last executing test programs: 4m24.010288556s ago: executing program 2 (id=1595): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCFLSH(r0, 0x8924, 0x0) 4m20.973005097s ago: executing program 2 (id=1599): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) getsockname$packet(r0, 0x0, &(0x7f0000000000)) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r3}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0) r4 = socket(0x0, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x781}]}, 0x34}}, 0x0) 4m18.895471606s ago: executing program 2 (id=1604): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={0x0, {0x2, 0x0, @dev}, {}, {0x2, 0x0, @loopback}}) 4m12.924697299s ago: executing program 2 (id=1616): ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{}, {}, {0x0, 0xa}]}) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000240)={{{@in=@loopback, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x33}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x50}}, 0xe8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 4m11.806398546s ago: executing program 2 (id=1621): r0 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000340), 0xffffff46) dup3(r2, r1, 0x0) sendmsg$netlink(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=ANY=[], 0x10}], 0x1}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @local}, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffbb}, 0x0) rt_sigreturn() futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) r3 = signalfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) readv(r3, 0x0, 0x0) poll(0x0, 0x0, 0x64) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) rt_sigreturn() mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) capget(0x0, 0x0) 4m10.708604628s ago: executing program 2 (id=1624): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xfffffffffffffd04, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[], 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtfilter={0x60, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x5}}, [@filter_kind_options=@f_flow={{0x9}, {0x30, 0x2, [@TCA_FLOW_DIVISOR={0x8, 0x8, 0x5d1}, @TCA_FLOW_MODE={0x8}, @TCA_FLOW_BASECLASS={0x8}, @TCA_FLOW_POLICE={0xc, 0xa, 0x0, 0x1, [@TCA_POLICE_AVRATE={0x8}]}, @TCA_FLOW_PERTURB={0x8}]}}]}, 0x60}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m22.359432655s ago: executing program 3 (id=1814): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000000000f9000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[{0xa, 0x84, 0x40, 0x7c4}, {0xfffc, 0x40}, {0x0, 0x0, 0x0, 0x862}]}) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) r5 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r5, 0x0, 0x482, &(0x7f0000000000)={0x11, @multicast1, 0x0, 0x1000002, 'lblcr\x00'}, 0x2c) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) 1m20.85151822s ago: executing program 3 (id=1815): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) close(r0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) close(r0) socketpair(0x0, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000140), &(0x7f0000000280)=r0}, 0x20) 1m19.841264406s ago: executing program 3 (id=1816): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f00000000c0)=[{0x6}]}) 1m18.911520428s ago: executing program 3 (id=1817): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400000400ec00000000000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='freezer.self_freezing\x00', 0x0, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r2) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b4000000", @ANYRES16=r5, @ANYBLOB="000425bd7000ffdbdf250100000038000180060004004e2300000c0007000800000000000000060004004e23000008000b08006970000600020001000000080009002c000000080005006fbeff0f00001c000180090006006c626c6300000000090006006e6f6e65000000000c000280080007000700000028000180080009004c00000014000300ff020000010000000000000000000001070006007272000008000600060000000800060000006ffd6fbeb4b5cd0136c0de06c049e1f9bb5f91"], 0xb4}, 0x1, 0x0, 0x0, 0x4}, 0x20008000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x42, 0x40, 0xc2, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r6}, 0x38) 1m16.210518731s ago: executing program 3 (id=1819): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) r1 = syz_open_dev$dri(&(0x7f0000000540), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000580), 0x20, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000000)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r1, 0xc01064c7, &(0x7f0000000180)={0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) open(0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r4, &(0x7f0000000100)='./file1\x00') 1m14.632332555s ago: executing program 3 (id=1821): socketpair$tipc(0x1e, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000100)) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRESHEX=0x0]) chdir(&(0x7f0000000080)='./file1\x00') openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x149a82, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x407) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000080)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r2}, 0x10) time(0xffffffffffffffff) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x38, 0x1403, 0x6c08c44bda12f87d, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'team_slave_1\x00'}}]}, 0x38}}, 0x0) 24.069075433s ago: executing program 0 (id=1873): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000280)) 23.315299551s ago: executing program 0 (id=1875): bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0), 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000540)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x3fe, 0xb, 0xb2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xff, 0xfffffffffffffffc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f00000000c0)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r5}) close_range(r0, 0xffffffffffffffff, 0x0) 21.904316537s ago: executing program 0 (id=1876): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000ec0)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)="320791285d7da22ccbdeef0b34f0cf2ac6609946612de7fdd6d1c7c6aeb4f48773097ed088531f56d1297cef68b96420edf5e719466aa6c096b390ac9121138715fbafbf94755c28b5a51c11528953da130dc1e1121197dc202b1bdbc4c1d42ae6c27ca13140abf79f737d2fb11df18fc99bf5682f4e7f48682cc849d148", 0x7e}], 0x1}], 0x1, 0x0) recvmsg$can_bcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)=""/191, 0xbf}], 0x1}, 0x0) 21.102258092s ago: executing program 0 (id=1878): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0) io_setup(0x1, 0x0) io_submit(0x0, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0xf, 0x0, 0x0, r0, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) 20.547979533s ago: executing program 0 (id=1879): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xfffffffffffffd04, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[], 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xbc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtfilter={0x60, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x5}}, [@filter_kind_options=@f_flow={{0x9}, {0x30, 0x2, [@TCA_FLOW_DIVISOR={0x8, 0x8, 0x5d1}, @TCA_FLOW_MODE={0x8}, @TCA_FLOW_BASECLASS={0x8}, @TCA_FLOW_POLICE={0xc, 0xa, 0x0, 0x1, [@TCA_POLICE_AVRATE={0x8}]}, @TCA_FLOW_PERTURB={0x8}]}}]}, 0x60}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 19.825283509s ago: executing program 0 (id=1881): socketpair$tipc(0x1e, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000100)) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRESHEX=0x0]) chdir(&(0x7f0000000080)='./file1\x00') openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x149a82, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x407) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000080)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r2}, 0x10) time(0xffffffffffffffff) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x38, 0x1403, 0x6c08c44bda12f87d, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'team_slave_1\x00'}}]}, 0x38}}, 0x0) 12.475114949s ago: executing program 1 (id=1891): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) close(r0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) close(r0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, &(0x7f0000000140), &(0x7f0000000280)=r0}, 0x20) 12.091931478s ago: executing program 1 (id=1892): epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0xf01) io_setup(0x6, &(0x7f0000001380)=0x0) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) 11.607390836s ago: executing program 1 (id=1894): syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d20bddda7d1db9342de76eec7967fe97751f13a23aeaacb0565c1c2251560ed1"}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000000)=""/252) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000008c0)=[0x0, 0x0], &(0x7f0000000900), 0x0, 0x2, 0x0, 0x0, r7}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000240)={0x0, r8, r9}) close_range(r0, 0xffffffffffffffff, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000140)='B', 0x1}], 0x1, &(0x7f0000000000)=[@init={0x18, 0x84, 0x0, {0x3e8, 0x0, 0x0, 0x4}}], 0x18}, 0x0) memfd_create(&(0x7f0000000300)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYSp\xa5\xfd\ny\xdfS\xdbU\xf80\xa88\tl\xb5b\x83\x97+o:\xfc\x83\x18\xe46\x8a\x029\x19\x8fjC\xce\xa7S\x81\xd5\xda\x84\xdf\xe3A_\x05XCk\x1d\x1cC\x97r\x93\xd6t\x81b\xc7x\xab\xa2\xf0\av\x88\x01\x92\xeaF\xa9!\xfc\x1c\xbf7q\xcf\xed&\x96\xa6\x1c_\xff\xb4\x00X\x1b\xedw\xc1', 0x0) 6.063350961s ago: executing program 1 (id=1897): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0xfffffffb, @empty}, 0x1c) recvmmsg(r1, 0x0, 0x0, 0x40000003, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x4004012) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0xb, &(0x7f0000000000)=0x5, 0x4) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_AUTHENTICATE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000250000000c001701000000000a000000"], 0x20}}, 0x0) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000380)={0x7, 0x1b, 0x1}, 0x7) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f00000002c0)={0xa}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0xffffffaa, 0x3, 0x68, r5, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x4, 0x5}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000087b8af8ff00000000bfa200000000000007020000f8"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x28, r8, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x31}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) r9 = memfd_create(&(0x7f00000022c0)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\xec\xd4D\x8a\x1f\x1b\xf6\x18\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbeQ\xee\xf0\x99\x1e|9\xd8\x01\xd0\xf5\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajnW\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)2\x9c\x8c\xd6\x18~\tW\xaf:\xff\x84\xb7\x96|R\x19\xe9\x80\x89u\xb4\xa1\xe7:P\xcaE\x85\x98\x86\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xff\xf4\x9e5\xb2D\xadFi\xff\x81s\x88B\xd03\x9c\r\xb4tr\xd9E\x8d\x81\xf0\xb8\v\xbcC\xd2{\x12EH@\x95\xad\xc7L\x1c\xfdc\xbb@\x9a\x17\xd0[6\x17\xbfu\xae\xb4\xberf\x03\xb3\xa4\xf7x\xc4E+\xd2\b\x80w\xf1p\xbf\xf9b\x97\n\x18\rT\x9a\x133\xf8\xe2K\xef\xe6V&\x16\x8e\x83\x15L\xe8\\|_\xa6\xfb\xa7\xad\x14\xdew\a\xed\xd6\xec\xe5IV\x92\x03\x1f\x05\xe2\x81\x05&y\xfd\xab\xcd2\xb8(\xf9\xed\xd0j\xe2\xbdYh\xee\xd3\xcfU\xd8;v8\xbfs\x7f\x84\x03\xcc\xe3j(\xbbO\x82\x04\xc0t\xe4\x8ehtmC\r\xa6\b\"\x01\x1a\x03j\xa6\x80%\xcaO\xd7v\x95\xb9V\xe8%\x8e\xc0\xcfQ\xc3 iHw\x1f\xd3@tCn\x1e\xb6\xe4\xfb\xe97\x8b', 0x7) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r5, 0x28, 0x1, &(0x7f0000000440)=0x5, 0x8) write$binfmt_elf64(r9, &(0x7f0000000540)=ANY=[@ANYBLOB="7f454c46020000000d0200aa1e1c170003"], 0x3c) execveat(r9, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 5.931531062s ago: executing program 4 (id=1898): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) close(r0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x0, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000140), &(0x7f0000000280)=r0, 0x12}, 0x20) 4.983465192s ago: executing program 4 (id=1899): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ip_vti0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x33, 0x2, [@TCA_CAKE_RTT={0x8}]}}]}, 0x3c}}, 0x0) 4.430388748s ago: executing program 1 (id=1900): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) close(r0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) close(r0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, &(0x7f0000000140), &(0x7f0000000280)=r0}, 0x20) 3.962686896s ago: executing program 4 (id=1901): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0xfffffffffffffd04, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[], 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xbc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtfilter={0x60, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x5}}, [@filter_kind_options=@f_flow={{0x9}, {0x30, 0x2, [@TCA_FLOW_DIVISOR={0x8, 0x8, 0x5d1}, @TCA_FLOW_MODE={0x8}, @TCA_FLOW_BASECLASS={0x8}, @TCA_FLOW_POLICE={0xc, 0xa, 0x0, 0x1, [@TCA_POLICE_AVRATE={0x8}]}, @TCA_FLOW_PERTURB={0x8}]}}]}, 0x60}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.962111913s ago: executing program 1 (id=1902): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x80001, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x19, 0x4, 0x4, 0x3, 0x0, 0x1}, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r0, &(0x7f0000000100)='H', &(0x7f0000000000)=@tcp6=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 3.092454193s ago: executing program 4 (id=1903): bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000440)={0x0, 0x0, r3, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000540)={r4, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x3fe, 0xb, 0xb2}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000080)={r5, 0x0, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xff, 0xfffffffffffffffc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f00000000c0)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000500)={0x0, 0x0, r6}) close_range(r0, 0xffffffffffffffff, 0x0) 1.656635423s ago: executing program 4 (id=1904): syz_open_procfs(0x0, &(0x7f0000000080)='fd\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000000)=""/252) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r6, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000008c0)=[0x0, 0x0], &(0x7f0000000900), 0x0, 0x2, 0x0, 0x0, r7}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000240)={0x0, r8, r9}) close_range(r0, 0xffffffffffffffff, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000100)=@in={0x2, 0x0, @dev}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000140)='B', 0x1}], 0x1, &(0x7f0000000000)=[@init={0x18, 0x84, 0x0, {0x3e8, 0x0, 0x0, 0x4}}], 0x18}, 0x0) memfd_create(&(0x7f0000000300)='v\xa6\xf5lj6,r\xaf\xe8\x10/\xecg\xed\xe3h\x80\xb8!y6w\xda\xdd\xb9\nR\xe8@\x99\xb9\x8a\x0fZ\t\x90\x8bp\x10\x84\x86t\x8a\xba\xc6\xfb\xd2\f\xef&\xad\xa8M\xe8\b\xb0#\xac)\x81\x1e\x8a\f\x11D\x90\xf5\xbb\x1c\xac\xc7\xad\xdc\\\x11\x95\xf8\xe6\xa7\xc3\xbc\x18+\x92\x92N\a\xa7\x7fN\x9bL\xf8\xebQs\x02\xf9\xadi\x8f\x0f\xff\x02n\x9d\x85\xea\x1a*\x1bC\xd8\x1c\xe8\x9bYSp\xa5\xfd\ny\xdfS\xdbU\xf80\xa88\tl\xb5b\x83\x97+o:\xfc\x83\x18\xe46\x8a\x029\x19\x8fjC\xce\xa7S\x81\xd5\xda\x84\xdf\xe3A_\x05XCk\x1d\x1cC\x97r\x93\xd6t\x81b\xc7x\xab\xa2\xf0\av\x88\x01\x92\xeaF\xa9!