mode [ 505.322454][T10669] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 505.346948][T10669] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 505.363403][T10669] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 505.390464][T10669] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 505.463107][T10643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 505.477062][T10643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.489793][T10643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 505.510850][ T5260] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 505.524881][T10643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.534731][T10643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 505.547286][ T5260] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 505.560244][T10643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.570464][T10643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 505.582626][T10643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.593165][ T5260] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 505.603195][ T5260] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 505.611880][T10643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 505.622708][ T5260] usb 4-1: SerialNumber: syz [ 505.627710][T10643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.640970][T10643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 505.653419][T10643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.666823][T10643] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 505.729129][T10643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 505.744204][T10643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.754413][T10643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 505.765537][T10643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.775763][T10643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 505.789282][T10643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.799416][T10643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 505.810263][T10643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.820369][T10643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 505.831392][T10643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.841733][T10643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 505.862764][T10643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.878299][ T5260] usb 4-1: 0:2 : does not exist [ 505.887490][T10643] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 505.930045][ T5260] usb 4-1: USB disconnect, device number 28 [ 505.954266][T10643] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.966071][T10643] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.975421][T10643] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.985766][T10643] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.074087][T10679] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 506.097645][T10679] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 506.119770][T10679] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 506.131243][T10679] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 506.269636][T10669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 506.336506][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.344405][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.356078][T10669] 8021q: adding VLAN 0 to HW filter on device team0 [ 506.433794][ T5260] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.441015][ T5260] bridge0: port 1(bridge_slave_0) entered forwarding state [ 506.466745][ T5260] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.473899][ T5260] bridge0: port 2(bridge_slave_1) entered forwarding state [ 506.483132][ T2487] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.515248][ T2487] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.787484][T10679] 8021q: adding VLAN 0 to HW filter on device bond0 [ 506.873632][T10679] 8021q: adding VLAN 0 to HW filter on device team0 [ 506.926256][ T5261] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.933436][ T5261] bridge0: port 1(bridge_slave_0) entered forwarding state [ 507.022931][ T940] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.030082][ T940] bridge0: port 2(bridge_slave_1) entered forwarding state [ 507.041622][T10804] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1535'. [ 507.136904][T10804] openvswitch: : Dropping previously announced user features [ 507.164707][T10679] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 507.209576][T10679] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 507.398555][T10669] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 507.495885][ T25] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 507.566718][T10669] veth0_vlan: entered promiscuous mode [ 507.639531][T10669] veth1_vlan: entered promiscuous mode [ 507.711729][ T25] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 384 [ 507.758517][ T25] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 507.774306][ T25] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 507.794781][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 507.826398][ T25] usb 1-1: SerialNumber: syz [ 507.848417][T10809] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 507.928397][T10669] veth0_macvtap: entered promiscuous mode [ 507.961719][T10669] veth1_macvtap: entered promiscuous mode [ 508.038530][T10679] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 508.094434][T10669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.130382][T10669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.147904][T10806] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 508.175168][T10669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.223658][T10669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.261372][T10669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.296646][T10669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.329639][T10669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.363643][T10669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.385779][T10669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.406655][T10669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.430581][T10669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.458289][T10669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.475164][T10669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.495786][T10669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.520545][T10669] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 508.556284][T10669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.606057][T10669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.665002][T10669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.744942][T10669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.784339][T10669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 509.409460][T10669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.463018][T10669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 509.491993][T10669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.539125][T10669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 509.566686][T10669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.584351][T10669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 509.604359][T10669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.619294][T10669] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 509.633442][T10669] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 509.680952][T10669] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 509.718811][ T25] cdc_ether 1-1:1.0 wwan0: register 'cdc_ether' at usb-dummy_hcd.0-1, Mobile Broadband Network Device, 42:42:42:42:42:42 [ 509.734036][T10669] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.757538][T10669] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.769661][ T25] usb 1-1: USB disconnect, device number 28 [ 509.776821][T10669] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.788339][ T25] cdc_ether 1-1:1.0 wwan0: unregister 'cdc_ether' usb-dummy_hcd.0-1, Mobile Broadband Network Device [ 509.800019][T10669] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.140556][T10679] veth0_vlan: entered promiscuous mode [ 510.167945][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 510.193478][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.253638][T10679] veth1_vlan: entered promiscuous mode [ 510.319741][T10679] veth0_macvtap: entered promiscuous mode [ 510.332875][T10679] veth1_macvtap: entered promiscuous mode [ 510.355689][T10679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 510.366771][T10679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.485573][T10679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 510.501644][T10679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 510.656973][T10852] bio_check_eod: 2 callbacks suppressed [ 510.657018][T10852] syz.2.1548: attempt to access beyond end of device [ 510.657018][T10852] loop2: rw=0, sector=64, nr_sectors = 1 limit=0 [ 510.677996][T10852] syz.2.1548: attempt to access beyond end of device [ 510.677996][T10852] loop2: rw=0, sector=256, nr_sectors = 1 limit=0 [ 510.691194][T10852] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 510.702844][T10852] syz.2.1548: attempt to access beyond end of device [ 510.702844][T10852] loop2: rw=0, sector=512, nr_sectors = 1 limit=0 [ 510.715982][T10852] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 510.726097][T10852] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 510.733802][T10852] UDF-fs: Scanning with blocksize 512 failed [ 510.744310][T10852] syz.2.1548: attempt to access beyond end of device [ 510.744310][T10852] loop2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 510.758591][T10852] syz.2.1548: attempt to access beyond end of device [ 510.758591][T10852] loop2: rw=0, sector=512, nr_sectors = 2 limit=0 [ 510.772388][T10852] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 510.785199][T10852] syz.2.1548: attempt to access beyond end of device [ 510.785199][T10852] loop2: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 510.798817][T10852] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 510.808803][T10852] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 510.816733][T10852] UDF-fs: Scanning with blocksize 1024 failed [ 510.825716][T10852] syz.2.1548: attempt to access beyond end of device [ 510.825716][T10852] loop2: rw=0, sector=64, nr_sectors = 4 limit=0 [ 510.839543][T10852] syz.2.1548: attempt to access beyond end of device [ 510.839543][T10852] loop2: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 510.852828][T10852] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 510.863358][T10852] syz.2.1548: attempt to access beyond end of device [ 510.863358][T10852] loop2: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 510.877312][T10852] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 510.888151][T10852] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 510.896145][T10852] UDF-fs: Scanning with blocksize 2048 failed [ 510.905034][T10852] syz.2.1548: attempt to access beyond end of device [ 510.905034][T10852] loop2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 510.918815][T10852] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 510.928718][T10852] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 510.938472][T10852] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 510.946245][T10852] UDF-fs: Scanning with blocksize 4096 failed [ 510.952345][T10852] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 511.006139][T10679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 511.017035][T10679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.027029][T10679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 511.037636][T10679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.048001][T10679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 511.058609][T10679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.074230][T10679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 511.085106][T10679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.192825][T10679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 511.216158][T10679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.227047][T10854] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 511.247339][T10679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 511.258389][T10679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.281753][T10679] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 511.311626][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 511.347146][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 511.388826][T10679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 511.419577][T10679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.429672][T10679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 511.443046][T10679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.468181][T10679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 511.478881][T10679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.494887][T10679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 511.505535][T10679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.516212][T10679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 511.529556][T10679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.544190][T10679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 511.555638][T10679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.568345][T10679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 511.585212][T10679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.595407][T10679] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 511.613312][T10679] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 511.665270][T10679] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 511.695642][ T5262] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 511.707296][T10679] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.722436][T10679] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.732911][T10679] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.741907][T10679] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.079900][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 512.123686][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 512.132327][ T5262] usb 1-1: config 0 interface 0 altsetting 12 endpoint 0x87 has an invalid bInterval 97, changing to 10 [ 512.147482][ T5262] usb 1-1: config 0 interface 0 altsetting 12 endpoint 0x87 has invalid maxpacket 24929, setting to 1024 [ 512.174959][ T5262] usb 1-1: config 0 interface 0 has no altsetting 0 [ 512.200764][T10869] kvm: kvm [10868]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x8d96 [ 512.213516][T10869] kvm: kvm [10868]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xff10 [ 512.342538][ T5262] usb 1-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 512.436297][ T5262] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.558769][ T5262] usb 1-1: Product: syz [ 512.619858][ T5262] usb 1-1: Manufacturer: syz [ 512.655993][ T5262] usb 1-1: SerialNumber: syz [ 512.954494][ T5262] usb 1-1: config 0 descriptor?? [ 512.969436][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 512.973588][ T5262] keyspan 1-1:0.0: Keyspan 2 port adapter converter detected [ 512.996513][ T5262] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 7 [ 513.004963][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 513.011582][ T5262] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81 [ 513.025418][ T5262] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1 [ 513.033120][ T5262] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2 [ 513.058124][ T5262] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 85 [ 513.069729][ T5262] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 5 [ 513.085764][ T5262] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 513.101472][ T5262] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 83 [ 513.112999][ T5262] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 3 [ 513.123610][ T5262] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 4 [ 513.132936][ T5262] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 86 [ 513.140946][ T5262] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 6 [ 513.159178][ T5262] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 513.342272][ T5262] usb 1-1: USB disconnect, device number 29 [ 513.360052][ T5262] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 513.372119][ T5262] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 513.421477][ T5262] keyspan 1-1:0.0: device disconnected [ 513.431172][ T2922] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.603963][ T2922] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.662157][T10880] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1557'. [ 513.730141][ T2922] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.872114][ T2922] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.146921][ T2922] bridge_slave_1: left allmulticast mode [ 514.160305][ T2922] bridge_slave_1: left promiscuous mode [ 514.174446][ T2922] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.208976][ T2922] bridge_slave_0: left allmulticast mode [ 514.214670][ T2922] bridge_slave_0: left promiscuous mode [ 514.223810][ T2922] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.560009][ T4607] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 514.575963][ T4607] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 514.587564][ T4607] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 514.608618][ T4607] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 514.619632][ T4607] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 514.627392][ T4607] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 515.231454][T10903] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 515.412525][T10906] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 515.423657][T10906] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 515.433392][T10906] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 515.441191][T10906] UDF-fs: Scanning with blocksize 512 failed [ 515.452002][T10906] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 515.462607][T10906] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 515.472307][T10906] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 515.480791][T10906] UDF-fs: Scanning with blocksize 1024 failed [ 515.491264][T10906] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 515.501836][T10906] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 515.512177][T10906] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 515.520257][T10906] UDF-fs: Scanning with blocksize 2048 failed [ 515.529304][T10906] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 515.539733][T10906] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 515.549413][T10906] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 515.557300][T10906] UDF-fs: Scanning with blocksize 4096 failed [ 515.563429][T10906] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 516.021012][ T2922] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 516.052543][ T2922] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 516.084553][ T2922] bond0 (unregistering): Released all slaves [ 516.237782][ T4607] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 516.278171][ T4607] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 516.287336][ T4607] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 516.297501][ T4607] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 516.311806][ T4607] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 516.319345][ T4607] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 516.725544][ T4607] Bluetooth: hci2: command tx timeout [ 516.893570][ T2922] hsr_slave_0: left promiscuous mode [ 516.902859][ T2922] hsr_slave_1: left promiscuous mode [ 516.942090][ T2922] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 516.951216][ T2922] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 517.007160][ T2922] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 517.019254][ T2922] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 517.069759][ T2922] veth1_macvtap: left promiscuous mode [ 517.075416][ T2922] veth0_macvtap: left promiscuous mode [ 517.084107][ T2922] veth1_vlan: left promiscuous mode [ 517.092781][ T2922] veth0_vlan: left promiscuous mode [ 517.374998][ T5262] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 517.576918][ T5262] usb 3-1: config 0 interface 0 altsetting 12 endpoint 0x87 has an invalid bInterval 97, changing to 10 [ 517.601471][ T5262] usb 3-1: config 0 interface 0 altsetting 12 endpoint 0x87 has invalid maxpacket 24929, setting to 1024 [ 517.622774][ T5262] usb 3-1: config 0 interface 0 has no altsetting 0 [ 517.651612][ T5262] usb 3-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 517.673013][ T5262] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.681237][ T5262] usb 3-1: Product: syz [ 517.689958][ T5262] usb 3-1: Manufacturer: syz [ 517.695015][ T5262] usb 3-1: SerialNumber: syz [ 517.728843][ T5262] usb 3-1: config 0 descriptor?? [ 517.755103][ T5262] keyspan 3-1:0.0: Keyspan 2 port adapter converter detected [ 517.783637][ T5262] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 7 [ 517.804095][ T5262] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81 [ 517.815867][ T5262] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 517.828639][ T5262] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 517.853498][ T5262] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 85 [ 517.868515][ T5262] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 5 [ 517.893293][ T5262] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 517.913797][ T5262] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 83 [ 517.936100][ T5262] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 3 [ 518.000385][ T5262] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 4 [ 518.009177][ T5262] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 86 [ 518.017218][ T5262] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 6 [ 518.045906][ T5262] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 518.095429][ T5262] usb 3-1: USB disconnect, device number 30 [ 518.112291][ T5262] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 518.142972][ T5262] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 518.182814][ T5262] keyspan 3-1:0.0: device disconnected [ 518.293073][ T2922] team0 (unregistering): Port device team_slave_1 removed [ 518.351803][ T2922] team0 (unregistering): Port device team_slave_0 removed [ 518.408090][ T4607] Bluetooth: hci4: command tx timeout [ 518.560387][T10949] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1570'. [ 518.807601][ T4607] Bluetooth: hci2: command tx timeout [ 519.530553][T10892] chnl_net:caif_netlink_parms(): no params data found [ 519.630048][T10962] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1573'. [ 519.762709][T10962] openvswitch: : Dropping previously announced user features [ 519.927575][ T4607] Bluetooth: hci0: unexpected cc 0x0c14 length: 60 < 249 [ 520.017462][T10892] bridge0: port 1(bridge_slave_0) entered blocking state [ 520.065093][T10892] bridge0: port 1(bridge_slave_0) entered disabled state [ 520.112869][T10892] bridge_slave_0: entered allmulticast mode [ 520.148865][T10892] bridge_slave_0: entered promiscuous mode [ 520.198062][T10892] bridge0: port 2(bridge_slave_1) entered blocking state [ 520.205460][T10892] bridge0: port 2(bridge_slave_1) entered disabled state [ 520.217046][T10892] bridge_slave_1: entered allmulticast mode [ 520.226477][T10892] bridge_slave_1: entered promiscuous mode [ 520.240604][T10918] chnl_net:caif_netlink_parms(): no params data found [ 520.395890][T10892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 520.485428][ T4607] Bluetooth: hci4: command tx timeout [ 520.553887][ T2922] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.612781][T10892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 520.782447][ T2922] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.885870][ T4607] Bluetooth: hci2: command tx timeout [ 520.947171][T10892] team0: Port device team_slave_0 added [ 521.011534][ T2922] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.062800][T10892] team0: Port device team_slave_1 added [ 521.287778][ T2922] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.607597][T11017] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1586'. [ 522.185478][T10892] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 522.192464][T10892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 522.234401][T10892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 522.261165][T10892] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 522.270220][T10892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 522.297670][T10892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 522.562613][T10918] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.566107][ T4607] Bluetooth: hci4: command tx timeout [ 522.570678][T10918] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.583684][T10918] bridge_slave_0: entered allmulticast mode [ 522.731071][T11030] bio_check_eod: 14 callbacks suppressed [ 522.731114][T11030] syz.0.1592: attempt to access beyond end of device [ 522.731114][T11030] loop0: rw=0, sector=64, nr_sectors = 1 limit=0 [ 522.751656][T11030] syz.0.1592: attempt to access beyond end of device [ 522.751656][T11030] loop0: rw=0, sector=256, nr_sectors = 1 limit=0 [ 522.765452][T11030] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 522.776684][T11030] syz.0.1592: attempt to access beyond end of device [ 522.776684][T11030] loop0: rw=0, sector=512, nr_sectors = 1 limit=0 [ 522.790431][T11030] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 522.800449][T11030] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 522.808588][T11030] UDF-fs: Scanning with blocksize 512 failed [ 522.818693][T11030] syz.0.1592: attempt to access beyond end of device [ 522.818693][T11030] loop0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 522.833008][T11030] syz.0.1592: attempt to access beyond end of device [ 522.833008][T11030] loop0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 522.846243][T11030] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 522.859446][T11030] syz.0.1592: attempt to access beyond end of device [ 522.859446][T11030] loop0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 522.873321][T11030] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 522.883440][T11030] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 522.891629][T11030] UDF-fs: Scanning with blocksize 1024 failed [ 522.900761][T11030] syz.0.1592: attempt to access beyond end of device [ 522.900761][T11030] loop0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 522.914617][T11030] syz.0.1592: attempt to access beyond end of device [ 522.914617][T11030] loop0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 522.927853][T11030] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 522.938299][T11030] syz.0.1592: attempt to access beyond end of device [ 522.938299][T11030] loop0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 522.952690][T11030] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 522.962972][T11030] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 522.971512][T11030] UDF-fs: Scanning with blocksize 2048 failed [ 522.980499][T11030] syz.0.1592: attempt to access beyond end of device [ 522.980499][T11030] loop0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 522.995492][T11030] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 523.005494][T11030] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 523.015125][T11030] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 523.022789][T11030] UDF-fs: Scanning with blocksize 4096 failed [ 523.024979][ T4607] Bluetooth: hci2: command tx timeout [ 523.028895][T11030] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 523.067495][T10918] bridge_slave_0: entered promiscuous mode [ 523.149489][T10892] hsr_slave_0: entered promiscuous mode [ 523.176895][T10892] hsr_slave_1: entered promiscuous mode [ 523.193664][T10892] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 523.220450][T10892] Cannot create hsr debugfs directory [ 523.297582][T11024] syzkaller0: entered promiscuous mode [ 523.315897][T11024] syzkaller0: entered allmulticast mode [ 523.323759][T10918] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.341411][T10918] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.349515][T10918] bridge_slave_1: entered allmulticast mode [ 523.367031][T10918] bridge_slave_1: entered promiscuous mode [ 523.437640][T11040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1594'. [ 524.646052][ T4607] Bluetooth: hci4: command tx timeout [ 525.533361][T10918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 525.558556][T10918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 525.794390][T10918] team0: Port device team_slave_0 added [ 525.841187][T11050] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 525.847749][T11050] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 525.878486][T10918] team0: Port device team_slave_1 added [ 525.891995][T11050] vhci_hcd vhci_hcd.0: Device attached [ 525.936787][ T2922] bridge_slave_1: left allmulticast mode [ 525.936814][ T2922] bridge_slave_1: left promiscuous mode [ 525.936988][ T2922] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.955619][ T2922] bridge_slave_0: left allmulticast mode [ 525.955646][ T2922] bridge_slave_0: left promiscuous mode [ 525.955841][ T2922] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.115483][ T5260] vhci_hcd: vhci_device speed not set [ 526.185025][ T5260] usb 15-1: new full-speed USB device number 2 using vhci_hcd [ 526.895174][T10805] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 