last executing test programs: 4m20.457741322s ago: executing program 1 (id=296): socket$nl_netfilter(0x10, 0x3, 0xc) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {0x0, 0x0, 0x0, 0x40}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffffe, 0x0, 0x0, 0xffffff76, 0x80000, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0xfffff262], [0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xa90d, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x45c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) getdents(r3, 0x0, 0x0) lseek(r3, 0x38, 0x1) 4m18.388987506s ago: executing program 1 (id=287): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = fsopen(&(0x7f00000004c0)='gadgetfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) close_range(r3, 0xffffffffffffffff, 0x0) 4m17.000174255s ago: executing program 1 (id=289): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() ioperm(0x0, 0x0, 0x8) shutdown(0xffffffffffffffff, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000680)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600004, 0x15) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x40010) 4m15.949178842s ago: executing program 1 (id=291): creat(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) rename(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) creat(0x0, 0x0) mlock2(&(0x7f0000ff6000/0x4000)=nil, 0x4000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r1, 0x2, 0x2, 0x0, @link_id}, 0x20) 4m15.722330498s ago: executing program 1 (id=293): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8b2f, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x800000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x90) semtimedop(0x0, 0x0, 0x0, 0x0) syz_emit_vhci(0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket(0x14, 0x1, 0x5) 4m12.861069119s ago: executing program 1 (id=303): socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x4, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r0 = userfaultfd(0x80001) shmdt(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000340)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r3, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) 3m32.791324162s ago: executing program 3 (id=375): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000100)={0x84, @remote, 0x0, 0x0, 'sh\x00', 0x1}, 0x2c) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) 3m30.815272486s ago: executing program 3 (id=378): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=@gettaction={0x2c, 0x32, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xffff}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20004}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) syz_usb_connect(0x0, 0x41, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000080)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x3, 0x0) 3m27.326327392s ago: executing program 3 (id=387): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000004000000000000000000850000", @ANYRES32=r3], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x2a020400) semtimedop(0x0, &(0x7f0000000000), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x40}}}, 0x7) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000003080)={0x29c, 0x23, 0x1, 0x0, 0x0, "", [@nested={0x28c, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076060000001dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd8c25027ee5251b46fd001ade28bc17a024928a1016d5a00b82c159f270ed9b3ad1622d034b0d859ad83cd4e4238574a6fdc4499a8076c32959ea31bb6b744b0a96fc1a59ac4d04424911934049d65d97cfc11806fb0619ba4007af3f0110c92f826d2f90c3d50c7591625f40e6f6b163f5caefea45f5f606467719022a4a538ae03e99562aed5a0cca18b134fa238be21c9d0474216cb250ee441f04d4343f6a69cfac2964b49e3329675346e12e236f2ec2a5dbb8cad405bd6ba1e8e4b05948466dd5fe8b4b6cbc857637ef614020d4a7a53f0d6f368916dfff6e70e6193511a11753bcd004286b2bd70d155da5ea550aa65b09d671efe57cb69939837c5a1034812c604327647676fdde5dfa52a082d74c8ff1f6e0aa5af8ec650ac86f0c22cc03843b8d2156063dbd1be2f7f25f45107bacfad348b681135a98bd19783f50feffffffffffffff6785bccbaf2d32e35a03b01472f81078b878f6b8d0920cfc597633ec8e411a46154a7e87d89b0863c5b3217e35b0033d1b9b4c52886981a716b79c847dd01200c7242b"]}]}, 0x29c}], 0x1}, 0x0) 3m25.531526179s ago: executing program 3 (id=390): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000200000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x3, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_emit_ethernet(0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="0180c2030000aaaaaaaaaa0086dd600101000008fc020000000000000000000000000000ff02000000000000000000000000000100000000000890780000"], 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000003c0)={0x2000015f, &(0x7f0000000180)}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x14, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000850000002300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000001008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x5, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x86}]}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x7f) write$binfmt_script(r3, &(0x7f0000000000)={'#! ', './file1'}, 0xb) close(r3) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) execveat(r3, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000040), 0xfff, 0x8c1c0) 3m24.821384227s ago: executing program 3 (id=391): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioprio_set$pid(0x0, 0x0, 0x4004) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000000203010200000000000000000000000e080001000100000909000200000009990100000800000040000000"], 0x30}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x46, 0x0, 0xffa5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r1}, 0x10) unshare(0x6a040000) bind$alg(r0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 2m37.715343744s ago: executing program 2 (id=455): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x15, 0x1, 0x3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000400)={r5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x9, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x10001, 0x401f, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) close_range(r0, 0xffffffffffffffff, 0x0) 2m37.191263148s ago: executing program 2 (id=456): r0 = openat$smackfs_ipv6host(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r1, 0xc0104320, &(0x7f0000001040)={0xa, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) write$qrtrtun(0xffffffffffffffff, &(0x7f00000000c0), 0x0) write$smackfs_ipv6host(r0, 0x0, 0xb2) 2m36.115010704s ago: executing program 2 (id=457): openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x183822, 0x0) ioctl$EVIOCGSW(0xffffffffffffffff, 0x5452, &(0x7f0000001440)=""/4103) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) mmap$snddsp(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000340), 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) mount$9p_tcp(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e22']) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r4 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f00000000c0)) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000100)={0x100001, 0x0, 0x0, {r4}}, 0x20) mlock2(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xf, 0x32, 0xffffffffffffffff, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 2m35.840967386s ago: executing program 2 (id=458): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x42000, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102379, 0x18feb}], 0x1, 0x0, 0x2) socket$can_bcm(0x1d, 0x2, 0x2) socket$can_bcm(0x1d, 0x2, 0x2) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000100)=';e\x00\x00\xa4\xd8\xe0\x9c\x7f9\x8aZ]3N\xbb\xe1^\x9c\xe1\x9b6s$0Y\xf8\x90\x00\x00\x00\x00\xd2~l\xf6\x12\xde\xdd\xd5\x1d\x96\xb0a\xad\xcd\x16\xd8G\xae\xd9DZm\xabO\xad\x11%\x7f`@\x16c\xc0\xb6\x1f\xe3\x00\x1a_\xc7\xbf\xa7T\xbe\x13\x8b\xb3r\x8fL\xe6\xba\xe7\x18\xb4$BIj\xa3\xc9\xc6|\x9b\x88\xddPx\x02I\xde\xe8\xcd\x02\xc1\xedc2\x06\xcbM\xfb\x13jZ\x96\xeej\x9b\xe4XjN\xb9>\xdf3U\r \x8dh8T/h)\x90\xff\x8d\xd9\x89\xab\xf8P\xacYtk\xa3\xed\xfa*8\x13\b\xce\xf8z\xed\xadnz\x96\xa3\x9a9R\xd9]\xe11We\xfe3\xe06\x1a^\x04^\xef\xa3\x0fU\x9b1\xc6J\x83\x9d[\\a\xfd\xdc\xa1\xcd\xbe\x9b\xc5z7\xe8VP\x89\x16MK`\xe5\x137\b\x00\x00\x00\xd5\x01\xea\x98\xe6Z\x95j\xe3\x0ek>\x14\x80\rXS\xce\xf9\x0e\x89\xc4\xc6\x1bOm4Lla\r\xce\x17\xb5r&\xf3\x96\xbc\xc39\xa7\x95\xd9F\x17', 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @dev}}}, 0x108) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x108) close_range(r1, 0xffffffffffffffff, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x108) 2m33.929157144s ago: executing program 2 (id=459): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", "05e2e505", "12000700"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setuid(0xee00) setuid(0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000700)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x35, 0x0, "f5fe9c103abe0b65544e0980519f38f54dd5f87ecc377210bd44fe7e1375550831c5f6dd769f5a1d175f47a8b941c8e568ca41e8da841f4f18f1ea6b206d495119ac37c29f4b384d0a9181566cfc4a1b"}, 0xd8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x2, 0x0, @loopback}, 0x1c) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f00000012c0)={0x2, {{0x2, 0x0, @multicast2}}, 0x0, 0xa, [{{0x2, 0x0, @broadcast}}, {{0x2, 0x0, @local}}, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x0, @loopback}}, {{0x2, 0x0, @empty}}, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @remote}}, {{0x2, 0x0, @loopback}}]}, 0x590) setsockopt$inet_group_source_req(r2, 0x0, 0x2b, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) 2m33.173875624s ago: executing program 2 (id=463): r0 = mq_open(&(0x7f00000019c0)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x80, 0x0) mq_getsetattr(r0, 0x0, &(0x7f0000000180)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'gre0\x00'}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x32}, 0x9c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read(r2, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0xc, 0xa031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00007fe000/0x800000)=nil, 0x800000, 0x19) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) mount$tmpfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r4]) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) mount(&(0x7f0000000100)=@nullb, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000000)='ntfs3\x00', 0x0, &(0x7f0000000340)) 2m26.693529929s ago: executing program 0 (id=469): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x50) r1 = fanotify_init(0x0, 0x0) fanotify_mark(r1, 0x105, 0x4800003a, r0, 0x0) fanotify_mark(r1, 0x1, 0x40001001, r0, 0x0) fanotify_mark(r1, 0x80, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$sock(r2, &(0x7f0000003780)=[{{&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x80, 0x0, 0x0, &(0x7f0000003700)=[@mark={{0x14}}], 0x18}}], 0x1, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000540)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @broadcast}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x15}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = socket(0xa, 0x0, 0x0) getsockopt$bt_BT_SECURITY(r3, 0x29, 0x4d, 0x0, 0x20000000) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) close(0xffffffffffffffff) socket$inet(0x2, 0x4000000000000001, 0x0) r5 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$KVM_NMI(r5, 0xae9a) 2m26.136800277s ago: executing program 0 (id=470): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x9) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f00000001c0)=[{&(0x7f000001a040)=""/102385, 0x18ff1}, {&(0x7f0000000400)=""/209, 0xd1}], 0x2, 0x0, 0x0) r2 = syz_io_uring_setup(0x117, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, r1}, &(0x7f00000002c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) r5 = socket$tipc(0x1e, 0x2, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x41}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000200)={0x0, 0x0, 0x3}, 0x10) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x21, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000300)=""/215, 0xd7, 0xc}) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 2m22.652764859s ago: executing program 0 (id=472): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x68}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x41}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet6(0x10, 0x3, 0x0) socket$inet6(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_rdma(0x10, 0x3, 0x14) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) shutdown(0xffffffffffffffff, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000040)={0x20, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r1}, @typed={0x8, 0x0, 0x0, 0x0, @fd}]}, 0x20}], 0x1}, 0x0) 2m20.592818633s ago: executing program 0 (id=484): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) keyctl$invalidate(0x15, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000340)=""/138, 0x8a) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002180)='/sys/power/sync_on_suspend', 0xa82, 0x0) write$binfmt_misc(r3, &(0x7f00000019c0)=ANY=[@ANYRESOCT], 0x1c) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000380)=0x12) 2m14.509193213s ago: executing program 4 (id=481): syz_open_dev$sndpcmp(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$igmp(0x2, 0x3, 0x2) bind$inet(r3, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ipv6_route\x00') r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f00000024c0)={0x2c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x9}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x2028}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000080) lseek(r4, 0xae7e, 0x0) 2m13.39113472s ago: executing program 4 (id=482): gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) close(0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) futex(0x0, 0x5, 0x100000, 0x0, &(0x7f0000000000), 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) epoll_create(0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000380)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd", 0x45}, {&(0x7f0000000340)="58eb2892fb9fe290bed57bf2cbc5d85c817e85472e185d4b381634d69c8f", 0x1e}], 0x2) 2m8.251070405s ago: executing program 4 (id=485): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000500)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2m4.676955733s ago: executing program 4 (id=486): r0 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x11900}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_DREG={0x8}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8}, @NFTA_EXTHDR_TYPE={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xdc}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x8140aecc, &(0x7f0000000140)) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) close(r5) r8 = socket$inet_smc(0x2b, 0x1, 0x0) r9 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r9, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0xfffffffffffffc4a}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r8, 0x541b, &(0x7f0000000100)) syz_io_uring_submit(r1, r2, &(0x7f0000000380)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}}) socket$l2tp(0x2, 0x2, 0x73) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) 2m2.446375988s ago: executing program 4 (id=487): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0x7000000) 2m1.158002918s ago: executing program 4 (id=488): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xc, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000006c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001340)=""/102378, 0x7706c522012798af) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) syz_open_procfs(r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000874000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000) openat$mixer(0xffffff9c, &(0x7f0000001280), 0x0, 0x0) openat$adsp1(0xffffff9c, &(0x7f0000001440), 0x0, 0x0) 1.921896085s ago: executing program 0 (id=483): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) ioctl$SNDCTL_TMR_START(0xffffffffffffffff, 0x5402) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ptrace$ARCH_GET_FS(0x1e, 0x0, 0x0, 0x1003) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x6081, 0x2) sendmmsg$inet(r2, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)="96a67b36bd06304a08a67f14f6c3881ca6167592ce060670a396f8ab05ace2caca6b2a9ecf3471d2", 0x28}, {&(0x7f0000000500)="fc484e55021886bb", 0x7fffefd8}], 0x2}}], 0x1, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, 0x0, 0x0) 311.93654ms ago: executing program 0 (id=490): getsockname$unix(0xffffffffffffffff, &(0x7f0000000080), 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0xc4382, 0x0) r2 = dup(r1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-384\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendfile(r4, r2, 0x0, 0x8a000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x3, 