last executing test programs: 56.877669568s ago: executing program 2 (id=2095): socket$xdp(0x2c, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x24, r1, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}]}, 0x24}}, 0x0) 56.736244808s ago: executing program 2 (id=2096): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x458, 0x5011, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x394}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) r1 = io_uring_setup(0x2e35, &(0x7f0000000180)) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) socket$inet6(0xa, 0x6, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 54.29616775s ago: executing program 2 (id=2108): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r1 = syz_open_procfs(0x0, &(0x7f0000000a80)='smaps_rollup\x00') preadv(r1, &(0x7f0000001680)=[{&(0x7f0000000140)=""/226, 0xe2}], 0x1, 0x0, 0x0) 54.067046531s ago: executing program 2 (id=2110): sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f00002d7000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000a88000/0x2000)=nil, 0x3) bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x14) 52.961360074s ago: executing program 2 (id=2116): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000000)={0x35}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000500)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) 52.734995534s ago: executing program 2 (id=2117): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) preadv(r0, &(0x7f0000001880)=[{&(0x7f00000018c0)=""/102400, 0x19000}], 0x1, 0x0, 0x0) madvise(&(0x7f000011a000/0x1000)=nil, 0x1000, 0xf) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) 44.205566388s ago: executing program 4 (id=2153): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) 40.304470931s ago: executing program 3 (id=2166): r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000180)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000000c0)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[@ANYBLOB='5'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_FADVISE) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 40.233398547s ago: executing program 3 (id=2167): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) r1 = syz_io_uring_setup(0x19d3, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0xa3d, 0x0, 0x0, 0x0, 0xff39) 39.268967903s ago: executing program 3 (id=2169): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r0, 0x0, &(0x7f0000000340)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8042, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) 38.910880411s ago: executing program 3 (id=2170): open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000041c0)={0x2020, 0x0, 0x0}, 0x202f) write$FUSE_INIT(r0, &(0x7f00000000c0)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x7ab78c4493c52f9b}}, 0x50) creat(&(0x7f0000000180)='./file0\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 38.640371079s ago: executing program 3 (id=2171): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000300)=0x10000) 37.633632044s ago: executing program 3 (id=2173): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000000c0)={0xfffffffc, 0x0, 0x0, 0x1, 0x4, "f996ff109a04000000008000"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 21.022416092s ago: executing program 4 (id=2154): ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x0, 0x0, 0x1c, 0x40000}}) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @remote}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000040)=ANY=[], 0x1c) 20.615175209s ago: executing program 4 (id=2188): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r0, 0x29, 0x4d, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x8) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendto$inet6(r1, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/9, 0x9}, 0x2) 20.304765949s ago: executing program 0 (id=2189): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) llistxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)=ANY=[@ANYRESDEC=r0]) umount2(&(0x7f0000001540)='./file0\x00', 0x2) dup3(r0, r1, 0x0) 20.076134119s ago: executing program 4 (id=2190): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @dev}]}, 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_deladdr={0x20, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_ADDRESS={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x0) 19.934160164s ago: executing program 0 (id=2191): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) write$dsp(r0, &(0x7f0000000080)="dbef", 0x2) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 19.565976116s ago: executing program 4 (id=2193): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x842, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000020301010000000000000000000010000800010001"], 0x1c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000020303005aced4c314a392ec0000ffff0800010001"], 0x1c}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 19.451609687s ago: executing program 4 (id=2194): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000780)={0x34, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0x1}, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x1, "02"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b03, 0x0) 18.949139253s ago: executing program 0 (id=2195): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x7e}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@ccm_128={{0x305}, '\x00', "bcbd13b603e0f7b3bfa8909ef43c0aeb", "0000fd9f", "283271c502c7fc4f"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) 18.520884753s ago: executing program 0 (id=2197): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000004c0)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x0, 0x7, 0x0, "98d3340600c7aa11897ecaab876eab79576839c5656be8410f2802e944af80373be2666b665770173fbd1883303b6ac4749393ad08f139a68f00"}, 0xd8) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000040)=0x4130, 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) recvmmsg(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000004ac0)=""/102389, 0x18ff5}], 0x1}}], 0x1, 0x2, 0x0) write$binfmt_elf64(r0, &(0x7f00000000c0)=ANY=[], 0xc63b9e35) 13.729807395s ago: executing program 1 (id=2199): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 11.595017801s ago: executing program 0 (id=2200): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 11.59472281s ago: executing program 1 (id=2201): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0xfff) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r1, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000002840)={0x114, 0x27, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@generic="24d4e3455c7216da3484447f8a081f930884b55764ca84de3d0e7bc8d6f29cd84ba9408cf2351604f1724e10a8fcc3988de886d82375980e92a1ba2f8410b06773cbbf6293af17222761aa1289e6a8f1d888f4809cdccfe1c8695630dcb6bad9b53d1d97f2f820a715ce709fcaa40a70dc4c98ebbe761c0eec46d4f50508215e72fc781a471b1a7c769a074f2d6388253cfdd4b0e37a788fbb7296ae39bb35439c66437fa3347adfaca46f74fbc95f1b070287096cc9bdc953ea637c118a68a8ddc03aa44e8aa8ca5dac063a05", @typed={0x2d, 0x0, 0x0, 0x0, @binary="8bb982eb4ec7e08b552a2807c00bbfbbb5369dd1e04690a1267e29e89d27673db50050419e278e6130"}]}]}, 0x114}], 0x1}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 9.09253768s ago: executing program 0 (id=2202): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) bind$packet(r2, &(0x7f0000000080)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) syz_emit_ethernet(0xe, &(0x7f00000000c0)={@local, @link_local={0x7}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x29, 0x0, @empty, @empty}, {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}, 0x0) 9.080168311s ago: executing program 1 (id=2203): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, 0x0, 0x0) r1 = syz_io_uring_setup(0x24f9, &(0x7f0000000080)={0x0, 0x0, 0x10b00}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r0}) io_uring_enter(r1, 0x2af7, 0x0, 0x0, 0x0, 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 3.623509924s ago: executing program 1 (id=2205): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) ftruncate(r0, 0xc17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) mbind(&(0x7f000015d000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000140)=0x3, 0x3, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x0) 1.365436876s ago: executing program 1 (id=2206): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2058) write$FUSE_INIT(r0, &(0x7f0000002200)={0x50, 0xfffffffffffffff5, r1, {0x7, 0x27, 0x1000, 0x1dd880, 0x2000}}, 0x50) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) fstat(r2, 0x0) 0s ago: executing program 1 (id=2207): mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000400), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1205029, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f00000003c0)={0x200086}, 