527.114067][T10805] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 527.231734][T10805] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 527.261167][T10805] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 527.293900][T10805] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.306015][T10805] usb 4-1: config 0 descriptor?? [ 527.362145][T11071] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 527.374974][T11071] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 527.384573][T11071] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 527.393007][T11071] UDF-fs: Scanning with blocksize 512 failed [ 527.400503][T11071] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 527.410455][T11071] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 527.420213][T11071] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 527.428110][T11071] UDF-fs: Scanning with blocksize 1024 failed [ 527.436765][T11071] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 527.458526][T11071] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 527.468447][T11071] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 527.476295][T11071] UDF-fs: Scanning with blocksize 2048 failed [ 527.484215][T11071] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 527.499210][T11071] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 527.508990][T11071] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 527.517139][T11071] UDF-fs: Scanning with blocksize 4096 failed [ 527.523358][T11071] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 528.363513][T11056] vhci_hcd: connection reset by peer [ 528.371006][T10805] usbhid 4-1:0.0: can't add hid device: -71 [ 528.385196][T10805] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 528.396316][ T62] vhci_hcd: stop threads [ 528.406116][ T62] vhci_hcd: release socket [ 528.418755][ T62] vhci_hcd: disconnect device [ 528.422787][T10805] usb 4-1: USB disconnect, device number 29 [ 528.594583][ T2922] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 528.615305][ T2922] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 528.638989][ T2922] bond0 (unregistering): Released all slaves [ 528.717957][T10918] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 528.734783][T10918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 528.762916][ C1] vkms_vblank_simulate: vblank timer overrun [ 528.799956][T10918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 528.916257][T10918] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 528.934551][T10918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 528.960576][ C1] vkms_vblank_simulate: vblank timer overrun [ 529.014861][T10918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 529.609950][T11086] netlink: 'syz.2.1609': attribute type 4 has an invalid length. [ 529.624328][T11086] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1609'. [ 529.771532][T10918] hsr_slave_0: entered promiscuous mode [ 529.806211][T10918] hsr_slave_1: entered promiscuous mode [ 529.835114][T10918] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 529.852780][T10918] Cannot create hsr debugfs directory [ 529.946910][ T2922] hsr_slave_0: left promiscuous mode [ 529.960643][ T2922] hsr_slave_1: left promiscuous mode [ 529.979689][ T2922] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 529.998980][ T2922] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 530.029607][ T2922] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 530.048894][ T2922] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 530.375609][T11111] bio_check_eod: 14 callbacks suppressed [ 530.375653][T11111] syz.0.1617: attempt to access beyond end of device [ 530.375653][T11111] loop0: rw=0, sector=64, nr_sectors = 1 limit=0 [ 530.395668][T11111] syz.0.1617: attempt to access beyond end of device [ 530.395668][T11111] loop0: rw=0, sector=256, nr_sectors = 1 limit=0 [ 530.408776][T11111] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 530.419788][T11111] syz.0.1617: attempt to access beyond end of device [ 530.419788][T11111] loop0: rw=0, sector=512, nr_sectors = 1 limit=0 [ 530.433529][T11111] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 530.443662][T11111] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 530.452277][T11111] UDF-fs: Scanning with blocksize 512 failed [ 530.462757][T11111] syz.0.1617: attempt to access beyond end of device [ 530.462757][T11111] loop0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 530.476919][T11111] syz.0.1617: attempt to access beyond end of device [ 530.476919][T11111] loop0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 530.490151][T11111] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 530.502877][T11111] syz.0.1617: attempt to access beyond end of device [ 530.502877][T11111] loop0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 530.516102][T11111] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 530.525774][T11111] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 530.534001][T11111] UDF-fs: Scanning with blocksize 1024 failed [ 530.543233][T11111] syz.0.1617: attempt to access beyond end of device [ 530.543233][T11111] loop0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 530.556977][T11111] syz.0.1617: attempt to access beyond end of device [ 530.556977][T11111] loop0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 530.570571][T11111] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 530.581178][T11111] syz.0.1617: attempt to access beyond end of device [ 530.581178][T11111] loop0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 530.594420][T11111] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 530.604112][T11111] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 530.611861][T11111] UDF-fs: Scanning with blocksize 2048 failed [ 530.622755][T11111] syz.0.1617: attempt to access beyond end of device [ 530.622755][T11111] loop0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 530.637139][T11111] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 530.648455][T11111] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 530.653897][ T2922] veth1_macvtap: left promiscuous mode [ 530.658262][T11111] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 530.672082][T11111] UDF-fs: Scanning with blocksize 4096 failed [ 530.678261][T11111] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 530.716465][ T2922] veth0_macvtap: left promiscuous mode [ 530.723471][ T2922] veth1_vlan: left promiscuous mode [ 530.730002][ T2922] veth0_vlan: left promiscuous mode [ 531.286592][ T5260] vhci_hcd: vhci_device speed not set [ 531.415135][ T940] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 531.614948][ T940] usb 4-1: Using ep0 maxpacket: 8 [ 531.624461][ T940] usb 4-1: New USB device found, idVendor=0979, idProduct=0270, bcdDevice=a8.17 [ 531.647098][ T940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.667022][ T940] usb 4-1: Product: syz [ 531.673871][ T940] usb 4-1: Manufacturer: syz [ 531.683442][ T940] usb 4-1: SerialNumber: syz [ 531.698320][ T940] usb 4-1: config 0 descriptor?? [ 531.712633][ T940] hub 4-1:0.0: bad descriptor, ignoring hub [ 531.718994][ T940] hub 4-1:0.0: probe with driver hub failed with error -5 [ 531.751287][ T940] gspca_main: jeilinj-2.14.0 probing 0979:0270 [ 531.920846][ T940] usb 4-1: USB disconnect, device number 30 [ 532.408557][ T2922] team0 (unregistering): Port device team_slave_1 removed [ 532.591263][ T2922] team0 (unregistering): Port device team_slave_0 removed [ 534.315873][ T5244] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 534.455177][T11122] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 534.506667][ T5244] usb 4-1: Using ep0 maxpacket: 16 [ 534.515774][ T5244] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 534.563102][ T5244] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 534.590136][ T5244] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 534.600180][ T5244] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.651469][ T5244] usb 4-1: config 0 descriptor?? [ 535.027909][T10892] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 535.091045][T10892] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 535.101801][ T5244] microsoft 0003:045E:07DA.0017: No inputs registered, leaving [ 535.133871][ T5244] microsoft 0003:045E:07DA.0017: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 535.163449][ T5244] microsoft 0003:045E:07DA.0017: no inputs found [ 535.195665][ T5244] microsoft 0003:045E:07DA.0017: could not initialize ff, continuing anyway [ 535.230424][T10892] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 535.263852][T10892] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 535.427192][T11153] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 535.445366][T11153] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 535.597736][T10892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 535.662694][T10892] 8021q: adding VLAN 0 to HW filter on device team0 [ 535.675269][ T5266] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 535.710342][ T5260] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.717641][ T5260] bridge0: port 1(bridge_slave_0) entered forwarding state [ 535.746355][ T940] usb 4-1: USB disconnect, device number 31 [ 535.769679][ T5260] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.776918][ T5260] bridge0: port 2(bridge_slave_1) entered forwarding state [ 535.874671][T10918] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 535.895466][T10918] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 535.905766][ T5266] usb 3-1: Using ep0 maxpacket: 8 [ 536.029585][ T5266] usb 3-1: New USB device found, idVendor=0979, idProduct=0270, bcdDevice=a8.17 [ 536.136804][ T5266] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.189187][T10918] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 536.250765][ T5266] usb 3-1: Product: syz [ 536.306048][ T5266] usb 3-1: Manufacturer: syz [ 536.350112][T10918] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 536.373242][ T5266] usb 3-1: SerialNumber: syz [ 536.552980][ T5266] usb 3-1: config 0 descriptor?? [ 536.695343][ T5266] hub 3-1:0.0: bad descriptor, ignoring hub [ 536.701309][ T5266] hub 3-1:0.0: probe with driver hub failed with error -5 [ 536.766680][ T5266] gspca_main: jeilinj-2.14.0 probing 0979:0270 [ 536.915112][ T5266] usb 3-1: USB disconnect, device number 31 [ 536.917096][T10918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 537.019027][T10918] 8021q: adding VLAN 0 to HW filter on device team0 [ 537.185775][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.193106][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 537.237083][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.244314][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 537.314058][T10892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 537.903223][T10918] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 538.228379][T11176] 9pnet_fd: Insufficient options for proto=fd [ 538.240738][T10892] veth0_vlan: entered promiscuous mode [ 538.286199][T10892] veth1_vlan: entered promiscuous mode [ 538.385460][T10892] veth0_macvtap: entered promiscuous mode [ 538.420595][T10892] veth1_macvtap: entered promiscuous mode [ 538.528170][T10892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 538.571443][T10892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.593676][T10892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 538.618848][T10892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.649142][T10892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 538.672598][T10892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.693176][T10892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 538.737932][T10892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.759505][T10892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 538.781119][T10892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.802155][T10892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 538.839897][T10892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.880817][T10892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 538.905033][T10892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 538.938232][T10892] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 538.965740][T11186] batadv0: mtu less than device minimum [ 539.007874][T10892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 539.036544][T10892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.078695][T10892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 539.093915][T10892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.105252][T10892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 539.119282][T10892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.135100][T10892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 539.147603][T10892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.162840][T10892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 539.164917][ T5266] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 539.176269][T10892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.191840][T10892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 539.203277][T10892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.266436][T10892] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 539.282792][T10892] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.298947][T10892] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 539.396719][T10918] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 539.419132][ T5266] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 539.431557][T10892] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.438677][ T5266] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 539.468388][ T5266] usb 4-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 539.496346][T10892] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.497800][ T5266] usb 4-1: New USB device found, idVendor=413c, idProduct=81d1, bcdDevice=fb.93 [ 539.529162][ T5266] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.535169][T10892] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.547630][ T5266] usb 4-1: Product: syz [ 539.558151][ T5266] usb 4-1: Manufacturer: syz [ 539.564060][T10892] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.564664][ T5266] usb 4-1: SerialNumber: syz [ 539.582055][ T5266] usb 4-1: config 0 descriptor?? [ 539.933529][T11192] CIFS: VFS: Malformed UNC in devname [ 539.948625][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 539.982030][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 540.095057][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 540.126682][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 540.248560][ T29] audit: type=1326 audit(1722187038.198:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11198 comm="syz.2.1646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d26377299 code=0x7fc00000 [ 540.282441][T10918] veth0_vlan: entered promiscuous