0x0, 0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeec, 0x10, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=401): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001f80)={0x0, 0x0, 0x0}, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x2c02) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r4, 0xc0305710, &(0x7f0000000080)={0x0, 0xfff, 0x9}) close_range(r3, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): m3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.739180][ T5230] Bluetooth: hci3: command tx timeout [ 247.755858][ T5905] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.762989][ T5905] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.790507][ T5905] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.844961][ T5838] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.888427][ T5905] hsr_slave_0: entered promiscuous mode [ 247.895199][ T5905] hsr_slave_1: entered promiscuous mode [ 247.909623][ T5905] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 247.917219][ T5905] Cannot create hsr debugfs directory [ 247.955150][ T5838] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.046732][ T5838] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.156241][ T12] bridge_slave_1: left allmulticast mode [ 248.165660][ T12] bridge_slave_1: left promiscuous mode [ 248.175382][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.188774][ T12] bridge_slave_0: left allmulticast mode [ 248.195090][ T12] bridge_slave_0: left promiscuous mode [ 248.201124][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.213311][ T12] bridge_slave_1: left allmulticast mode [ 248.219122][ T12] bridge_slave_1: left promiscuous mode [ 248.224836][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.235589][ T12] bridge_slave_0: left allmulticast mode [ 248.241718][ T12] bridge_slave_0: left promiscuous mode [ 248.248173][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.263465][ T12] bridge_slave_1: left allmulticast mode [ 248.270286][ T12] bridge_slave_1: left promiscuous mode [ 248.275992][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.285678][ T12] bridge_slave_0: left allmulticast mode [ 248.291474][ T12] bridge_slave_0: left promiscuous mode [ 248.297283][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.308851][ T12] bridge_slave_1: left allmulticast mode [ 248.314661][ T12] bridge_slave_1: left promiscuous mode [ 248.320837][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.330414][ T12] bridge_slave_0: left allmulticast mode [ 248.336098][ T12] bridge_slave_0: left promiscuous mode [ 248.342661][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.353950][ T12] bridge_slave_1: left allmulticast mode [ 248.360014][ T12] bridge_slave_1: left promiscuous mode [ 248.365821][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.375725][ T12] bridge_slave_0: left allmulticast mode [ 248.382155][ T12] bridge_slave_0: left promiscuous mode [ 248.387859][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.176367][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 249.188511][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 249.201062][ T12] bond0 (unregistering): Released all slaves [ 249.320285][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 249.333141][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 249.343914][ T12] bond0 (unregistering): Released all slaves [ 249.359581][ T12] bond0 (unregistering): Released all slaves [ 249.375579][ T12] bond0 (unregistering): Released all slaves [ 249.388577][ T12] bond0 (unregistering): Released all slaves [ 249.407991][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 249.421419][ T12] bond0 (unregistering): Released all slaves [ 249.511188][ T5838] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 249.532804][ T5838] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 249.633270][ T5838] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 249.687843][ T5838] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 249.753360][ T5852] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 249.795966][ T5852] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 249.896596][ T5852] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 249.925411][ T5852] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 250.472238][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.496437][ T12] hsr_slave_0: left promiscuous mode [ 250.502837][ T12] hsr_slave_1: left promiscuous mode [ 250.511571][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.519978][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.532954][ T12] hsr_slave_0: left promiscuous mode [ 250.540671][ T12] hsr_slave_1: left promiscuous mode [ 250.546618][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.554802][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.564457][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.572177][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.595892][ T12] veth1_macvtap: left promiscuous mode [ 250.601878][ T12] veth0_macvtap: left promiscuous mode [ 250.607487][ T12] veth1_vlan: left promiscuous mode [ 250.613126][ T12] veth0_vlan: left promiscuous mode [ 250.914227][ T12] team0 (unregistering): Port device team_slave_1 removed [ 250.952034][ T12] team0 (unregistering): Port device team_slave_0 removed [ 251.552845][ T12] team0 (unregistering): Port device team_slave_1 removed [ 251.596483][ T12] team0 (unregistering): Port device team_slave_0 removed [ 252.581818][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.676787][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.684009][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.698402][ T2978] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.706223][ T2978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.815852][ T5855] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 252.876447][ T5855] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 252.915234][ T5855] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 252.926609][ T5855] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 252.985937][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.082109][ T5846] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 253.108519][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 253.145580][ T5846] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 253.180885][ T5846] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 253.205196][ T5846] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 253.373556][ T2917] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.380759][ T2917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 253.428556][ T2917] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.435773][ T2917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.454272][ T5905] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 253.475043][ T5905] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 253.513310][ T5905] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 253.602353][ T5905] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 253.732988][ T5852] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 253.748737][ T5852] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 253.816576][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 253.922736][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.058579][ T5855] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.126927][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.134171][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.274719][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.281978][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 254.416507][ T5838] veth0_vlan: entered promiscuous mode [ 254.513997][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.555846][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.571262][ T5838] veth1_vlan: entered promiscuous mode [ 254.625609][ T5905] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.682257][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.791964][ T5905] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.831071][ T2917] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.838233][ T2917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.917350][ T3026] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.924611][ T3026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.030936][ T2978] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.038168][ T2978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.055274][ T2978] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.062520][ T2978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.097668][ T5852] veth0_vlan: entered promiscuous mode [ 255.126565][ T5838] veth0_macvtap: entered promiscuous mode [ 255.191074][ T5838] veth1_macvtap: entered promiscuous mode [ 255.247025][ T5852] veth1_vlan: entered promiscuous mode [ 255.320374][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.354694][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.403665][ T5838] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.415755][ T5838] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.432778][ T5838] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.444680][ T5838] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.484793][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 255.630317][ T5852] veth0_macvtap: entered promiscuous mode [ 255.666535][ T5852] veth1_macvtap: entered promiscuous mode [ 255.777273][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 255.797228][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.821242][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.878359][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 255.904610][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 255.918252][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.944130][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.963231][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.976813][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.991474][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.006389][ T5852] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.026657][ T5852] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.050042][ T5852] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.058798][ T5852] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.131648][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 256.167050][ T3026] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.180578][ T3026] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.188455][ T5905] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 256.323542][ T5855] veth0_vlan: entered promiscuous mode [ 256.383851][ T6104] Bluetooth: MGMT ver 1.23 [ 256.405134][ T5846] veth0_vlan: entered promiscuous mode [ 256.427172][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.444062][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.454507][ T5855] veth1_vlan: entered promiscuous mode [ 256.489587][ T5846] veth1_vlan: entered promiscuous mode [ 256.604124][ T3026] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.607189][ T5905] veth0_vlan: entered promiscuous mode [ 256.617811][ T3026] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.668656][ T5855] veth0_macvtap: entered promiscuous mode [ 256.716723][ T5846] veth0_macvtap: entered promiscuous mode [ 256.734199][ T5905] veth1_vlan: entered promiscuous mode [ 256.763430][ T5855] veth1_macvtap: entered promiscuous mode [ 256.773081][ T5846] veth1_macvtap: entered promiscuous mode [ 256.877160][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.894555][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.904849][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 256.917897][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 256.951844][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.009965][ T5905] veth0_macvtap: entered promiscuous mode [ 257.065293][ T5855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.111215][ T5855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.152864][ T5855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.166999][ T5855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.183561][ T5855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.471103][ T5855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.646515][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.901360][ T5855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.948948][ T5855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.989011][ T5855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.048783][ T5855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.061431][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.084037][ T5905] veth1_macvtap: entered promiscuous mode [ 258.106237][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.137131][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.148721][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.159807][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.175120][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.193594][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.225914][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.246306][ T6116] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 258.282735][ T5846] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.296136][ T6116] kvm: pic: level sensitive irq not supported [ 258.296429][ T6116] kvm: pic: non byte read [ 258.299179][ T5846] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.322586][ T5846] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.358302][ T5846] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.405551][ T5855] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.424094][ T5855] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.442392][ T5855] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.453233][ T5855] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.501162][ T5905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.524288][ T5905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.554782][ T5905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.565907][ T5905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.581157][ T5905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.597065][ T5905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.614836][ T5905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.640343][ T5905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.660796][ T5905] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.744988][ T5905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.758090][ T5905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.769281][ T5905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.785585][ T5905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.797831][ T5905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.808893][ T5905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.818772][ T5905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.834535][ T5905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.864441][ T5905] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.902664][ T5905] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.935462][ T5905] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.958154][ T5905] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.967057][ T5905] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.068830][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.118780][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.330093][ T3026] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.344548][ T3026] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.363394][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.363420][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.475716][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.501888][ T6135] netlink: 16 bytes leftover after parsing attributes in process `syz.3.125'. [ 259.502668][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.519228][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.542906][ T6135] netlink: 72 bytes leftover after parsing attributes in process `syz.3.125'. [ 259.556815][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.693252][ T2917] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.721653][ T2917] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.042834][ T6143] process 'syz.1.115' launched '/dev/fd/5' with NULL argv: empty string added [ 260.161329][ T6147] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 260.802954][ T6145] overlayfs: failed to get index nlink (file1/bus, err=-61) [ 261.798977][ T5760] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 261.808277][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 261.969647][ T5760] usb 1-1: device descriptor read/64, error -32 [ 