0x20) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r1, &(0x7f00000020c0)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): renamed from eth0 [ 730.613853][T13865] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 730.637735][T13865] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 730.667454][T13865] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 730.851780][T13887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 730.917504][T13887] 8021q: adding VLAN 0 to HW filter on device team0 [ 730.927136][T13888] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 730.956970][T13888] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 730.987811][T13854] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.995064][T13854] bridge0: port 1(bridge_slave_0) entered forwarding state [ 731.033551][T13888] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 731.051255][T13888] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 731.079235][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 731.086710][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 731.185839][ T5278] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 731.363397][T13886] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 731.371299][ T5278] usb 4-1: Using ep0 maxpacket: 8 [ 731.390095][ T5278] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 731.415834][ T5278] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.424519][ T5278] usb 4-1: Product: syz [ 731.438275][T13886] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 731.449448][T13886] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 731.451301][ T5278] usb 4-1: Manufacturer: syz [ 731.465720][ T5278] usb 4-1: SerialNumber: syz [ 731.483975][T13865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 731.484131][ T5278] usb 4-1: config 0 descriptor?? [ 731.546680][T13886] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 731.593381][T13888] 8021q: adding VLAN 0 to HW filter on device bond0 [ 731.629225][T13865] 8021q: adding VLAN 0 to HW filter on device team0 [ 731.683241][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 731.690559][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 731.719411][ T5278] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 731.733533][T13888] 8021q: adding VLAN 0 to HW filter on device team0 [ 731.758649][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 731.765994][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 731.804907][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 731.812234][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 731.846867][T13887] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 731.862634][ T2570] bridge0: port 2(bridge_slave_1) entered blocking state [ 731.870649][ T2570] bridge0: port 2(bridge_slave_1) entered forwarding state [ 732.144057][T13887] veth0_vlan: entered promiscuous mode [ 732.232917][T13887] veth1_vlan: entered promiscuous mode [ 732.334616][T13886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 732.404754][T13886] 8021q: adding VLAN 0 to HW filter on device team0 [ 732.438860][T13865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 732.459359][T13887] veth0_macvtap: entered promiscuous mode [ 732.499142][T13887] veth1_macvtap: entered promiscuous mode [ 732.534640][ T6522] bridge0: port 1(bridge_slave_0) entered blocking state [ 732.541932][ T6522] bridge0: port 1(bridge_slave_0) entered forwarding state [ 732.608262][ T6522] bridge0: port 2(bridge_slave_1) entered blocking state [ 732.615448][ T6522] bridge0: port 2(bridge_slave_1) entered forwarding state [ 732.644563][T13887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 732.665795][T13887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.686455][T13887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 732.706032][T13887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.716613][T13887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 732.729988][T13887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.741589][T13887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 732.753413][T13887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.767396][T13887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 732.778812][T13887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.792361][T13887] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 732.837244][T13888] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 732.861317][T13887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 732.883965][T13887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.912933][T13887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 732.933830][ T5278] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 732.955170][T13887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 732.974247][ T5278] usb 4-1: USB disconnect, device number 36 [ 732.981008][T13887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 733.010950][T13887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 733.032888][T13887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 733.054706][T13887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 733.075419][T13887] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 733.095675][T13887] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 733.120202][T13887] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 733.219048][T13887] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.228697][T13887] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.238875][T13887] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.248034][T13887] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 733.264773][T13865] veth0_vlan: entered promiscuous mode [ 733.384743][T13865] veth1_vlan: entered promiscuous mode [ 733.529180][T13888] veth0_vlan: entered promiscuous mode [ 733.574014][T13865] veth0_macvtap: entered promiscuous mode [ 733.583146][T13854] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 733.596802][T13854] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 733.614933][T13886] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 733.643699][T13865] veth1_macvtap: entered promiscuous mode [ 733.653609][T13888] veth1_vlan: entered promiscuous mode [ 733.754374][T13888] veth0_macvtap: entered promiscuous mode [ 733.769113][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 733.770987][T13865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 733.804393][T13865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 733.816001][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 733.826414][T13865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 733.854117][T13865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 733.866634][T13865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 733.877851][T13865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 733.899781][T13865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 733.915267][T13865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 733.927197][T13865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 733.939034][T13865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 733.950237][T13865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 733.961389][T13865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 733.987188][T13865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 734.023340][T13888] veth1_macvtap: entered promiscuous mode [ 734.059650][T13865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 734.072015][T13865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 734.082474][T13865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 734.107654][T13865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 734.125689][T13865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 734.145637][T13865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 734.168343][T13865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 734.185658][T13865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 734.205740][T13865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 734.225856][T13865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 734.246786][T13865] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 734.269402][T13865] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 734.297613][T13865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 734.338230][T13886] veth0_vlan: entered promiscuous mode [ 734.355409][T13886] veth1_vlan: entered promiscuous mode [ 734.521734][T13865] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.531257][T13865] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.555737][T13865] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.577198][T13865] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 734.614702][T13888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 