\xfc\x1c\xbf7q\xcf\xed&\x96\xa6\x1c_\xff\xb4\x00X\x1b\xedw\xc1', 0x0) 0s ago: executing program 4 (id=1905): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220f00000007c9c0e2f50b71b9a7abb31000090e53f30418c169b20618889953856f789fbf91fd4167e1eab6bfa95ef58b"], 0x0}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @broadcast, @broadcast}, &(0x7f0000000200)=0xc) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000f40)='fdinfo\x00') r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup2(r2, r2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000001200)=@nat={'nat\x00', 0x62, 0x5, 0xcd0, 0xa48, 0x888, 0xffffffff, 0xa48, 0x0, 0xc38, 0xc38, 0xffffffff, 0xc38, 0xc38, 0x5, 0x0, {[{{@uncond, 0x0, 0x850, 0x888, 0x0, {0x22e}, [@common=@unspec=@u32={{0x7e0}}]}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @remote, @local, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x3dc, {0x0, @private, @remote, @icmp_id, @gre_key}}}}, {{@ip={@broadcast, @local, 0x0, 0x0, 'veth1_to_team\x00', 'ipvlan0\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key, @icmp_id}}}}, {{@ip={@remote, @dev, 0x0, 0x0, 'veth1_to_batadv\x00', 'netdevsim0\x00'}, 0x0, 0x1b8, 0x1f0, 0x0, {}, [@common=@unspec=@comment={{0x120}}, @common=@icmp={{0x28}, {0x0, "6e82"}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xd30) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c282, 0x0) ioctl$PTP_PEROUT_REQUEST2(r4, 0x40383d0c, &(0x7f0000000000)={{0x1}, {0x0, 0x100}, 0xfffffffd, 0x7}) ioctl$PTP_CLOCK_GETCAPS(r4, 0x80503d01, &(0x7f0000000040)) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_clone(0x30080580, &(0x7f0000000280)="d9e2aa49854d683712", 0x9, &(0x7f00000002c0), &(0x7f0000000300), &(0x7f0000000340)="c9619e0617650b6830f1760d64ac205d1537ff816a199669023af468f7ce9618a7e1b57e0514e61221b2ad8856b72dd3483f3e28d1ff579f1ffce52685f43e4dbe26100742bcc8be083cc8e3f65078ebcfbd89bd6e5c1a5b1440c95beaf8c7c6d572843ece3b1dd861d67509f8b94c7ede1e883d7311af7b2824953e3336ea935a80") syz_open_procfs$pagemap(r7, &(0x7f0000000400)) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r8, {}, {0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0xfffffffffffffe62}}]}, 0x38}}, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) kernel console output (not intermixed with test programs): er=2 [ 604.255428][ T1849] usb 1-1: Product: syz [ 604.302614][ T1849] usb 1-1: Manufacturer: syz [ 604.368274][ T1849] usb 1-1: SerialNumber: syz [ 604.426607][ T1849] usb 1-1: config 0 descriptor?? [ 604.539929][T10006] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 604.852198][ T5278] usb 1-1: USB disconnect, device number 32 [ 605.288434][T10021] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1499'. [ 605.753990][ T5279] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 605.980747][ T5279] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 606.058474][ T5279] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 606.120156][ T5279] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 606.202784][ T5279] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 606.331914][ T5279] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 606.440341][ T5279] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.479384][ T5278] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 606.516691][ T5279] usb 3-1: config 0 descriptor?? [ 606.548824][T10022] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 606.708860][ T5278] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 606.728445][ T5278] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 606.802898][ T5278] usb 2-1: config 1 has no interface number 1 [ 606.848399][ T5278] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 606.895621][ T5278] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 606.977360][ T5278] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 607.007299][ T5278] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.027518][ T5278] usb 2-1: Product: syz [ 607.048394][ T5278] usb 2-1: Manufacturer: syz [ 607.098787][ T5278] usb 2-1: SerialNumber: syz [ 607.318787][ T5279] plantronics 0003:047F:FFFF.0016: unknown main item tag 0xd [ 607.357239][ T5279] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving [ 607.392121][ T5278] usb 2-1: 2:1: All rates were zero [ 607.403099][ T5279] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 607.568842][ T5278] usb 2-1: USB disconnect, device number 36 [ 608.291520][T10051] input: syz0 as /devices/virtual/input/input26 [ 608.422252][T10053] input: syz0 as /devices/virtual/input/input27 [ 608.513491][T10051] @: renamed from vlan0 (while UP) [ 608.513496][ T29] audit: type=1400 audit(1722168993.942:589): avc: denied { ioctl } for pid=10048 comm="syz.4.1511" path="socket:[32423]" dev="sockfs" ino=32423 ioctlcmd=0x8923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 608.768666][ T8] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 608.968435][ T5278] usb 3-1: reset high-speed USB device number 22 using dummy_hcd [ 608.997952][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 609.045916][ T8] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 609.115787][ T8] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 609.178557][ T8] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 609.291617][ T8] usb 2-1: Product: syz [ 609.295804][ T8] usb 2-1: Manufacturer: syz [ 609.338514][ T8] usb 2-1: SerialNumber: syz [ 609.392901][ T8] usb 2-1: config 0 descriptor?? [ 609.448951][T10055] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 609.762503][ T9] usb 2-1: USB disconnect, device number 37 [ 609.949040][T10061] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10061 comm=syz.3.1515 [ 610.108740][T10064] serio: Serial port pts0 [ 610.179151][ T5279] usb 3-1: USB disconnect, device number 22 [ 612.441325][T10092] input: syz0 as /devices/virtual/input/input28 [ 612.653252][T10098] input: syz0 as /devices/virtual/input/input29 [ 612.668516][ T5307] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 612.899688][ T5307] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 612.960173][ T5307] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 613.019069][ T5307] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 613.110040][ T5307] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 613.180126][ T5307] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 613.228834][ T5307] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.302991][ T5307] usb 4-1: config 0 descriptor?? [ 613.315227][T10096] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 615.141117][ T5307] usbhid 4-1:0.0: can't add hid device: -71 [ 615.147114][ T5307] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 615.187491][ T5307] usb 4-1: USB disconnect, device number 38 [ 617.990295][T10151] input: syz0 as /devices/virtual/input/input30 [ 618.045938][T10151] input: syz0 as /devices/virtual/input/input31 [ 618.114642][T10153] @: renamed from vlan0 (while UP) [ 618.518406][ T5222] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 618.777815][ T5222] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 618.889077][ T5222] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 618.958467][ T5222] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 618.998791][ T5222] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 619.053343][ T5222] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 619.088666][ T5222] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.198756][ T5222] usb 4-1: config 0 descriptor?? [ 619.235332][T10157] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 620.359258][ T29] audit: type=1400 audit(1722169005.792:590): avc: denied { open } for pid=10173 comm="syz.4.1553" path="/dev/ttyqd" dev="devtmpfs" ino=390 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 620.711517][ T5222] usbhid 4-1:0.0: can't add hid device: -71 [ 620.760333][ T29] audit: type=1400 audit(1722169006.192:591): avc: denied { write } for pid=10177 comm="syz.2.1554" name="binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 620.798570][ T5222] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 620.872676][ T5222] usb 4-1: USB disconnect, device number 39 [ 621.284358][T10187] input: syz0 as /devices/virtual/input/input32 [ 621.365393][T10186] input: syz0 as /devices/virtual/input/input33 [ 621.430110][T10187] @: renamed from vlan0 (while UP) [ 622.272612][T10172] infiniband syz2: set active [ 622.279443][T10172] infiniband syz2: added team_slave_1 [ 622.325475][T10172] syz2: rxe_create_cq: returned err = -12 [ 622.430430][T10172] infiniband syz2: Couldn't create ib_mad CQ [ 622.437753][T10172] infiniband syz2: Couldn't open port 1 [ 622.603162][T10172] RDS/IB: syz2: added [ 622.630823][T10172] smc: adding ib device syz2 with port count 1 [ 622.718459][T10172] smc: ib device syz2 port 1 has pnetid [ 623.758415][ T5279] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 624.059892][ T5279] usb 4-1: device descriptor read/64, error -71 [ 624.350517][ T5279] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 624.626237][ T5279] usb 4-1: device descriptor read/64, error -71 [ 624.780214][ T5279] usb usb4-port1: attempt power cycle [ 624.923485][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.961192][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.418441][ T5279] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 625.490085][ T5279] usb 4-1: device descriptor read/8, error -71 [ 625.808447][ T5279] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 625.931599][ T5279] usb 4-1: device descriptor read/8, error -71 [ 626.098276][ T5279] usb usb4-port1: unable to enumerate USB device [ 626.681610][ T5352] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 626.930255][ T5352] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 627.004011][ T5352] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 627.074918][ T5352] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 627.171306][ T5352] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 627.238465][ T5352] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 627.247562][ T5352] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.349549][ T5352] usb 1-1: config 0 descriptor?? [ 627.399044][T10219] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 628.147622][T10233] input: syz0 as /devices/virtual/input/input34 [ 628.261127][T10234] input: syz0 as /devices/virtual/input/input35 [ 628.916723][ T5352] usbhid 1-1:0.0: can't add hid device: -71 [ 628.968494][ T5352] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 629.098856][ T5352] usb 1-1: USB disconnect, device number 33 [ 630.538797][ T5279] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 630.738426][ T9] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 630.800956][ T5279] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 630.917277][ T5279] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 631.026886][ T5279] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 631.048447][ T9] usb 3-1: device descriptor read/64, error -71 [ 631.137057][ T5279] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.248451][ T5279] usb 4-1: config 0 descriptor?? [ 631.378407][ T9] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 631.516071][ T5238] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 631.525548][ T5238] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 631.551546][ T5238] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 631.648455][ T9] usb 3-1: device descriptor read/64, error -71 [ 631.655315][ T5238] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 631.668957][ T5238] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 631.676643][ T5238] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 631.771891][ T9] usb usb3-port1: attempt power cycle [ 632.219304][ T9] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 632.438696][ T9] usb 3-1: device descriptor read/8, error -71 [ 632.748501][ T9] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 632.960407][ T9] usb 3-1: device descriptor read/8, error -71 [ 633.118813][ T9] usb usb3-port1: unable to enumerate USB device [ 633.757436][ T5238] Bluetooth: hci12: command tx timeout [ 634.168747][ T5352] usb 4-1: USB disconnect, device number 44 [ 634.239971][T10274] input: syz0 as /devices/virtual/input/input36 [ 634.471504][ T5278] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 634.682462][ T5278] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 634.711767][ T5278] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 634.761086][ T5278] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 634.796393][ T5278] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 634.842503][ T5278] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 634.903534][ T5278] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 634.954835][ T5278] usb 5-1: config 0 descriptor?? [ 634.974206][T10272] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 635.838804][ T5238] Bluetooth: hci12: command tx timeout [ 636.934904][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.928539][ T5238] Bluetooth: hci12: command tx timeout [ 637.934076][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.128278][ T5278] usbhid 5-1:0.0: can't add hid device: -71 [ 638.138695][ T5278] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 638.208730][ T5278] usb 5-1: USB disconnect, device number 18 [ 638.751128][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.932291][T10258] chnl_net:caif_netlink_parms(): no params data found [ 639.375989][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.558525][ T8] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 639.798613][ T8] usb 4-1: device descriptor read/64, error -71 [ 639.988609][ T5238] Bluetooth: hci12: command tx timeout [ 640.108721][ T8] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 640.458695][ T8] usb 4-1: device descriptor read/64, error -71 [ 640.640529][ T8] usb usb4-port1: attempt power cycle [ 640.719364][T10258] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.777570][T10258] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.792735][T10258] bridge_slave_0: entered allmulticast mode [ 640.810447][T10258] bridge_slave_0: entered promiscuous mode [ 641.024287][T10258] bridge0: port 2(bridge_slave_1) entered blocking state [ 641.068543][T10258] bridge0: port 2(bridge_slave_1) entered disabled state [ 641.118907][ T8] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 641.138716][T10258] bridge_slave_1: entered allmulticast mode [ 641.168712][T10258] bridge_slave_1: entered promiscuous mode [ 641.235072][ T8] usb 4-1: device descriptor read/8, error -71 [ 641.489505][T10258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 641.542834][ T8] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 642.283881][T10258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 642.318509][ T5238] Bluetooth: hci0: command 0x0406 tx timeout [ 642.759415][ T8] usb 4-1: device descriptor read/8, error -71 [ 642.918862][ T8] usb usb4-port1: unable to enumerate USB device [ 643.369384][T10258] team0: Port device team_slave_0 added [ 643.413327][T10258] team0: Port device team_slave_1 added [ 643.869889][ T5278] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 644.059507][T10258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 644.066475][T10258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 644.190399][ T5278] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 644.208577][T10258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 644.248343][ T5278] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 644.309838][T10258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 644.321540][ T5278] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 644.348465][T10258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 644.354587][ T5278] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 644.512070][ T5278] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 644.538377][T10258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 644.579976][ T5278] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.635027][ T11] bridge_slave_1: left allmulticast mode [ 644.700441][ T5278] usb 4-1: config 0 descriptor?? [ 644.709504][ T11] bridge_slave_1: left promiscuous mode [ 644.716411][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.729723][T10339] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 644.839593][ T11] bridge_slave_0: left allmulticast mode [ 644.845289][ T11] bridge_slave_0: left promiscuous mode [ 644.908708][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.898999][ T5278] usbhid 4-1:0.0: can't add hid device: -71 [ 645.905075][ T5278] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 645.968811][ T5278] usb 4-1: USB disconnect, device number 49 [ 647.962671][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 648.139372][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 648.458562][ T11] bond0 (unregistering): Released all slaves [ 649.959026][T10258] hsr_slave_0: entered promiscuous mode [ 650.205026][T10258] hsr_slave_1: entered promiscuous mode [ 650.252109][T10258] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 650.288402][T10258] Cannot create hsr debugfs directory [ 652.008899][ T11] hsr_slave_0: left promiscuous mode [ 652.050437][ T11] hsr_slave_1: left promiscuous mode [ 652.139797][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 652.154719][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 652.369969][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 652.377443][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 652.559358][ T5238] Bluetooth: hci10: command 0x0406 tx timeout [ 652.709925][ T11] veth1_macvtap: left promiscuous mode [ 652.715537][ T11] veth0_macvtap: left promiscuous mode [ 652.781021][ T11] veth1_vlan: left promiscuous mode [ 652.801338][ T11] veth0_vlan: left promiscuous mode [ 653.263044][ T29] audit: type=1400 audit(1722169038.672:592): avc: denied { map } for pid=10412 comm="syz.0.1628" path="/dev/nullb0" dev="devtmpfs" ino=682 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 653.359785][ T11] infiniband syz2: set down [ 653.536885][T10415] rdma_rxe: rxe_newlink: failed to add team_slave_1 [ 655.471339][ T5274] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 655.901410][ T5274] usb 1-1: Using ep0 maxpacket: 32 [ 656.908777][ T5274] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 656.919575][ T5274] usb 1-1: config 0 has no interfaces? [ 656.939810][ T5274] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 656.958530][ T5274] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.966527][ T5274] usb 1-1: Product: syz [ 657.008493][ T5274] usb 1-1: Manufacturer: syz [ 657.013177][ T5274] usb 1-1: SerialNumber: syz [ 657.040321][ T5274] usb 1-1: config 0 descriptor?? [ 658.399034][ T5307] usb 1-1: USB disconnect, device number 34 [ 659.629869][ T11] team0 (unregistering): Port device team_slave_1 removed [ 659.728461][T10433] smc: removing ib device syz2 [ 660.019643][ T11] team0 (unregistering): Port device team_slave_0 removed [ 663.889608][ T5238] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 663.900276][ T5238] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 663.912078][ T5238] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 663.930223][ T5238] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 663.938043][ T5238] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 663.947070][ T5238] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 664.198420][ T29] audit: type=1400 audit(1722169049.562:593): avc: denied { create } for pid=10457 comm="syz.4.1643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 664.336233][ T29] audit: type=1400 audit(1722169049.692:594): avc: denied { write } for pid=10457 comm="syz.4.1643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 665.328604][ T8] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 665.578435][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 665.642102][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 665.682952][ T8] usb 1-1: config 0 has no interfaces? [ 665.773537][ T8] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 665.796323][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 665.898617][ T8] usb 1-1: Product: syz [ 665.902823][ T8] usb 1-1: Manufacturer: syz [ 665.912031][ T8] usb 1-1: SerialNumber: syz [ 665.988823][ T5228] Bluetooth: hci11: command tx timeout [ 666.130909][ T8] usb 1-1: config 0 descriptor?? [ 666.938688][ T8] usb 1-1: USB disconnect, device number 35 [ 668.078537][ T5228] Bluetooth: hci11: command tx timeout [ 669.063711][ T5228] Bluetooth: hci0: unexpected event for opcode 0x2003 [ 670.158845][ T5228] Bluetooth: hci11: command tx timeout [ 670.215301][T10458] chnl_net:caif_netlink_parms(): no params data found [ 670.870708][T10258] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 671.020642][T10258] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 671.243844][T10258] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 671.425092][T10258] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 671.858479][ T5279] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 672.128610][ T5279] usb 5-1: Using ep0 maxpacket: 32 [ 672.225264][ T5279] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 672.236052][ T5228] Bluetooth: hci11: command tx timeout [ 672.285629][ T5279] usb 5-1: config 0 has no interfaces? [ 672.372751][ T5279] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 672.383576][T10458] bridge0: port 1(bridge_slave_0) entered blocking state [ 672.425444][T10458] bridge0: port 1(bridge_slave_0) entered disabled state [ 672.433899][ T5279] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 672.445483][T10458] bridge_slave_0: entered allmulticast mode [ 672.472973][ T5279] usb 5-1: Product: syz [ 672.477189][ T5279] usb 5-1: Manufacturer: syz [ 672.500827][T10458] bridge_slave_0: entered promiscuous mode [ 672.510368][ T5279] usb 5-1: SerialNumber: syz [ 672.594924][T10458] bridge0: port 2(bridge_slave_1) entered blocking state [ 672.638456][ T5279] usb 5-1: config 0 descriptor?? [ 672.668617][T10458] bridge0: port 2(bridge_slave_1) entered disabled state [ 672.675977][T10458] bridge_slave_1: entered allmulticast mode [ 672.858676][T10458] bridge_slave_1: entered promiscuous mode [ 673.109018][ T5228] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 673.117877][ T5228] Bluetooth: hci0: Injecting HCI hardware error event [ 673.127484][ T5228] Bluetooth: hci0: hardware error 0x00 [ 673.288463][ T5238] Bluetooth: hci0: unexpected event for opcode 0x2003 [ 673.522049][T10458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 673.620322][ T1849] usb 5-1: USB disconnect, device number 19 [ 673.629332][T10458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 673.975224][T10458] team0: Port device team_slave_0 added [ 674.030416][T10458] team0: Port device team_slave_1 added [ 674.363811][T10458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 674.389045][T10458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 674.460914][T10458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 674.514294][T10458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 674.531719][T10458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 674.631073][T10458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 674.675905][T10258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 675.043034][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.288468][ T5228] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 675.325918][T10543] team_slave_0: entered allmulticast mode [ 675.950942][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 676.224429][T10458] hsr_slave_0: entered promiscuous mode [ 676.298254][T10458] hsr_slave_1: entered promiscuous mode [ 676.394359][T10458] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 676.438032][T10458] Cannot create hsr debugfs directory [ 676.468211][T10258] 8021q: adding VLAN 0 to HW filter on device team0 [ 676.694925][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.087267][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.184828][ T5279] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.192124][ T5279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 677.266932][ T5228] Bluetooth: hci8: unexpected event for opcode 0x2003 [ 677.474124][ T5352] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.481390][ T5352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 678.148598][ T5274] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 678.418509][ T5274] usb 4-1: Using ep0 maxpacket: 32 [ 678.459669][ T5274] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 678.521322][ T5274] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 678.558843][ T5274] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.589136][ T5274] usb 4-1: Product: syz [ 678.593350][ T5274] usb 4-1: Manufacturer: syz [ 678.597973][ T5274] usb 4-1: SerialNumber: syz [ 678.705884][ T5274] usb 4-1: config 0 descriptor?? [ 678.760596][ T5274] hub 4-1:0.0: bad descriptor, ignoring hub [ 678.766555][ T5274] hub 4-1:0.0: probe with driver hub failed with error -5 [ 679.001723][ T11] bridge_slave_1: left allmulticast mode [ 679.029063][ T11] bridge_slave_1: left promiscuous mode [ 679.099262][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 679.137830][ T11] bridge_slave_0: left allmulticast mode [ 679.167222][ T11] bridge_slave_0: left promiscuous mode [ 679.221091][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.001204][ T1849] usb 4-1: USB disconnect, device number 50 [ 681.405175][ T5228] Bluetooth: hci8: Controller not accepting commands anymore: ncmd = 0 [ 681.415006][ T5228] Bluetooth: hci8: Injecting HCI hardware error event [ 681.424581][ T5238] Bluetooth: hci8: hardware error 0x00 [ 683.094074][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 683.214731][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 683.294410][ T11] bond0 (unregistering): Released all slaves [ 683.509126][ T5238] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 684.673825][T10258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 684.957241][T10600] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=38476 sclass=netlink_route_socket pid=10600 comm=syz.4.1687 [ 685.097957][T10600] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 685.523789][ T11] hsr_slave_0: left promiscuous mode [ 685.558213][ T11] hsr_slave_1: left promiscuous mode [ 685.659975][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 685.708897][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 685.729688][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 685.811412][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 685.921130][ T11] veth1_macvtap: left promiscuous mode [ 685.926733][ T11] veth0_macvtap: left promiscuous mode [ 686.028607][ T11] veth1_vlan: left promiscuous mode [ 686.034104][ T11] veth0_vlan: left promiscuous mode [ 686.349617][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.355910][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.668803][ T5282] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 687.898445][ T5282] usb 4-1: Using ep0 maxpacket: 32 [ 687.935259][ T5282] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 688.041606][ T5282] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 688.058799][ T5282] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.066835][ T5282] usb 4-1: Product: syz [ 688.111962][ T5282] usb 4-1: Manufacturer: syz [ 688.116623][ T5282] usb 4-1: SerialNumber: syz [ 688.192013][ T5282] usb 4-1: config 0 descriptor?? [ 688.220496][ T5282] hub 4-1:0.0: bad descriptor, ignoring hub [ 688.240313][ T5282] hub 4-1:0.0: probe with driver hub failed with error -5 [ 689.071346][ T5307] usb 4-1: USB disconnect, device number 51 [ 689.810045][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807c890000: rx timeout, send abort [ 690.319835][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807c890000: abort rx timeout. Force session deactivation [ 690.413225][ T11] team0 (unregistering): Port device team_slave_1 removed [ 691.309130][T10260] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 691.338846][T10260] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 691.358724][T10260] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 691.371177][T10260] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 691.398619][T10260] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 691.412554][T10260] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 691.705491][ T11] team0 (unregistering): Port device team_slave_0 removed [ 692.193613][ T5238] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 692.203241][ T5238] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 692.367374][ T5238] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 692.408464][ T5238] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 692.416732][ T5238] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 692.430816][ T5238] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 693.538499][ T5238] Bluetooth: hci5: command tx timeout [ 694.469005][ T5238] Bluetooth: hci13: command tx timeout [ 695.608463][ T5238] Bluetooth: hci5: command tx timeout [ 695.891833][T10458] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 696.408499][T10458] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 696.445477][T10458] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 696.550877][ T5238] Bluetooth: hci13: command tx timeout [ 696.718407][T10458] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 697.360305][T10643] loop0: detected capacity change from 0 to 7 [ 697.531385][T10643] Dev loop0: unable to read RDB block 7 [ 697.591689][T10643] loop0: unable to read partition table [ 697.670694][ T5238] Bluetooth: hci5: command tx timeout [ 697.837275][T10643] loop0: partition table beyond EOD, truncated [ 697.960478][T10643] loop_reread_partitions: partition scan of loop0 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 697.960478][T10643] ) failed (rc=-5) [ 698.638760][ T5238] Bluetooth: hci13: command tx timeout [ 698.883207][T10653] input: syz0 as /devices/virtual/input/input39 [ 698.992234][T10631] chnl_net:caif_netlink_parms(): no params data found [ 699.552448][T10624] chnl_net:caif_netlink_parms(): no params data found [ 699.708737][ T5279] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 699.778784][ T5238] Bluetooth: hci5: command tx timeout [ 700.030005][T10458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 700.038799][ T1849] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 700.168603][ T5279] usb 5-1: Using ep0 maxpacket: 32 [ 700.211718][ T5279] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 700.338938][ T5279] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 700.362339][ T5279] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 700.370481][ T5279] usb 5-1: Product: syz [ 700.374666][ T5279] usb 5-1: Manufacturer: syz [ 700.379632][ T5279] usb 5-1: SerialNumber: syz [ 700.520819][ T5279] usb 5-1: config 0 descriptor?? [ 700.635887][ T1849] usb 4-1: unable to get BOS descriptor or descriptor too short [ 700.709013][ T5238] Bluetooth: hci13: command tx timeout [ 700.724142][ T1849] usb 4-1: config 0 has no interfaces? [ 700.752392][ T5279] hub 5-1:0.0: bad descriptor, ignoring hub [ 700.752927][ T1849] usb 4-1: New USB device found, idVendor=07da, idProduct=104d, bcdDevice=e5.48 [ 700.767503][ T1849] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 700.778599][ T1849] usb 4-1: Product: syz [ 700.788445][ T1849] usb 4-1: SerialNumber: syz [ 700.796455][ T1849] usb 4-1: config 0 descriptor?? [ 700.813883][ T5279] hub 5-1:0.0: probe with driver hub failed with error -5 [ 700.889582][T10458] 8021q: adding VLAN 0 to HW filter on device team0 [ 700.968722][T10631] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.975929][T10631] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.077461][ T5271] usb 4-1: USB disconnect, device number 52 [ 701.138763][T10631] bridge_slave_0: entered allmulticast mode [ 701.188735][T10631] bridge_slave_0: entered promiscuous mode [ 701.340853][T10624] bridge0: port 1(bridge_slave_0) entered blocking state [ 701.348059][T10624] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.398705][T10624] bridge_slave_0: entered allmulticast mode [ 701.458933][T10624] bridge_slave_0: entered promiscuous mode [ 701.529096][ T5279] usb 5-1: USB disconnect, device number 20 [ 701.732234][T10631] bridge0: port 2(bridge_slave_1) entered blocking state [ 701.798579][T10631] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.840568][T10631] bridge_slave_1: entered allmulticast mode [ 701.921221][T10631] bridge_slave_1: entered promiscuous mode [ 701.929757][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 701.936916][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 702.039728][T10624] bridge0: port 2(bridge_slave_1) entered blocking state [ 702.046833][T10624] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.118663][T10624] bridge_slave_1: entered allmulticast mode [ 702.152437][T10624] bridge_slave_1: entered promiscuous mode [ 702.690281][T10624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 702.753719][ T11] bridge_slave_1: left allmulticast mode [ 702.759537][ T11] bridge_slave_1: left promiscuous mode [ 702.777827][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.955811][ T11] bridge_slave_0: left allmulticast mode [ 702.975963][ T11] bridge_slave_0: left promiscuous mode [ 702.991435][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 705.099590][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 705.162003][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 705.214912][ T11] bond0 (unregistering): Released all slaves [ 705.371494][T10631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 705.461679][T10631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 705.506316][T10624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 705.723945][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 705.731154][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 705.993191][ T11] hsr_slave_0: left promiscuous mode [ 706.014236][ T11] hsr_slave_1: left promiscuous mode [ 706.069513][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 706.090536][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 708.413515][ T11] team0 (unregistering): Port device team_slave_1 removed [ 708.766022][ T11] team0 (unregistering): Port device team_slave_0 removed [ 709.668909][ T1849] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 710.028381][ T1849] usb 5-1: Using ep0 maxpacket: 32 [ 710.228455][ T1849] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 710.260336][ T1849] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 710.461168][ T1849] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 710.525113][ T1849] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.550832][ T1849] usb 5-1: Product: syz [ 710.555059][ T1849] usb 5-1: Manufacturer: syz [ 710.629657][ T1849] usb 5-1: SerialNumber: syz [ 710.679517][ T1849] usb 5-1: config 0 descriptor?? [ 710.711748][ T1849] hub 5-1:0.0: bad descriptor, ignoring hub [ 710.717687][ T1849] hub 5-1:0.0: probe with driver hub failed with error -5 [ 711.388611][ T5274] usb 5-1: USB disconnect, device number 21 [ 712.627003][T10631] team0: Port device team_slave_0 added [ 712.710827][T10631] team0: Port device team_slave_1 added [ 712.875734][T10624] team0: Port device team_slave_0 added [ 713.119975][T10631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 713.126949][T10631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 713.203293][T10631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 713.304632][T10624] team0: Port device team_slave_1 added [ 713.483661][T10631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 713.528365][T10631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 713.631800][T10631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 713.796006][T10624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 713.818457][T10624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 713.978574][T10624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 715.219171][T10624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 715.226150][T10624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 715.408473][T10624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 715.648571][ T5282] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 715.834861][T10631] hsr_slave_0: entered promiscuous mode [ 715.879935][ T5282] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 715.880099][T10631] hsr_slave_1: entered promiscuous mode [ 715.918895][ T5282] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 715.953401][T10631] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 715.973076][ T5282] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 715.984982][T10631] Cannot create hsr debugfs directory [ 716.035626][ T5282] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 716.105831][ T5282] usb 4-1: config 0 descriptor?? [ 716.498985][T10624] hsr_slave_0: entered promiscuous mode [ 716.542788][T10624] hsr_slave_1: entered promiscuous mode [ 716.579118][T10624] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 716.586709][T10624] Cannot create hsr debugfs directory [ 