262.520171][ T6164] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.129'. [ 262.860568][ T5760] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 263.532563][ T5760] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 263.589915][ T5760] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.665680][ T5760] usb 1-1: config 0 descriptor?? [ 265.066418][ T5760] ath6kl: Failed to submit usb control message: -110 [ 265.337410][ T5760] ath6kl: unable to send the bmi data to the device: -110 [ 265.374430][ T5760] ath6kl: Unable to send get target info: -110 [ 266.325295][ T5760] ath6kl: Failed to init ath6kl core: -110 [ 266.350166][ T5760] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 266.429280][ T5760] usb 1-1: USB disconnect, device number 5 [ 266.478082][ T5230] Bluetooth: hci0: Malformed HCI Event: 0x22 [ 266.587543][ T6201] input: syz0 as /devices/virtual/input/input6 [ 267.643216][ T46] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 267.919215][ T46] usb 4-1: Using ep0 maxpacket: 32 [ 267.941212][ T46] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.467341][ T46] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.609247][ T46] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 268.643839][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.750952][ T46] hub 4-1:4.0: USB hub found [ 269.040292][ T46] hub 4-1:4.0: config failed, hub has too many ports! (err -19) [ 270.246964][ T46] usb 4-1: USB disconnect, device number 3 [ 271.422329][ T5230] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 271.422466][ T5230] CPU: 0 UID: 0 PID: 5230 Comm: kworker/u9:2 Not tainted 6.11.0-rc7-syzkaller #0 [ 271.422502][ T5230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 271.422520][ T5230] Workqueue: hci3 hci_rx_work [ 271.422589][ T5230] Call Trace: [ 271.422600][ T5230] [ 271.422612][ T5230] dump_stack_lvl+0x241/0x360 [ 271.422649][ T5230] ? __pfx_dump_stack_lvl+0x10/0x10 [ 271.422679][ T5230] ? __pfx__printk+0x10/0x10 [ 271.478604][ T5230] ? sysfs_create_dir_ns+0x28a/0x3a0 [ 271.478646][ T5230] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 271.478688][ T5230] sysfs_create_dir_ns+0x2ce/0x3a0 [ 271.478721][ T5230] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 271.478763][ T5230] kobject_add_internal+0x435/0x8d0 [ 271.505704][ T5230] kobject_add+0x152/0x220 [ 271.510152][ T5230] ? preempt_schedule_thunk+0x1a/0x30 [ 271.515564][ T5230] ? device_add+0x3e7/0xbf0 [ 271.520094][ T5230] ? __pfx_kobject_add+0x10/0x10 [ 271.525065][ T5230] ? _raw_spin_unlock+0x3e/0x50 [ 271.529950][ T5230] ? get_device_parent+0x165/0x410 [ 271.535259][ T5230] device_add+0x4e5/0xbf0 [ 271.539702][ T5230] hci_conn_add_sysfs+0xe8/0x200 [ 271.544665][ T5230] le_conn_complete_evt+0xc9f/0x12e0 [ 271.549986][ T5230] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 271.555730][ T5230] ? __mutex_unlock_slowpath+0x21d/0x750 [ 271.561392][ T5230] ? __copy_skb_header+0x437/0x5b0 [ 271.566551][ T5230] ? skb_pull_data+0x112/0x230 [ 271.571364][ T5230] hci_le_enh_conn_complete_evt+0x185/0x420 [ 271.577298][ T5230] hci_event_packet+0xa55/0x1540 [ 271.582272][ T5230] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 271.587592][ T5230] ? __pfx_hci_event_packet+0x10/0x10 [ 271.592998][ T5230] ? do_raw_spin_unlock+0x13c/0x8b0 [ 271.598238][ T5230] ? hci_send_to_monitor+0xd8/0x7f0 [ 271.603486][ T5230] ? kcov_remote_start+0x97/0x7d0 [ 271.608562][ T5230] hci_rx_work+0x3e8/0xca0 [ 271.613016][ T5230] ? process_scheduled_works+0x945/0x1830 [ 271.618774][ T5230] process_scheduled_works+0xa2c/0x1830 [ 271.624372][ T5230] ? __pfx_process_scheduled_works+0x10/0x10 [ 271.630385][ T5230] ? assign_work+0x364/0x3d0 [ 271.635004][ T5230] worker_thread+0x86d/0xd10 [ 271.639713][ T5230] ? __kthread_parkme+0x169/0x1d0 [ 271.644798][ T5230] ? __pfx_worker_thread+0x10/0x10 [ 271.649951][ T5230] kthread+0x2f0/0x390 [ 271.654049][ T5230] ? __pfx_worker_thread+0x10/0x10 [ 271.659203][ T5230] ? __pfx_kthread+0x10/0x10 [ 271.663836][ T5230] ret_from_fork+0x4b/0x80 [ 271.668286][ T5230] ? __pfx_kthread+0x10/0x10 [ 271.672913][ T5230] ret_from_fork_asm+0x1a/0x30 [ 271.677766][ T5230] [ 271.685700][ T5230] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 271.685755][ T5230] Bluetooth: hci3: failed to register connection device [ 271.948142][ T6239] sch_tbf: burst 8 is lower than device lo mtu (65550) ! [ 284.724716][ T6318] No such timeout policy "syz0" [ 286.900601][ T5230] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 286.912077][ T5230] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 286.921863][ T5230] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 286.930696][ T5230] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 286.939869][ T5230] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 286.948144][ T5230] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 287.611443][ T6334] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 287.619370][ T6334] IPv6: NLM_F_CREATE should be set when creating new route [ 287.626807][ T6334] IPv6: NLM_F_CREATE should be set when creating new route [ 287.762363][ T6334] Bluetooth: MGMT ver 1.23 [ 287.793367][ T6334] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes [ 288.044556][ T6323] chnl_net:caif_netlink_parms(): no params data found [ 289.028125][ T54] Bluetooth: hci4: command tx timeout [ 290.790824][ T6358] ip6t_srh: unknown srh invflags 7D00 [ 290.970578][ T6323] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.512938][ T54] Bluetooth: hci4: command tx timeout [ 291.542770][ T6323] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.571834][ T6323] bridge_slave_0: entered allmulticast mode [ 291.893016][ T6323] bridge_slave_0: entered promiscuous mode [ 292.070784][ T6323] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.140996][ T6323] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.165887][ T6323] bridge_slave_1: entered allmulticast mode [ 292.206439][ T6323] bridge_slave_1: entered promiscuous mode [ 293.560385][ T54] Bluetooth: hci4: command tx timeout [ 293.683171][ T6376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.186'. [ 293.698111][ T6376] Unsupported ieee802154 address type: 0 [ 298.070031][ T54] Bluetooth: hci4: command tx timeout [ 298.080654][ T6323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 299.163085][ T6323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.791489][ T6323] team0: Port device team_slave_0 added [ 300.841681][ T6323] team0: Port device team_slave_1 added [ 301.209291][ T6402] UBIFS error (pid: 6402): cannot open "./file0", error -22 [ 303.285182][ T6323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.339236][ T6323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.369081][ T6323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.425421][ T6323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.449749][ T6323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.475681][ C1] vkms_vblank_simulate: vblank timer overrun [ 303.526298][ T6323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.558213][ T6416] capability: warning: `syz.2.196' uses 32-bit capabilities (legacy support in use) [ 304.710942][ T6323] hsr_slave_0: entered promiscuous mode [ 304.798035][ T6323] hsr_slave_1: entered promiscuous mode [ 304.902456][ T46] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 305.130068][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.172801][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.198818][ T46] usb 5-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 305.216251][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.232213][ T46] usb 5-1: config 0 descriptor?? [ 307.057977][ T6323] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.154712][ T6442] netlink: 'syz.0.200': attribute type 1 has an invalid length. [ 308.069458][ T46] usbhid 5-1:0.0: can't add hid device: -71 [ 308.075546][ T46] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 308.139099][ T46] usb 5-1: USB disconnect, device number 4 [ 309.872406][ T6323] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.296706][ T6458] vlan2: entered promiscuous mode [ 310.314105][ T6458] batadv0: entered promiscuous mode [ 310.395862][ T6458] batadv0: left promiscuous mode [ 310.970772][ T6323] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.370597][ T6323] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.389955][ T6488] netlink: 144 bytes leftover after parsing attributes in process `syz.0.212'. [ 317.417530][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.429751][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.511785][ T29] audit: type=1326 audit(1725900827.884:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6487 comm="syz.2.213" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff1e357def9 code=0x0 [ 318.038995][ T6323] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 318.664662][ T6323] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 318.918521][ T6323] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 319.053364][ T5230] Bluetooth: hci2: unexpected cc 0x2007 length: 100 > 2 [ 319.060153][ T6323] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 319.740092][ T6323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.897456][ T6323] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.947863][ T2978] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.955116][ T2978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.102046][ T2978] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.109287][ T2978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.320196][ T6517] syz.2.221 uses obsolete (PF_INET,SOCK_PACKET) [ 323.091799][ T5230] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 323.108642][ T5230] Bluetooth: hci2: Injecting HCI hardware error event [ 323.209648][ T5230] Bluetooth: hci2: hardware error 0x00 [ 323.332025][ T54] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 323.341150][ T54] Bluetooth: hci3: Injecting HCI hardware error event [ 323.350368][ T5246] Bluetooth: hci3: hardware error 0x00 [ 323.615962][ T6530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.224'. [ 323.907718][ T6537] overlayfs: missing 'lowerdir' [ 324.009174][ T6323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.242763][ T6323] veth0_vlan: entered promiscuous mode [ 324.316308][ T6323] veth1_vlan: entered promiscuous mode [ 324.518642][ T6323] veth0_macvtap: entered promiscuous mode [ 324.594423][ T6323] veth1_macvtap: entered promiscuous mode [ 324.710981][ T6323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.759032][ T6323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.769326][ T6323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.780047][ T6323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.790107][ T6323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.802749][ T6323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.845971][ T6323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 324.889117][ T6323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 324.972734][ T6323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 325.484377][ T5230] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 326.959574][ T5246] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 327.038033][ T6323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.261676][ T6323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 327.290468][ T6323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.304783][ T6323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.342611][ T6323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.377245][ T6323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.579031][ T6323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.592973][ T6323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.668942][ T6323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.009070][ T6323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.252536][ T6323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.280972][ T6562] netlink: 8 bytes leftover after parsing attributes in process `syz.1.233'. [ 328.324597][ T6323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.411126][ T6323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 328.516751][ T6323] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.643949][ T6574] netlink: 'syz.2.235': attribute type 29 has an invalid length. [ 329.500440][ T6323] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.626940][ T6323] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.662047][ T6323] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.768970][ T5274] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 329.985385][ T5274] usb 1-1: New USB device found, idVendor=04b4, idProduct=6830, bcdDevice=86.cf [ 329.995983][ T5274] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.101120][ T5274] ums-cypress 1-1:1.0: USB Mass Storage device detected [ 330.375832][ T6568] netlink: 'syz.0.234': attribute type 12 has an invalid length. [ 330.589269][ T5324] usb 1-1: USB disconnect, device number 6 [ 330.689960][ T2978] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.748950][ T2978] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.232703][ T3015] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.276911][ T3015] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.556308][ T6593] overlayfs: missing 'lowerdir' [ 335.711861][ T6621] kAFS: unable to lookup cell '/' [ 336.287520][ T6631] netlink: 8 bytes leftover after parsing attributes in process `syz.0.249'. [ 337.709100][ T5274] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 337.957593][ T5274] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 337.991615][ T5274] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.229515][ T5274] usb 3-1: config 0 descriptor?? [ 342.223003][ T5274] ath6kl: Failed to submit usb control message: -110 [ 342.239959][ T5274] ath6kl: unable to send the bmi data to the device: -110 [ 342.247153][ T5274] ath6kl: Unable to send get target info: -110 [ 342.265494][ T5274] ath6kl: Failed to init ath6kl core: -110 [ 342.309334][ T5274] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 342.414752][ T5324] usb 3-1: USB disconnect, device number 2 [ 342.633874][ T6659] overlayfs: missing 'lowerdir' [ 342.933619][ T6661] 9pnet_fd: Insufficient options for proto=fd [ 343.019120][ T5324] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 343.218936][ T5324] usb 3-1: Using ep0 maxpacket: 32 [ 343.243512][ T5324] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 343.295885][ T5324] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 343.317970][ T5324] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.358787][ T5324] usb 3-1: Product: syz [ 343.382474][ T5324] usb 3-1: Manufacturer: syz [ 343.448951][ T5324] usb 3-1: SerialNumber: syz [ 343.519198][ T5324] usb 3-1: bad CDC descriptors [ 346.731790][ T5246] Bluetooth: hci6: command 0x0406 tx timeout [ 347.009577][ T5281] usb 3-1: USB disconnect, device number 3 [ 348.069123][ T6688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.263'. [ 350.199145][ T54] Bluetooth: hci0: command 0x0406 tx timeout [ 351.052876][ T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 351.065854][ T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 351.077861][ T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 351.099747][ T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 351.108353][ T54] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 351.119881][ T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 353.406489][ T54] Bluetooth: hci5: command tx timeout [ 355.483470][ T54] Bluetooth: hci5: command tx timeout [ 355.483481][ T5246] Bluetooth: hci1: command 0x0406 tx timeout [ 356.667874][ T6736] xt_hashlimit: Unknown mode mask 300, kernel too old? [ 357.437416][ T6702] chnl_net:caif_netlink_parms(): no params data found [ 357.700822][ T5230] Bluetooth: hci5: command tx timeout [ 358.847595][ T6757] tap0: tun_chr_ioctl cmd 1074025677 [ 358.979298][ T6757] tap0: linktype set to 512 [ 360.009077][ T5246] Bluetooth: hci5: command tx timeout [ 360.597382][ T29] audit: type=1326 audit(1725900870.964:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6767 comm="syz.2.283" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff1e357def9 code=0x0 [ 360.829396][ T6756] wg2: entered promiscuous mode [ 360.868942][ T6756] wg2: entered allmulticast mode [ 361.771395][ T29] audit: type=1326 audit(1725900871.104:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6767 comm="syz.2.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e357def9 code=0x7ffc0000 [ 361.829006][ T29] audit: type=1326 audit(1725900871.104:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6767 comm="syz.2.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e357def9 code=0x7ffc0000 [ 361.850904][ T29] audit: type=1326 audit(1725900871.154:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6767 comm="syz.2.