734.629053][T13888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 734.643332][T13888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 734.656969][T13888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 734.667782][T13888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 734.679032][T13888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 734.689355][T13888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 734.700305][T13888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 734.724794][T13888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 734.753590][T13888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 734.775906][T13888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 734.798459][T13888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 734.816962][T13888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 734.839718][T13888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 734.865037][T13888] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 734.939687][T13888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 734.975837][T13888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 734.996025][T13888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 735.006765][T13888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.025735][T13888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 735.046822][T13888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.073734][T13888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 735.093088][T13888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.103686][T13888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 735.146912][T13888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.165618][T13888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 735.198871][T13888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.209322][T13888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 735.226055][T13888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.238085][T13888] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 735.471013][T13882] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 735.485058][T13882] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 735.494989][T13882] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 735.503756][T13882] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 735.512540][T13882] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 735.520492][T13882] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 735.561229][T13854] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.705303][T13854] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.723431][T13888] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.734426][T13888] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.744077][T13888] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.753780][T13888] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 735.818878][T13854] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.840885][T13886] veth0_macvtap: entered promiscuous mode [ 735.897515][T13854] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 735.913416][T13886] veth1_macvtap: entered promiscuous mode [ 735.990666][ T6526] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 736.008714][ T6526] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 736.071037][T13886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 736.081901][T13886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.093794][T13886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 736.105634][T13886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.116470][T13886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 736.127493][T13886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.137985][T13886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 736.149116][T13886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.159454][T13886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 736.171826][T13886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.182583][T13886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 736.194072][T13886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.204393][T13886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 736.216326][T13886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.226901][T13886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 736.238305][T13886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.250798][T13886] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 736.303000][T13886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 736.315023][T13886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.336125][T13886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 736.354371][T13886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.364808][T13886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 736.376187][T13886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.389060][T13886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 736.400466][T13886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.414930][T13886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 736.426169][T13886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.437199][T13886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 736.448822][T13886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.459588][T13886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 736.475962][T13886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.493719][T13886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 736.515679][T13886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.532768][T13886] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 736.563161][ T6526] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 736.578885][ T6526] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 736.671703][T13886] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.690583][T13886] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.701249][T13886] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.710635][T13886] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.804281][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 736.833103][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 736.951636][T13854] bridge_slave_1: left allmulticast mode [ 736.974377][T13854] bridge_slave_1: left promiscuous mode [ 737.001684][T13854] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.027761][T13854] bridge_slave_0: left allmulticast mode [ 737.045716][T13854] bridge_slave_0: left promiscuous mode [ 737.051615][T13854] bridge0: port 1(bridge_slave_0) entered disabled state [ 737.405716][ T5278] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 737.598129][ T5278] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 737.610087][T13882] Bluetooth: hci0: command tx timeout [ 737.633359][ T5278] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 737.645179][ T5278] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 737.654801][ T5278] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.663090][ T5278] usb 2-1: Product: syz [ 737.678483][ T5278] usb 2-1: Manufacturer: syz [ 737.683378][ T5278] usb 2-1: SerialNumber: syz [ 737.821202][T13854] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 737.842230][T13854] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 737.859131][T13854] bond0 (unregistering): Released all slaves [ 737.961347][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 737.995215][T14151] chnl_net:caif_netlink_parms(): no params data found [ 738.027777][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 738.354547][ T6526] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 738.374717][ T6526] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 738.384193][ T5278] usb 2-1: USB disconnect, device number 43 [ 738.713040][T14151] bridge0: port 1(bridge_slave_0) entered blocking state [ 738.726666][T14151] bridge0: port 1(bridge_slave_0) entered disabled state [ 738.745992][T14151] bridge_slave_0: entered allmulticast mode [ 738.763653][T14151] bridge_slave_0: entered promiscuous mode [ 738.783801][T14151] bridge0: port 2(bridge_slave_1) entered blocking state [ 738.800919][T14151] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.816630][T14151] bridge_slave_1: entered allmulticast mode [ 738.824695][T14151] bridge_slave_1: entered promiscuous mode [ 738.964869][ T2570] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 738.984097][ T2570] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 739.029464][T14151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 739.076542][T14151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 739.201552][T13854] hsr_slave_0: left promiscuous mode [ 739.226514][T13854] hsr_slave_1: left promiscuous mode [ 