717.449220][ T29] audit: type=1400 audit(1722169102.882:595): avc: denied { bind } for pid=10703 comm="syz.3.1718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 717.564909][ T5282] plantronics 0003:047F:FFFF.0017: No inputs registered, leaving [ 717.658833][ T5282] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 718.830708][T10720] IPVS: length: 78 != 24 [ 719.165822][T10458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 719.541750][T10624] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 719.809008][T10624] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.271336][T10624] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.443917][ T5274] usb 4-1: USB disconnect, device number 53 [ 720.492240][T10458] veth0_vlan: entered promiscuous mode [ 720.630882][T10458] veth1_vlan: entered promiscuous mode [ 720.815243][T10624] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.114719][T10458] veth0_macvtap: entered promiscuous mode [ 721.122365][ T5274] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 721.181674][T10458] veth1_macvtap: entered promiscuous mode [ 721.306925][T10458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 721.388515][T10458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.388513][ T5274] usb 5-1: Using ep0 maxpacket: 32 [ 721.469455][T10458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 721.483079][ T5274] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 721.519215][ T5274] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 721.598744][T10458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.627302][ T5274] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 721.641344][T10458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 721.669794][T10458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.678384][ T5274] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.713736][T10458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 721.753873][ T5274] usb 5-1: Product: syz [ 721.763843][T10458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.778400][ T5274] usb 5-1: Manufacturer: syz [ 721.806474][T10458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 721.815515][ T5274] usb 5-1: SerialNumber: syz [ 721.840106][T10458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 721.875643][ T5274] usb 5-1: config 0 descriptor?? [ 721.969863][ T5274] hub 5-1:0.0: bad descriptor, ignoring hub [ 721.978382][T10458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 721.990986][ T5274] hub 5-1:0.0: probe with driver hub failed with error -5 [ 722.026453][T10458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 722.168347][T10458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 722.310970][T10458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 722.348388][T10458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 722.403220][T10458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 722.437074][T10458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 722.501156][T10458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 722.580486][T10458] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 722.695622][T10458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 722.748373][T10458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 722.758212][T10458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 722.818340][T10458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 722.878339][T10458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 722.978374][T10458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 722.988238][T10458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 723.054460][T10458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.085315][T10458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 723.149253][T10458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.208648][T10458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 723.276037][T10458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.316615][T10458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 723.520191][T10458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.581071][T10458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 723.653925][T10458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.714192][T10458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 723.938490][T10458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.039963][T10260] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 724.079258][T10260] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 724.099902][T10260] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 724.129983][T10458] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 724.199052][T10260] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 724.208886][T10260] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 724.216560][T10260] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 724.268833][ T1849] usb 5-1: USB disconnect, device number 22 [ 725.063102][T10624] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 725.153659][T10624] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 725.578769][T10624] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 725.665241][T10624] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 726.388767][ T5238] Bluetooth: hci12: command tx timeout [ 726.826673][ T29] audit: type=1400 audit(1722169112.252:596): avc: denied { name_bind } for pid=10748 comm="syz.3.1728" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 728.480316][ T5238] Bluetooth: hci12: command tx timeout [ 729.225405][T10734] chnl_net:caif_netlink_parms(): no params data found [ 729.452525][T10757] netlink: 'syz.4.1730': attribute type 8 has an invalid length. [ 729.487374][T10624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 729.549751][T10631] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 729.583963][T10631] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 729.649890][T10757] netlink: 'syz.4.1730': attribute type 7 has an invalid length. [ 729.657668][T10757] netlink: 187184 bytes leftover after parsing attributes in process `syz.4.1730'. [ 729.673899][T10631] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 729.848038][T10631] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 730.548565][ T5238] Bluetooth: hci12: command tx timeout [ 732.407615][T10624] 8021q: adding VLAN 0 to HW filter on device team0 [ 732.638715][ T5238] Bluetooth: hci12: command tx timeout [ 732.828552][ T2495] bridge_slave_1: left allmulticast mode [ 732.868741][ T2495] bridge_slave_1: left promiscuous mode [ 732.898985][ T2495] bridge0: port 2(bridge_slave_1) entered disabled state [ 732.990927][ T2495] bridge_slave_0: left allmulticast mode [ 732.996610][ T2495] bridge_slave_0: left promiscuous mode [ 733.048828][ T2495] bridge0: port 1(bridge_slave_0) entered disabled state [ 734.918587][ T5282] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 735.089301][ T2495] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 735.139327][ T2495] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 735.208465][ T5282] usb 4-1: Using ep0 maxpacket: 32 [ 735.215761][ T2495] bond0 (unregistering): Released all slaves [ 735.279849][ T5282] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 735.359775][ T5282] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 735.449832][T10734] bridge0: port 1(bridge_slave_0) entered blocking state [ 735.457235][T10734] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.475435][ T5282] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 735.517944][ T5282] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.528493][T10734] bridge_slave_0: entered allmulticast mode [ 735.558774][ T5282] usb 4-1: Product: syz [ 735.580077][T10734] bridge_slave_0: entered promiscuous mode [ 735.587752][ T5282] usb 4-1: Manufacturer: syz [ 735.627368][ T5282] usb 4-1: SerialNumber: syz [ 735.667461][ T5282] usb 4-1: config 0 descriptor?? [ 735.696394][ T5282] hub 4-1:0.0: bad descriptor, ignoring hub [ 735.748559][ T5282] hub 4-1:0.0: probe with driver hub failed with error -5 [ 735.812041][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 735.819207][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 735.907901][T10734] bridge0: port 2(bridge_slave_1) entered blocking state [ 735.948273][T10734] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.955928][T10734] bridge_slave_1: entered allmulticast mode [ 736.000590][T10734] bridge_slave_1: entered promiscuous mode [ 736.207520][ T2495] hsr_slave_0: left promiscuous mode [ 736.268459][ T2495] hsr_slave_1: left promiscuous mode [ 736.318627][ T2495] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 736.326123][ T2495] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 736.439698][ T2495] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 736.447156][ T2495] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 736.528822][ T5274] usb 4-1: USB disconnect, device number 54 [ 736.592025][ T2495] veth1_macvtap: left promiscuous mode [ 736.597557][ T2495] veth0_macvtap: left promiscuous mode [ 736.638938][ T2495] veth1_vlan: left promiscuous mode [ 736.644343][ T2495] veth0_vlan: left promiscuous mode [ 736.908450][ T5274] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 737.158423][ T5274] usb 5-1: Using ep0 maxpacket: 8 [ 737.219603][ T5274] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 737.248395][ T5274] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 737.308381][ T5274] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 737.348368][ T5274] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 737.455942][ T5274] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 737.525033][ T5274] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.853215][ T5274] usb 5-1: GET_CAPABILITIES returned 0 [ 737.916579][ T5274] usbtmc 5-1:16.0: can't read capabilities [ 738.298838][ T5274] usb 5-1: USB disconnect, device number 23 [ 739.782011][ T1849] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 740.788430][ T1849] usb 4-1: Using ep0 maxpacket: 8 [ 740.845486][ T1849] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 740.920715][ T1849] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 740.995564][ T1849] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 741.030069][ T1849] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 741.077449][ T1849] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 741.128815][ T1849] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 741.137909][ T1849] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.261064][ T1849] usbtmc 4-1:16.0: probe with driver usbtmc failed with error -22 [ 741.619101][ T2495] team0 (unregistering): Port device team_slave_1 removed [ 741.953755][ T2495] team0 (unregistering): Port device team_slave_0 removed [ 743.160438][ T1849] usb 4-1: USB disconnect, device number 55 [ 743.818874][ T8] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 744.088668][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 744.152587][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 744.205560][ T8] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 744.235264][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.298376][ T8] usb 4-1: Product: syz [ 744.302708][ T8] usb 4-1: Manufacturer: syz [ 744.328491][ T8] usb 4-1: SerialNumber: syz [ 744.365522][ T8] usb 4-1: config 0 descriptor?? [ 744.391705][ T8] hub 4-1:0.0: bad descriptor, ignoring hub [ 744.471982][ T8] hub 4-1:0.0: probe with driver hub failed with error -5 [ 744.519074][ T8] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input40 [ 744.572127][ T8] usbtouchscreen 4-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8 [ 744.691058][ T8] usbtouchscreen 4-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 745.231700][ T5271] bridge0: port 2(bridge_slave_1) entered blocking state [ 745.238941][ T5271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 745.345497][ T5271] usb 4-1: USB disconnect, device number 56 [ 745.467443][T10734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 745.601690][T10734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 746.221316][T10734] team0: Port device team_slave_0 added [ 746.372337][T10734] team0: Port device team_slave_1 added [ 746.703984][T10734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 746.739206][T10734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 746.849763][T10734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 746.885282][T10734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 746.933452][T10734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 747.088389][T10734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 747.186023][T10631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 747.487586][T10624] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 747.498722][ T1849] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 747.729858][ T1849] usb 4-1: Using ep0 maxpacket: 8 [ 747.753729][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.760162][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.769269][T10734] hsr_slave_0: entered promiscuous mode [ 747.819253][ T1849] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 747.839022][T10734] hsr_slave_1: entered promiscuous mode [ 747.878658][T10734] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 747.886254][T10734] Cannot create hsr debugfs directory [ 747.927990][ T1849] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 747.961565][T10631] 8021q: adding VLAN 0 to HW filter on device team0 [ 747.972262][ T1849] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 748.038422][ T1849] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 748.102077][ T1849] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 748.144437][ T1849] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 748.498647][ T1849] usb 4-1: usb_control_msg returned -71 [ 748.511777][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 748.519003][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 748.559364][ T1849] usbtmc 4-1:16.0: can't read capabilities [ 748.628865][ T1849] usb 4-1: USB disconnect, device number 57 [ 748.772026][ T5271] bridge0: port 2(bridge_slave_1) entered blocking state [ 748.779179][ T5271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 751.013980][T10260] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 751.024470][T10260] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 751.033775][T10260] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 751.101816][T10260] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 751.111138][T10260] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 751.123031][T10260] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 751.488511][ T5222] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 751.728474][ T5222] usb 5-1: Using ep0 maxpacket: 32 [ 752.052549][ T5222] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 752.239093][ T5222] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 752.248178][ T5222] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.358425][ T5222] usb 5-1: Product: syz [ 752.408420][ T5222] usb 5-1: Manufacturer: syz [ 752.458462][ T5222] usb 5-1: SerialNumber: syz [ 752.525336][ T5222] usb 5-1: config 0 descriptor?? [ 752.610127][ T5222] hub 5-1:0.0: bad descriptor, ignoring hub [ 752.616046][ T5222] hub 5-1:0.0: probe with driver hub failed with error -5 [ 752.718160][ T5222] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input41 [ 752.789464][ T5222] usbtouchscreen 5-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8 [ 752.876143][ T5238] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 752.887559][ T5238] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 752.895571][ T5238] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 752.904322][ T5238] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 752.913412][ T5238] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 752.920950][ T5238] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 752.983915][ T5222] usbtouchscreen 5-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 753.202908][ T5238] Bluetooth: hci11: command tx timeout [ 753.719108][ T5274] usb 5-1: USB disconnect, device number 24 [ 754.561038][T10734] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 754.803175][T10734] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 755.029178][ T5238] Bluetooth: hci5: command tx timeout [ 755.052981][T10854] netlink: 'syz.4.1754': attribute type 8 has an invalid length. [ 755.148874][T10854] netlink: 'syz.4.1754': attribute type 7 has an invalid length. [ 755.156615][T10854] netlink: 187184 bytes leftover after parsing attributes in process `syz.4.1754'. [ 755.172696][T10734] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 755.268956][ T5238] Bluetooth: hci11: command tx timeout [ 755.541461][T10734] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 755.870480][ T2495] bridge_slave_1: left allmulticast mode [ 755.877092][ T2495] bridge_slave_1: left promiscuous mode [ 755.928891][ T2495] bridge0: port 2(bridge_slave_1) entered disabled state [ 756.124031][ T2495] bridge_slave_0: left allmulticast mode [ 756.198374][ T2495] bridge_slave_0: left promiscuous mode [ 756.223807][ T2495] bridge0: port 1(bridge_slave_0) entered disabled state [ 757.109126][ T5238] Bluetooth: hci5: command tx timeout [ 757.349306][ T5238] Bluetooth: hci11: command tx timeout [ 758.819587][ T2495] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 758.930784][ T2495] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 759.028779][ T2495] bond0 (unregistering): Released all slaves [ 759.188435][ T5238] Bluetooth: hci5: command tx timeout [ 759.256240][T10832] chnl_net:caif_netlink_parms(): no params data found [ 759.428605][ T5238] Bluetooth: hci11: command tx timeout [ 760.490779][ T2495] hsr_slave_0: left promiscuous mode [ 760.589931][ T2495] hsr_slave_1: left promiscuous mode [ 760.638817][ T2495] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 760.679336][ T2495] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 761.268540][ T5238] Bluetooth: hci5: command tx timeout [ 761.338426][ T9] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 761.738433][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 761.851659][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 761.979135][ T9] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 761.988209][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.078452][ T9] usb 5-1: Product: syz [ 762.098351][ T9] usb 5-1: Manufacturer: syz [ 762.133593][ T9] usb 5-1: SerialNumber: syz [ 762.165198][ T9] usb 5-1: config 0 descriptor?? [ 762.253579][ T9] hub 5-1:0.0: bad descriptor, ignoring hub [ 762.281522][ T9] hub 5-1:0.0: probe with driver hub failed with error -5 [ 762.325024][ T9] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input42 [ 762.406639][ T9] usbtouchscreen 5-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -8 [ 762.507806][ T9] usbtouchscreen 5-1:0.0: probe with driver usbtouchscreen failed with error -8 [ 763.125725][T10894] netlink: 'syz.3.1764': attribute type 8 has an invalid length. [ 763.150731][T10894] netlink: 'syz.3.1764': attribute type 7 has an invalid length. [ 763.168601][T10894] netlink: 187184 bytes leftover after parsing attributes in process `syz.3.1764'. [ 763.181508][ T2495] team0 (unregistering): Port device team_slave_1 removed [ 763.268455][ T5222] usb 5-1: USB disconnect, device number 25 [ 763.553376][ T2495] team0 (unregistering): Port device team_slave_0 removed [ 766.986189][T10843] chnl_net:caif_netlink_parms(): no params data found [ 769.889181][T10832] bridge0: port 1(bridge_slave_0) entered blocking state [ 769.896358][T10832] bridge0: port 1(bridge_slave_0) entered disabled state [ 770.018658][T10832] bridge_slave_0: entered allmulticast mode [ 770.027257][T10832] bridge_slave_0: entered promiscuous mode [ 770.032706][T10906] capability: warning: `syz.4.1767' uses 32-bit capabilities (legacy support in use) [ 770.098421][ T9] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 770.121124][T10832] bridge0: port 2(bridge_slave_1) entered blocking state [ 770.128736][T10832] bridge0: port 2(bridge_slave_1) entered disabled state [ 770.136013][T10832] bridge_slave_1: entered allmulticast mode [ 770.150838][T10832] bridge_slave_1: entered promiscuous mode [ 770.588776][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 770.638537][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 770.678597][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 770.748517][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 770.757609][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.789564][T10832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 770.841689][ T9] usb 4-1: config 0 descriptor?? [ 770.882502][T10843] bridge0: port 1(bridge_slave_0) entered blocking state [ 770.949007][T10843] bridge0: port 1(bridge_slave_0) entered disabled state [ 770.956311][T10843] bridge_slave_0: entered allmulticast mode [ 771.017683][T10843] bridge_slave_0: entered promiscuous mode [ 771.043098][T10843] bridge0: port 2(bridge_slave_1) entered blocking state [ 771.065702][T10843] bridge0: port 2(bridge_slave_1) entered disabled state [ 771.149582][T10843] bridge_slave_1: entered allmulticast mode [ 771.199369][T10843] bridge_slave_1: entered promiscuous mode [ 771.213225][T10832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 771.940426][T10832] team0: Port device team_slave_0 added [ 772.280180][T10843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 772.320728][T10832] team0: Port device team_slave_1 added [ 772.629525][T10843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 772.945053][T10832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 772.955672][T10832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 773.168112][T10832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 773.224645][T10832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 773.298422][T10832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 773.375360][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 773.389259][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 773.448415][T10832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 773.489236][ T9] usb 4-1: USB disconnect, device number 58 [ 773.942541][T10843] team0: Port device team_slave_0 added [ 774.005578][T10843] team0: Port device team_slave_1 added [ 775.020227][T10734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 775.128432][ T5352] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 775.149287][T10843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 775.156254][T10843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 775.321664][T10843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 775.348737][ T5352] usb 4-1: Using ep0 maxpacket: 32 [ 775.351919][T10923] netlink: 'syz.4.1773': attribute type 8 has an invalid length. [ 775.388971][ T5352] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 775.438508][ T5352] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 775.477867][ T5352] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 775.528536][ T5352] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.536578][ T5352] usb 4-1: Product: syz [ 775.538363][T10923] netlink: 'syz.4.1773': attribute type 7 has an invalid length. [ 775.574903][ T5352] usb 4-1: Manufacturer: syz [ 775.595171][ T5352] usb 4-1: SerialNumber: syz [ 775.629276][ T5352] usb 4-1: config 0 descriptor?? [ 775.647144][ T5352] hub 4-1:0.0: bad descriptor, ignoring hub [ 775.677177][ T5352] hub 4-1:0.0: probe with driver hub failed with error -5 [ 775.741581][ T5352] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input43 [ 775.758508][T10923] netlink: 187184 bytes leftover after parsing attributes in process `syz.4.1773'. [ 775.800593][ T5352] usbtouchscreen 4-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -90 [ 775.832126][T10843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 775.848478][T10843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 775.902972][ T5352] usbtouchscreen 4-1:0.0: probe with driver usbtouchscreen failed with error -90 [ 775.988920][T10843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 776.126139][T10832] hsr_slave_0: entered promiscuous mode [ 776.202603][T10832] hsr_slave_1: entered promiscuous mode [ 776.238758][ T8] usb 4-1: USB disconnect, device number 59 [ 776.308669][T10832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 776.377246][T10832] Cannot create hsr debugfs directory [ 777.530372][T10843] hsr_slave_0: entered promiscuous mode [ 777.538455][ T29] audit: type=1400 audit(1722169162.962:597): avc: denied { connect } for pid=10927 comm="syz.3.1774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 777.691456][T10843] hsr_slave_1: entered promiscuous mode [ 777.739363][T10843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 777.746973][T10843] Cannot create hsr debugfs directory [ 778.051182][T10734] 8021q: adding VLAN 0 to HW filter on device team0 [ 778.912506][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 778.919683][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 779.308454][ T5352] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 779.334572][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 779.341801][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 779.583384][ T5352] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 779.642251][ T5352] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 779.688412][ T5352] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 779.789779][ T5352] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 779.828668][ T5352] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.871933][ T5352] usb 4-1: config 0 descriptor?? [ 779.886978][ T2495] bridge_slave_1: left allmulticast mode [ 779.922982][ T2495] bridge_slave_1: left promiscuous mode [ 779.958672][ T2495] bridge0: port 2(bridge_slave_1) entered disabled state [ 780.021496][ T2495] bridge_slave_0: left allmulticast mode [ 780.027186][ T2495] bridge_slave_0: left promiscuous mode [ 780.088603][ T2495] bridge0: port 1(bridge_slave_0) entered disabled state [ 781.427789][T10940] xt_nat: multiple ranges no longer supported [ 783.391033][ T2495] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 783.543115][ T2495] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 783.661211][ T2495] bond0 (unregistering): Released all slaves [ 784.517476][T10940] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1778'. [ 784.648546][T10944] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1780'. [ 785.299278][ T5352] usbhid 4-1:0.0: can't add hid device: -32 [ 785.318550][ T5352] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 785.504271][ T5271] usb 4-1: USB disconnect, device number 60 [ 785.540690][ T2495] hsr_slave_0: left promiscuous mode [ 785.643037][T10260] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 785.661850][T10260] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 785.678681][T10260] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 785.734093][T10260] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 785.742090][T10260] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 785.758556][T10260] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 785.790966][ T2495] hsr_slave_1: left promiscuous mode [ 785.947460][ T2495] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 785.968658][ T2495] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 786.039329][ T8] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 786.258401][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 786.307283][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 786.368907][ T8] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 786.469567][ T8] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 786.479036][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.487099][ T8] usb 5-1: Product: syz [ 786.518402][ T8] usb 5-1: Manufacturer: syz [ 786.537804][ T8] usb 5-1: SerialNumber: syz [ 786.581389][ T8] usb 5-1: config 0 descriptor?? [ 786.599603][ T8] hub 5-1:0.0: bad descriptor, ignoring hub [ 786.624013][ T8] hub 5-1:0.0: probe with driver hub failed with error -5 [ 786.693121][ T8] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input44 [ 786.791463][ T8] usbtouchscreen 5-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -90 [ 787.254061][ T8] usbtouchscreen 5-1:0.0: probe with driver usbtouchscreen failed with error -90 [ 787.829105][ T5238] Bluetooth: hci13: command tx timeout [ 787.878767][ T5274] usb 5-1: USB disconnect, device number 26 [ 788.613322][ T2495] team0 (unregistering): Port device team_slave_1 removed [ 788.883788][ T2495] team0 (unregistering): Port device team_slave_0 removed [ 789.919513][ T5238] Bluetooth: hci13: command tx timeout [ 791.998427][ T5238] Bluetooth: hci13: command tx timeout [ 793.278719][ T5274] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 793.648646][ T5274] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 793.718249][ T5274] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 793.728204][ T5274] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 793.888442][ T5274] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 793.958380][ T5274] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.022503][ T5274] usb 4-1: config 0 descriptor?? [ 794.068784][ T5238] Bluetooth: hci13: command tx timeout [ 794.539764][T10832] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 794.922749][T10949] chnl_net:caif_netlink_parms(): no params data found [ 795.178976][T10832] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 795.293611][T10832] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 795.660206][T10832] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 796.094178][T10984] xt_nat: multiple ranges no longer supported [ 796.581838][T10984] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1789'. [ 797.424970][T10949] bridge0: port 1(bridge_slave_0) entered blocking state [ 797.541265][T10949] bridge0: port 1(bridge_slave_0) entered disabled state [ 797.588744][T10949] bridge_slave_0: entered allmulticast mode [ 797.615972][T10949] bridge_slave_0: entered promiscuous mode [ 797.931354][T10949] bridge0: port 2(bridge_slave_1) entered blocking state [ 797.958582][T10949] bridge0: port 2(bridge_slave_1) entered disabled state [ 797.985017][T10949] bridge_slave_1: entered allmulticast mode [ 798.010857][T10949] bridge_slave_1: entered promiscuous mode [ 798.368640][ T5222] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 798.628141][T10949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 798.658474][ T5222] usb 5-1: Using ep0 maxpacket: 32 [ 798.741480][T10949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 798.820992][ T5274] usbhid 4-1:0.0: can't add hid device: -71 [ 798.827121][ T5274] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 798.849288][ T5274] usb 4-1: USB disconnect, device number 61 [ 798.881521][ T5222] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 798.914371][T10843] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 798.962617][ T5222] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 799.050524][ T5222] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 799.098468][ T5222] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.106516][ T5222] usb 5-1: Product: syz [ 799.141398][T10843] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 799.178357][ T5222] usb 5-1: Manufacturer: syz [ 799.189551][ T5222] usb 5-1: SerialNumber: syz [ 799.200326][T10843] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 799.219111][ T5222] usb 5-1: config 0 descriptor?? [ 799.250330][ T2495] bridge_slave_1: left allmulticast mode [ 799.255985][ T2495] bridge_slave_1: left promiscuous mode [ 799.289755][ T5222] hub 5-1:0.0: bad descriptor, ignoring hub [ 799.313491][ T2495] bridge0: port 2(bridge_slave_1) entered disabled state [ 799.342341][ T5222] hub 5-1:0.0: probe with driver hub failed with error -5 [ 799.379544][ T2495] bridge_slave_0: left allmulticast mode [ 799.404132][ T5222] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input45 [ 799.418491][ T2495] bridge_slave_0: left promiscuous mode [ 799.424243][ T2495] bridge0: port 1(bridge_slave_0) entered disabled state [ 799.501782][ T5222] usbtouchscreen 5-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -90 [ 799.602221][ T29] audit: type=1400 audit(1722169185.032:598): avc: denied { getopt } for pid=10996 comm="syz.3.1795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 799.689675][ T5222] usbtouchscreen 5-1:0.0: probe with driver usbtouchscreen failed with error -90 [ 800.128876][ T5222] usb 5-1: USB disconnect, device number 27 [ 802.479587][ T2495] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 802.680305][ T2495] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 802.778726][ T2495] bond0 (unregistering): Released all slaves [ 803.167261][T10949] team0: Port device team_slave_0 added [ 803.269860][T10843] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 803.725379][ T2495] hsr_slave_0: left promiscuous mode [ 803.783521][ T2495] hsr_slave_1: left promiscuous mode [ 803.808757][ T2495] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 803.872037][ T2495] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 805.460696][ T2495] team0 (unregistering): Port device team_slave_1 removed [ 805.620182][ T2495] team0 (unregistering): Port device team_slave_0 removed [ 808.378714][T10949] team0: Port device team_slave_1 added [ 808.952095][T10949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 809.038571][T10949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 809.199136][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.205438][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.308427][T10949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 809.398626][T10832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 809.433622][T10949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 809.449075][T10949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 809.628736][T10949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 810.141090][T10949] hsr_slave_0: entered promiscuous mode [ 810.259005][T10949] hsr_slave_1: entered promiscuous mode [ 810.328586][T10949] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 810.336252][T10949] Cannot create hsr debugfs directory [ 811.111057][ T5307] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 811.441251][ T5307] usb 5-1: Using ep0 maxpacket: 32 [ 811.603869][ T5307] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 811.871109][ T5307] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 811.906886][ T5307] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.939365][ T5307] usb 5-1: Product: syz [ 811.943590][ T5307] usb 5-1: Manufacturer: syz [ 811.948213][ T5307] usb 5-1: SerialNumber: syz [ 811.961669][ T5307] usb 5-1: config 0 descriptor?? [ 811.975225][T10260] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 811.985815][T10260] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 811.994538][T10260] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 