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff1e357def9 code=0x7ffc0000 [ 361.872229][ T29] audit: type=1326 audit(1725900871.154:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6767 comm="syz.2.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e357def9 code=0x7ffc0000 [ 361.894476][ T29] audit: type=1326 audit(1725900871.154:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6767 comm="syz.2.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7ff1e357def9 code=0x7ffc0000 [ 362.004880][ T29] audit: type=1326 audit(1725900871.154:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6767 comm="syz.2.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e357def9 code=0x7ffc0000 [ 362.039295][ T6702] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.069160][ T29] audit: type=1326 audit(1725900871.154:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6767 comm="syz.2.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff1e357def9 code=0x7ffc0000 [ 362.072582][ T6702] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.111287][ T29] audit: type=1326 audit(1725900871.154:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6767 comm="syz.2.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff1e357def9 code=0x7ffc0000 [ 362.162433][ T6702] bridge_slave_0: entered allmulticast mode [ 362.177483][ T6702] bridge_slave_0: entered promiscuous mode [ 362.250260][ T29] audit: type=1326 audit(1725900871.214:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6767 comm="syz.2.283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff1e357def9 code=0x7ffc0000 [ 362.299626][ T6702] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.343206][ T6702] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.379935][ T6702] bridge_slave_1: entered allmulticast mode [ 362.387627][ T6702] bridge_slave_1: entered promiscuous mode [ 362.505255][ T6702] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.559995][ T6702] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.795833][ T6702] team0: Port device team_slave_0 added [ 362.903650][ T6702] team0: Port device team_slave_1 added [ 363.071379][ T6702] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.078495][ T6702] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.135382][ T6702] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.189250][ T6702] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.196234][ T6702] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.270132][ T6702] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.410819][ T6702] hsr_slave_0: entered promiscuous mode [ 363.439552][ T6702] hsr_slave_1: entered promiscuous mode [ 363.447695][ T6702] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 363.455579][ T6702] Cannot create hsr debugfs directory [ 363.807031][ T6702] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.024970][ T6702] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.144597][ T6702] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.352672][ T6702] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.695647][ T6702] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 364.746319][ T6702] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 364.780851][ T6702] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 364.797288][ T6702] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 365.065037][ T6702] 8021q: adding VLAN 0 to HW filter on device bond0 [ 365.154423][ T6702] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.206461][ T2954] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.213665][ T2954] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.295052][ T2954] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.302241][ T2954] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.026296][ T6702] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.590776][ T6702] veth0_vlan: entered promiscuous mode [ 366.635913][ T6702] veth1_vlan: entered promiscuous mode [ 366.745704][ T6702] veth0_macvtap: entered promiscuous mode [ 366.772578][ T6702] veth1_macvtap: entered promiscuous mode [ 366.818225][ T6702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.830850][ T6702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.843145][ T6702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.854022][ T6702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.868987][ T6702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.879794][ T6702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.890017][ T6702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.900972][ T6702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.911086][ T6702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.930053][ T6702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.940393][ T6702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 366.960286][ T6702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.981599][ T6702] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 367.010962][ T6702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.049488][ T6702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.068972][ T6702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.089187][ T6702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.109450][ T6702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.120513][ T6702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.130661][ T6702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.169062][ T6702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.189206][ T6702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.209243][ T6702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.228954][ T6702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.264220][ T6702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.285810][ T6702] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.326759][ T6702] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.340784][ T6702] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.359000][ T6702] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.369149][ T6702] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.562543][ T3026] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.595925][ T3026] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.660899][ T3026] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.670350][ T3026] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.911145][ T6798] Bluetooth: MGMT ver 1.23 [ 369.449522][ T5281] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 369.660803][ T5281] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 369.696058][ T5281] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 369.705927][ T5281] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.724173][ T5281] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 371.071914][ T6821] ptrace attach of "./syz-executor exec"[6323] was attempted by " [ 371.120171][ T5281] stv0680 3-1:4.0: STV(e): camera ping failed!! [ 371.306453][ T6822] netlink: 8 bytes leftover after parsing attributes in process `syz.4.286'. [ 372.263537][ T5281] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 372.309283][ T5281] stv0680 3-1:4.0: last error: 0, command = 0x0 [ 372.415497][ T5281] usb 3-1: USB disconnect, device number 4 [ 372.740960][ T6832] netlink: 'syz.2.290': attribute type 5 has an invalid length. [ 372.748673][ T6832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.290'. [ 372.757565][ T6832] netlink: 'syz.2.290': attribute type 1 has an invalid length. [ 374.316151][ T6844] mmap: syz.2.301 (6844) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 374.969096][ T6847] random: crng reseeded on system resumption [ 375.884921][ T3026] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.037177][ T3026] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.290074][ T3026] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.700347][ T3026] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.111593][ T5230] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 377.124590][ T5230] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 377.134066][ T5230] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 377.142298][ T5230] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 377.150198][ T5230] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 377.157643][ T5230] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 377.549441][ T3026] bridge_slave_1: left allmulticast mode [ 377.565169][ T3026] bridge_slave_1: left promiscuous mode [ 377.580712][ T6864] netlink: 12 bytes leftover after parsing attributes in process `syz.4.305'. [ 377.591648][ T3026] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.671650][ T3026] bridge_slave_0: left allmulticast mode [ 377.677360][ T3026] bridge_slave_0: left promiscuous mode [ 377.704179][ T6863] kvm_intel: kvm [6862]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x1d9) = 0x700000008b [ 377.737086][ T3026] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.841879][ T6863] kvm: kvm [6862]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x187) = 0x177000000ab [ 377.920840][ T5274] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 378.168706][ T5274] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 378.222624][ T5274] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 378.266318][ T5274] usb 1-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 378.312099][ T5274] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.376518][ T5274] usb 1-1: config 0 descriptor?? [ 378.501187][ T5283] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 378.738968][ T5283] usb 5-1: Using ep0 maxpacket: 8 [ 378.751967][ T5283] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 378.769495][ T5283] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 378.856549][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.863335][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.059334][ T5283] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 379.069562][ T5283] usb 5-1: config 168 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 0 [ 379.234494][ T5283] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice= 0.6e [ 379.293263][ T5283] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.329185][ T5274] cougar 0003:060B:700A.0001: hidraw0: USB HID v0.00 Device [HID 060b:700a] on usb-dummy_hcd.0-1/input0 [ 379.340918][ T5283] usb 5-1: Product: syz [ 379.345300][ T5283] usb 5-1: Manufacturer: syz [ 379.360772][ T5283] usb 5-1: SerialNumber: syz [ 379.624826][ T5230] Bluetooth: hci0: command tx timeout [ 379.817046][ T5274] usb 1-1: USB disconnect, device number 7 [ 380.950527][ T3026] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 381.004447][ T3026] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 381.711011][ T5230] Bluetooth: hci0: command tx timeout [ 381.990162][ T3026] bond0 (unregistering): Released all slaves [ 382.284464][ T5283] adutux 5-1:168.0: interrupt endpoints not found [ 382.373421][ T5283] usb 5-1: USB disconnect, device number 5 [ 382.497120][ T6918] netlink: 8 bytes leftover after parsing attributes in process `syz.0.317'. [ 383.799194][ T5230] Bluetooth: hci0: command tx timeout [ 384.046132][ T6929] sch_tbf: burst 8 is lower than device lo mtu (65550) ! [ 384.653302][ T3026] hsr_slave_0: left promiscuous mode [ 384.672222][ T3026] hsr_slave_1: left promiscuous mode [ 384.702768][ T3026] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 384.719022][ T3026] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 384.742978][ T3026] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 384.766384][ T3026] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 384.862924][ T3026] veth1_macvtap: left promiscuous mode [ 384.868547][ T3026] veth0_macvtap: left promiscuous mode [ 384.907295][ T3026] veth1_vlan: left promiscuous mode [ 384.926752][ T3026] veth0_vlan: left promiscuous mode [ 385.889080][ T5230] Bluetooth: hci0: command tx timeout [ 386.318284][ T3026] team0 (unregistering): Port device team_slave_1 removed [ 386.407376][ T3026] team0 (unregistering): Port device team_slave_0 removed [ 387.803511][ T6859] chnl_net:caif_netlink_parms(): no params data found [ 388.478153][ T6859] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.523839][ T6859] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.563285][ T6859] bridge_slave_0: entered allmulticast mode [ 388.614835][ T6859] bridge_slave_0: entered promiscuous mode [ 388.817151][ T6859] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.824505][ T6859] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.832863][ T6859] bridge_slave_1: entered allmulticast mode [ 388.868442][ T6859] bridge_slave_1: entered promiscuous mode [ 389.169194][ T46] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 389.949567][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 389.975870][ T46] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 390.005778][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.022205][ T46] usb 4-1: config 0 descriptor?? [ 390.112695][ T46] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 390.152797][ T6859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 390.315563][ T6859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 390.677554][ T6859] team0: Port device team_slave_0 added [ 390.705381][ T6859] team0: Port device team_slave_1 added [ 391.588974][ T46] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 391.696350][ T5281] usb 4-1: USB disconnect, device number 4 [ 391.834679][ T46] usb 1-1: Using ep0 maxpacket: 8 [ 391.854234][ T46] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 391.880010][ T46] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 391.939000][ T46] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 391.982617][ T46] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 392.012540][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.036042][ T6859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 392.068709][ T6859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 392.166174][ T6859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 392.179981][ T46] usbtmc 1-1:16.0: bulk endpoints not found [ 392.231338][ T35] bridge_slave_1: left allmulticast mode [ 392.255207][ T35] bridge_slave_1: left promiscuous mode [ 392.291866][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.394598][ T35] bridge_slave_0: left allmulticast mode [ 392.424664][ T35] bridge_slave_0: left promiscuous mode [ 392.457497][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.891410][ T7034] netlink: 4 bytes leftover after parsing attributes in process `syz.4.341'. [ 396.004901][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 396.080468][ T7038] random: crng reseeded on system resumption [ 396.153686][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 396.230515][ T35] bond0 (unregistering): Released all slaves [ 396.427688][ T6859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 396.474973][ T6859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 396.627088][ T6859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 396.713542][ T5310] usb 1-1: USB disconnect, device number 8 [ 396.772460][ T7041] bond_slave_0: entered promiscuous mode [ 396.778688][ T7041] bond_slave_1: entered promiscuous mode [ 396.784747][ T7041] macsec1: entered promiscuous mode [ 396.790040][ T7041] bond0: entered promiscuous mode [ 396.795455][ T7041] macsec1: entered allmulticast mode [ 396.801221][ T7041] bond0: entered allmulticast mode [ 396.806354][ T7041] bond_slave_0: entered allmulticast mode [ 396.812328][ T7041] bond_slave_1: entered allmulticast mode [ 398.292331][ T7054] netlink: 40 bytes leftover after parsing attributes in process `syz.4.347'. [ 398.316611][ T7054] netlink: 8 bytes leftover after parsing attributes in process `syz.4.347'. [ 398.327793][ T7050] netem: incorrect gi model size [ 398.346058][ T7050] netem: change failed [ 399.663583][ T6859] hsr_slave_0: entered promiscuous mode [ 399.679655][ T6859] hsr_slave_1: entered promiscuous mode [ 399.693416][ T6859] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 399.713655][ T6859] Cannot create hsr debugfs directory [ 400.099261][ T5322] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 400.849030][ T5322] usb 1-1: Using ep0 maxpacket: 32 [ 400.886749][ T5322] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 400.918362][ T5322] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=a6.13 [ 400.930637][ T5322] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.938711][ T5322] usb 1-1: Product: syz [ 400.945275][ T5322] usb 1-1: Manufacturer: syz [ 400.949999][ T5322] usb 1-1: SerialNumber: syz [ 400.973938][ T5322] usb 1-1: config 0 descriptor?? [ 401.574605][ T5322] pvrusb2: Hardware description: Terratec Grabster AV400 [ 401.645624][ T35] hsr_slave_0: left promiscuous mode [ 401.662559][ T35] hsr_slave_1: left promiscuous