mode [ 540.329252][T10918] veth1_vlan: entered promiscuous mode [ 540.592293][T10918] veth0_macvtap: entered promiscuous mode [ 540.609081][T10918] veth1_macvtap: entered promiscuous mode [ 540.650203][T10918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 540.676685][T10918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.709902][T10918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 540.731793][T10918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.752046][T10918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 540.795273][T10918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.815079][T10918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 540.830993][T10918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.844666][T10918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 540.865778][T10918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.877749][T10918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 540.893213][T10918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.904927][T10918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 540.915803][T10918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.926703][T10918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 540.938060][T10918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.963316][T10918] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 540.992343][T11212] netlink: 'syz.2.1649': attribute type 4 has an invalid length. [ 541.024709][T11218] netlink: 'syz.2.1649': attribute type 17 has an invalid length. [ 541.148588][T10918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.163690][T10918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.241394][T10918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.307085][T10918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.341976][T10918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.358468][T10918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.369891][T10918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.382540][T10918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.393731][T10918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.406852][T10918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.418152][T10918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.435026][T10918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.470422][T10918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.487647][T10918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.498506][T10918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 541.510440][T10918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 541.542609][T10918] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 541.575519][T10918] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.584506][T10918] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.598350][T10918] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.610013][T10918] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.730005][T11220] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1652'. [ 541.863460][ T8] usb 4-1: USB disconnect, device number 32 [ 542.092320][ T2922] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.175088][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 542.182956][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 542.195479][T11228] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1655'. [ 542.228555][ T2922] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.269349][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 542.277479][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 542.434138][ T2922] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.518171][ T2922] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.647750][ T2922] bridge_slave_1: left allmulticast mode [ 542.653468][ T2922] bridge_slave_1: left promiscuous mode [ 542.659734][ T2922] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.669835][ T2922] bridge_slave_0: left allmulticast mode [ 542.678760][ T2922] bridge_slave_0: left promiscuous mode [ 542.684656][ T2922] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.146980][T10805] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 543.191406][ T5213] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 543.202634][ T5213] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 543.211913][ T5213] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 543.243124][ T5213] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 543.251934][ T5213] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 543.273218][ T5213] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 543.345977][T10805] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 543.357317][T10805] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 543.368911][T10805] usb 3-1: New USB device found, idVendor=056a, idProduct=0300, bcdDevice= 0.00 [ 543.379905][T10805] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.395902][T10805] usb 3-1: config 0 descriptor?? [ 543.424550][ T2922] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 543.438921][ T2922] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 543.452187][ T2922] bond0 (unregistering): Released all slaves [ 543.760705][T11239] chnl_net:caif_netlink_parms(): no params data found [ 543.835707][T10805] wacom 0003:056A:0300.0018: unknown main item tag 0x0 [ 543.856817][T10805] wacom 0003:056A:0300.0018: Unknown device_type for 'HID 056a:0300'. Assuming pen. [ 543.893482][T10805] wacom 0003:056A:0300.0018: hidraw0: USB HID v0.00 Device [HID 056a:0300] on usb-dummy_hcd.2-1/input0 [ 544.076641][ T2922] hsr_slave_0: left promiscuous mode [ 544.112981][ T2922] hsr_slave_1: left promiscuous mode [ 544.117455][T10805] input: Wacom Bamboo One S Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0300.0018/input/input26 [ 544.130974][ T2922] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 544.158127][ T2922] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 544.177143][ T2922] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 544.189293][ T2922] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 544.193866][ T4607] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 544.227573][ T4607] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 544.246449][ T4607] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 544.276146][ T4607] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 544.284864][ T4607] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 545.076097][ T4607] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 545.134222][T10805] usb 3-1: USB disconnect, device number 32 [ 545.213142][ T2922] veth1_macvtap: left promiscuous mode [ 545.218929][ T2922] veth0_macvtap: left promiscuous mode [ 545.224718][ T2922] veth1_vlan: left promiscuous mode [ 545.230132][ T2922] veth0_vlan: left promiscuous mode [ 545.368119][ T4607] Bluetooth: hci2: command tx timeout [ 545.452622][T11260] trusted_key: encrypted_key: insufficient parameters specified [ 546.202652][ T2922] team0 (unregistering): Port device team_slave_1 removed [ 546.330591][ T2922] team0 (unregistering): Port device team_slave_0 removed [ 546.776467][ T5266] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 546.987121][ T5266] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 547.012378][ T5266] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 547.034521][ T5266] usb 3-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 547.051870][ T5266] usb 3-1: New USB device found, idVendor=413c, idProduct=81d1, bcdDevice=fb.93 [ 547.061171][ T5266] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.069325][ T5266] usb 3-1: Product: syz [ 547.073510][ T5266] usb 3-1: Manufacturer: syz [ 547.078179][ T5266] usb 3-1: SerialNumber: syz [ 547.087473][ T5266] usb 3-1: config 0 descriptor?? [ 547.129991][ T4607] Bluetooth: hci4: command tx timeout [ 547.186475][T11250] netlink: 'syz.0.1659': attribute type 5 has an invalid length. [ 547.440476][T11268] CIFS: VFS: Malformed UNC in devname [ 547.453419][ T4607] Bluetooth: hci2: command tx timeout [ 547.491161][T11239] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.504744][T11239] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.517207][T11239] bridge_slave_0: entered allmulticast mode [ 547.537740][T11239] bridge_slave_0: entered promiscuous mode [ 547.571543][T11239] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.610822][T11239] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.638219][T11239] bridge_slave_1: entered allmulticast mode [ 547.654130][T11239] bridge_slave_1: entered promiscuous mode [ 547.783944][T11239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 547.842987][T11239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 548.002356][T11239] team0: Port device team_slave_0 added [ 548.033466][T11239] team0: Port device team_slave_1 added [ 548.131550][T11287] xt_CT: You must specify a L4 protocol and not use inversions on it [ 548.174057][T11239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 548.199983][T11239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 548.231632][T11239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 549.070997][T11239] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 549.084218][T11239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 549.171011][T11239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 549.205552][ T4607] Bluetooth: hci4: command tx timeout [ 549.352261][ T3004] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.445209][ T5244] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 549.469579][T10805] usb 3-1: USB disconnect, device number 33 [ 549.525256][ T4607] Bluetooth: hci2: command tx timeout [ 549.559033][ T3004] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.636103][ T5244] usb 4-1: Using ep0 maxpacket: 8 [ 549.647879][ T5244] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 549.661203][T11239] hsr_slave_0: entered promiscuous mode [ 549.667705][ T5244] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 549.681743][T11239] hsr_slave_1: entered promiscuous mode [ 549.692239][T11239] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 549.700380][ T5244] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 549.710939][T11239] Cannot create hsr debugfs directory [ 549.721209][ T5244] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 549.732867][ T5244] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.750591][ T5244] usb 4-1: Product: syz [ 549.762857][ T5244] usb 4-1: Manufacturer: syz [ 549.774702][ T5244] usb 4-1: SerialNumber: syz [ 549.793396][ T3004] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 549.809437][ T5244] usb 4-1: config 0 descriptor?? [ 549.822961][ T5244] radio-si470x 4-1:0.0: could not find interrupt in endpoint [ 549.834094][ T5244] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 549.848327][T11252] chnl_net:caif_netlink_parms(): no params data found [ 549.954288][ T5244] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 550.759632][ T5244] usb 4-1: USB disconnect, device number 33 [ 550.842689][ T3004] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.955167][T11252] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.966728][T11252] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.974228][T11252] bridge_slave_0: entered allmulticast mode [ 550.981698][T11252] bridge_slave_0: entered promiscuous mode [ 551.000775][T11252] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.012800][T11252] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.023782][T11252] bridge_slave_1: entered allmulticast mode [ 551.032283][T11252] bridge_slave_1: entered promiscuous mode [ 551.054970][ T940] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 551.117461][T11252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 551.171439][T11252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 551.253911][ T940] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 551.276876][ T940] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 551.286374][ T4607] Bluetooth: hci4: command tx timeout [ 551.293915][ T940] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.303969][T11252] team0: Port device team_slave_0 added [ 551.307173][ T940] usb 1-1: config 0 descriptor?? [ 551.362535][T11252] team0: Port device team_slave_1 added [ 551.456698][ T3004] bridge_slave_1: left allmulticast mode [ 551.472764][ T3004] bridge_slave_1: left promiscuous mode [ 551.480495][ T3004] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.499047][ T3004] bridge_slave_0: left allmulticast mode [ 551.509880][ T3004] bridge_slave_0: left promiscuous mode [ 551.526415][ T3004] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.605235][ T4607] Bluetooth: hci2: command tx timeout [ 552.863151][ T3004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 552.901106][ T3004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 552.920038][ T3004] bond0 (unregistering): Released all slaves [ 552.963453][T11252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 552.971355][T11252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 553.002324][T11252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 553.016507][T11252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 553.024427][T11252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 553.059243][T11252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 553.365737][ T4607] Bluetooth: hci4: command tx timeout [ 553.372832][T11252] hsr_slave_0: entered promiscuous mode [ 553.382452][T11252] hsr_slave_1: entered promiscuous mode [ 553.401808][T11252] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 553.411734][T11252] Cannot create hsr debugfs directory [ 553.652545][ T3004] hsr_slave_0: left promiscuous mode [ 553.675789][ T25] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 553.687371][ T3004] hsr_slave_1: left promiscuous mode [ 553.695242][ T3004] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 553.711725][ T3004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 553.744251][ T3004] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 553.774971][ T3004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 553.844129][ T5244] usb 1-1: USB disconnect, device number 30 [ 553.898195][ T3004] veth1_macvtap: left promiscuous mode [ 553.912100][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 553.932412][ T3004] veth0_macvtap: left promiscuous mode [ 553.944775][ T3004] veth1_vlan: left promiscuous mode [ 553.951123][ T3004] veth0_vlan: left promiscuous mode [ 553.967003][ T25] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 553.978086][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.998346][ T25] usb 4-1: Product: syz [ 554.010846][ T25] usb 4-1: Manufacturer: syz [ 554.026832][ T25] usb 4-1: SerialNumber: syz [ 554.040072][ T25] usb 4-1: config 0 descriptor?? [ 554.076118][ T25] gspca_main: sq930x-2.14.0 probing 2770:930c [ 554.095155][ T5262] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 