812.010049][T11026] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 812.050947][ T5307] hub 5-1:0.0: bad descriptor, ignoring hub [ 812.057236][T10260] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 812.066123][T10260] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 812.077492][ T5307] hub 5-1:0.0: probe with driver hub failed with error -5 [ 812.087822][T10260] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 812.099686][ T5307] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input46 [ 812.918620][ C1] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 812.927710][ T5307] usb 5-1: USB disconnect, device number 28 [ 813.580254][T10260] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 813.602468][T10260] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 813.613505][T10260] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 813.622183][T10260] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 813.629949][T10260] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 813.637294][T10260] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 814.148621][T10260] Bluetooth: hci11: command tx timeout [ 815.749361][T10260] Bluetooth: hci5: command tx timeout [ 815.938502][T11054] input: syz0 as /devices/virtual/input/input47 [ 816.229338][T10260] Bluetooth: hci11: command tx timeout [ 816.397855][T11031] chnl_net:caif_netlink_parms(): no params data found [ 816.661360][T10433] bridge_slave_1: left allmulticast mode [ 816.710582][T10433] bridge_slave_1: left promiscuous mode [ 816.747135][T10433] bridge0: port 2(bridge_slave_1) entered disabled state [ 816.887235][T10433] bridge_slave_0: left allmulticast mode [ 816.913332][T10433] bridge_slave_0: left promiscuous mode [ 816.949025][T10433] bridge0: port 1(bridge_slave_0) entered disabled state [ 817.851276][T10260] Bluetooth: hci5: command tx timeout [ 818.308718][T10260] Bluetooth: hci11: command tx timeout [ 819.908778][T10260] Bluetooth: hci5: command tx timeout [ 819.970008][T10433] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 820.001034][T10433] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 820.063594][T10433] bond0 (unregistering): Released all slaves [ 820.388790][T10260] Bluetooth: hci11: command tx timeout [ 820.530962][ T8] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 820.672328][T10949] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 820.770546][T10949] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 820.820130][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 820.830331][ T8] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 820.850210][ T8] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 820.878380][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.923013][ T8] usb 5-1: Product: syz [ 820.928609][ T8] usb 5-1: Manufacturer: syz [ 820.955094][ T8] usb 5-1: SerialNumber: syz [ 820.976478][ T8] usb 5-1: config 0 descriptor?? [ 821.218661][T11067] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 821.227563][ T8] hub 5-1:0.0: bad descriptor, ignoring hub [ 821.238458][ T8] hub 5-1:0.0: probe with driver hub failed with error -5 [ 821.856811][ T8] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input48 [ 821.883040][ T5279] IPVS: starting estimator thread 0... [ 821.989349][T10260] Bluetooth: hci5: command tx timeout [ 822.018619][T11074] IPVS: using max 30 ests per chain, 72000 per kthread [ 822.098466][T10433] hsr_slave_0: left promiscuous mode [ 822.238623][T10433] hsr_slave_1: left promiscuous mode [ 822.398635][T10433] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 822.457710][T10433] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 823.148652][ T5279] usb 5-1: USB disconnect, device number 29 [ 823.148718][ C0] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 824.188692][T10433] team0 (unregistering): Port device team_slave_1 removed [ 824.389378][T10433] team0 (unregistering): Port device team_slave_0 removed [ 825.058413][ T1849] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 825.300175][ T1849] usb 5-1: Using ep0 maxpacket: 32 [ 825.468478][ T1849] usb 5-1: config 0 has no interfaces? [ 825.500082][ T1849] usb 5-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 825.546855][ T1849] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.618430][ T1849] usb 5-1: Product: syz [ 825.672464][ T1849] usb 5-1: Manufacturer: syz [ 825.677077][ T1849] usb 5-1: SerialNumber: syz [ 825.730985][ T1849] usb 5-1: config 0 descriptor?? [ 825.814086][T10949] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 825.940316][T10949] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 826.232677][T11036] chnl_net:caif_netlink_parms(): no params data found [ 826.572602][T11094] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 826.598425][T11094] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 826.628659][T11094] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 826.675896][T11094] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 826.689893][T11094] geneve2: entered promiscuous mode [ 826.710321][T11094] geneve2: entered allmulticast mode [ 827.200659][T11094] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 827.214149][T11094] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 827.230698][T11094] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 827.240683][T11094] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 827.905779][ T5279] usb 5-1: USB disconnect, device number 30 [ 828.298591][T11031] bridge0: port 1(bridge_slave_0) entered blocking state [ 828.305797][T11031] bridge0: port 1(bridge_slave_0) entered disabled state [ 828.408725][T11031] bridge_slave_0: entered allmulticast mode [ 828.460370][T11031] bridge_slave_0: entered promiscuous mode [ 828.550911][T11031] bridge0: port 2(bridge_slave_1) entered blocking state [ 828.600590][T11031] bridge0: port 2(bridge_slave_1) entered disabled state [ 828.628897][T11031] bridge_slave_1: entered allmulticast mode [ 828.672018][T11031] bridge_slave_1: entered promiscuous mode [ 829.113082][T11031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 829.236312][T11031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 829.971393][T11031] team0: Port device team_slave_0 added [ 830.019289][T11031] team0: Port device team_slave_1 added [ 830.761116][T11036] bridge0: port 1(bridge_slave_0) entered blocking state [ 830.791940][T11036] bridge0: port 1(bridge_slave_0) entered disabled state [ 830.878459][T11036] bridge_slave_0: entered allmulticast mode [ 830.930088][T11036] bridge_slave_0: entered promiscuous mode [ 830.999264][T11036] bridge0: port 2(bridge_slave_1) entered blocking state [ 831.006435][T11036] bridge0: port 2(bridge_slave_1) entered disabled state [ 831.068744][T11036] bridge_slave_1: entered allmulticast mode [ 831.139060][T11036] bridge_slave_1: entered promiscuous mode [ 831.285707][T11031] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 831.298346][T11031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 831.358495][ T29] audit: type=1326 audit(1722169216.782:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11110 comm="syz.4.1824" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f750e177299 code=0x0 [ 831.463572][T11031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 831.797112][T11031] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 831.888448][T11031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 831.979556][T11031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 832.244589][T11036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 832.589904][T11036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 832.992854][T10949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 834.304384][T11031] hsr_slave_0: entered promiscuous mode [ 834.389329][T11031] hsr_slave_1: entered promiscuous mode [ 834.418467][T11031] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 834.426063][T11031] Cannot create hsr debugfs directory [ 834.540230][T11036] team0: Port device team_slave_0 added [ 834.875827][T11036] team0: Port device team_slave_1 added [ 834.996037][T10949] 8021q: adding VLAN 0 to HW filter on device team0 [ 835.342532][T11036] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 835.382210][T11036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 835.508596][T11036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 836.115909][T11036] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 836.126799][T11101] infiniband syz2: set active [ 836.158336][T11036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 836.239067][T11036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 836.402735][ T5352] bridge0: port 1(bridge_slave_0) entered blocking state [ 836.410075][ T5352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 836.550583][ T5352] bridge0: port 2(bridge_slave_1) entered blocking state [ 836.558057][ T5352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 836.643107][T11101] infiniband syz2: added team_slave_1 [ 837.071660][T11101] syz2: rxe_create_cq: returned err = -12 [ 837.077444][T11101] infiniband syz2: Couldn't create ib_mad CQ [ 837.090342][T11036] hsr_slave_0: entered promiscuous mode [ 837.178780][T11036] hsr_slave_1: entered promiscuous mode [ 837.228437][T11036] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 837.236040][T11036] Cannot create hsr debugfs directory [ 837.509629][T11101] infiniband syz2: Couldn't open port 1 [ 839.987064][ T5238] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 840.002546][ T5238] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 840.010599][ T5238] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 840.018811][ T5238] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 840.027318][ T5238] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 840.035434][ T5238] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 840.270160][T11101] RDS/IB: syz2: added [ 840.274285][T11101] smc: adding ib device syz2 with port count 1 [ 840.288625][T10433] bridge_slave_1: left allmulticast mode [ 840.297066][T10433] bridge_slave_1: left promiscuous mode [ 840.338740][T10433] bridge0: port 2(bridge_slave_1) entered disabled state [ 840.400340][T10433] bridge_slave_0: left allmulticast mode [ 840.406027][T10433] bridge_slave_0: left promiscuous mode [ 840.439287][T10433] bridge0: port 1(bridge_slave_0) entered disabled state [ 840.742022][T11101] smc: ib device syz2 port 1 has pnetid [ 841.879041][T10433] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 841.959323][T10433] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 842.002151][T10433] bond0 (unregistering): Released all slaves [ 842.150520][ T5238] Bluetooth: hci12: command tx timeout [ 843.044165][T10949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 844.268428][ T5238] Bluetooth: hci12: command tx timeout [ 845.119594][T11031] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 845.210272][T11031] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 846.308514][ T5238] Bluetooth: hci12: command tx timeout [ 846.851029][T11031] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 846.942961][T11031] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 847.092774][T10260] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 847.103053][T10260] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 847.111958][T10260] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 847.121637][T10260] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 847.288489][T10260] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 847.296219][T10260] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 848.831190][T10260] Bluetooth: hci12: command tx timeout [ 849.236660][T11031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 849.349080][T10260] Bluetooth: hci13: command tx timeout [ 849.620858][T11031] 8021q: adding VLAN 0 to HW filter on device team0 [ 849.705861][ T5279] bridge0: port 1(bridge_slave_0) entered blocking state [ 849.713196][ T5279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 849.852578][ T5279] bridge0: port 2(bridge_slave_1) entered blocking state [ 849.859812][ T5279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 849.940919][T11036] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 849.999481][T11036] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 850.143535][T11036] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 850.270894][T11036] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 851.448442][T10260] Bluetooth: hci13: command tx timeout [ 851.525776][T11036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 851.691950][T11036] 8021q: adding VLAN 0 to HW filter on device team0 [ 851.783264][T11031] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 851.906608][ T5279] bridge0: port 1(bridge_slave_0) entered blocking state [ 851.913763][ T5279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 852.161782][ T5279] bridge0: port 2(bridge_slave_1) entered blocking state [ 852.169302][ T5279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 852.387086][T11031] veth0_vlan: entered promiscuous mode [ 852.929272][T11031] veth1_vlan: entered promiscuous mode [ 852.994576][T11036] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 853.025379][T11036] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 853.094994][T11031] veth0_macvtap: entered promiscuous mode [ 853.151267][T11031] veth1_macvtap: entered promiscuous mode [ 853.187460][T11031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 853.248650][T11031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.278445][T11031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 853.338415][T11031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.348250][T11031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 853.468539][T11031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.508430][T10260] Bluetooth: hci13: command tx timeout [ 853.556182][T11031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 853.617819][T11031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.678375][T11031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 853.698521][T11031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.749597][T11031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 853.779829][T11031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.809966][T11031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 853.850960][T11031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.878400][T11031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 853.938405][T11031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 853.948242][T11031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 854.008388][T11031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 854.051001][T11031] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 854.492926][T11031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 854.539097][T11031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 854.588380][T11031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 854.638620][T11031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 854.708869][T11031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 854.772562][T11031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 854.804105][T11031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 854.858724][T11031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 854.898178][T11031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 854.928904][T11031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 854.988560][T11031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 855.026361][T11031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 855.075985][T11031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 855.098410][T11031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 855.108224][T11031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 855.165282][T11031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 855.216371][T11031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 855.236995][T11031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 855.276120][T11031] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 855.346306][T11031] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.397124][T11031] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.418372][T11031] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.427101][T11031] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 855.512179][T11036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 855.608720][T10260] Bluetooth: hci13: command tx timeout [ 855.735443][T11036] veth0_vlan: entered promiscuous mode [ 855.811628][T11036] veth1_vlan: entered promiscuous mode [ 855.924606][T11036] veth0_macvtap: entered promiscuous mode [ 855.965650][T11036] veth1_macvtap: entered promiscuous mode [ 856.040000][T11036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 856.087831][T11036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 856.118429][T11036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 856.156805][T11036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 856.198043][T11036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 856.245582][T11036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 856.289944][T11036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 856.328414][T11036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 856.338249][T11036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 856.414084][T11036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 856.458407][T11036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 