mode [ 401.670642][ T5322] pvrusb2: ********** [ 401.736788][ T5322] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 401.811280][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 401.817934][ T5322] pvrusb2: Important functionality might not be entirely working. [ 401.818754][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 401.872871][ T5322] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 401.908152][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 401.915896][ T5322] pvrusb2: ********** [ 401.920078][ T2041] pvrusb2: Invalid write control endpoint [ 401.963604][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 402.084500][ T35] veth1_macvtap: left promiscuous mode [ 402.104154][ T35] veth0_macvtap: left promiscuous mode [ 402.128781][ T35] veth1_vlan: left promiscuous mode [ 402.135780][ T35] veth0_vlan: left promiscuous mode [ 403.066721][ T2041] pvrusb2: Invalid write control endpoint [ 403.293202][ T9] usb 1-1: USB disconnect, device number 9 [ 403.324222][ T2041] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 403.358686][ T2041] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 403.933019][ T2041] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 403.963014][ T2041] pvrusb2: Device being rendered inoperable [ 404.020863][ T2041] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 404.028355][ T2041] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 404.145732][ T2041] pvrusb2: Attached sub-driver cx25840 [ 404.154680][ T2041] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 404.176492][ T2041] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 406.109987][ T7105] smb3: Unknown parameter '*z‚«¼' [ 409.019332][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 409.019354][ T29] audit: type=1326 audit(1725900919.374:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7124 comm="syz.2.366" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff1e357def9 code=0x0 [ 409.171614][ T7130] netlink: 8 bytes leftover after parsing attributes in process `syz.4.365'. [ 409.881699][ T7136] No buffer was provided with the request [ 413.618427][ T35] team0 (unregistering): Port device team_slave_1 removed [ 413.734872][ T35] team0 (unregistering): Port device team_slave_0 removed [ 414.949857][ T7123] vlan2: entered promiscuous mode [ 414.956387][ T7123] bond0: entered promiscuous mode [ 414.967894][ T7123] bond_slave_0: entered promiscuous mode [ 414.983854][ T7123] bond_slave_1: entered promiscuous mode [ 415.012137][ T7123] team0: Port device vlan2 added [ 417.415348][ T9] IPVS: starting estimator thread 0... [ 417.539268][ T7167] IPVS: using max 15 ests per chain, 36000 per kthread [ 419.148975][ T29] audit: type=1326 audit(1725900929.514:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7195 comm="syz.0.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5e217def9 code=0x7ffc0000 [ 419.218447][ T29] audit: type=1326 audit(1725900929.514:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7195 comm="syz.0.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc5e217def9 code=0x7ffc0000 [ 419.489317][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 420.723929][ T9] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 420.779447][ T9] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 420.811739][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.937905][ T9] aiptek 5-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 421.608897][ T7229] netlink: 'syz.3.387': attribute type 1 has an invalid length. [ 421.617819][ T7229] netlink: 616 bytes leftover after parsing attributes in process `syz.3.387'. [ 422.399514][ T5283] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 422.638945][ T5283] usb 1-1: Using ep0 maxpacket: 8 [ 422.671307][ T5283] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 422.683942][ T6859] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 422.719015][ T5283] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.740502][ T6859] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 422.777997][ T5283] usb 1-1: Product: syz [ 422.785246][ T5283] usb 1-1: Manufacturer: syz [ 422.817242][ T5283] usb 1-1: SerialNumber: syz [ 422.843837][ T5283] usb 1-1: config 0 descriptor?? [ 422.844616][ T6859] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 422.888117][ T6859] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 423.121451][ T5283] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 423.287380][ T6859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 423.396499][ T6859] 8021q: adding VLAN 0 to HW filter on device team0 [ 423.446780][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.454074][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.487104][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.494451][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.594855][ T5324] usb 5-1: USB disconnect, device number 6 [ 425.368478][ T7256] netlink: 8 bytes leftover after parsing attributes in process `syz.3.391'. [ 425.563611][ T5283] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 425.616467][ T5283] usb 1-1: USB disconnect, device number 10 [ 425.802434][ T7265] netlink: 8 bytes leftover after parsing attributes in process `syz.4.394'. [ 426.609215][ T7265] netlink: 8 bytes leftover after parsing attributes in process `syz.4.394'. [ 426.618052][ T7265] netlink: 8 bytes leftover after parsing attributes in process `syz.4.394'. [ 426.781810][ T7271] netlink: 256 bytes leftover after parsing attributes in process `syz.4.394'. [ 426.881671][ T7276] Bluetooth: MGMT ver 1.23 [ 427.121161][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 427.276068][ T7281] netlink: 40 bytes leftover after parsing attributes in process `syz.0.396'. [ 427.298975][ T7281] netlink: 20 bytes leftover after parsing attributes in process `syz.0.396'. [ 427.325930][ T7281] netlink: 40 bytes leftover after parsing attributes in process `syz.0.396'. [ 428.158977][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 428.168934][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 428.178754][ T7281] netlink: 20 bytes leftover after parsing attributes in process `syz.0.396'. [ 428.181341][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 428.215803][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.225738][ T7281] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 428.241723][ T9] usb 3-1: Product: syz [ 428.245894][ T9] usb 3-1: Manufacturer: syz [ 428.292503][ T9] usb 3-1: SerialNumber: syz [ 428.309195][ T9] usb 3-1: config 0 descriptor?? [ 428.323183][ T9] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 428.387120][ T7289] syz.4.397 (7289) used greatest stack depth: 18544 bytes left [ 428.507657][ T6859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 429.239131][ T9] gspca_zc3xx: reg_w_i err -110 [ 433.707507][ T6859] veth0_vlan: entered promiscuous mode [ 433.859792][ T9] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 433.866567][ T9] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -110 [ 434.588915][ T9] usb 3-1: USB disconnect, device number 5 [ 434.604941][ T6859] veth1_vlan: entered promiscuous mode [ 434.877073][ T6859] veth0_macvtap: entered promiscuous mode [ 434.936232][ T6859] veth1_macvtap: entered promiscuous mode [ 435.104431][ T6859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.115186][ T6859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 435.127969][ T6859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 435.208702][ T7313] capability: warning: `syz.0.402' uses deprecated v2 capabilities in a way that may be insecure [ 435.409182][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 435.427239][ T6859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.058383][ T6859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.110216][ T6859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.128974][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 436.137319][ T6859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.169757][ T9] usb 3-1: config 0 has an invalid interface number: 68 but max is 0 [ 436.177992][ T9] usb 3-1: config 0 has no interface number 0 [ 436.178671][ T6859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.221925][ T6859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 436.268925][ T9] usb 3-1: New USB device found, idVendor=0af0, idProduct=d033, bcdDevice=e0.05 [ 436.285082][ T6859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 436.310634][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.337915][ T9] usb 3-1: Product: syz [ 436.350290][ T9] usb 3-1: Manufacturer: syz [ 436.364721][ T6859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 436.388627][ T9] usb 3-1: SerialNumber: syz [ 436.484692][ T9] usb 3-1: config 0 descriptor?? [ 438.240884][ T5246] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 438.256338][ T5246] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 438.264806][ T5246] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 438.285758][ T5246] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 438.298273][ T5246] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 438.307368][ T5246] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 438.597304][ T7337] netlink: 'syz.0.405': attribute type 13 has an invalid length. [ 439.378900][ T1686] usb 3-1: USB disconnect, device number 6 [ 439.760068][ T5230] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 439.783368][ T5230] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 439.810468][ T5230] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 439.835535][ T5230] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 439.845448][ T5230] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 439.853152][ T5230] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 440.296491][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.302938][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.379369][ T5230] Bluetooth: hci2: command tx timeout [ 441.894499][ T7372] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 442.122410][ T5230] Bluetooth: hci7: command tx timeout [ 442.434309][ T7382] input: syz1 as /devices/virtual/input/input8 [ 442.441135][ T5230] Bluetooth: hci2: command tx timeout [ 444.481509][ T5230] Bluetooth: hci7: command tx timeout [ 444.518950][ T5230] Bluetooth: hci2: command tx timeout [ 444.760516][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.907231][ T7327] chnl_net:caif_netlink_parms(): no params data found [ 446.467489][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.519305][ T5230] Bluetooth: hci7: command tx timeout [ 446.722797][ T5230] Bluetooth: hci2: command tx timeout [ 447.996644][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.446681][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.366441][ T5230] Bluetooth: hci7: command tx timeout [ 450.539120][ T7458] ALSA: seq fatal error: cannot create timer (-22) [ 450.639252][ T7327] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.656841][ T7327] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.712569][ T7327] bridge_slave_0: entered allmulticast mode [ 450.751665][ T7327] bridge_slave_0: entered promiscuous mode [ 450.811352][ T7327] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.839569][ T7327] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.867395][ T7327] bridge_slave_1: entered allmulticast mode [ 450.939750][ T7327] bridge_slave_1: entered promiscuous mode [ 450.986288][ T7463] netlink: 8 bytes leftover after parsing attributes in process `syz.0.429'. [ 451.024090][ T7341] chnl_net:caif_netlink_parms(): no params data found [ 451.048999][ T5281] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 451.259002][ T5281] usb 1-1: Using ep0 maxpacket: 16 [ 451.277873][ T5281] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 451.296357][ T5281] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 451.333223][ T5281] usb 1-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=8b.57 [ 451.355254][ T5281] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.391220][ T5281] usb 1-1: Product: syz [ 451.426065][ T5281] usb 1-1: Manufacturer: syz [ 451.456661][ T5281] usb 1-1: SerialNumber: syz [ 451.535637][ T5281] usb 1-1: config 0 descriptor?? [ 451.542865][ T7327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 451.575522][ T5281] port100 1-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 451.668740][ T7327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 451.868496][ T5281] usb 1-1: USB disconnect, device number 11 [ 451.937764][ T5324] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 452.160568][ T5324] usb 5-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 452.205131][ T5324] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.223795][ T5324] usb 5-1: Product: syz [ 452.233006][ T5324] usb 5-1: Manufacturer: syz [ 452.250732][ T5324] usb 5-1: SerialNumber: syz [ 452.252385][ T7327] team0: Port device team_slave_0 added [ 452.300286][ T5324] usb 5-1: config 0 descriptor?? [ 452.623270][ T7327] team0: Port device team_slave_1 added [ 452.906575][ T7476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 452.959368][ T7341] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.981690][ T7341] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.990676][ T7476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 453.020928][ T7341] bridge_slave_0: entered allmulticast mode [ 453.072789][ T5324] usb 5-1: ignoring: probably an ADSL modem [ 453.073907][ T7341] bridge_slave_0: entered promiscuous mode [ 453.282545][ T5324] cxacru 5-1:0.0: usbatm_usb_probe: bind failed: -19! [ 453.308011][ T7327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 453.336630][ T5324] usb 5-1: USB disconnect, device number 7 [ 453.359796][ T7327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 453.451217][ T7327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 453.519711][ T35] bridge_slave_1: left allmulticast mode [ 453.525427][ T35] bridge_slave_1: left promiscuous mode [ 453.551162][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.612672][ T35] bridge_slave_0: left allmulticast mode [ 453.618386][ T35] bridge_slave_0: left promiscuous mode [ 453.640287][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.005206][ T7502] UBIFS error (pid: 7502): cannot open "./file0", error -22 [ 460.041495][ T35] bond0: left promiscuous mode [ 460.099174][ T35] bond_slave_0: left promiscuous mode [ 460.104832][ T35] bond_slave_1: left promiscuous mode [ 463.982440][ T35] team0: Port device vlan2 removed [ 464.046318][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 464.071649][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 464.100949][ T35] bond0 (unregistering): Released all slaves [ 464.174795][ T7341] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.221072][ T7341] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.289164][ T7341] bridge_slave_1: entered allmulticast mode [ 464.326884][ T7341] bridge_slave_1: entered promiscuous mode [ 464.341646][ T7327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 464.372906][ T7327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 464.438504][ T7327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 464.472021][ T7543] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 464.515990][ T7546] netlink: 'syz.4.443': attribute type 21 has an invalid length. [ 464.524264][ T7546] netlink: 132 bytes leftover after parsing attributes in process `syz.4.443'. [ 466.011729][ T7341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 468.160094][ T7341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 469.459971][ T35] hsr_slave_0: left promiscuous mode [ 469.514607][ T35] hsr_slave_1: left promiscuous mode [ 469.521935][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 469.532279][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 469.569951][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 469.587659][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 469.713459][ T35] veth1_macvtap: left promiscuous mode [ 469.725766][ T35] veth0_macvtap: left promiscuous mode [ 469.748973][ T35] veth1_vlan: left promiscuous mode [ 469.750341][ T29] audit: type=1326 audit(1725900980.124:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7595 comm="syz.2.453" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff1e357def9 code=0x0 [ 469.789067][ T35] veth0_vlan: left promiscuous mode [ 472.393783][ T35] team0 (unregistering): Port device team_slave_1 removed [ 472.612406][ T35] team0 (unregistering): Port device team_slave_0 removed [ 474.100472][ T7327] hsr_slave_0: entered promiscuous mode [ 474.162660][ T7327] hsr_slave_1: entered promiscuous mode [ 474.227316][ T7341] team0: Port device team_slave_0 added [ 474.310806][ T7341] team0: Port device team_slave_1 added [ 474.741169][ T7341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 474.748186][ T7341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 