739.243294][T13854] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 739.272707][T13854] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 739.296577][T13854] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 739.308023][T13854] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 739.375188][T13854] veth1_macvtap: left promiscuous mode [ 739.385960][T13854] veth0_macvtap: left promiscuous mode [ 739.396417][T13854] veth1_vlan: left promiscuous mode [ 739.413332][T13854] veth0_vlan: left promiscuous mode [ 739.418971][ T5275] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 739.585680][ T5275] usb 2-1: Using ep0 maxpacket: 16 [ 739.687137][T13882] Bluetooth: hci0: command tx timeout [ 739.750545][ T5275] usb 2-1: unable to get BOS descriptor or descriptor too short [ 739.784551][ T5275] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 739.796347][ T5275] usb 2-1: can't read configurations, error -71 [ 739.871555][T14211] input: syz0 as /devices/virtual/input/input47 [ 740.966550][T14242] fuse: root generation should be zero [ 741.120641][ T5275] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 741.181191][T13854] team0 (unregistering): Port device team_slave_1 removed [ 741.270127][T13854] team0 (unregistering): Port device team_slave_0 removed [ 741.297802][ T5275] usb 3-1: Using ep0 maxpacket: 32 [ 741.309847][ T5275] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 741.334178][ T5275] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 741.355680][ T5275] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 741.379332][ T5275] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 741.395695][ T5275] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.411589][ T5275] usb 3-1: config 0 descriptor?? [ 741.426646][T14237] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 741.447543][ T5275] hub 3-1:0.0: USB hub found [ 741.656907][ T5275] hub 3-1:0.0: 2 ports detected [ 741.782596][T13882] Bluetooth: hci0: command tx timeout [ 741.828620][ T5272] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 741.995899][ T5272] usb 1-1: Using ep0 maxpacket: 8 [ 742.032370][ T5272] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 742.055786][ T5272] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 742.067042][ T5272] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 742.079484][ T5272] usb 1-1: New USB device found, idVendor=1b80, idProduct=d700, bcdDevice=d0.46 [ 742.096627][ T5275] hub 3-1:0.0: set hub depth failed [ 742.102041][ T5272] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.110573][ T5272] usb 1-1: Product: syz [ 742.131531][ T5275] usb 3-1: USB disconnect, device number 32 [ 742.137694][ T5272] usb 1-1: Manufacturer: syz [ 742.142608][ T5272] usb 1-1: SerialNumber: syz [ 742.157885][ T5272] usb 1-1: config 0 descriptor?? [ 742.372043][ T5272] radio-si470x 1-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 742.380976][ T5272] radio-si470x 1-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 742.399563][T14151] team0: Port device team_slave_0 added [ 742.430493][T14151] team0: Port device team_slave_1 added [ 742.576325][T14151] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 742.584616][T14151] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 742.611710][ T5272] radio-si470x 1-1:0.0: software version 0, hardware version 0 [ 742.619399][ T5272] radio-si470x 1-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 742.632942][ T5272] radio-si470x 1-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 742.635755][T14151] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 742.684419][T14151] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 742.702505][T14151] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 742.728657][ C1] vkms_vblank_simulate: vblank timer overrun [ 742.788595][T14151] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 742.814299][ T5272] radio-si470x 1-1:0.0: submitting int urb failed (-90) [ 743.092588][T14151] hsr_slave_0: entered promiscuous mode [ 743.121367][T14151] hsr_slave_1: entered promiscuous mode [ 743.183755][T14151] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 743.224555][T14151] Cannot create hsr debugfs directory [ 743.420147][ T5272] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 743.439489][ T5272] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -22 [ 743.456052][ T5275] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 743.489848][ T5272] usb 1-1: USB disconnect, device number 24 [ 743.626353][ T5275] usb 5-1: Using ep0 maxpacket: 8 [ 743.660227][ T5275] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 743.685964][ T5275] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 743.716888][ T5275] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 743.737922][ T5275] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 743.753029][T13854] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 743.785800][ T5275] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 743.805777][ T5275] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.845297][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 743.846607][ T5225] Bluetooth: hci0: command tx timeout [ 743.876761][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 743.892342][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 743.903748][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 743.914345][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 743.922135][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 744.032659][T13854] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.057862][ T5275] usb 5-1: GET_CAPABILITIES returned 0 [ 744.063440][ T5275] usbtmc 5-1:16.0: can't read capabilities [ 744.267377][T13854] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.336400][T14286] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2009'. [ 744.410336][ T46] usb 5-1: USB disconnect, device number 31 [ 744.410587][T14263] usbtmc 5-1:16.0: usb_control_msg returned -71 [ 744.416792][ T937] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 744.505492][T13854] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.615848][ T937] usb 3-1: Using ep0 maxpacket: 8 [ 744.630257][ T937] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 744.651167][ T937] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 744.709872][ T937] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 744.756053][ T937] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 744.818891][ T937] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 744.865282][ T937] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 744.903916][ T937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.183595][ T937] usb 3-1: usb_control_msg returned -32 [ 745.219366][ T937] usbtmc 3-1:16.0: can't read capabilities [ 745.262643][T13854] bridge_slave_1: left allmulticast mode [ 745.299237][T13854] bridge_slave_1: left promiscuous mode [ 745.326195][T13854] bridge0: port 2(bridge_slave_1) entered disabled state [ 745.342625][T13854] bridge_slave_0: left allmulticast mode [ 745.354635][T13854] bridge_slave_0: left promiscuous mode [ 745.365780][T13854] bridge0: port 1(bridge_slave_0) entered disabled state [ 745.542073][T14313] binder_alloc: binder_alloc_mmap_handler: 14312 20ffc000-20ffd000 already mapped failed -16 [ 746.006412][ T54] Bluetooth: hci3: command tx timeout [ 746.047875][T14325] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 746.179360][ T5272] usb 3-1: USB disconnect, device number 33 [ 746.256229][ T5278] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 746.369442][T13854] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 746.381893][T13854] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 746.393894][T13854] bond0 (unregistering): Released all slaves [ 746.429155][ T5278] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 746.437848][ T5278] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 746.459280][ T5278] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 746.481106][ T5278] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 746.501561][ T5278] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 746.526685][ T5278] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.550405][ T5278] usb 5-1: config 0 descriptor?? [ 746.561628][T14327] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 746.644408][T14280] chnl_net:caif_netlink_parms(): no params data found [ 746.746279][T14151] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 746.896829][T14151] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 746.930080][T14151] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 746.986191][ T5278] plantronics 0003:047F:FFFF.002A: unknown main item tag 0x0 [ 747.005277][ T5278] plantronics 0003:047F:FFFF.002A: unknown main item tag 0x0 [ 747.014665][ T5278] plantronics 0003:047F:FFFF.002A: unknown