554.298928][ T5262] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 554.315172][ T5262] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 554.327292][ T5262] usb 3-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 554.354713][ T5262] usb 3-1: New USB device found, idVendor=413c, idProduct=81d1, bcdDevice=fb.93 [ 554.368908][ T5262] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.377549][ T5262] usb 3-1: Product: syz [ 554.382287][ T5262] usb 3-1: Manufacturer: syz [ 554.389094][ T5262] usb 3-1: SerialNumber: syz [ 554.396723][ T5262] usb 3-1: config 0 descriptor?? [ 554.802504][T11346] CIFS: VFS: Malformed UNC in devname [ 555.299151][ T3004] team0 (unregistering): Port device team_slave_1 removed [ 555.411300][ T3004] team0 (unregistering): Port device team_slave_0 removed [ 555.685613][ T25] gspca_sq930x: ucbus_write failed -110 [ 555.957843][ T25] gspca_sq930x: Sensor ov9630 not yet treated [ 555.971936][ T25] sq930x 4-1:0.0: probe with driver sq930x failed with error -22 [ 556.422038][T11348] netlink: 'syz.0.1689': attribute type 7 has an invalid length. [ 556.447868][T11348] netlink: 'syz.0.1689': attribute type 39 has an invalid length. [ 556.514369][T11349] bridge1: port 1(gretap1) entered blocking state [ 556.525297][T11349] bridge1: port 1(gretap1) entered disabled state [ 556.542602][T11349] gretap1: entered allmulticast mode [ 556.560425][T11349] gretap1: entered promiscuous mode [ 556.604151][T11350] netlink: 'syz.0.1689': attribute type 7 has an invalid length. [ 556.615432][T11350] netlink: 'syz.0.1689': attribute type 39 has an invalid length. [ 556.625723][T11341] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.634514][T11341] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.680777][T11341] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.688420][T11341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 556.698789][T11341] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.706093][T11341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 556.754002][T11341] team0: Port device bridge0 added [ 556.766094][T11351] bridge_slave_1: left allmulticast mode [ 556.773689][T11351] bridge_slave_1: left promiscuous mode [ 556.782303][T11351] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.812886][T11351] bridge_slave_0: left allmulticast mode [ 556.824530][T11351] bridge_slave_0: left promiscuous mode [ 556.826102][ T5262] usb 3-1: USB disconnect, device number 34 [ 556.830453][T11351] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.919855][T11351] team0: Port device bridge0 removed [ 556.989079][T11353] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1686'. [ 557.026756][T11353] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1686'. [ 557.037632][ T29] audit: type=1326 audit(1722187054.978:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11360 comm="syz.0.1690" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7ae9d77299 code=0x0 [ 557.065023][T11353] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1686'. [ 557.195847][ T25] usb 4-1: USB disconnect, device number 34 [ 557.270570][T11239] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 557.313565][T11239] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 557.372779][T11239] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 557.463263][T11239] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 557.715369][ T25] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 557.913942][T11239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 557.925798][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 557.939155][ T25] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 557.989822][ T25] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 558.007822][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 558.024524][ T25] usb 4-1: SerialNumber: syz [ 558.037809][T11239] 8021q: adding VLAN 0 to HW filter on device team0 [ 558.055719][ T25] usb 4-1: config 0 descriptor?? [ 558.074779][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.082033][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 558.131466][T11252] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 558.157412][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.164663][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 558.182598][T11252] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 558.221880][T11252] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 558.254398][T11252] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 558.345096][ T25] usb 4-1: Found UVC 0.00 device (05ac:8501) [ 558.352078][ T25] usb 4-1: No valid video chain found. [ 558.775239][ T2636] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 559.124978][ T2636] usb 3-1: Using ep0 maxpacket: 32 [ 559.133112][ T5265] usb 4-1: USB disconnect, device number 35 [ 559.151713][ T2636] usb 3-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 124, changing to 10 [ 559.188053][T11252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 559.196686][ T2636] usb 3-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 64 [ 559.264465][T11252] 8021q: adding VLAN 0 to HW filter on device team0 [ 559.324675][ T5262] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.328910][ T2636] usb 3-1: config 1 interface 0 altsetting 8 bulk endpoint 0x3 has invalid maxpacket 1024 [ 559.331889][ T5262] bridge0: port 1(bridge_slave_0) entered forwarding state [ 559.342857][ T2636] usb 3-1: config 1 interface 0 has no altsetting 0 [ 559.359435][ T2636] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 559.369632][ T2636] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.403970][ T2636] usb 3-1: Product: ࠠ [ 559.409064][ T5262] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.409644][ T2636] usb 3-1: Manufacturer: nj獥藲녉嫛݉乜ࢤ䏉퇪弍푘薍 [ 559.416228][ T5262] bridge0: port 2(bridge_slave_1) entered forwarding state [ 559.487344][ T2636] usb 3-1: SerialNumber: ဇ [ 559.511262][T11379] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 559.521801][T11379] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 559.559379][T11239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 559.768364][T11239] veth0_vlan: entered promiscuous mode [ 559.810559][ T2636] usb 3-1: bad CDC descriptors [ 559.811540][T11239] veth1_vlan: entered promiscuous mode [ 559.852359][ T2636] usb 3-1: USB disconnect, device number 35 [ 559.921498][T11252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 560.038455][T11239] veth0_macvtap: entered promiscuous mode [ 560.091333][T11239] veth1_macvtap: entered promiscuous mode [ 560.113403][T11239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.125708][T11239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.136048][T11239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.146753][T11239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.872179][T11239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.924380][T11239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.935825][T11239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.947347][T11239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 560.971048][T11239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 560.994985][T11239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.010867][T11239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 561.035031][T11239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.055012][T11239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 561.072270][T11239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.091730][T11239] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 561.126619][T11239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 561.178448][T11239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.201884][T11239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 561.236122][T11239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.262676][T11239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 561.301060][T11239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.335056][T11239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 561.346810][T11239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.358234][T11239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 561.388698][T11239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.407051][T11239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 561.418152][T11239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.428363][T11239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 561.439159][T11239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 561.453629][T11239] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 561.514795][T11239] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.549949][T11239] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.568040][T11239] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.577642][T11239] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.615303][ T2636] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 561.815016][ T2636] usb 4-1: Using ep0 maxpacket: 16 [ 561.844984][ T2636] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 561.868110][T11252] veth0_vlan: entered promiscuous mode [ 561.880500][ T9848] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 561.905242][ T2636] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.915963][ T9848] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 561.931087][ T2636] usb 4-1: Product: syz [ 561.960170][ T2636] usb 4-1: Manufacturer: syz [ 561.980224][ T2636] usb 4-1: SerialNumber: syz [ 561.999000][ T2636] usb 4-1: config 0 descriptor?? [ 562.028607][T11252] veth1_vlan: entered promiscuous mode [ 562.063125][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 562.082530][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 562.239258][ T2636] usb 4-1: Limiting number of CPorts to U8_MAX [ 562.300780][ T2636] usb 4-1: Not enough endpoints found in device, aborting! [ 562.330671][T11252] veth0_macvtap: entered promiscuous mode [ 562.359767][T11252] veth1_macvtap: entered promiscuous mode [ 562.401942][T11252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 562.421937][T11252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.432415][T11252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 562.444296][T11252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.488264][T11252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 562.492581][T11424] nbd: must specify a device to reconfigure [ 562.512484][T11252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.528236][T11252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 562.547236][T11252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.580412][T11252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 562.598561][ T2636] usb 4-1: USB disconnect, device number 36 [ 562.603331][T11252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.616967][T11252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 562.628129][T11252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.642010][T11252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 562.664905][T11252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.674764][T11252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 562.686736][T11252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.709289][T11252] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 562.727251][T11252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 562.738224][T11252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.748571][T11252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 562.760509][T11252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.770403][T11252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 562.781073][T11252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.792608][T11252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 562.803279][T11252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.813715][T11252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 562.826196][T11252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.837710][T11252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 562.852707][T11252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.863337][T11252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 562.873949][T11252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.883851][T11252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 562.896368][T11252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.908176][T11252] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 562.925320][T11252] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.934195][T11252] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.944537][T11252] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.955965][T11252] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.148682][ T5265] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 563.288728][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.301540][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.426296][ T5265] usb 3-1: Using ep0 maxpacket: 32 [ 563.509638][ T5265] usb 3-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 124, changing to 10 [ 563.660938][ T5265] usb 3-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 64 [ 563.945132][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 563.980208][ T5265] usb 3-1: config 1 interface 0 altsetting 8 bulk endpoint 0x3 has invalid maxpacket 1024 [ 563.984786][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 563.990284][ T5265] usb 3-1: config 1 interface 0 has no altsetting 0 [ 563.992495][ T5265] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 564.031949][ T5265] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.042399][ T5265] usb 3-1: Product: ࠠ [ 564.047723][ T5265] usb 3-1: Manufacturer: nj獥藲녉嫛݉乜ࢤ䏉퇪弍푘薍 [ 564.059716][ T5265] usb 3-1: SerialNumber: ဇ [ 564.081508][T11440] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 564.105050][T11440] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 564.160756][ T966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 564.170664][ T966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 564.353832][ T5265] usb 3-1: bad CDC descriptors [ 564.369134][ T5265] usb 3-1: USB disconnect, device number 36 [ 565.904782][ C0] eth0: bad gso: type: 1, size: 1408 [ 569.195494][T10805] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 569.225616][ T966] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.577668][T10805] usb 3-1: device not accepting address 37, error -71 [ 569.728264][ T966] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.939182][ T966] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.024407][ T966] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.096455][ T5213] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 570.107526][ T5213] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 570.119070][ T5213] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 570.128737][ T5213] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 570.143409][ T5213] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 570.152313][ T5213] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 570.166192][ T5260] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 570.177115][ T966] bridge_slave_1: left allmulticast mode [ 570.182811][ T966] bridge_slave_1: left promiscuous mode [ 570.194602][ T966] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.203819][ T966] bridge_slave_0: left allmulticast mode [ 570.209939][ T966] bridge_slave_0: left promiscuous mode [ 570.215913][ T966] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.366561][ T5260] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 570.377507][ T5260] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.388536][ T5260] usb 1-1: config 0 descriptor?? [ 570.711672][ T966] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 570.724285][ T966] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 570.736833][ T966] bond0 (unregistering): Released all slaves [ 571.612811][ T5260] pegasus 1-1:0.0: probe with driver pegasus failed with error -32 [ 571.865074][T11513] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1731'. [ 572.122888][ T5260] usb 1-1: USB disconnect, device number 31 [ 572.221994][T11501] chnl_net:caif_netlink_parms(): no params data found [ 572.245508][ T5213] Bluetooth: hci2: command tx timeout [ 572.316739][ T4607] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 572.331818][ T4607] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 572.341877][ T4607] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 572.349779][ T966] hsr_slave_0: left promiscuous mode [ 572.357298][ T4607] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 572.365160][ T4607] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 572.372659][ T4607] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 572.380995][ T966] hsr_slave_1: left promiscuous mode [ 572.422706][ T966] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 572.443804][ T966] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 572.462352][ T966] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 572.475042][ T966] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 572.525111][ T966] veth1_macvtap: left promiscuous mode [ 572.530689][ T966] veth0_macvtap: left promiscuous mode [ 572.555227][ T966] veth1_vlan: left promiscuous mode [ 572.565196][ T966] veth0_vlan: left promiscuous mode [ 572.758238][ T29] audit: type=1326 audit(1722187070.708:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11525 comm="syz.2.1736" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5d26377299 code=0x0 [ 573.917411][ T966] team0 (unregistering): Port device team_slave_1 removed [ 574.027469][ T966] team0 (unregistering): Port device team_slave_0 removed [ 574.325058][ T4607] Bluetooth: hci2: command tx timeout [ 574.485063][ T4607] Bluetooth: hci4: command tx timeout [ 574.918315][T11540] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1739'. [ 574.959705][T11543] netlink: 'syz.3.1738': attribute type 4 has an invalid length. [ 576.216953][T11501] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.258549][T11501] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.298675][T11501] bridge_slave_0: entered allmulticast mode [ 576.350386][T11501] bridge_slave_0: entered promiscuous mode [ 576.410227][ T4607] Bluetooth: hci2: command tx timeout [ 576.435246][T11501] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.443245][T11501] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.514530][T11501] bridge_slave_1: entered allmulticast mode [ 576.522180][T11501] bridge_slave_1: entered promiscuous mode [ 576.567571][ T4607] Bluetooth: hci4: command tx timeout [ 576.860454][T11501] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 576.962251][T11563] xt_CONNSECMARK: invalid mode: 0 [ 577.388919][T11501] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 577.584668][ T966] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.705769][T11501] team0: Port device team_slave_0 added [ 577.740282][T11574] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1742'. [ 577.892156][ T966] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.941890][T11501] team0: Port device team_slave_1 added [ 578.097405][ T966] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.149694][T11519] chnl_net:caif_netlink_parms(): no params data found [ 578.271724][ T966] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.310138][T11501] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 578.321359][T11501] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 578.434943][T11501] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 578.485179][ T4607] Bluetooth: hci2: command tx timeout [ 578.561537][T11501] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 578.568967][T11501] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 578.598982][T11501] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 578.652078][ T4607] Bluetooth: hci4: command tx timeout [ 579.818812][T11501] hsr_slave_0: entered promiscuous mode [ 579.849495][T11501] hsr_slave_1: entered promiscuous mode [ 579.871432][T11501] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 579.885001][T11501] Cannot create hsr debugfs directory [ 579.895215][T11596] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1752'. [ 579.991557][T11596] team0: No ports can be present during mode change [ 580.288614][T11519] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.322914][T11519] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.357899][T11519] bridge_slave_0: entered allmulticast mode [ 580.393377][T11519] bridge_slave_0: entered promiscuous mode [ 580.502579][T11519] bridge0: port 2(bridge_slave_1) entered blocking state [ 580.530487][T11519] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.550915][T11519] bridge_slave_1: entered allmulticast mode [ 580.603785][T11519] bridge_slave_1: entered promiscuous mode [ 580.726070][ T4607] Bluetooth: hci4: command tx timeout [ 580.961428][ T966] bridge_slave_1: left allmulticast mode [ 580.980545][ T966] bridge_slave_1: left promiscuous mode [ 581.044615][ T966] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.097350][ T966] bridge_slave_0: left allmulticast mode [ 581.120432][ T966] bridge_slave_0: left promiscuous mode [ 581.145122][ T966] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.354359][T11608] netlink: 'syz.3.1754': attribute type 3 has an invalid length. [ 581.375229][T11608] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1754'. [ 581.982556][T11602] syz.0.1750 (11602): drop_caches: 2 [ 582.290705][T11613] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 582.410033][T11594] syz.0.1750 (11594): drop_caches: 2 [ 582.509588][T11600] syz.0.1750 (11600): drop_caches: 2 [ 582.941960][ T966] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 583.006140][ T966] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 583.070500][ T966] bond0 (unregistering): Released all slaves [ 583.101094][T11519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 584.067511][T11519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 584.265935][T11643] netlink: 'syz.3.1765': attribute type 3 has an invalid length. [ 584.289393][T11643] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1765'. [ 584.473026][T11519] team0: Port device team_slave_0 added [ 584.501260][T11519] team0: Port device team_slave_1 added [ 584.562101][T11650] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 584.760840][T11519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 584.778411][T11519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 584.902720][T11519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 585.224463][T11519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 585.436437][T11519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 585.463503][T11519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 585.564958][ T940] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 585.582273][ T966] hsr_slave_0: left promiscuous mode [ 585.620411][ T966] hsr_slave_1: left promiscuous mode [ 585.652400][ T966] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 585.670859][ T966] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 585.693979][ T966] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 585.719746][ T966] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 585.795166][ T940] usb 4-1: Using ep0 maxpacket: 32 [ 585.813227][ T966] veth1_macvtap: left promiscuous mode [ 585.827808][ T966] veth0_macvtap: left promiscuous mode [ 585.844742][ T940] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=3a.75 [ 585.858274][ T966] veth1_vlan: left promiscuous mode [ 585.866476][ T940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 585.891888][ T966] veth0_vlan: left promiscuous mode [ 585.895675][ T940] usb 4-1: Product: syz [ 585.926051][ T940] usb 4-1: Manufacturer: syz [ 585.930679][ T940] usb 4-1: SerialNumber: syz [ 585.969978][ T940] usb 4-1: config 0 descriptor?? [ 586.296588][ T940] usb_ehset_test 4-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 586.315183][ T940] usb 4-1: USB disconnect, device number 37 [ 587.882878][T11690] [U] [ 587.885938][T11690] [U] \fN#kv42yl% [ 587.890693][T11690] [U]  [ 587.893619][T11690] [U] [ 587.896297][T11690] [U] [ 587.899500][T11690] [U] [ 587.902193][T11690] [U] [ 587.904881][T11690] [U] [ 587.907574][T11690] [U] [ 587.944759][T11690] [U] [ 587.947510][T11690] [U] [ 587.950212][T11690] [U] [ 588.059277][ T966] team0 (unregistering): Port device team_slave_1 removed [ 588.131986][ T966] team0 (unregistering): Port device team_slave_0 removed [ 588.254995][ T940] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 588.374010][T11683] [U] [ 588.468106][ T940] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 588.482029][ T940] usb 4-1: config 0 has no interface number 0 [ 588.496268][ T940] usb 4-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 588.505735][ T940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.513752][ T940] usb 4-1: Product: syz [ 588.526737][ T940] usb 4-1: Manufacturer: syz [ 588.531380][ T940] usb 4-1: SerialNumber: syz [ 588.539501][ T940] usb 4-1: config 0 descriptor?? [ 588.777501][ T940] usb 4-1: USB disconnect, device number 38 [ 588.976942][T11519] hsr_slave_0: entered promiscuous mode [ 588.983937][T11519] hsr_slave_1: entered promiscuous mode [ 588.994212][T11519] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 589.006578][T11519] Cannot create hsr debugfs directory [ 589.390887][T11501] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 589.436380][T11501] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 589.493009][T11501] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 589.568585][T11501] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 589.944727][T11714] 9pnet_fd: Insufficient options for proto=fd [ 589.993514][ T966] bridge_slave_1: left allmulticast mode [ 590.024241][ T966] bridge_slave_1: left promiscuous mode [ 590.036388][ T966] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.126764][ T966] bridge_slave_0: left allmulticast mode [ 590.132485][ T966] bridge_slave_0: left promiscuous mode [ 590.168691][ T966] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.207065][ T966] bridge_slave_1: left allmulticast mode [ 590.212839][ T966] bridge_slave_1: left promiscuous mode [ 590.248386][ T966] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.344058][ T966] bridge_slave_0: left allmulticast mode [ 590.350270][ T966] bridge_slave_0: left promiscuous mode [ 590.356152][ T966] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.836989][ T966] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 591.856197][ T966] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 591.869342][ T966] bond0 (unregistering): Released all slaves [ 592.105599][ T966] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 592.129112][ T966] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 592.161580][ T966] bond0 (unregistering): (slave team0): Releasing backup interface [ 592.175932][ T966] bond0 (unregistering): Released all slaves [ 592.230626][T11721] batadv0: mtu less than device minimum [ 592.247825][T11725] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1788'. [ 592.937276][T11729] net veth1_virt_wifi : renamed from virt_wifi0 [ 593.284623][T11747] ecryptfs_parse_options: eCryptfs: unrecognized option [&@] [ 593.305062][T11747] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 593.335377][T11747] Error parsing options; rc = [-22] [ 593.675325][T11501] 8021q: adding VLAN 0 to HW filter on device bond0 [ 594.292427][T11501] 8021q: adding VLAN 0 to HW filter on device team0 [ 594.589828][ T5262] bridge0: port 1(bridge_slave_0) entered blocking state [ 594.597168][ T5262] bridge0: port 1(bridge_slave_0) entered forwarding state [ 594.821120][ T940] bridge0: port 2(bridge_slave_1) entered blocking state [ 594.828354][ T940] bridge0: port 2(bridge_slave_1) entered forwarding state [ 594.975052][ T5293] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 595.034627][T11519] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 595.133159][T11519] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 595.165515][ T5293] usb 1-1: Using ep0 maxpacket: 8 [ 595.178653][T11519] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 595.199358][ T5293] usb 1-1: config 0 has no interfaces? [ 595.200237][T11519] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 595.213176][ T5293] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 595.223817][ T5293] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.241165][ T5293] usb 1-1: Product: syz [ 595.252170][ T5293] usb 1-1: Manufacturer: syz [ 595.263680][ T5293] usb 1-1: SerialNumber: syz [ 595.280058][ T5293] usb 1-1: config 0 descriptor?? [ 595.305248][ T966] hsr_slave_0: left promiscuous mode [ 595.314482][ T966] hsr_slave_1: left promiscuous mode [ 595.335038][ T966] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 595.351844][ T966] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 595.361237][ T966] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 595.383959][ T966] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 595.405473][ T966] hsr_slave_0: left promiscuous mode [ 595.424696][ T966] hsr_slave_1: left promiscuous mode [ 595.444416][ T966] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 595.456323][ T966] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 595.475440][ T966] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 595.483201][ T966] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 595.611043][ T966] veth1_macvtap: left promiscuous mode [ 595.619232][ T966] veth0_macvtap: left promiscuous mode [ 595.625047][ T966] veth1_vlan: left promiscuous mode [ 595.630426][ T966] veth0_vlan: left promiscuous mode [ 595.647086][ T966] veth1_macvtap: left promiscuous mode [ 595.662964][ T966] veth0_macvtap: left promiscuous mode [ 595.671882][ T966] veth1_vlan: left promiscuous mode [ 595.678303][ T966] veth0_vlan: left promiscuous mode [ 595.716855][ T5293] usb 1-1: USB disconnect, device number 32 [ 596.089006][ T5213] Bluetooth: hci3: command 0x0406 tx timeout [ 597.359421][ T966] team0 (unregistering): Port device team_slave_1 removed [ 597.414151][ T966] team0 (unregistering): Port device team_slave_0 removed [ 597.637781][ T5293] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 597.852187][ T5293] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 597.860714][ T5293] usb 1-1: config 0 has no interface number 0 [ 597.872846][ T5293] usb 1-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 597.882115][ T5293] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.890282][ T5293] usb 1-1: Product: syz [ 597.894523][ T5293] usb 1-1: Manufacturer: syz [ 597.899267][ T5293] usb 1-1: SerialNumber: syz [ 597.907066][ T5293] usb 1-1: config 0 descriptor?? [ 598.152385][ T5293] usb 1-1: USB disconnect, device number 33 [ 598.503807][ T966] team0 (unregistering): Port device team_slave_1 removed [ 598.560845][ T966] team0 (unregistering): Port device team_slave_0 removed [ 599.100928][ T5262] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 599.257799][T11501] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 599.314903][ T5262] usb 1-1: Using ep0 maxpacket: 8 [ 599.364410][ T5262] usb 1-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 599.375091][ T5262] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.389648][ T5262] usb 1-1: config 0 descriptor?? [ 599.411395][ T5262] usb 1-1: bad CDC descriptors [ 599.438568][ T5262] cdc_acm 1-1:0.0: Zero length descriptor references [ 599.472416][ T5262] cdc_acm 1-1:0.0: probe with driver cdc_acm failed with error -22 [ 599.664880][T11519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 599.709448][ T5244] usb 1-1: USB disconnect, device number 34 [ 599.789868][T11519] 8021q: adding VLAN 0 to HW filter on device team0 [ 599.813663][ T2636] bridge0: port 1(bridge_slave_0) entered blocking state [ 599.820893][ T2636] bridge0: port 1(bridge_slave_0) entered forwarding state [ 599.851465][ T2636] bridge0: port 2(bridge_slave_1) entered blocking state [ 599.858706][ T2636] bridge0: port 2(bridge_slave_1) entered forwarding state [ 600.073635][T11501] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 600.282848][T11501] veth0_vlan: entered promiscuous mode [ 600.303807][T11501] veth1_vlan: entered promiscuous mode [ 600.409406][T11501] veth0_macvtap: entered promiscuous mode [ 600.458339][T11501] veth1_macvtap: entered promiscuous mode [ 600.518368][T11501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 600.691563][T11501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 601.093356][T11501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 601.137488][T11501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 601.149474][T11501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 601.162786][T11501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 601.173347][T11501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 601.197306][T11501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 601.230189][T11501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 601.256976][T11501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 601.287864][T11501] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 601.309181][T11501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 601.320127][T11501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 601.330277][T11501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 601.363543][T11501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 601.395815][T11501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 601.440990][T11501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 601.471058][T11501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 601.507814][T11501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 601.542523][T11501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 601.584996][T11501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 601.621612][T11501] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 601.659874][T11501] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.674953][T11501] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.714955][T11501] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.754409][T11501] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.942302][T11519] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 602.190957][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 602.220794][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 602.280071][T11828] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1814'. [ 602.368760][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 602.404781][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 602.959227][T11519] veth0_vlan: entered promiscuous mode [ 603.274790][T11848] xt_CONNSECMARK: invalid mode: 0 [ 604.536014][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.601016][T11519] veth1_vlan: entered promiscuous mode [ 604.666519][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.809506][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.872165][T11519] veth0_macvtap: entered promiscuous mode [ 604.897479][T11519] veth1_macvtap: entered promiscuous mode [ 604.929479][T11519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 604.943008][T11519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.955075][T11519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 604.985509][T11519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 604.995456][T11519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 605.007097][T11519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.017112][T11519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 605.027767][T11519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.042805][T11519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 605.057194][T11519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.068263][T11519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 605.079444][T11519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.091234][T11519] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 605.105714][T11519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 605.117771][T11519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.128366][T11519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 605.140143][T11519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.150090][T11519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 605.160709][T11519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.170640][T11519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 605.182062][T11519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.192203][T11519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 605.205448][T11519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.215481][T11519] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 605.226036][T11519] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.237556][T11519] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 605.250456][T11519] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.259280][T11519] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.268384][T11519] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.277857][T11519] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.341067][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.398034][ T3004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 605.407122][ T3004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 605.441757][T11881] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 605.453609][T11881] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 605.494206][ T35] bridge_slave_1: left allmulticast mode [ 605.500247][ T35] bridge_slave_1: left promiscuous mode [ 605.506038][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.522927][ T35] bridge_slave_0: left allmulticast mode [ 605.532270][ T35] bridge_slave_0: left promiscuous mode [ 605.541120][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.049306][ T4607] Bluetooth: hci3: unexpected event 0x09 length: 17 > 3 [ 606.149371][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 606.275507][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 606.320405][ T35] bond0 (unregistering): Released all slaves [ 606.506930][T11899] netdevsim netdevsim2: Direct firmware load for ng failed with error -2 [ 606.539112][T11899] netdevsim netdevsim2: Falling back to sysfs fallback for: ng [ 606.564451][ T5213] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 606.584197][ T5213] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 606.597559][ T5213] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 606.607009][ T5213] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 606.617627][ T5213] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 606.626637][ T5213] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 607.013821][ T35] hsr_slave_0: left promiscuous mode [ 607.020836][ T35] hsr_slave_1: left promiscuous mode [ 607.027584][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 607.035438][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 607.043348][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 607.056821][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 607.123218][ T35] veth1_macvtap: left promiscuous mode [ 607.130778][ T35] veth0_macvtap: left promiscuous mode [ 607.136582][ T35] veth1_vlan: left promiscuous mode [ 607.142289][ T35] veth0_vlan: left promiscuous mode [ 607.938221][ T35] team0 (unregistering): Port device team_slave_1 removed [ 607.988333][ T35] team0 (unregistering): Port device team_slave_0 removed [ 608.085294][ T4607] Bluetooth: hci3: command 0x0406 tx timeout [ 608.725221][ T4607] Bluetooth: hci2: command tx timeout [ 609.515876][ T5222] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 609.548960][ T5222] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 609.564948][ T5222] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 609.577715][ T5222] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 609.578426][T11931] ======================================================= [ 609.578426][T11931] WARNING: The mand mount option has been deprecated and [ 609.578426][T11931] and is ignored by this kernel. Remove the mand [ 609.578426][T11931] option from the mount to silence this warning. [ 609.578426][T11931] ======================================================= [ 609.622787][ T5222] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 609.632284][ T5222] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 610.009001][ T30] INFO: task syz.2.1439:10398 blocked for more than 144 seconds. [ 610.016963][ T30] Not tainted 6.10.0-syzkaller-12888-g5437f30d3458 #0 [ 610.049936][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 610.093673][ T30] task:syz.2.1439 state:D stack:24672 pid:10398 tgid:10398 ppid:5218 flags:0x00004004 [ 610.186644][ T30] Call Trace: [ 610.217768][ T30] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 610.250472][ T30] __schedule+0x17ae/0x4a10 [ 610.374752][ T30] ? __pfx___schedule+0x10/0x10 [ 610.419538][ T30] ? __pfx_lock_release+0x10/0x10 [ 610.424631][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 610.522761][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 610.582587][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 610.588034][ T30] ? schedule+0x90/0x320 [ 610.592309][ T30] schedule+0x14b/0x320 [ 610.596552][ T30] ? do_exit+0x4ff/0x27f0 [ 610.600913][ T30] do_exit+0x57c/0x27f0 [ 610.606292][ T30] ? __pfx_do_exit+0x10/0x10 [ 610.610934][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 610.616395][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 610.622399][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 610.628803][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 610.633943][ T30] do_group_exit+0x207/0x2c0 [ 610.638924][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 610.644600][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 610.659497][ T30] get_signal+0x1695/0x1730 [ 610.664095][ T30] ? __pfx_get_signal+0x10/0x10 [ 610.669470][ T30] arch_do_signal_or_restart+0x96/0x860 [ 610.677921][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 610.684108][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 610.690176][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 610.696032][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 610.701601][ T30] do_syscall_64+0x100/0x230 [ 610.707569][ T30] ? clear_bhb_loop+0x35/0x90 [ 610.712346][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.718518][ T30] RIP: 0033:0x7fc1d0377299 [ 610.722961][ T30] RSP: 002b:00007fffba8234a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 610.733170][ T30] RAX: fffffffffffffdfc RBX: 0000000000070efc RCX: 00007fc1d0377299 [ 610.741399][ T30] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc1d050613c [ 610.750722][ T30] RBP: 00007fc1d050613c R08: 00007fc1d0505f80 R09: 00007fffba82378f [ 610.758942][ T30] R10: 00007fffba8235a0 R11: 0000000000000246 R12: 0000000000000032 [ 610.767060][ T30] R13: 00007fffba8235a0 R14: 00007fffba8235c0 R15: 0000000000070eca [ 610.775207][ T30] [ 610.778240][ T30] INFO: task syz.2.1439:10399 blocked for more than 144 seconds. [ 610.788205][ T30] Not tainted 6.10.0-syzkaller-12888-g5437f30d3458 #0 [ 610.796188][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 610.805550][ T5222] Bluetooth: hci2: command tx timeout [ 610.807290][ T30] task:syz.2.1439 state:D stack:24416 pid:10399 tgid:10398 ppid:5218 flags:0x00004004 [ 610.822185][ T30] Call Trace: [ 610.825658][ T30] [ 610.828592][ T30] __schedule+0x17ae/0x4a10 [ 610.833098][ T30] ? __pfx___schedule+0x10/0x10 [ 610.838037][ T30] ? __pfx_lock_release+0x10/0x10 [ 610.843210][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 610.849277][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 610.855697][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 610.860942][ T30] ? schedule+0x90/0x320 [ 610.865302][ T30] schedule+0x14b/0x320 [ 610.869475][ T30] ? do_exit+0x4ff/0x27f0 [ 610.873816][ T30] do_exit+0x57c/0x27f0 [ 610.878033][ T30] ? __pfx_do_exit+0x10/0x10 [ 610.882625][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 610.888305][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 610.894304][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 610.901002][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 610.906221][ T30] do_group_exit+0x207/0x2c0 [ 610.911249][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 610.916582][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 610.921793][ T30] get_signal+0x1695/0x1730 [ 610.926343][ T30] ? __pfx_vfs_write+0x10/0x10 [ 610.931121][ T30] ? __pfx_get_signal+0x10/0x10 [ 610.936116][ T30] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 610.943419][ T30] arch_do_signal_or_restart+0x96/0x860 [ 610.949422][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 610.955747][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 610.962304][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 610.968278][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 610.973843][ T30] do_syscall_64+0x100/0x230 [ 610.979907][ T30] ? clear_bhb_loop+0x35/0x90 [ 610.984613][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.990565][ T30] RIP: 0033:0x7fc1d0377299 [ 610.995199][ T30] RSP: 002b:00007fc1d10f1048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 611.003623][ T30] RAX: 000000000015b000 RBX: 00007fc1d0505f80 RCX: 00007fc1d0377299 [ 611.011695][ T30] RDX: 000000000208e24b RSI: 0000000020000100 RDI: 000000000000000b [ 611.020126][ T30] RBP: 00007fc1d03e48e6 R08: 0000000000000000 R09: 0000000000000000 [ 611.028193][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 611.036234][ T30] R13: 000000000000004d R14: 00007fc1d0505f80 R15: 00007fffba823348 [ 611.044221][ T30] [ 611.050930][ T30] INFO: task syz.2.1439:10403 blocked for more than 145 seconds. [ 611.063306][ T30] Not tainted 6.10.0-syzkaller-12888-g5437f30d3458 #0 [ 611.072300][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 611.091470][ T30] task:syz.2.1439 state:D stack:22160 pid:10403 tgid:10398 ppid:5218 flags:0x00000004 [ 611.101943][ T30] Call Trace: [ 611.105515][ T30] [ 611.108470][ T30] __schedule+0x17ae/0x4a10 [ 611.113108][ T30] ? __pfx___schedule+0x10/0x10 [ 611.132666][ T30] ? __pfx_lock_release+0x10/0x10 [ 611.142405][ T30] ? schedule+0x90/0x320 [ 611.146981][ T30] schedule+0x14b/0x320 [ 611.151353][ T30] schedule_timeout+0xb0/0x310 [ 611.164957][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 611.170384][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 611.185918][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 611.191176][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 611.204948][ T30] __wait_for_common+0x3ea/0x6d0 [ 611.209956][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 611.224952][ T30] ? __pfx___wait_for_common+0x10/0x10 [ 611.230475][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 611.244876][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 611.250131][ T30] wait_for_completion_state+0x1c/0x40 [ 611.284453][ T30] do_coredump+0x984/0x2a30 [ 611.289375][ T30] ? __pfx_lock_release+0x10/0x10 [ 611.294433][ T30] ? __kasan_slab_free+0x37/0x60 [ 611.314921][ T30] ? arch_do_signal_or_restart+0x96/0x860 [ 611.343951][ T30] ? __pfx_do_coredump+0x10/0x10 [ 611.351834][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 611.362034][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 611.367356][ T30] get_signal+0x13ee/0x1730 [ 611.371873][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 611.377892][ T30] ? __pfx_get_signal+0x10/0x10 [ 611.382768][ T30] arch_do_signal_or_restart+0x96/0x860 [ 611.388408][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 611.394577][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 611.401352][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 611.407357][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 611.412949][ T30] do_syscall_64+0x100/0x230 [ 611.417715][ T30] ? clear_bhb_loop+0x35/0x90 [ 611.422427][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.429145][ T30] RIP: 0033:0x7fc1d0377299 [ 611.433574][ T30] RSP: 002b:00007fc1d10af048 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 611.442076][ T30] RAX: ffffffffffffffda RBX: 00007fc1d0506130 RCX: 00007fc1d0377299 [ 611.451891][ T30] RDX: 0000000000000002 RSI: 0000000000b36000 RDI: 0000000020000000 [ 611.463122][ T30] RBP: 00007fc1d03e48e6 R08: 000000000000000b R09: 0000000000000000 [ 611.465033][ T5222] Bluetooth: hci0: command 0x0406 tx timeout [ 611.471189][ T30] R10: 0000000000028011 R11: 0000000000000246 R12: 0000000000000000 [ 611.485719][ T30] R13: 000000000000006e R14: 00007fc1d0506130 R15: 00007fffba823348 [ 611.493714][ T30] [ 611.496836][ T30] [ 611.496836][ T30] Showing all locks held in the system: [ 611.505045][ T30] 1 lock held by khungtaskd/30: [ 611.509917][ T30] #0: ffffffff8e737660 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 611.519901][ T30] 5 locks held by kworker/u8:2/35: [ 611.526236][ T30] #0: ffff8880162e3148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 611.537385][ T30] #1: ffffc90000ab7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 611.548001][ T30] #2: ffffffff8fa60d90 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 611.557474][ T30] #3: ffffffff8fa6d908 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe9/0xa90 [ 611.570606][ T30] #4: ffffffff8e73ca38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 611.581585][ T30] 3 locks held by kworker/1:2/2636: [ 611.586793][ T30] #0: ffff888015480948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 611.598079][ T30] #1: ffffc900096a7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 611.609294][ T30] #2: ffffffff8fa6d908 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 611.619777][ T30] 2 locks held by kworker/u8:10/3004: [ 611.625230][ T30] 5 locks held by kworker/u9:1/4607: [ 611.631569][ T30] #0: ffff88801d33f148 ((wq_completion)hci0#2){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 611.642633][ T30] #1: ffffc9000cc67d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 611.655761][ T30] #2: ffff88802469cd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 611.665972][ T30] #3: ffff88802469c078 (&hdev->lock){+.+.}-{3:3}, at: hci_abort_conn_sync+0x1ea/0xde0 [ 611.675958][ T30] #4: ffffffff8fbd90e8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_failed+0x185/0x340 [ 611.686092][ T30] 2 locks held by getty/4965: [ 611.690786][ T30] #0: ffff88802b4560a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 611.700614][ T30] #1: ffffc900031232f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 611.710783][ T30] 2 locks held by kworker/1:3/5244: [ 611.716024][ T30] #0: ffff888015480948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 611.727056][ T30] #1: ffffc90003d67d00 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 611.737940][ T30] 2 locks held by syz.2.1439/10401: [ 611.743147][ T30] #0: ffffffff8fad3010 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 611.751461][ T30] #1: ffffffff8ea04c68 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_nl_listener_set_doit+0x12d/0x1a90 [ 611.761823][ T30] 4 locks held by syz-executor/10520: [ 611.767569][ T30] #0: ffff8880632a4d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 611.777570][ T30] #1: ffff8880632a4078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 611.788388][ T30] #2: ffffffff8fbd90e8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 611.798510][ T30] #3: ffffffff8e73ca38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 611.809463][ T30] 2 locks held by syz.0.1473/10552: [ 611.815510][ T30] #0: ffffffff8fad3010 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 611.823732][ T30] #1: ffffffff8ea04c68 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_nl_listener_set_doit+0x12d/0x1a90 [ 611.834200][ T30] 3 locks held by kworker/u8:15/11874: [ 611.839710][ T30] #0: ffff88802a98d148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 611.852906][ T5222] Bluetooth: hci4: command tx timeout [ 611.860847][ T30] #1: ffffc90004e1fd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 611.874294][ T30] #2: ffffffff8fa6d908 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 611.883837][ T30] 2 locks held by syz-executor/11904: [ 611.889419][ T30] #0: ffffffff8fa60d90 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x4c6/0x7b0 [ 611.899890][ T30] #1: ffffffff8fa6d908 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1f/0x1e0 [ 611.909304][ T30] 1 lock held by syz.0.1820/11916: [ 611.914394][ T30] #0: ffffffff8fa6d908 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x86e/0x1340 [ 611.923205][ T30] 1 lock held by syz-executor/11928: [ 611.928935][ T30] #0: ffffffff8fa6d908 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 611.941734][ T30] 1 lock held by syz.3.1828/11933: [ 611.946999][ T30] #0: ffffffff8fa6d908 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 611.956434][ T30] 1 lock held by dhcpcd/11936: [ 611.961394][ T30] #0: ffff88805e98c408 (&sb->s_type->i_mutex_key#9){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 611.972832][ T30] [ 611.975422][ T30] ============================================= [ 611.975422][ T30] [ 612.004490][ T30] NMI backtrace for cpu 1 [ 612.008878][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-syzkaller-12888-g5437f30d3458 #0 [ 612.019060][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 612.029110][ T30] Call Trace: [ 612.032381][ T30] [ 612.035304][ T30] dump_stack_lvl+0x241/0x360 [ 612.040075][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 612.045453][ T30] ? __pfx__printk+0x10/0x10 [ 612.050470][ T30] ? vprintk_emit+0x631/0x770 [ 612.055150][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 612.060169][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 612.065188][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 612.070641][ T30] ? _printk+0xd5/0x120 [ 612.074800][ T30] ? __pfx__printk+0x10/0x10 [ 612.079398][ T30] ? __wake_up_klogd+0xcc/0x110 [ 612.084327][ T30] ? __pfx__printk+0x10/0x10 [ 612.088916][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 612.093935][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 612.100169][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 612.106230][ T30] watchdog+0xfee/0x1030 [ 612.110469][ T30] ? watchdog+0x1ea/0x1030 [ 612.114888][ T30] ? __pfx_watchdog+0x10/0x10 [ 612.119568][ T30] kthread+0x2f0/0x390 [ 612.123626][ T30] ? __pfx_watchdog+0x10/0x10 [ 612.128303][ T30] ? __pfx_kthread+0x10/0x10 [ 612.132895][ T30] ret_from_fork+0x4b/0x80 [ 612.137313][ T30] ? __pfx_kthread+0x10/0x10 [ 612.141902][ T30] ret_from_fork_asm+0x1a/0x30 [ 612.146696][ T30] [ 612.151023][ T30] Sending NMI from CPU 1 to CPUs 0: [ 612.156869][ C0] NMI backtrace for cpu 0 [ 612.156881][ C0] CPU: 0 UID: 0 PID: 9848 Comm: kworker/u8:0 Not tainted 6.10.0-syzkaller-12888-g5437f30d3458 #0 [ 612.156901][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 612.156912][ C0] Workqueue: bat_events batadv_nc_worker [ 612.156934][ C0] RIP: 0010:__lock_acquire+0x86d/0x2040 [ 612.156964][ C0] Code: 8f 48 c1 e8 03 48 89 44 24 70 4d 89 ef 41 83 fc 31 0f 83 1e 02 00 00 4c 89 f8 48 c1 e8 03 0f b6 04 10 84 c0 0f 85 4d 01 00 00 <41> 8b 5d 00 81 e3 ff 1f 00 00 48 89 d8 48 c1 e8 06 48 8d 3c c5 00 [ 612.156984][ C0] RSP: 0018:ffffc90002ebf8f0 EFLAGS: 00000046 [ 612.156996][ C0] RAX: 0000000000000000 RBX: 0000000000060604 RCX: ffff888021e61e00 [ 612.157008][ C0] RDX: dffffc0000000000 RSI: ffff888021e628e0 RDI: 000000000000000a [ 612.157019][ C0] RBP: 00000000ffffffff R08: ffffffff934eb807 R09: 1ffffffff269d700 [ 612.157031][ C0] R10: dffffc0000000000 R11: fffffbfff269d701 R12: 0000000000000000 [ 612.157042][ C0] R13: ffff888021e62900 R14: 0000000000000000 R15: ffff888021e62900 [ 612.157053][ C0] FS: 0000000000000000(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 612.157067][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 612.157078][ C0] CR2: 00007f3e7aa49bd0 CR3: 000000000e534000 CR4: 00000000003526f0 [ 612.157091][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 612.157101][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 612.157111][ C0] Call Trace: [ 612.157117][ C0] [ 612.157124][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 612.157141][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 612.157163][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 612.157186][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 612.157205][ C0] ? nmi_handle+0x14f/0x5a0 [ 612.157221][ C0] ? nmi_handle+0x2a/0x5a0 [ 612.157236][ C0] ? __lock_acquire+0x86d/0x2040 [ 612.157256][ C0] ? default_do_nmi+0x63/0x160 [ 612.157272][ C0] ? exc_nmi+0x123/0x1f0 [ 612.157287][ C0] ? end_repeat_nmi+0xf/0x53 [ 612.157315][ C0] ? __lock_acquire+0x86d/0x2040 [ 612.157336][ C0] ? __lock_acquire+0x86d/0x2040 [ 612.157357][ C0] ? __lock_acquire+0x86d/0x2040 [ 612.157378][ C0] [ 612.157383][ C0] [ 612.157396][ C0] lock_acquire+0x1ed/0x550 [ 612.157416][ C0] ? batadv_nc_worker+0xcb/0x610 [ 612.157437][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 612.157458][ C0] ? batadv_nc_worker+0xcb/0x610 [ 612.157475][ C0] ? __pfx_lock_release+0x10/0x10 [ 612.157497][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 612.157522][ C0] batadv_nc_worker+0xec/0x610 [ 612.157539][ C0] ? batadv_nc_worker+0xcb/0x610 [ 612.157555][ C0] ? batadv_nc_worker+0xcb/0x610 [ 612.157574][ C0] ? process_scheduled_works+0x945/0x1830 [ 612.157594][ C0] process_scheduled_works+0xa2c/0x1830 [ 612.157626][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 612.157650][ C0] ? assign_work+0x364/0x3d0 [ 612.157672][ C0] worker_thread+0x86d/0xd40 [ 612.157718][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 612.157738][ C0] ? __kthread_parkme+0x169/0x1d0 [ 612.157760][ C0] ? __pfx_worker_thread+0x10/0x10 [ 612.157780][ C0] kthread+0x2f0/0x390 [ 612.157794][ C0] ? __pfx_worker_thread+0x10/0x10 [ 612.157814][ C0] ? __pfx_kthread+0x10/0x10 [ 612.157827][ C0] ret_from_fork+0x4b/0x80 [ 612.157848][ C0] ? __pfx_kthread+0x10/0x10 [ 612.157862][ C0] ret_from_fork_asm+0x1a/0x30 [ 612.157890][ C0] [ 612.163935][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 612.506351][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-syzkaller-12888-g5437f30d3458 #0 [ 612.516497][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 612.526539][ T30] Call Trace: [ 612.529807][ T30] [ 612.532727][ T30] dump_stack_lvl+0x241/0x360 [ 612.537404][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 612.542592][ T30] ? __pfx__printk+0x10/0x10 [ 612.547171][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 612.553239][ T30] ? vscnprintf+0x5d/0x90 [ 612.557568][ T30] panic+0x349/0x860 [ 612.561479][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 612.567636][ T30] ? __pfx_panic+0x10/0x10 [ 612.572056][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 612.577428][ T30] ? __irq_work_queue_local+0x137/0x410 [ 612.582986][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 612.588361][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 612.594511][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 612.600663][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 612.606820][ T30] watchdog+0x102d/0x1030 [ 612.611150][ T30] ? watchdog+0x1ea/0x1030 [ 612.615575][ T30] ? __pfx_watchdog+0x10/0x10 [ 612.620244][ T30] kthread+0x2f0/0x390 [ 612.624308][ T30] ? __pfx_watchdog+0x10/0x10 [ 612.628998][ T30] ? __pfx_kthread+0x10/0x10 [ 612.633575][ T30] ret_from_fork+0x4b/0x80 [ 612.637984][ T30] ? __pfx_kthread+0x10/0x10 [ 612.642563][ T30] ret_from_fork_asm+0x1a/0x30 [ 612.647331][ T30] [ 612.650607][ T30] Kernel Offset: disabled [ 612.654922][ T30] Rebooting in 86400 seconds..