474.880556][ T7341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 474.923167][ T7341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 474.938566][ T7341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 474.964564][ C1] vkms_vblank_simulate: vblank timer overrun [ 475.058707][ T7341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 476.099134][ T5282] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 476.215406][ T7643] ntfs3: nullb0: Primary boot signature is not NTFS. [ 476.341188][ T5282] usb 1-1: Using ep0 maxpacket: 16 [ 476.374552][ T7341] hsr_slave_0: entered promiscuous mode [ 476.389558][ T5282] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 476.425673][ T7341] hsr_slave_1: entered promiscuous mode [ 476.439759][ T5282] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 476.458893][ T5282] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.458996][ T7341] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 476.487297][ T5282] usb 1-1: Product: syz [ 476.491662][ T5282] usb 1-1: Manufacturer: syz [ 476.507929][ T5282] usb 1-1: SerialNumber: syz [ 476.529090][ T5282] usb 1-1: config 0 descriptor?? [ 476.535528][ T7341] Cannot create hsr debugfs directory [ 477.522838][ T35] IPVS: stop unused estimator thread 0... [ 478.130571][ T5282] usb 1-1: USB disconnect, device number 12 [ 478.199334][ T5246] Bluetooth: hci5: command 0x0406 tx timeout [ 479.131601][ T35] bridge_slave_1: left allmulticast mode [ 479.146339][ T35] bridge_slave_1: left promiscuous mode [ 479.161711][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.225065][ T35] bridge_slave_0: left allmulticast mode [ 479.259789][ T35] bridge_slave_0: left promiscuous mode [ 479.290457][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.218363][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 482.266317][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 482.316499][ T35] bond0 (unregistering): Released all slaves [ 482.559507][ T35] hsr_slave_0: left promiscuous mode [ 482.603285][ T35] hsr_slave_1: left promiscuous mode [ 482.610586][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 482.628970][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 482.649984][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 482.722304][ T35] veth1_macvtap: left promiscuous mode [ 482.727861][ T35] veth0_macvtap: left promiscuous mode [ 482.759881][ T35] veth1_vlan: left promiscuous mode [ 482.765308][ T35] veth0_vlan: left promiscuous mode [ 484.000971][ T35] team0 (unregistering): Port device team_slave_1 removed [ 484.147362][ T35] team0 (unregistering): Port device team_slave_0 removed [ 485.502295][ T7327] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 486.832738][ T7327] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 486.939053][ T7708] GUP no longer grows the stack in syz.4.475 (7708): 20004000-20006000 (20002000) [ 486.958972][ T7708] CPU: 1 UID: 0 PID: 7708 Comm: syz.4.475 Not tainted 6.11.0-rc7-syzkaller #0 [ 486.967901][ T7708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 486.978005][ T7708] Call Trace: [ 486.981319][ T7708] [ 486.984277][ T7708] dump_stack_lvl+0x241/0x360 [ 486.989018][ T7708] ? __pfx_dump_stack_lvl+0x10/0x10 [ 486.994262][ T7708] ? __pfx__printk+0x10/0x10 [ 486.998906][ T7708] ? find_vma+0xf9/0x170 [ 487.003220][ T7708] __get_user_pages+0x114d/0x16a0 [ 487.008336][ T7708] ? __gup_longterm_locked+0xd11/0x17d0 [ 487.013945][ T7708] ? __pfx___get_user_pages+0x10/0x10 [ 487.019394][ T7708] __gup_longterm_locked+0xed7/0x17d0 [ 487.024830][ T7708] ? sanity_check_pinned_pages+0x12bb/0x13c0 [ 487.030869][ T7708] gup_fast_fallback+0x2742/0x2b50 [ 487.036075][ T7708] ? __pfx_gup_fast_fallback+0x10/0x10 [ 487.041595][ T7708] ? mark_lock+0x9a/0x350 [ 487.045990][ T7708] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 487.052028][ T7708] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 487.058430][ T7708] ? is_valid_gup_args+0x124/0x200 [ 487.063604][ T7708] pin_user_pages_fast+0xcc/0x160 [ 487.068694][ T7708] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 487.074377][ T7708] ? stack_depot_save_flags+0x6e4/0x830 [ 487.079990][ T7708] iov_iter_extract_pages+0x3db/0x720 [ 487.085423][ T7708] ? ____sys_recvmsg+0x1db/0x470 [ 487.090412][ T7708] extract_iter_to_sg+0x890/0x22b0 [ 487.095600][ T7708] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 487.101220][ T7708] ? __asan_memset+0x23/0x50 [ 487.105856][ T7708] af_alg_get_rsgl+0x41e/0x850 [ 487.110740][ T7708] skcipher_recvmsg+0x3f8/0x1230 [ 487.115926][ T7708] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 487.121343][ T7708] ? __might_fault+0xaa/0x120 [ 487.126329][ T7708] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 487.131664][ T7708] ? security_socket_recvmsg+0x90/0xb0 [ 487.137172][ T7708] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 487.142576][ T7708] sock_recvmsg+0x22f/0x280 [ 487.147130][ T7708] ____sys_recvmsg+0x1db/0x470 [ 487.151958][ T7708] ? __pfx_____sys_recvmsg+0x10/0x10 [ 487.157323][ T7708] do_recvmmsg+0x474/0xae0 [ 487.161551][ T5246] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 487.161776][ T7708] ? __pfx___futex_wait+0x10/0x10 [ 487.171708][ T5246] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 487.173958][ T7708] ? __pfx_do_recvmmsg+0x10/0x10 [ 487.184979][ T5246] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 487.185801][ T7708] ? __pfx_futex_wake_mark+0x10/0x10 [ 487.198133][ T7708] ? futex_wait+0x285/0x360 [ 487.200156][ T5246] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 487.202669][ T7708] ? __pfx_futex_wait+0x10/0x10 [ 487.210639][ T5246] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 487.214438][ T7708] ? vfs_write+0x7cb/0xc90 [ 487.223237][ T5246] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 487.225772][ T7708] ? __pfx_sock_write_iter+0x10/0x10 [ 487.238070][ T7708] ? __pfx_do_futex+0x10/0x10 [ 487.242810][ T7708] __x64_sys_recvmmsg+0x199/0x250 [ 487.247888][ T7708] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 487.253480][ T7708] ? do_syscall_64+0x100/0x230 [ 487.258294][ T7708] ? do_syscall_64+0xb6/0x230 [ 487.263020][ T7708] do_syscall_64+0xf3/0x230 [ 487.267569][ T7708] ? clear_bhb_loop+0x35/0x90 [ 487.272300][ T7708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.278242][ T7708] RIP: 0033:0x7f9147f7def9 [ 487.282685][ T7708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 487.302303][ T7708] RSP: 002b:00007f91479ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 487.310723][ T7708] RAX: ffffffffffffffda RBX: 00007f9148135f80 RCX: 00007f9147f7def9 [ 487.318719][ T7708] RDX: 0000000000000001 RSI: 00000000200005c0 RDI: 0000000000000005 [ 487.326739][ T7708] RBP: 00007f9147ff09f6 R08: 0000000000000000 R09: 0000000000000000 [ 487.334712][ T7708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 487.342685][ T7708] R13: 0000000000000000 R14: 00007f9148135f80 R15: 00007ffc47874418 [ 487.350700][ T7708] [ 487.425978][ T7327] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 487.463606][ T7327] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 489.250013][ T5246] Bluetooth: hci0: command tx timeout [ 489.669554][ T7710] chnl_net:caif_netlink_parms(): no params data found [ 489.952741][ T7327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 490.047145][ T7341] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 490.381981][ T7327] 8021q: adding VLAN 0 to HW filter on device team0 [ 491.200538][ T7341] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 491.223440][ T7341] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 491.258404][ T7341] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 491.328889][ T5246] Bluetooth: hci0: command tx timeout [ 492.521287][ T2917] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.528412][ T2917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 492.730908][ T2917] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.738117][ T2917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 493.418910][ T5246] Bluetooth: hci0: command tx timeout [ 493.460297][ T7710] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.467477][ T7710] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.529591][ T7710] bridge_slave_0: entered allmulticast mode [ 493.579203][ T7710] bridge_slave_0: entered promiscuous mode [ 493.622615][ T7710] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.649101][ T7710] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.656412][ T7710] bridge_slave_1: entered allmulticast mode [ 493.711527][ T7710] bridge_slave_1: entered promiscuous mode [ 494.763551][ T7327] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 494.810382][ T7710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 494.882828][ T7710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 497.158938][ T5246] Bluetooth: hci0: command tx timeout [ 499.683572][ T7710] team0: Port device team_slave_0 added [ 499.771536][ T7710] team0: Port device team_slave_1 added [ 500.283648][ T7710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 500.338816][ T7710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 500.419851][ T5230] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 500.461163][ T5230] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 500.489035][ T5230] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 500.510070][ T5230] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 500.518187][ T5230] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 500.526375][ T5230] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 500.595280][ T7710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 500.678983][ T1686] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 500.751448][ T7710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 500.758432][ T7710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 500.901185][ T7710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 500.928902][ T1686] usb 5-1: Using ep0 maxpacket: 8 [ 500.941692][ T1686] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 500.985311][ T1686] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.017655][ T1686] usb 5-1: Product: syz [ 501.029989][ T1686] usb 5-1: Manufacturer: syz [ 501.034644][ T1686] usb 5-1: SerialNumber: syz [ 501.122401][ T1686] usb 5-1: config 0 descriptor?? [ 501.183443][ T5246] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 501.210996][ T5246] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 501.220132][ T5246] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 501.228632][ T5246] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 501.237372][ T5246] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 501.245147][ T5246] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 501.411631][ T1686] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 501.470806][ T5230] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 501.491355][ T5230] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 501.509117][ T5230] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 501.522067][ T5230] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 501.550770][ T5230] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 501.558251][ T5230] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 501.741763][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.748122][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.440561][ T7710] hsr_slave_0: entered promiscuous mode [ 502.469690][ T7710] hsr_slave_1: entered promiscuous mode [ 502.486332][ T7710] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 502.496473][ T7710] Cannot create hsr debugfs directory [ 502.599249][ T5230] Bluetooth: hci4: command tx timeout [ 502.935576][ T1686] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 503.039459][ T1686] usb 5-1: USB disconnect, device number 8 [ 503.319286][ T5230] Bluetooth: hci6: command tx timeout [ 503.640553][ T5230] Bluetooth: hci2: command tx timeout [ 504.108895][ T5760] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 504.169862][ T12] bridge_slave_1: left allmulticast mode [ 504.192092][ T12] bridge_slave_1: left promiscuous mode [ 504.197929][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.252723][ T12] bridge_slave_0: left allmulticast mode [ 504.258439][ T12] bridge_slave_0: left promiscuous mode [ 504.274809][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.320896][ T5760] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 504.339074][ T5760] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 504.351353][ T5760] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 504.368505][ T5760] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 504.378266][ T5760] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.386722][ T5760] usb 5-1: Product: syz [ 504.398846][ T5760] usb 5-1: Manufacturer: syz [ 504.403921][ T5760] usb 5-1: SerialNumber: syz [ 504.429252][ T5760] hub 5-1:1.0: bad descriptor, ignoring hub [ 504.435234][ T5760] hub 5-1:1.0: probe with driver hub failed with error -5 [ 504.637125][ T5760] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 504.679272][ T5230] Bluetooth: hci4: command tx timeout [ 504.779462][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 504.815842][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 504.889340][ T12] bond0 (unregistering): Released all slaves [ 505.067196][ T5282] usb 5-1: USB disconnect, device number 9 [ 505.112292][ T5282] usblp0: removed [ 505.199460][ T7710] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.409656][ T5230] Bluetooth: hci6: command tx timeout [ 505.427952][ T12] hsr_slave_0: left promiscuous mode [ 505.450027][ T12] hsr_slave_1: left promiscuous mode [ 505.469714][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 505.480858][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 505.729126][ T5230] Bluetooth: hci2: command tx timeout [ 507.040339][ T5230] Bluetooth: hci4: command tx timeout [ 507.140455][ T12] team0 (unregistering): Port device team_slave_1 removed [ 507.479304][ T5230] Bluetooth: hci6: command tx timeout [ 507.790893][ T12] team0 (unregistering): Port device team_slave_0 removed [ 507.817105][ T5230] Bluetooth: hci2: command tx timeout [ 584.999435][ T5230] Bluetooth: hci4: command tx timeout [ 585.004933][ T5230] Bluetooth: hci6: command tx timeout [ 585.009508][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 585.016657][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 585.017741][ T5230] Bluetooth: hci2: command tx timeout [ 587.015931][ T7710] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 587.200365][ T54] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 587.210786][ T54] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 587.222134][ T54] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 587.255205][ T54] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 587.269184][ T54] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 587.279176][ T54] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 587.704911][ T5230] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 587.715649][ T5230] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 587.728930][ T5230] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 587.739756][ T5230] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 587.747460][ T5230] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 587.756335][ T5230] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 587.974730][ T5246] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 587.991380][ T7859] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 587.999097][ T7858] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 588.008647][ T7859] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 588.010207][ T7858] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 588.023115][ T7858] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 588.059870][ T7858] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 588.059890][ T7859] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 588.060811][ T7859] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 588.084394][ T7858] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 588.084815][ T7859] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 588.092032][ T7858] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 588.171568][ T7710] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.284749][ T7858] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 588.328937][ T7858] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 588.359608][ T7858] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 588.420847][ T7858] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 588.444841][ T7858] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 588.452505][ T7858] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 589.170122][ T7710] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.319419][ T5230] Bluetooth: hci7: command tx timeout [ 589.879146][ T5230] Bluetooth: hci8: command tx timeout [ 590.198932][ T5230] Bluetooth: hci9: command tx timeout [ 590.199176][ T7858] Bluetooth: hci5: command tx timeout [ 590.689104][ T7858] Bluetooth: hci10: command tx timeout [ 590.856537][ T7846] chnl_net:caif_netlink_parms(): no params data found [ 591.306498][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.394311][ T7861] chnl_net:caif_netlink_parms(): no params data found [ 591.408860][ T7858] Bluetooth: hci7: command tx timeout [ 591.636443][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.751728][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.950761][ T7856] chnl_net:caif_netlink_parms(): no params data found [ 591.959315][ T7858] Bluetooth: hci8: command tx timeout [ 592.120621][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.280203][ T7858] Bluetooth: hci5: command tx timeout [ 592.289120][ T7858] Bluetooth: hci9: command tx timeout [ 592.303068][ T7853] chnl_net:caif_netlink_parms(): no params data found [ 592.361707][ T7850] chnl_net:caif_netlink_parms(): no params data found [ 592.759234][ T7858] Bluetooth: hci10: command tx timeout [ 592.765767][ T7861] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.779151][ T7861] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.786454][ T7861] bridge_slave_0: entered allmulticast mode [ 592.794171][ T7861] bridge_slave_0: entered promiscuous mode [ 592.820442][ T7861] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.828334][ T7861] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.877193][ T7861] bridge_slave_1: entered allmulticast mode [ 592.884771][ T7861] bridge_slave_1: entered promiscuous mode [ 593.011187][ T7846] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.018378][ T7846] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.049355][ T7846] bridge_slave_0: entered allmulticast mode [ 593.057026][ T7846] bridge_slave_0: entered promiscuous mode [ 593.065658][ T7846] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.079888][ T7846] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.087183][ T7846] bridge_slave_1: entered allmulticast mode [ 593.095359][ T7846] bridge_slave_1: entered promiscuous mode [ 593.207251][ T7856] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.229182][ T7856] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.237614][ T7856] bridge_slave_0: entered allmulticast mode [ 593.280600][ T7856] bridge_slave_0: entered promiscuous mode [ 593.416779][ T7846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 593.487102][ T7858] Bluetooth: hci7: command tx timeout [ 593.595181][ T7861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 593.630852][ T7856] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.638050][ T7856] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.679334][ T7856] bridge_slave_1: entered allmulticast mode [ 593.710145][ T7856] bridge_slave_1: entered promiscuous mode [ 593.850794][ T7853] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.858024][ T7853] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.930174][ T7853] bridge_slave_0: entered allmulticast mode [ 593.959105][ T7853] bridge_slave_0: entered promiscuous mode [ 594.003433][ T7846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 594.040404][ T7858] Bluetooth: hci8: command tx timeout [ 594.191750][ T7861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 594.302188][ T7856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 594.356923][ T7853] bridge0: port 2(bridge_slave_1) entered blocking state [ 594.366492][ T7853] bridge0: port 2(bridge_slave_1) entered disabled state [ 594.369326][ T7858] Bluetooth: hci9: command tx timeout [ 594.379250][ T7858] Bluetooth: hci5: command tx timeout [ 594.385047][ T7853] bridge_slave_1: entered allmulticast mode [ 594.400520][ T7853] bridge_slave_1: entered promiscuous mode [ 594.659020][ T7850] bridge0: port 1(bridge_slave_0) entered blocking state [ 594.689154][ T7850] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.696420][ T7850] bridge_slave_0: entered allmulticast mode [ 594.737351][ T7850] bridge_slave_0: entered promiscuous mode [ 594.849032][ T7861] team0: Port device team_slave_0 added [ 594.849659][ T7858] Bluetooth: hci10: command tx timeout [ 594.872566][ T7856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 595.067418][ T7846] team0: Port device team_slave_0 added [ 595.082317][ T7846] team0: Port device team_slave_1 added [ 595.189194][ T7850] bridge0: port 2(bridge_slave_1) entered blocking state [ 595.229152][ T7850] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.261869][ T7850] bridge_slave_1: entered allmulticast mode [ 595.288889][ T7850] bridge_slave_1: entered promiscuous mode [ 595.312648][ T7861] team0: Port device team_slave_1 added [ 595.367075][ T7856] team0: Port device team_slave_0 added [ 595.385188][ T7853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 595.414702][ T7853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 595.461537][ T7846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 595.468540][ T7846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 595.500860][ T7846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 595.567445][ T7858] Bluetooth: hci7: command tx timeout [ 595.605378][ T7856] team0: Port device team_slave_1 added [ 595.662941][ T7846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 595.705732][ T7846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 595.758942][ T7846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 595.898902][ T7861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 595.909066][ T7861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 595.979131][ T7861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 596.119000][ T7858] Bluetooth: hci8: command tx timeout [ 596.263237][ T7850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 596.302405][ T7850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 596.342650][ T7861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 596.351313][ T7861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 596.439240][ T7858] Bluetooth: hci9: command tx timeout [ 596.439750][ T5230] Bluetooth: hci5: command tx timeout [ 596.497313][ T7861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 596.529925][ T7856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 596.536891][ T7856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 596.588845][ T7856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 596.635621][ T7853] team0: Port device team_slave_0 added [ 596.778581][ T7850] team0: Port device team_slave_0 added [ 596.819182][ T7856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 596.826534][ T7856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 596.919035][ T7856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 596.929870][ T5230] Bluetooth: hci10: command tx timeout [ 596.942907][ T7853] team0: Port device team_slave_1 added [ 596.955170][ T7846] hsr_slave_0: entered promiscuous mode [ 596.962190][ T7846] hsr_slave_1: entered promiscuous mode [ 596.988932][ T7846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 597.000090][ T7846] Cannot create hsr debugfs directory [ 597.183098][ T7850] team0: Port device team_slave_1 added [ 597.467143][ T7861] hsr_slave_0: entered promiscuous mode [ 597.490014][ T7861] hsr_slave_1: entered promiscuous mode [ 597.499879][ T7861] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 597.509376][ T7861] Cannot create hsr debugfs directory [ 597.672836][ T7856] hsr_slave_0: entered promiscuous mode [ 597.690271][ T7856] hsr_slave_1: entered promiscuous mode [ 597.719425][ T7856] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 597.727093][ T7856] Cannot create hsr debugfs directory [ 597.780119][ T7853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 597.787107][ T7853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 597.889005][ T7853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 598.048400][ T7850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 598.063936][ T7850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 598.138192][ T7850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 598.212861][ T7853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 598.238796][ T7853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 598.316352][ T7853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 598.529870][ T7850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 598.536894][ T7850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 598.568511][ T7850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 599.232492][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.403746][ T7850] hsr_slave_0: entered promiscuous mode [ 599.430377][ T7850] hsr_slave_1: entered promiscuous mode [ 599.458877][ T7850] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 599.476921][ T7850] Cannot create hsr debugfs directory [ 599.508617][ T7853] hsr_slave_0: entered promiscuous mode [ 599.520336][ T7853] hsr_slave_1: entered promiscuous mode [ 599.529367][ T7853] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 599.536933][ T7853] Cannot create hsr debugfs directory [ 599.591762][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.812425][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.100348][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.989305][ T12] bridge_slave_1: left allmulticast mode [ 601.009166][ T12] bridge_slave_1: left promiscuous mode [ 601.032482][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.050966][ T12] bridge_slave_0: left allmulticast mode [ 601.056627][ T12] bridge_slave_0: left promiscuous mode [ 601.099263][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.131011][ T12] bridge_slave_1: left allmulticast mode [ 601.136791][ T12] bridge_slave_1: left promiscuous mode [ 601.168663][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.192091][ T12] bridge_slave_0: left allmulticast mode [ 601.197775][ T12] bridge_slave_0: left promiscuous mode [ 601.225656][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.264803][ T12] bridge_slave_1: left allmulticast mode [ 601.283716][ T12] bridge_slave_1: left promiscuous mode [ 601.304521][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.344667][ T12] bridge_slave_0: left allmulticast mode [ 601.363321][ T12] bridge_slave_0: left promiscuous mode [ 601.383830][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.650318][ T12] bond0 (unregistering): Released all slaves [ 604.131286][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 604.177239][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 604.210868][ T12] bond0 (unregistering): Released all slaves [ 604.574083][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 604.638130][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 604.702306][ T12] bond0 (unregistering): Released all slaves [ 605.115727][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 605.176964][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 605.218963][ T12] bond0 (unregistering): Released all slaves [ 606.537144][ T7846] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 606.941901][ T7846] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 606.963448][ T7846] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 607.214883][ T7846] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 607.558536][ T12] hsr_slave_0: left promiscuous mode [ 607.581111][ T12] hsr_slave_1: left promiscuous mode [ 607.638849][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 607.646326][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 607.689839][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 607.697307][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 607.709644][ T12] hsr_slave_0: left promiscuous mode [ 607.719582][ T12] hsr_slave_1: left promiscuous mode [ 607.725867][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 607.739599][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 607.771931][ T12] hsr_slave_0: left promiscuous mode [ 607.809534][ T12] hsr_slave_1: left promiscuous mode [ 607.815917][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 607.828995][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 607.840100][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 607.847711][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 607.953736][ T12] veth1_macvtap: left promiscuous mode [ 607.969255][ T12] veth0_macvtap: left promiscuous mode [ 607.974971][ T12] veth1_vlan: left promiscuous mode [ 607.989218][ T12] veth0_vlan: left promiscuous mode [ 607.996346][ T12] veth1_macvtap: left promiscuous mode [ 608.026801][ T12] veth0_macvtap: left promiscuous mode [ 608.044445][ T12] veth1_vlan: left promiscuous mode [ 608.077101][ T12] veth0_vlan: left promiscuous mode [ 610.621648][ T12] team0 (unregistering): Port device team_slave_1 removed [ 610.761650][ T12] team0 (unregistering): Port device team_slave_0 removed [ 613.130905][ T12] team0 (unregistering): Port device team_slave_1 removed [ 613.259806][ T12] team0 (unregistering): Port device team_slave_0 removed [ 616.110463][ T12] team0 (unregistering): Port device team_slave_1 removed [ 616.231264][ T12] team0 (unregistering): Port device team_slave_0 removed [ 618.104705][ T7846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 618.218275][ T7856] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 618.241147][ T7856] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 618.375566][ T7856] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 618.426072][ T7856] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 618.520992][ T7846] 8021q: adding VLAN 0 to HW filter on device team0 [ 618.812929][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.820174][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 618.903208][ T2978] bridge0: port 2(bridge_slave_1) entered blocking state [ 618.910415][ T2978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 619.418129][ T7856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 619.567451][ T7856] 8021q: adding VLAN 0 to HW filter on device team0 [ 619.671381][ T2978] bridge0: port 1(bridge_slave_0) entered blocking state [ 619.678545][ T2978] bridge0: port 1(bridge_slave_0) entered forwarding state [ 619.757782][ T2978] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.764986][ T2978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 619.828447][ T7861] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 619.901222][ T7861] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 620.164649][ T7861] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 620.317520][ T7861] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 620.436899][ T7856] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 620.637741][ T7846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 621.125340][ T7846] veth0_vlan: entered promiscuous mode [ 621.304271][ T7846] veth1_vlan: entered promiscuous mode [ 621.366776][ T7850] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 621.430400][ T7850] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 621.610947][ T7850] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 621.771220][ T12] bridge_slave_1: left allmulticast mode [ 621.776928][ T12] bridge_slave_1: left promiscuous mode [ 621.800733][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.830801][ T12] bridge_slave_0: left allmulticast mode [ 621.836541][ T12] bridge_slave_0: left promiscuous mode [ 621.869136][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.119693][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 622.150275][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 622.171957][ T12] bond0 (unregistering): Released all slaves [ 622.199314][ T7850] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 622.352625][ T7861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 622.380752][ T7853] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 622.419460][ T7853] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 622.472573][ T7856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 622.553940][ T7846] veth0_macvtap: entered promiscuous mode [ 622.571335][ T7853] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 622.592947][ T7853] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 622.659264][ T12] hsr_slave_0: left promiscuous mode [ 622.705656][ T12] hsr_slave_1: left promiscuous mode [ 622.725807][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 622.749358][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 623.377231][ T12] team0 (unregistering): Port device team_slave_1 removed [ 623.509446][ T12] team0 (unregistering): Port device team_slave_0 removed [ 624.129939][ T7846] veth1_macvtap: entered promiscuous mode [ 624.173874][ T7861] 8021q: adding VLAN 0 to HW filter on device team0 [ 