856.498673][T11036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 856.542751][T11036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 856.590504][T11036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 856.638087][T11036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 856.679896][T11036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 856.718409][T11036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 856.753216][T11036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 856.808521][T11036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 857.008479][T11036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 857.111357][T11036] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 857.529092][T11036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 857.618396][T11036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 857.688531][T11036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 857.758999][T11036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 857.848414][T11036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 857.860199][T11036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 857.870157][T11036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 857.880723][T11036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 857.898448][T11036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 857.914592][T11036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 857.928633][T11036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 857.948492][T11036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 857.958520][T11036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 857.988413][T11036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 857.998240][T11036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 858.182690][T11036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 858.229049][T11036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 858.308476][T11036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 858.438839][T11036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 858.488693][T11036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 858.839294][T11036] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 859.139463][T11036] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.148163][T11036] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.239539][T11036] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.308414][T11036] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 859.753757][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 859.788374][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 860.066739][ T2578] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 860.168463][ T2578] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 860.459830][ T2578] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 860.528851][ T2578] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 860.751555][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 860.759559][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 862.504678][ T29] audit: type=1326 audit(1722169247.932:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11189 comm="syz.4.1844" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f750e177299 code=0x0 [ 862.998560][ T46] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 863.198436][ T46] usb 5-1: Using ep0 maxpacket: 8 [ 863.226001][ T46] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 863.308369][ T46] usb 5-1: config 0 has no interface number 0 [ 863.338459][ T46] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 863.378447][ T46] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 863.418474][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 863.477945][ T46] usb 5-1: config 0 descriptor?? [ 863.558117][ T46] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 865.059986][ T5278] usb 5-1: USB disconnect, device number 31 [ 865.889628][ T5278] iowarrior 5-1:0.1: I/O-Warror #0 now disconnected [ 867.258476][ T29] audit: type=1400 audit(1722169252.652:601): avc: denied { create } for pid=11208 comm="syz.1.1849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 867.418387][ T29] audit: type=1400 audit(1722169252.842:602): avc: denied { listen } for pid=11208 comm="syz.1.1849" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 870.630824][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.655333][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.537849][ T29] audit: type=1326 audit(1722169256.962:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11235 comm="syz.4.1858" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f750e177299 code=0x0 [ 872.309846][T11240] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1859'. [ 874.138461][ T8] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 874.148187][T11246] tipc: Started in network mode [ 874.198185][T11246] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 874.259222][T11246] tipc: Enabled bearer , priority 10 [ 874.518468][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 874.631667][ T8] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 874.658595][ T8] usb 5-1: config 0 has no interface number 0 [ 874.730844][T11248] netlink: 'syz.0.1862': attribute type 1 has an invalid length. [ 874.738755][ T8] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 874.818781][ T8] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 874.878846][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.920478][T11248] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.1862'. [ 874.950200][ T8] usb 5-1: config 0 descriptor?? [ 875.019555][T11248] netlink: 'syz.0.1862': attribute type 1 has an invalid length. [ 875.224505][ T8] usb 5-1: can't set config #0, error -71 [ 875.278663][ T8] usb 5-1: USB disconnect, device number 32 [ 875.380943][ T5278] tipc: Node number set to 10005162 [ 877.848036][T11272] tipc: Enabling of bearer rejected, already enabled [ 878.205171][ T29] audit: type=1326 audit(1722169263.582:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11273 comm="syz.4.1872" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f750e177299 code=0x0 [ 879.078657][ T8] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 879.368401][ T5352] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 879.388446][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 879.498903][ T8] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 879.527369][ T8] usb 5-1: config 0 has no interface number 0 [ 879.558773][ T8] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 879.570881][ T5352] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 879.608400][ T5352] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 879.628610][ T8] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 879.668164][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 879.688465][ T5352] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 879.745590][ T5352] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 879.779617][ T8] usb 5-1: config 0 descriptor?? [ 879.795212][ T5352] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 880.106575][ T5352] usb 2-1: config 0 descriptor?? [ 880.144406][ T8] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 880.390849][ T8] usb 5-1: USB disconnect, device number 33 [ 880.520735][ T8] iowarrior 5-1:0.1: I/O-Warror #0 now disconnected [ 881.235019][T11284] xt_nat: multiple ranges no longer supported [ 881.712005][T11284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1874'. [ 883.672818][ T5352] usbhid 2-1:0.0: can't add hid device: -71 [ 883.731996][ T5352] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 883.829007][ T5352] usb 2-1: USB disconnect, device number 38 [ 884.961442][T11309] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1883'. [ 886.608447][ T29] audit: type=1326 audit(1722169272.002:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11314 comm="syz.1.1885" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdc42977299 code=0x0 [ 886.978538][ T5352] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 887.228399][ T5352] usb 2-1: Using ep0 maxpacket: 8 [ 887.246211][ T5352] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 887.288479][ T5352] usb 2-1: config 0 has no interface number 0 [ 887.296363][ T5352] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 887.378407][ T5352] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 887.418027][ T5352] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.479677][ T5352] usb 2-1: config 0 descriptor?? [ 887.505681][ T5352] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 887.714467][ T5352] usb 2-1: USB disconnect, device number 39 [ 887.741862][ T5352] iowarrior 2-1:0.1: I/O-Warror #0 now disconnected [ 888.886158][ T5238] Bluetooth: hci14: sending frame failed (-49) [ 888.894269][T10260] Bluetooth: hci14: Opcode 0x1003 failed: -49 [ 889.423196][T11321] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 890.821396][ T29] audit: type=1400 audit(1722169276.252:606): avc: denied { append } for pid=11333 comm="syz.1.1892" name="usbmon0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 893.622723][ T29] audit: type=1326 audit(1722169279.052:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11343 comm="syz.4.1896" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f750e177299 code=0x0 [ 894.188378][ T5278] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 894.428434][ T5278] usb 5-1: Using ep0 maxpacket: 8 [ 894.455582][ T5278] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 894.513102][ T5278] usb 5-1: config 0 has no interface number 0 [ 894.559171][ T5278] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 894.565452][ T5238] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 894.597382][ T5238] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 894.619826][ T5238] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 894.708955][ T5278] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 894.729203][ T5238] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 894.738627][ T5278] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.748605][ T5278] usb 5-1: config 0 descriptor?? [ 894.796324][ T5238] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 894.804042][ T5278] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 894.815111][ T5238] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 895.369084][ T5278] usb 5-1: USB disconnect, device number 34 [ 895.395473][ T5278] iowarrior 5-1:0.1: I/O-Warror #0 now disconnected [ 896.949405][T10260] Bluetooth: hci14: command tx timeout [ 897.318450][ T29] audit: type=1400 audit(1722169282.742:608): avc: denied { execute } for pid=11350 comm="syz.1.1897" dev="hugetlbfs" ino=41586 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 897.506297][ T29] audit: type=1400 audit(1722169282.742:609): avc: denied { execute_no_trans } for pid=11350 comm="syz.1.1897" path=2F6D656D66643A202864656C6574656429 dev="hugetlbfs" ino=41586 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 898.292760][T11357] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1899'. [ 899.038443][T10260] Bluetooth: hci14: command tx timeout [ 900.277255][ T5238] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 900.292211][ T5238] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 900.305314][ T5238] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 900.315446][ T5238] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 900.642887][ T5238] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 900.653316][ T5238] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 901.109458][T10260] Bluetooth: hci14: command tx timeout [ 902.878487][T10260] Bluetooth: hci15: command tx timeout [ 903.188765][T10260] Bluetooth: hci14: command tx timeout [ 903.738442][ T5278] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 903.998224][ T5278] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 904.039043][ T5278] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 904.089875][ T5278] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 904.163643][ T5278] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 904.238547][ T5278] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.288133][ T5278] usb 5-1: config 0 descriptor?? [ 904.968389][T10260] Bluetooth: hci15: command tx timeout [ 905.049494][ T5278] plantronics 0003:047F:FFFF.0018: No inputs registered, leaving [ 905.060165][ T5278] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 906.475573][ T5238] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 906.484839][ T5238] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 906.538827][ T5238] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 906.604471][ T5238] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 906.620908][ T5238] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 906.638903][ T5238] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 907.028793][ T5238] Bluetooth: hci15: command tx timeout [ 907.082740][ T9] usb 5-1: USB disconnect, device number 35 [ 908.708462][ T5238] Bluetooth: hci16: command tx timeout [ 909.108802][ T5238] Bluetooth: hci15: command tx timeout [ 910.520283][T10260] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 910.532059][T10260] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 910.542185][T10260] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 910.621778][T10260] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 910.630178][T10260] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 910.637516][T10260] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 910.788469][T10260] Bluetooth: hci16: command tx timeout [ 911.363887][ T5238] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 911.378820][ T5238] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 911.408687][ T5238] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 911.438638][ T5238] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 911.448609][ T5238] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 911.457328][ T5238] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 912.710875][T10260] Bluetooth: hci8: command tx timeout [ 912.869640][T10260] Bluetooth: hci16: command tx timeout [ 913.608452][T10260] Bluetooth: hci17: command tx timeout [ 914.798385][T10260] Bluetooth: hci8: command tx timeout [ 914.948564][T10260] Bluetooth: hci16: command tx timeout [ 915.678434][T10260] Bluetooth: hci17: command tx timeout [ 916.868468][T10260] Bluetooth: hci8: command tx timeout [ 917.758495][T10260] Bluetooth: hci17: command tx timeout [ 918.984115][T10260] Bluetooth: hci8: command tx timeout [ 919.840501][T10260] Bluetooth: hci17: command tx timeout [ 932.089066][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.095413][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 939.268556][T11388] Bluetooth: hci5: command 0x0406 tx timeout [ 939.275998][T11388] Bluetooth: hci11: command 0x0406 tx timeout [ 956.060292][ T5238] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 956.088612][ T5238] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 956.097831][ T5238] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 956.108985][ T5238] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 956.118547][ T5238] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3 [ 956.125893][ T5238] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 958.156066][ T5238] Bluetooth: hci18: command tx timeout [ 960.238400][ T5238] Bluetooth: hci18: command tx timeout [ 961.259786][ T5238] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 961.271622][ T5238] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 961.279838][ T5238] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 961.288432][ T5238] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 961.348903][ T5238] Bluetooth: hci19: unexpected cc 0x0c25 length: 249 > 3 [ 961.368609][ T5238] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 962.318380][ T5238] Bluetooth: hci18: command tx timeout [ 963.438513][T10260] Bluetooth: hci19: command tx timeout [ 964.388573][T10260] Bluetooth: hci18: command tx timeout [ 964.868792][T10260] Bluetooth: hci12: command 0x0406 tx timeout [ 965.518475][ T5238] Bluetooth: hci19: command tx timeout [ 967.588443][ T5238] Bluetooth: hci19: command tx timeout [ 968.179627][T11388] Bluetooth: hci20: unexpected cc 0x0c03 length: 249 > 1 [ 968.198596][T11388] Bluetooth: hci20: unexpected cc 0x1003 length: 249 > 9 [ 968.248584][T11388] Bluetooth: hci20: unexpected cc 0x1001 length: 249 > 9 [ 968.259976][T11388] Bluetooth: hci20: unexpected cc 0x0c23 length: 249 > 4 [ 968.268468][T11388] Bluetooth: hci20: unexpected cc 0x0c25 length: 249 > 3 [ 968.296046][T11388] Bluetooth: hci20: unexpected cc 0x0c38 length: 249 > 2 [ 969.698365][T11388] Bluetooth: hci19: command tx timeout [ 970.028456][T11388] Bluetooth: hci13: command 0x0406 tx timeout [ 970.142313][T10260] Bluetooth: hci21: unexpected cc 0x0c03 length: 249 > 1 [ 970.161067][T10260] Bluetooth: hci21: unexpected cc 0x1003 length: 249 > 9 [ 970.206434][T10260] Bluetooth: hci21: unexpected cc 0x1001 length: 249 > 9 [ 970.260316][T10260] Bluetooth: hci21: unexpected cc 0x0c23 length: 249 > 4 [ 970.268235][T10260] Bluetooth: hci21: unexpected cc 0x0c25 length: 249 > 3 [ 970.275749][T10260] Bluetooth: hci21: unexpected cc 0x0c38 length: 249 > 2 [ 970.468561][T11388] Bluetooth: hci20: command tx timeout [ 971.864996][T10260] Bluetooth: hci22: unexpected cc 0x0c03 length: 249 > 1 [ 971.900577][T10260] Bluetooth: hci22: unexpected cc 0x1003 length: 249 > 9 [ 971.929892][T10260] Bluetooth: hci22: unexpected cc 0x1001 length: 249 > 9 [ 