main item tag 0x0 [ 747.023941][ T5278] plantronics 0003:047F:FFFF.002A: unknown main item tag 0x0 [ 747.037092][ T5278] plantronics 0003:047F:FFFF.002A: unknown main item tag 0x0 [ 747.046791][ T5278] plantronics 0003:047F:FFFF.002A: unknown main item tag 0x0 [ 747.055352][ T5278] plantronics 0003:047F:FFFF.002A: No inputs registered, leaving [ 747.067149][T13854] hsr_slave_0: left promiscuous mode [ 747.075444][ T5278] plantronics 0003:047F:FFFF.002A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 747.152507][T13854] hsr_slave_1: left promiscuous mode [ 747.167869][T13854] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 747.181467][T13854] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 747.196174][T13854] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 747.206225][T13854] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 747.298608][ T937] usb 5-1: USB disconnect, device number 32 [ 747.299906][T13854] veth1_macvtap: left promiscuous mode [ 747.329710][T13854] veth0_macvtap: left promiscuous mode [ 747.344479][T13854] veth1_vlan: left promiscuous mode [ 747.367773][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.374181][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.374320][T13854] veth0_vlan: left promiscuous mode [ 747.444341][ T29] audit: type=1326 audit(1726815979.602:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14359 comm="syz.0.2024" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 747.472418][ T29] audit: type=1326 audit(1726815979.632:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14359 comm="syz.0.2024" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 747.494469][ C1] vkms_vblank_simulate: vblank timer overrun [ 747.532709][ T29] audit: type=1326 audit(1726815979.662:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14359 comm="syz.0.2024" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 747.583676][ T29] audit: type=1326 audit(1726815979.662:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14359 comm="syz.0.2024" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 747.620724][ T29] audit: type=1326 audit(1726815979.662:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14359 comm="syz.0.2024" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 747.686375][ T29] audit: type=1326 audit(1726815979.662:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14359 comm="syz.0.2024" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 747.712239][ T29] audit: type=1326 audit(1726815979.662:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14359 comm="syz.0.2024" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 747.737463][ T29] audit: type=1326 audit(1726815979.662:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14359 comm="syz.0.2024" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 747.759919][ C1] vkms_vblank_simulate: vblank timer overrun [ 747.768653][ T29] audit: type=1326 audit(1726815979.662:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14359 comm="syz.0.2024" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 747.855655][ T29] audit: type=1326 audit(1726815979.662:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14359 comm="syz.0.2024" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x7ffc0000 [ 748.086155][ T54] Bluetooth: hci3: command tx timeout [ 748.662360][ T5273] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 748.835780][ T5273] usb 3-1: Using ep0 maxpacket: 8 [ 748.853095][ T5273] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 748.873105][ T5273] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 748.884996][ T5273] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 748.895529][ T5273] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 748.908786][ T5273] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 748.917984][T13854] team0 (unregistering): Port device team_slave_1 removed [ 748.922773][ T5273] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 748.952258][ T5273] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.032398][T13854] team0 (unregistering): Port device team_slave_0 removed [ 749.184937][ T5273] usb 3-1: GET_CAPABILITIES returned 0 [ 749.192032][ T5273] usbtmc 3-1:16.0: can't read capabilities [ 749.561957][T14385] usbtmc 3-1:16.0: usb_control_msg returned -71 [ 749.562400][ T5304] usb 3-1: USB disconnect, device number 34 [ 749.595105][T14395] usbtmc 3-1:16.0: usb_control_msg returned -19 [ 749.954431][T14151] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 750.019793][T14392] syzkaller1: entered promiscuous mode [ 750.025754][T14392] syzkaller1: entered allmulticast mode [ 750.120020][T14280] bridge0: port 1(bridge_slave_0) entered blocking state [ 750.128387][T14280] bridge0: port 1(bridge_slave_0) entered disabled state [ 750.145162][T14280] bridge_slave_0: entered allmulticast mode [ 750.152883][T14280] bridge_slave_0: entered promiscuous mode [ 750.165905][ T54] Bluetooth: hci3: command tx timeout [ 750.192340][T14280] bridge0: port 2(bridge_slave_1) entered blocking state [ 750.213050][T14280] bridge0: port 2(bridge_slave_1) entered disabled state [ 750.221499][T14280] bridge_slave_1: entered allmulticast mode [ 750.228802][T14280] bridge_slave_1: entered promiscuous mode [ 750.280207][T14280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 750.315043][T14280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 750.523993][T14280] team0: Port device team_slave_0 added [ 750.533162][T14280] team0: Port device team_slave_1 added [ 750.778248][T14280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 750.785449][T14280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 750.811827][ C1] vkms_vblank_simulate: vblank timer overrun [ 750.871701][T13882] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 750.884569][T13882] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 750.898536][T13882] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 750.909740][T13882] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 750.913981][T14280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 750.940833][T13882] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 750.950595][T13882] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 751.347721][T13854] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.407507][T14280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 751.414749][T14280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 751.504534][T14280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 751.680146][T13854] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.852595][T13854] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.903595][T14280] hsr_slave_0: entered promiscuous mode [ 751.915374][T14280] hsr_slave_1: entered promiscuous mode [ 751.936492][T14280] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 751.952243][T14280] Cannot create hsr debugfs directory [ 751.976049][ T5273] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 751.985958][T14151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 752.014281][T13854] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 752.065815][ T5272] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 752.140839][T14151] 8021q: adding VLAN 0 to HW filter on device team0 [ 752.145908][ T5273] usb 3-1: Using ep0 maxpacket: 32 [ 752.156826][ T5273] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 752.172908][ T5273] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 752.183250][ T5273] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 752.197067][ T5273] usb 3-1: New USB device found, idVendor=048d, idProduct=8595, bcdDevice= 0.00 [ 752.206966][ T5273] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.222409][ T5273] usb 3-1: config 0 descriptor?? [ 752.227734][ T5272] usb 1-1: Using ep0 maxpacket: 32 [ 752.242248][ T5272] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 752.256168][T13882] Bluetooth: hci3: command tx timeout [ 752.258944][ T5272] usb 1-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 752.274214][ T5272] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 752.308353][ T5272] usb 1-1: Product: syz [ 752.312615][ T5272] usb 1-1: Manufacturer: syz [ 752.319979][ T5272] usb 1-1: SerialNumber: syz [ 752.337831][ T5272] usb 1-1: config 0 descriptor?? [ 752.351925][ T5272] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 752.378097][ T6522] bridge0: port 1(bridge_slave_0) entered blocking state [ 752.385370][ T6522] bridge0: port 1(bridge_slave_0) entered forwarding state [ 752.482876][ T6522] bridge0: port 2(bridge_slave_1) entered blocking state [ 752.490676][ T6522] bridge0: port 2(bridge_slave_1) entered forwarding state [ 752.678251][ T5273] itetech 0003:048D:8595.002B: unknown main item tag 0x0 [ 752.687661][ T5273] itetech 0003:048D:8595.002B: unknown main item tag 0x0 [ 752.695004][ T5273] itetech 0003:048D:8595.002B: unknown main item tag 0x0 [ 752.703563][ T5273] itetech 0003:048D:8595.002B: unknown main item tag 0x0 [ 752.710895][ T5273] itetech 0003:048D:8595.002B: unknown main item tag 0x0 [ 752.721721][ T5273] itetech 0003:048D:8595.002B: hidraw0: USB HID v0.00 Device [HID 048d:8595] on usb-dummy_hcd.2-1/input0 [ 752.761485][T13854] bridge_slave_1: left allmulticast mode [ 752.770238][T13854] bridge_slave_1: left promiscuous mode [ 752.783534][T13854] bridge0: port 2(bridge_slave_1) entered disabled state [ 752.805075][T13854] bridge_slave_0: left allmulticast mode [ 752.823010][T13854] bridge_slave_0: left promiscuous mode [ 752.830193][T13854] bridge0: port 1(bridge_slave_0) entered disabled state [ 753.055893][T13882] Bluetooth: hci4: command tx timeout [ 753.509832][T13854] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 753.523934][T13854] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 753.555187][T13854] bond0 (unregistering): Released all slaves [ 753.763646][ C1] vkms_vblank_simulate: vblank timer overrun [ 753.818450][ T5272] gspca_sunplus: reg_w_1 err -71 [ 753.823703][ T5272] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 753.853327][ T5272] usb 1-1: USB disconnect, device number 25 [ 753.976561][T14408] chnl_net:caif_netlink_parms(): no params data found [ 754.256888][T13854] hsr_slave_0: left promiscuous mode [ 754.263389][T13854] hsr_slave_1: left promiscuous mode [ 754.284398][T13854] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 754.296310][T13854] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 754.304707][T13854] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 754.314723][T13854] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 754.370533][T13854] veth1_macvtap: left promiscuous mode [ 754.385295][T13854] veth0_macvtap: left promiscuous mode [ 754.409630][T13854] veth1_vlan: left promiscuous mode [ 754.424712][T13854] veth0_vlan: left promiscuous mode [ 754.628309][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 754.628333][ T29] audit: type=1326 audit(1726815986.792:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14459 comm="syz.0.2048" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf744d579 code=0x0 [ 754.827482][ T5276] usb 3-1: USB disconnect, device number 35 [ 755.126338][T13882] Bluetooth: hci4: command tx timeout [ 755.305728][ T5276] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 755.518815][ T5276] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 755.554506][ T5276] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 755.579583][ T5276] usb 3-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 755.590265][ T5276] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.625211][ T5276] usb 3-1: config 0 descriptor?? [ 755.711727][T13854] team0 (unregistering): Port device team_slave_1 removed [ 755.798509][T13854] team0 (unregistering): Port device team_slave_0 removed [ 756.138365][ T5276] itetech 0003:258A:6A88.002C: unknown main item tag 0x0 [ 756.155310][ T5276] itetech 0003:258A:6A88.002C: unknown main item tag 0x0 [ 756.165112][ T5276] itetech 0003:258A:6A88.002C: unknown main item tag 0x0 [ 756.205791][ T5276] itetech 0003:258A:6A88.002C: unknown main item tag 0x0 [ 756.213356][ T5276] itetech 0003:258A:6A88.002C: unknown main item tag 0x0 [ 756.228166][ T5276] itetech 0003:258A:6A88.002C: hidraw0: USB HID v0.00 Device [HID 258a:6a88] on usb-dummy_hcd.2-1/input0 [ 756.401765][ T25] usb 3-1: USB disconnect, device number 36 [ 756.805044][T14408] bridge0: port 1(bridge_slave_0) entered blocking state [ 756.821352][T14408] bridge0: port 1(bridge_slave_0) entered disabled state [ 756.829407][T14408] bridge_slave_0: entered allmulticast mode [ 756.838899][T14408] bridge_slave_0: entered promiscuous mode [ 756.853990][T14408] bridge0: port 2(bridge_slave_1) entered blocking state [ 756.864232][T14408] bridge0: port 2(bridge_slave_1) entered disabled state [ 756.876517][T14408] bridge_slave_1: entered allmulticast mode [ 756.897103][T14408] bridge_slave_1: entered promiscuous mode [ 756.945282][T14151] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 757.054538][T14408] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 757.112654][T14408] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 757.206015][T13882] Bluetooth: hci4: command tx timeout [ 757.283756][T14280] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 757.356728][T14408] team0: Port device team_slave_0 added [ 757.399951][T14408] team0: Port device team_slave_1 added [ 757.426602][T14280] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 757.518668][T14408] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 757.545796][T14408] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 757.625801][T14408] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 757.666057][T14280] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 757.698693][T14408] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 757.725894][T14408] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 757.796667][T14408] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 757.842321][T14151] veth0_vlan: entered promiscuous mode [ 757.878472][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 757.898331][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 757.916633][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 757.934890][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 757.946998][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 757.954071][T14280] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 757.963028][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 758.124941][T14408] hsr_slave_0: entered promiscuous mode [ 758.142688][T14408] hsr_slave_1: entered promiscuous mode [ 758.154423][T14408] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 758.165767][T14408] Cannot create hsr debugfs directory [ 758.173261][T14151] veth1_vlan: entered promiscuous mode [ 758.398719][T13854] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.637117][T13854] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.904771][T13854] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 758.985486][T14151] veth0_macvtap: entered promiscuous mode [ 759.035316][T14151] veth1_macvtap: entered promiscuous mode [ 759.143983][T13854] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 759.223973][T14151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 759.262911][T14151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.285456][T14151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 759.296182][T13882] Bluetooth: hci4: command tx timeout [ 759.312372][T14151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.334389][T14553] input: syz0 as /devices/virtual/input/input48 [ 759.335614][T14151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 759.369496][T14151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.384483][T14151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 759.398745][T14151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.409485][T14151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 759.420619][T14151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.434922][T14151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 759.446326][T14151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.461349][T14151] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 759.612162][T14505] chnl_net:caif_netlink_parms(): no params data found [ 759.731004][T14151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 759.759925][T14151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.771512][T14151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 759.792052][T14151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.805436][T14151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 759.816739][T14151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.827553][T14151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 759.841675][T14151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.853466][T14151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 759.886213][T14151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.903833][T14151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 759.915434][T14151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.928772][T14151] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 760.006070][T13882] Bluetooth: hci1: command tx timeout [ 760.119736][T14151] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.129054][T14151] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.139010][T14151] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.150976][T14151] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 760.236850][T14505] bridge0: port 1(bridge_slave_0) entered blocking state [ 