624.265432][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.272656][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 624.339099][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.346266][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 624.449748][ T7846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 624.498937][ T7846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.508890][ T7846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 624.528927][ T7846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.553497][ T7846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 624.602410][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.608819][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.713512][ T7846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 624.730127][ T7846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.751527][ T7846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 624.762514][ T7846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.790496][ T7846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 624.860954][ T7846] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.893118][ T7846] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.913313][ T7846] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.939014][ T7846] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.988670][ T7856] veth0_vlan: entered promiscuous mode [ 625.141379][ T7856] veth1_vlan: entered promiscuous mode [ 625.467714][ T7850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 625.556536][ T2954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 625.594913][ T7853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 625.603657][ T2954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 625.647653][ T7856] veth0_macvtap: entered promiscuous mode [ 625.722214][ T7856] veth1_macvtap: entered promiscuous mode [ 625.782789][ T7850] 8021q: adding VLAN 0 to HW filter on device team0 [ 625.858815][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 625.866700][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 625.905254][ T7853] 8021q: adding VLAN 0 to HW filter on device team0 [ 625.946812][ T7856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 625.988970][ T7856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.036410][ T7856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 626.078803][ T7856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.103563][ T7856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 626.138786][ T7856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.161099][ T7856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 626.222188][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 626.229473][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 626.261465][ T7856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 626.318862][ T7856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.348678][ T7856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 626.374836][ T7856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.406337][ T7856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 626.449378][ T7856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 626.471259][ T7856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 626.544171][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 626.551358][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 626.612295][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 626.619539][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 626.680569][ T7861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 626.693849][ T7856] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.705099][ T7856] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.715466][ T7856] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.724953][ T7856] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.750486][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 626.757641][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 627.173549][ T7850] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 627.583736][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 627.621260][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 627.800426][ T1057] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 627.808276][ T1057] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 628.210627][ T7861] veth0_vlan: entered promiscuous mode [ 628.272409][ T7861] veth1_vlan: entered promiscuous mode [ 628.393309][ T7850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 628.440343][ T30] INFO: task syz.2.463:7643 blocked for more than 143 seconds. [ 628.477236][ T30] Not tainted 6.11.0-rc7-syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 628.669113][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 628.677880][ T30] task:syz.2.463 state:D stack:24944 pid:7643 tgid:7642 ppid:5905 flags:0x00004006 [ 629.613029][ T7853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 629.649284][ T30] Call Trace: [ 629.668882][ T30] [ 629.671885][ T30] __schedule+0x17ae/0x4a10 [ 629.769152][ T30] ? __pfx___schedule+0x10/0x10 [ 629.774109][ T30] ? __pfx_lock_release+0x10/0x10 [ 629.927968][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 629.969162][ T30] ? schedule+0x90/0x320 [ 629.973460][ T30] schedule+0x14b/0x320 [ 629.977818][ T30] io_schedule+0x8d/0x110 [ 630.058913][ T30] folio_wait_bit_common+0x882/0x12b0 [ 630.064411][ T30] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 630.097047][ T30] ? __pfx_wake_page_function+0x10/0x10 [ 630.103147][ T30] ? __filemap_get_folio+0x984/0xc10 [ 630.118767][ T30] truncate_inode_pages_range+0xaaf/0xfc0 [ 630.124577][ T30] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 630.162163][ T30] ? __pfx_has_bh_in_lru+0x10/0x10 [ 630.167411][ T30] ? submit_bio_noacct+0xdb6/0x1920 [ 630.199690][ T30] ? ntfs_fill_super+0x9f5/0x4730 [ 630.204911][ T30] ? __pfx_has_bh_in_lru+0x10/0x10 [ 630.228786][ T30] ? __pfx_invalidate_bh_lru+0x10/0x10 [ 630.234342][ T30] set_blocksize+0x2f4/0x360 [ 630.248770][ T30] sb_set_blocksize+0x47/0xf0 [ 630.253523][ T30] ntfs_fill_super+0xc25/0x4730 [ 630.258480][ T30] ? __pfx_ntfs_fill_super+0x10/0x10 [ 630.279422][ T30] ? sb_set_blocksize+0x98/0xf0 [ 630.284346][ T30] ? setup_bdev_super+0x4e6/0x5d0 [ 630.299168][ T30] get_tree_bdev+0x3f7/0x570 [ 630.305310][ T30] ? __pfx_ntfs_fill_super+0x10/0x10 [ 630.328761][ T30] ? __pfx_get_tree_bdev+0x10/0x10 [ 630.333945][ T30] ? cap_capable+0x1b4/0x250 [ 630.338572][ T30] ? bpf_lsm_capable+0x9/0x10 [ 630.361115][ T30] vfs_get_tree+0x90/0x2b0 [ 630.365623][ T30] do_new_mount+0x2be/0xb40 [ 630.379163][ T30] ? __pfx_do_new_mount+0x10/0x10 [ 630.384266][ T30] __se_sys_mount+0x2d6/0x3c0 [ 630.400322][ T30] ? __pfx___se_sys_mount+0x10/0x10 [ 630.407020][ T30] ? do_syscall_64+0x100/0x230 [ 630.428766][ T30] ? __x64_sys_mount+0x20/0xc0 [ 630.439319][ T30] do_syscall_64+0xf3/0x230 [ 630.443887][ T30] ? clear_bhb_loop+0x35/0x90 [ 630.448608][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.470533][ T30] RIP: 0033:0x7ff1e357def9 [ 630.474975][ T30] RSP: 002b:00007ff1e4311038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 630.506566][ T30] RAX: ffffffffffffffda RBX: 00007ff1e3735f80 RCX: 00007ff1e357def9 [ 630.536540][ T30] RDX: 0000000020000000 RSI: 00000000200002c0 RDI: 0000000020000100 [ 630.545013][ T30] RBP: 00007ff1e35f09f6 R08: 0000000020000340 R09: 0000000000000000 [ 630.578899][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 630.628867][ T30] R13: 0000000000000000 R14: 00007ff1e3735f80 R15: 00007fffc449aa08 [ 630.648892][ T30] [ 630.661991][ T30] [ 630.661991][ T30] Showing all locks held in the system: [ 630.680431][ T30] 1 lock held by khungtaskd/30: [ 630.685341][ T30] #0: ffffffff8e738320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 630.748811][ T30] 3 locks held by kworker/0:2/1168: [ 630.754077][ T30] #0: ffff88801a880948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 630.788911][ T30] #1: ffffc90004247d00 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 630.808784][ T30] #2: ffff888078088240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x2d1/0x4130 [ 630.848934][ T30] 2 locks held by getty/4982: [ 630.853684][ T30] #0: ffff8880303040a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 630.891242][ T30] #1: ffffc900031232f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 630.909223][ T30] 2 locks held by kworker/0:7/5760: [ 630.914473][ T30] #0: ffff88801a880948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 630.978806][ T30] #1: ffffc9000974fd00 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 631.004832][ T30] 2 locks held by syz.3.147/6238: [ 631.010344][ T30] 1 lock held by syz.2.463/7643: [ 631.015319][ T30] #0: ffff8880605520e0 (&type->s_umount_key#82/1){+.+.}-{3:3}, at: alloc_super+0x221/0x9d0 [ 631.069234][ T30] 1 lock held by syz-executor/7850: [ 631.074507][ T30] 1 lock held by syz-executor/7861: [ 631.107142][ T30] #0: ffffffff8e73d6f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 631.138394][ T30] 2 locks held by dhcpcd-run-hook/8055: [ 631.161886][ T30] [ 631.164270][ T30] ============================================= [ 631.164270][ T30] [ 631.240208][ T30] NMI backtrace for cpu 1 [ 631.244617][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc7-syzkaller #0 [ 631.253530][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 631.263591][ T30] Call Trace: [ 631.266877][ T30] [ 631.269814][ T30] dump_stack_lvl+0x241/0x360 [ 631.274508][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 631.279720][ T30] ? __pfx__printk+0x10/0x10 [ 631.284319][ T30] ? vprintk_emit+0x667/0x7c0 [ 631.289021][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 631.294098][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 631.299056][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 631.304525][ T30] ? _printk+0xd5/0x120 [ 631.308685][ T30] ? __pfx__printk+0x10/0x10 [ 631.313298][ T30] ? __wake_up_klogd+0xcc/0x110 [ 631.318155][ T30] ? __pfx__printk+0x10/0x10 [ 631.322753][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 631.327795][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 631.333793][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 631.339797][ T30] watchdog+0xff4/0x1040 [ 631.344147][ T30] ? watchdog+0x1ea/0x1040 [ 631.348586][ T30] ? __pfx_watchdog+0x10/0x10 [ 631.353281][ T30] kthread+0x2f0/0x390 [ 631.357367][ T30] ? __pfx_watchdog+0x10/0x10 [ 631.362057][ T30] ? __pfx_kthread+0x10/0x10 [ 631.366664][ T30] ret_from_fork+0x4b/0x80 [ 631.371093][ T30] ? __pfx_kthread+0x10/0x10 [ 631.375701][ T30] ret_from_fork_asm+0x1a/0x30 [ 631.380493][ T30] [ 631.385844][ T30] Sending NMI from CPU 1 to CPUs 0: [ 631.392105][ C0] NMI backtrace for cpu 0 [ 631.392120][ C0] CPU: 0 UID: 0 PID: 7850 Comm: syz-executor Not tainted 6.11.0-rc7-syzkaller #0 [ 631.392140][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 631.392160][ C0] RIP: 0010:preempt_count_add+0x147/0x190 [ 631.392193][ C0] Code: c0 d9 0f 9a 80 e1 07 80 c1 03 38 c1 0f 8c fe fe ff ff 48 c7 c7 c0 d9 0f 9a e8 f5 ae 94 00 e9 ed fe ff ff 48 c7 c1 c0 d9 0f 9a <80> e1 07 80 c1 03 38 c1 0f 8c 07 ff ff ff 48 c7 c7 c0 d9 0f 9a e8 [ 631.392209][ C0] RSP: 0018:ffffc90003f87660 EFLAGS: 00000002 [ 631.392229][ C0] RAX: 0000000000000004 RBX: 0000000000000001 RCX: ffffffff9a0fd9c0 [ 631.392241][ C0] RDX: 0000000000000000 RSI: ffffffff8c3fba20 RDI: 0000000000000001 [ 631.392253][ C0] RBP: ffffc90003f87710 R08: ffffffff8ff74aef R09: 1ffffffff1fee95d [ 631.392266][ C0] R10: dffffc0000000000 R11: fffffbfff1fee95e R12: 0000000000000246 [ 631.392280][ C0] R13: 1ffff920007f0ed0 R14: ffffffff9a3960b0 R15: dffffc0000000000 [ 631.392293][ C0] FS: 0000000000000000(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000 [ 631.392309][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 631.392322][ C0] CR2: 00007f5f7bddb378 CR3: 000000007ccf4000 CR4: 00000000003506f0 [ 631.392337][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 631.392347][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 631.392359][ C0] Call Trace: [ 631.392366][ C0] [ 631.392373][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 631.392397][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 631.392424][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 631.392447][ C0] ? nmi_handle+0x2a/0x5a0 [ 631.392474][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 631.392496][ C0] ? nmi_handle+0x14f/0x5a0 [ 631.392513][ C0] ? nmi_handle+0x2a/0x5a0 [ 631.392531][ C0] ? preempt_count_add+0x147/0x190 [ 631.392552][ C0] ? default_do_nmi+0x63/0x160 [ 631.392577][ C0] ? exc_nmi+0x123/0x1f0 [ 631.392599][ C0] ? end_repeat_nmi+0xf/0x53 [ 631.392630][ C0] ? preempt_count_add+0x147/0x190 [ 631.392652][ C0] ? preempt_count_add+0x147/0x190 [ 631.392675][ C0] ? preempt_count_add+0x147/0x190 [ 631.392697][ C0] [ 631.392703][ C0] [ 631.392710][ C0] _raw_spin_lock_irqsave+0xba/0x120 [ 631.392737][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 631.392771][ C0] debug_check_no_obj_freed+0x234/0x580 [ 631.392795][ C0] ? page_ext_put+0x97/0xc0 [ 631.392817][ C0] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 631.392838][ C0] ? page_ext_get+0x20/0x2a0 [ 631.392863][ C0] free_unref_page+0x38a/0xea0 [ 631.392894][ C0] vfree+0x186/0x2e0 [ 631.392917][ C0] kcov_close+0x2b/0x50 [ 631.392941][ C0] ? __pfx_kcov_close+0x10/0x10 [ 631.392965][ C0] __fput+0x24a/0x8a0 [ 631.392994][ C0] task_work_run+0x24f/0x310 [ 631.393016][ C0] ? __pfx_task_work_run+0x10/0x10 [ 631.393036][ C0] ? do_exit+0xa2a/0x27f0 [ 631.393051][ C0] ? kmem_cache_free+0x145/0x350 [ 631.393079][ C0] do_exit+0xa2f/0x27f0 [ 631.393100][ C0] ? __pfx_do_exit+0x10/0x10 [ 631.393117][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 631.393141][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 631.393168][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 631.393191][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 631.393220][ C0] do_group_exit+0x207/0x2c0 [ 631.393236][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 631.393261][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 631.393280][ C0] get_signal+0x16a1/0x1740 [ 631.393309][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 631.393330][ C0] ? __pfx_get_signal+0x10/0x10 [ 631.393357][ C0] arch_do_signal_or_restart+0x96/0x860 [ 631.393383][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 631.393406][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 631.393438][ C0] ? syscall_exit_to_user_mode+0xa3/0x370 [ 631.393459][ C0] syscall_exit_to_user_mode+0xc9/0x370 [ 631.393479][ C0] do_syscall_64+0x100/0x230 [ 631.393499][ C0] ? clear_bhb_loop+0x35/0x90 [ 631.393523][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.393545][ C0] RIP: 0033:0x7f9f9d77fd8c [ 631.393559][ C0] Code: Unable to access opcode bytes at 0x7f9f9d77fd62. [ 631.393568][ C0] RSP: 002b:00007ffc9ef7b310 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 631.393585][ C0] RAX: 0000000000000028 RBX: 00007f9f9e464620 RCX: 00007f9f9d77fd8c [ 631.393597][ C0] RDX: 0000000000000028 RSI: 00007f9f9e464670 RDI: 0000000000000003 [ 631.393609][ C0] RBP: 0000000000000000 R08: 00007ffc9ef7b364 R09: 000000000000000c [ 631.393620][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 631.393632][ C0] R13: 0000000000000000 R14: 00007f9f9e464670 R15: 0000000000000000 [ 631.393654][ C0] [ 632.197274][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 632.204188][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc7-syzkaller #0 [ 632.212982][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 632.223044][ T30] Call Trace: [ 632.226327][ T30] [ 632.229256][ T30] dump_stack_lvl+0x241/0x360 [ 632.233940][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 632.239140][ T30] ? __pfx__printk+0x10/0x10 [ 632.243726][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 632.249719][ T30] ? vscnprintf+0x5d/0x90 [ 632.254053][ T30] panic+0x349/0x860 [ 632.257948][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 632.264107][ T30] ? __pfx_panic+0x10/0x10 [ 632.268519][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 632.273890][ T30] ? __irq_work_queue_local+0x137/0x410 [ 632.279462][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 632.284888][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 632.291046][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 632.297209][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 632.303391][ T30] watchdog+0x1033/0x1040 [ 632.307726][ T30] ? watchdog+0x1ea/0x1040 [ 632.312159][ T30] ? __pfx_watchdog+0x10/0x10 [ 632.316855][ T30] kthread+0x2f0/0x390 [ 632.320932][ T30] ? __pfx_watchdog+0x10/0x10 [ 632.325611][ T30] ? __pfx_kthread+0x10/0x10 [ 632.330232][ T30] ret_from_fork+0x4b/0x80 [ 632.334670][ T30] ? __pfx_kthread+0x10/0x10 [ 632.339283][ T30] ret_from_fork_asm+0x1a/0x30 [ 632.344062][ T30] [ 632.347385][ T30] Kernel Offset: disabled [ 632.351714][ T30] Rebooting in 86400 seconds..