971.988841][T10260] Bluetooth: hci22: unexpected cc 0x0c23 length: 249 > 4 [ 972.000303][T10260] Bluetooth: hci22: unexpected cc 0x0c25 length: 249 > 3 [ 972.007735][T10260] Bluetooth: hci22: unexpected cc 0x0c38 length: 249 > 2 [ 972.389428][T11388] Bluetooth: hci21: command tx timeout [ 972.567749][T11388] Bluetooth: hci20: command tx timeout [ 974.068775][T11388] Bluetooth: hci22: command tx timeout [ 974.468862][T11388] Bluetooth: hci21: command tx timeout [ 974.628610][T11388] Bluetooth: hci20: command tx timeout [ 976.148492][T11388] Bluetooth: hci22: command tx timeout [ 976.548714][T11388] Bluetooth: hci21: command tx timeout [ 976.708617][T11388] Bluetooth: hci20: command tx timeout [ 978.238342][T11388] Bluetooth: hci22: command tx timeout [ 978.628734][T11388] Bluetooth: hci21: command tx timeout [ 980.308559][T11388] Bluetooth: hci22: command tx timeout [ 993.531523][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.537859][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 995.430116][ T30] INFO: task kworker/u8:5:10433 blocked for more than 143 seconds. [ 995.438041][ T30] Not tainted 6.10.0-syzkaller-12881-g6342649c33d2 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 995.698802][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 995.707523][ T30] task:kworker/u8:5 state:D stack:24272 pid:10433 tgid:10433 ppid:2 flags:0x00004000 [ 997.448434][ T30] Workqueue: netns cleanup_net [ 997.453266][ T30] Call Trace: [ 997.456553][ T30] [ 997.498393][ T30] __schedule+0xe37/0x5490 [ 997.502851][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 997.508046][ T30] ? hlock_class+0x4e/0x130 [ 997.558377][ T30] ? mark_lock+0xb5/0xc60 [ 997.562755][ T30] ? hlock_class+0x4e/0x130 [ 997.567246][ T30] ? __pfx___schedule+0x10/0x10 [ 997.629546][ T30] ? schedule+0x298/0x350 [ 997.633933][ T30] ? __pfx_lock_release+0x10/0x10 [ 997.648657][ T30] ? rwsem_down_write_slowpath+0x48a/0x12a0 [ 997.654578][ T30] schedule+0xe7/0x350 [ 997.678426][ T30] schedule_preempt_disabled+0x13/0x30 [ 997.698344][ T30] rwsem_down_write_slowpath+0x539/0x12a0 [ 997.704101][ T30] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 997.738434][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 997.743495][ T30] ? __pfx___might_resched+0x10/0x10 [ 997.758426][ T30] down_write+0x1d8/0x200 [ 997.762881][ T30] ? __pfx_down_write+0x10/0x10 [ 997.767726][ T30] rdma_dev_exit_net+0x178/0x590 [ 997.808409][ T30] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 997.813983][ T30] ? __pfx___might_resched+0x10/0x10 [ 997.828451][ T30] ? __pfx_cfg80211_pernet_exit+0x10/0x10 [ 997.834289][ T30] ? mutex_is_locked+0x12/0x50 [ 997.869125][ T30] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 997.874614][ T30] ops_exit_list+0xb0/0x180 [ 997.898422][ T30] cleanup_net+0x5b7/0xbf0 [ 997.902887][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 997.907824][ T30] process_one_work+0x9c5/0x1b40 [ 997.938392][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 997.943362][ T30] ? __pfx_process_one_work+0x10/0x10 [ 997.968340][ T30] ? assign_work+0x1a0/0x250 [ 997.972956][ T30] worker_thread+0x6c8/0xf20 [ 997.977540][ T30] ? __kthread_parkme+0x148/0x220 [ 998.046847][ T30] ? __pfx_worker_thread+0x10/0x10 [ 998.078429][ T30] kthread+0x2c1/0x3a0 [ 998.082538][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 998.087731][ T30] ? __pfx_kthread+0x10/0x10 [ 998.196237][ T30] ret_from_fork+0x45/0x80 [ 998.218416][ T30] ? __pfx_kthread+0x10/0x10 [ 998.223040][ T30] ret_from_fork_asm+0x1a/0x30 [ 998.227800][ T30] [ 998.278433][ T30] INFO: task syz-executor:11128 blocked for more than 146 seconds. [ 998.286529][ T30] Not tainted 6.10.0-syzkaller-12881-g6342649c33d2 #0 [ 998.328388][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 998.337177][ T30] task:syz-executor state:D stack:25520 pid:11128 tgid:11128 ppid:1 flags:0x00004006 [ 998.378353][ T30] Call Trace: [ 998.381660][ T30] [ 998.384578][ T30] __schedule+0xe37/0x5490 [ 998.418383][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 998.423648][ T30] ? hlock_class+0x4e/0x130 [ 998.428139][ T30] ? __pfx___schedule+0x10/0x10 [ 998.458334][ T30] ? schedule+0x298/0x350 [ 998.462700][ T30] ? __pfx_lock_release+0x10/0x10 [ 998.467714][ T30] ? rwsem_down_read_slowpath+0x2c4/0xb20 [ 998.501824][ T30] schedule+0xe7/0x350 [ 998.505933][ T30] schedule_preempt_disabled+0x13/0x30 [ 998.528395][ T30] rwsem_down_read_slowpath+0x61e/0xb20 [ 998.533979][ T30] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 998.578420][ T30] ? __pfx___might_resched+0x10/0x10 [ 998.583737][ T30] down_read+0x124/0x330 [ 998.587971][ T30] ? __pfx_down_read+0x10/0x10 [ 998.635539][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 998.641063][ T30] ? __pfx___might_resched+0x10/0x10 [ 998.646352][ T30] rdma_dev_init_net+0x2a7/0x530 [ 998.688401][ T30] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 998.693917][ T30] ? __kmalloc_noprof+0x207/0x400 [ 998.728363][ T30] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 998.733867][ T30] ops_init+0xb9/0x650 [ 998.737932][ T30] setup_net+0x435/0xb40 [ 998.771327][ T30] ? __pfx_setup_net+0x10/0x10 [ 998.776116][ T30] ? down_read_killable+0xcc/0x380 [ 998.818406][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 998.823991][ T30] ? read_word_at_a_time+0xe/0x20 [ 998.848396][ T30] copy_net_ns+0x2f0/0x670 [ 998.852847][ T30] create_new_namespaces+0x3ea/0xb10 [ 998.858131][ T30] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 998.918436][ T30] ksys_unshare+0x419/0x970 [ 998.922977][ T30] ? __fput+0x6c5/0xbb0 [ 998.927128][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 998.968371][ T30] __x64_sys_unshare+0x31/0x40 [ 998.973179][ T30] do_syscall_64+0xcd/0x250 [ 998.977672][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 999.018370][ T30] RIP: 0033:0x7f6f4f9789f7 [ 999.022834][ T30] RSP: 002b:00007fffc49be4f8 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 999.058368][ T30] RAX: ffffffffffffffda RBX: 00007f6f4fb05f40 RCX: 00007f6f4f9789f7 [ 999.066380][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 999.108507][ T30] RBP: 00007f6f4fb06a38 R08: 0000000000000000 R09: 0000000000000000 [ 999.158387][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000c [ 999.189137][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000009 [ 999.197145][ T30] [ 999.228402][ T30] INFO: task syz-executor:11146 blocked for more than 147 seconds. [ 999.236298][ T30] Not tainted 6.10.0-syzkaller-12881-g6342649c33d2 #0 [ 999.278440][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 999.287116][ T30] task:syz-executor state:D stack:27072 pid:11146 tgid:11146 ppid:1 flags:0x00004006 [ 999.348669][ T30] Call Trace: [ 999.351962][ T30] [ 999.354879][ T30] __schedule+0xe37/0x5490 [ 999.398401][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 999.403643][ T30] ? hlock_class+0x4e/0x130 [ 999.408165][ T30] ? mark_lock+0xb5/0xc60 [ 999.448401][ T30] ? __pfx___schedule+0x10/0x10 [ 999.453276][ T30] ? schedule+0x298/0x350 [ 999.457598][ T30] ? __pfx_lock_release+0x10/0x10 [ 999.499185][ T30] ? rwsem_down_read_slowpath+0x2c4/0xb20 [ 999.505376][ T30] schedule+0xe7/0x350 [ 999.551574][ T30] schedule_preempt_disabled+0x13/0x30 [ 999.557064][ T30] rwsem_down_read_slowpath+0x61e/0xb20 [ 999.688414][ T30] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 999.694555][ T30] ? __pfx___might_resched+0x10/0x10 [ 1000.948573][ T30] down_read+0x124/0x330 [ 1000.958351][ T30] ? __pfx_down_read+0x10/0x10 [ 1000.963180][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1001.023771][ T30] ? __pfx___might_resched+0x10/0x10 [ 1001.059068][ T30] rdma_dev_init_net+0x2a7/0x530 [ 1001.064092][ T30] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 1001.088421][ T30] ? __kmalloc_noprof+0x207/0x400 [ 1001.103481][ T30] ? __pfx_rdma_dev_init_net+0x10/0x10 [ 1001.128465][ T30] ops_init+0xb9/0x650 [ 1001.132598][ T30] setup_net+0x435/0xb40 [ 1001.148415][ T30] ? __pfx_setup_net+0x10/0x10 [ 1001.153205][ T30] ? down_read_killable+0xcc/0x380 [ 1001.208458][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 1001.214062][ T30] ? read_word_at_a_time+0xe/0x20 [ 1001.248433][ T30] copy_net_ns+0x2f0/0x670 [ 1001.252889][ T30] create_new_namespaces+0x3ea/0xb10 [ 1001.258176][ T30] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1001.408480][ T30] ksys_unshare+0x419/0x970 [ 1001.413045][ T30] ? __fput+0x6c5/0xbb0 [ 1001.417199][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 1001.488447][ T30] __x64_sys_unshare+0x31/0x40 [ 1001.493288][ T30] do_syscall_64+0xcd/0x250 [ 1001.568423][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1001.628551][ T30] RIP: 0033:0x7fe0a83789f7 [ 1001.633020][ T30] RSP: 002b:00007ffca4c586e8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 1001.698457][ T30] RAX: ffffffffffffffda RBX: 00007fe0a8505f40 RCX: 00007fe0a83789f7 [ 1001.728357][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 1001.758477][ T30] RBP: 00007fe0a8506a38 R08: 0000000000000000 R09: 0000000000000000 [ 1001.766498][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 1001.838837][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000009 [ 1001.880861][ T30] [ 1001.898511][ T30] [ 1001.898511][ T30] Showing all locks held in the system: [ 1001.906264][ T30] 1 lock held by khungtaskd/30: [ 1001.985507][ T30] #0: ffffffff8ddb5220 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x75/0x340 [ 1002.038455][ T30] 3 locks held by kworker/u8:2/35: [ 1002.043642][ T30] 3 locks held by kworker/u8:9/2530: [ 1002.092378][ T30] #0: ffff888016bc3148 ((wq_completion)gid-cache-wq){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 1002.158416][ T30] #1: ffffc9000946fd80 ((work_completion)(&work->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 1002.218411][ T30] #2: ffffffff8f65c3b0 (devices_rwsem){++++}-{3:3}, at: ib_enum_all_roce_netdevs+0x83/0x140 [ 1002.268373][ T30] 2 locks held by getty/4974: [ 1002.273071][ T30] #0: ffff88802b1740a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1002.358424][ T30] #1: ffffc9000311b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfc8/0x1490 [ 1002.418383][ T30] 1 lock held by syz.4.15/5348: [ 1002.438448][ T30] 1 lock held by syz.2.201/5895: [ 1002.443424][ T30] 1 lock held by syz.2.318/6259: [ 1002.495206][ T30] 1 lock held by syz.4.1165/8886: [ 1002.528385][ T30] 1 lock held by syz.3.1309/9380: [ 1002.533458][ T30] 1 lock held by syz.0.1341/9488: [ 1002.568933][ T30] 4 locks held by kworker/u8:5/10433: [ 1002.588397][ T30] #0: ffff8880166e3148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1277/0x1b40 [ 1002.668333][ T30] #1: ffffc9000359fd80 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1b40 [ 1002.738452][ T30] #2: ffffffff8fa08590 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xbb/0xbf0 [ 1002.747858][ T30] #3: ffffffff8f65c130 (rdma_nets_rwsem){++++}-{3:3}, at: rdma_dev_exit_net+0x178/0x590 [ 1002.818381][ T30] 1 lock held by syz.0.1680/10573: [ 1002.823536][ T30] 7 locks held by syz.3.1821/11101: [ 1002.868456][ T30] 3 locks held by syz-executor/11128: [ 1002.918364][ T30] #0: ffffffff8fa08590 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x2cb/0x670 [ 1002.928373][ T30] #1: ffffffff8f65c3b0 (devices_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x234/0x530 [ 1002.938105][ T30] #2: ffffffff8f65c130 (rdma_nets_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x2a7/0x530 [ 1003.038384][ T30] 3 locks held by syz-executor/11146: [ 1003.068418][ T30] #0: ffffffff8fa08590 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x2cb/0x670 [ 1003.077843][ T30] #1: ffffffff8f65c3b0 (devices_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x234/0x530 [ 1003.128359][ T30] #2: ffffffff8f65c130 (rdma_nets_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x2a7/0x530 [ 1003.208367][ T30] 3 locks held by syz.0.1881/11303: [ 1003.248539][ T30] #0: ffffffff95225518 (&rdma_nl_types[idx].sem){.+.+}-{3:3}, at: rdma_nl_rcv_msg+0x16a/0x6e0 [ 1003.298462][ T30] #1: ffffffff8f66fc50 (link_ops_rwsem){++++}-{3:3}, at: nldev_newlink+0x2d7/0x660 [ 1003.307949][ T30] #2: ffffffff8f65c3b0 (devices_rwsem){++++}-{3:3}, at: ib_register_device+0x88/0xbf0 [ 1003.408390][ T30] 2 locks held by syz-executor/11348: [ 1003.415452][ T30] #0: ffffffff8fa08590 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x2cb/0x670 [ 1003.478510][ T30] #1: ffffffff8f65c3b0 (devices_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x234/0x530 [ 1003.508423][ T30] 1 lock held by syz.1.1902/11363: [ 1003.513575][ T30] #0: ffffffff8ddc0880 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x48/0x6c0 [ 1003.620748][ T30] 2 locks held by syz-executor/11368: [ 1003.626176][ T30] #0: ffffffff8fa08590 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x2cb/0x670 [ 1003.740089][ T30] #1: ffffffff8f65c3b0 (devices_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x234/0x530 [ 1003.818381][ T30] 2 locks held by syz-executor/11380: [ 1003.838393][ T30] #0: ffffffff8fa08590 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x2cb/0x670 [ 1003.847881][ T30] #1: ffffffff8f65c3b0 (devices_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x234/0x530 [ 1003.948472][ T30] 2 locks held by syz-executor/11384: [ 1003.958547][ T30] #0: ffffffff8fa08590 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x2cb/0x670 [ 1003.968012][ T30] #1: ffffffff8f65c3b0 (devices_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x234/0x530 [ 1004.078337][ T30] 2 locks held by syz-executor/11386: [ 1004.083751][ T30] #0: ffffffff8fa08590 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x2cb/0x670 [ 1004.128386][ T30] #1: ffffffff8f65c3b0 (devices_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x234/0x530 [ 1004.208362][ T30] 2 locks held by syz-executor/11391: [ 1004.213789][ T30] #0: ffffffff8fa08590 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x2cb/0x670 [ 1004.328340][ T30] #1: ffffffff8f65c3b0 (devices_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x234/0x530 [ 1004.389718][ T30] 2 locks held by syz-executor/11394: [ 1004.468439][ T30] #0: ffffffff8fa08590 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x2cb/0x670 [ 1004.518329][ T30] #1: ffffffff8f65c3b0 (devices_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x234/0x530 [ 1004.538136][ T30] 2 locks held by syz-executor/11397: [ 1004.648369][ T30] #0: ffffffff8fa08590 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x2cb/0x670 [ 1004.698381][ T30] #1: ffffffff8f65c3b0 (devices_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x234/0x530 [ 1004.778599][ T30] 2 locks held by syz-executor/11400: [ 1004.784019][ T30] #0: ffffffff8fa08590 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x2cb/0x670 [ 1004.878444][ T30] #1: ffffffff8f65c3b0 (devices_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x234/0x530 [ 1004.888203][ T30] 2 locks held by syz-executor/11403: [ 1004.968431][ T30] #0: ffffffff8fa08590 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x2cb/0x670 [ 1004.998738][ T30] #1: ffffffff8f65c3b0 (devices_rwsem){++++}-{3:3}, at: rdma_dev_init_net+0x234/0x530 [ 1005.048353][ T30] 2 locks held by dhcpcd/11405: [ 1005.068397][ T30] #0: ffff888023004258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x2c/0xf60 [ 1005.148413][ T30] #1: ffffffff8ddc09b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: exp_funnel_lock+0x282/0x3b0 [ 1005.208390][ T30] [ 1005.228397][ T30] ============================================= [ 1005.228397][ T30] [ 1005.236835][ T30] NMI backtrace for cpu 1 [ 1005.241151][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-syzkaller-12881-g6342649c33d2 #0 [ 1005.251288][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1005.261351][ T30] Call Trace: [ 1005.264644][ T30] [ 1005.267591][ T30] dump_stack_lvl+0x116/0x1f0 [ 1005.272278][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 1005.277225][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1005.283300][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1005.289291][ T30] watchdog+0xf4e/0x1280 [ 1005.293552][ T30] ? __pfx_watchdog+0x10/0x10 [ 1005.298234][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 1005.303442][ T30] ? __kthread_parkme+0x148/0x220 [ 1005.308911][ T30] ? __pfx_watchdog+0x10/0x10 [ 1005.313592][ T30] kthread+0x2c1/0x3a0 [ 1005.317832][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1005.323039][ T30] ? __pfx_kthread+0x10/0x10 [ 1005.327642][ T30] ret_from_fork+0x45/0x80 [ 1005.332088][ T30] ? __pfx_kthread+0x10/0x10 [ 1005.336768][ T30] ret_from_fork_asm+0x1a/0x30 [ 1005.341550][ T30] [ 1005.345958][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1005.352105][ C0] NMI backtrace for cpu 0 [ 1005.352118][ C0] CPU: 0 UID: 0 PID: 5895 Comm: syz.2.201 Not tainted 6.10.0-syzkaller-12881-g6342649c33d2 #0 [ 1005.352143][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1005.352155][ C0] RIP: 0010:lock_is_held_type+0x54/0x150 [ 1005.352189][ C0] Code: 44 f1 74 85 c0 0f 85 ce 00 00 00 65 4c 8b 25 a3 94 f2 74 41 8b 94 24 dc 0a 00 00 85 d2 0f 85 b6 00 00 00 48 89 fd 41 89 f6 9c <8f> 04 24 fa 48 c7 c7 c0 c7 4c 8b 45 31 ff e8 09 17 00 00 4d 8d ac [ 1005.352208][ C0] RSP: 0018:ffffc900039d7a90 EFLAGS: 00000246 [ 1005.352225][ C0] RAX: 0000000000000000 RBX: 1ffff9200073af5d RCX: 0000000000000001 [ 1005.352239][ C0] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: ffffffff8ddb5160 [ 1005.352253][ C0] RBP: ffffffff8ddb5160 R08: ffffffff8478a8a7 R09: 0000000000000000 [ 1005.352266][ C0] R10: ffffc900039d7c98 R11: 0000000000000000 R12: ffff888021a9bc00 [ 1005.352280][ C0] R13: 00000000ffffffff R14: 00000000ffffffff R15: 0000000000000000