760.244025][T14505] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.265343][T14505] bridge_slave_0: entered allmulticast mode [ 760.274350][T14505] bridge_slave_0: entered promiscuous mode [ 760.326636][T14505] bridge0: port 2(bridge_slave_1) entered blocking state [ 760.333899][T14505] bridge0: port 2(bridge_slave_1) entered disabled state [ 760.363944][T14505] bridge_slave_1: entered allmulticast mode [ 760.371743][T14505] bridge_slave_1: entered promiscuous mode [ 760.379913][T13854] bridge_slave_1: left allmulticast mode [ 760.386503][T13854] bridge_slave_1: left promiscuous mode [ 760.392500][T13854] bridge0: port 2(bridge_slave_1) entered disabled state [ 760.402121][T13854] bridge_slave_0: left allmulticast mode [ 760.408884][T13854] bridge_slave_0: left promiscuous mode [ 760.414593][T13854] bridge0: port 1(bridge_slave_0) entered disabled state [ 761.040172][T13854] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 761.054457][T13854] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 761.072039][T13854] bond0 (unregistering): Released all slaves [ 761.329140][T14505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 761.504755][T14280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 761.550465][T14505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 761.624561][T14587] input: syz1 as /devices/virtual/input/input49 [ 761.693419][T13860] udevd[13860]: setting owner of /dev/input/js0 to uid=0, gid=104 failed: No such file or directory [ 761.819977][T14505] team0: Port device team_slave_0 added [ 761.859048][T14505] team0: Port device team_slave_1 added [ 761.913796][T14594] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2070'. [ 761.925122][T14594] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2070'. [ 761.962864][T14505] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 761.997537][T14505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 762.026766][T14505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 762.081751][T13851] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 762.091745][T13851] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 762.097786][T13882] Bluetooth: hci1: command tx timeout [ 762.101410][T14408] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 762.126637][T14408] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 762.144430][T14408] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 762.177308][T14505] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 762.184698][T14505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 762.245355][T14505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 762.410039][T14280] 8021q: adding VLAN 0 to HW filter on device team0 [ 762.426634][T14408] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 762.456352][T13854] hsr_slave_0: left promiscuous mode [ 762.465333][T13854] hsr_slave_1: left promiscuous mode [ 762.486914][T13854] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 762.504886][T13854] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 762.525193][T13854] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 762.543639][T13854] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 762.607999][T13854] veth1_macvtap: left promiscuous mode [ 762.613631][T13854] veth0_macvtap: left promiscuous mode [ 762.629922][T13854] veth1_vlan: left promiscuous mode [ 762.635318][T13854] veth0_vlan: left promiscuous mode [ 763.977076][T13854] team0 (unregistering): Port device team_slave_1 removed [ 764.085479][T13854] team0 (unregistering): Port device team_slave_0 removed [ 764.166107][T13882] Bluetooth: hci1: command tx timeout [ 764.967246][ T2570] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 764.985992][ T2570] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 765.026347][T13851] bridge0: port 1(bridge_slave_0) entered blocking state [ 765.033793][T13851] bridge0: port 1(bridge_slave_0) entered forwarding state [ 765.071622][T14505] hsr_slave_0: entered promiscuous mode [ 765.082742][T14505] hsr_slave_1: entered promiscuous mode [ 765.101685][T14505] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 765.115765][T14505] Cannot create hsr debugfs directory [ 765.199530][T13851] bridge0: port 2(bridge_slave_1) entered blocking state [ 765.206825][T13851] bridge0: port 2(bridge_slave_1) entered forwarding state [ 765.609148][ T46] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 765.763552][T14280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 765.775907][ T46] usb 4-1: Using ep0 maxpacket: 32 [ 765.788957][ T46] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 765.826020][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 765.851825][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 765.876703][ T46] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 765.890185][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.914920][ T46] usb 4-1: config 0 descriptor?? [ 765.926385][T14659] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 765.945357][ T46] hub 4-1:0.0: USB hub found [ 765.950433][T14408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 766.198219][T14408] 8021q: adding VLAN 0 to HW filter on device team0 [ 766.225226][ T46] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 766.246730][T13882] Bluetooth: hci1: command tx timeout [ 766.269562][ T6522] bridge0: port 1(bridge_slave_0) entered blocking state [ 766.276856][ T6522] bridge0: port 1(bridge_slave_0) entered forwarding state [ 766.331050][T14280] veth0_vlan: entered promiscuous mode [ 766.356401][T13854] bridge0: port 2(bridge_slave_1) entered blocking state [ 766.363585][T13854] bridge0: port 2(bridge_slave_1) entered forwarding state [ 766.434304][T14280] veth1_vlan: entered promiscuous mode [ 766.593492][T14505] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 766.634049][T14505] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 766.641657][ T46] hid-generic 0003:046D:C314.002D: item fetching failed at offset 0/1 [ 766.654800][T14505] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 766.662420][ T46] hid-generic 0003:046D:C314.002D: probe with driver hid-generic failed with error -22 [ 766.699688][T14505] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 766.720445][T14280] veth0_macvtap: entered promiscuous mode [ 766.750574][T14280] veth1_macvtap: entered promiscuous mode [ 766.802300][T14408] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 766.811038][ T5276] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 766.882085][T14280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 766.915882][T14280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 766.927218][T14280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 766.939069][T14280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 766.949818][T14280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 766.962394][T14280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 766.973958][T14280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 766.995191][T14280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 767.005911][ T5276] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 767.028185][T14280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 767.039524][ T5276] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 767.056879][T14280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 767.073355][T14280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 767.084870][ T5276] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 767.096953][ T5276] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 767.105043][ T5276] usb 3-1: SerialNumber: syz [ 767.109871][T14280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 767.122828][ T5273] usb 4-1: reset high-speed USB device number 37 using dummy_hcd [ 767.139650][T14280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 767.180725][T14280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 767.193560][T14280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 767.204237][T14280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 767.218064][T14280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 767.235984][T14280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 767.248566][T14280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 767.258745][T14280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 767.269414][T14280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 767.279909][T14280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 767.292364][T14280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 767.302825][T14280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 767.314296][T14280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 767.328179][T14659] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 767.345401][T14280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 767.377500][ T5276] usb 3-1: 0:2 : does not exist [ 767.411074][T14280] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.442380][T14280] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.462714][T14280] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.478923][T14280] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 767.580811][ T5273] usbhid 4-1:0.0: reset_resume error -71 [ 767.616523][ T5273] usb 4-1: USB disconnect, device number 37 [ 767.627009][T14408] veth0_vlan: entered promiscuous mode [ 767.701837][T14408] veth1_vlan: entered promiscuous mode [ 767.771758][T14505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 767.854803][T13854] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 767.855193][ T5272] usb 3-1: USB disconnect, device number 37 [ 767.875935][T13854] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 767.942508][T14505] 8021q: adding VLAN 0 to HW filter on device team0 [ 767.987269][T14408] veth0_macvtap: entered promiscuous mode [ 768.007783][ T2570] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 768.017923][ T2570] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 768.029268][ T6526] bridge0: port 1(bridge_slave_0) entered blocking state [ 768.036476][ T6526] bridge0: port 1(bridge_slave_0) entered forwarding state [ 768.089628][T14408] veth1_macvtap: entered promiscuous mode [ 768.124372][ T1591] bridge0: port 2(bridge_slave_1) entered blocking state [ 768.131602][ T1591] bridge0: port 2(bridge_slave_1) entered forwarding state [ 768.201627][T14408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 768.244312][T14408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.265860][T14408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 768.285685][T14408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.311399][T14408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 768.338291][T14408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.364861][T14408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 768.376649][T14408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.395926][T14408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 768.430768][T14408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.457652][T14408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 768.474242][T14408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.484582][T14408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 768.498895][T14408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.511082][T14408] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 768.557028][T14711] ip_vti0: Master is either lo or non-ether device [ 768.582937][T14408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 768.606492][T14408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.625663][T14408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 768.660531][T14408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.696338][T14408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 768.724223][T14408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.749172][T14408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 768.774048][T14408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.796010][T14408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 768.826464][T14408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.842763][T14408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 768.853895][T14408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.864426][T14408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 768.875272][T14408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 768.886821][T14408] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 768.900324][T14408] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.909162][T14408] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.917994][T14408] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.926819][T14408] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 768.987754][T14505] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 769.108029][T14505] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 769.161650][ T6507] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 769.186628][ T6507] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 769.255108][ T1591] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 769.299508][ T1591] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 769.373433][T14505] veth0_vlan: entered promiscuous mode [ 769.432762][ T29] audit: type=1326 audit(1726816001.592:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14732 comm="syz.3.2093" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32579 code=0x7fc00000 [ 769.459025][T14505] veth1_vlan: entered promiscuous mode [ 769.528077][T14505] veth0_macvtap: entered promiscuous mode [ 769.547243][T14737] io-wq is not configured for unbound workers [ 769.549407][T14505] veth1_macvtap: entered promiscuous mode [ 769.591649][T14505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 769.602520][T14505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 769.614191][T14505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 769.642348][T14505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 769.663586][T14505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 769.675890][T14505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 769.687404][T14505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 769.698344][T14505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 769.709742][T14505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 769.720893][T14505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 769.731521][T14505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 769.747221][T14505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 769.757620][T14505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 769.770777][T14505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 769.782917][T14505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 769.793984][T14505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 769.806082][ T5273] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 769.807891][T14505] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 769.867170][T14505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 769.886772][T14505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 769.903219][T14505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 769.915823][T14505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 769.932144][T14505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 769.943690][T14505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 769.960536][T14505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 769.974246][T14505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 769.976211][ T5273] usb 5-1: Using ep0 maxpacket: 16 [ 769.991224][T14505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 770.001825][T14505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 770.011990][ T5273] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 770.012016][T14505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 770.012041][T14505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 770.012061][T14505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 770.012080][T14505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 770.033920][ T5273] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.042328][T14505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 770.052979][ T5273] usb 5-1: Product: syz [ 770.072818][T14505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 770.082464][ T5273] usb 5-1: Manufacturer: syz [ 770.105205][T14505] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 770.109075][ T5276] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 770.121790][ T5273] usb 5-1: SerialNumber: syz [ 770.135669][ T29] audit: type=1800 audit(1726816002.262:332): pid=14734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2092" name="/" dev="fuse" ino=1 res=0 errno=0 [ 770.137379][ T5273] usb 5-1: config 0 descriptor?? [ 770.165013][ T5273] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 770.185346][ T29] audit: type=1326 audit(1726816002.342:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14732 comm="syz.3.2093" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32579 code=0x7fc00000 [ 770.191215][T14505] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.233565][T14505] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.265640][T14505] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.274411][T14505] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 770.286911][ T5276] usb 3-1: Using ep0 maxpacket: 32 [ 770.302393][ T5276] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 770.330119][ T5276] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 770.347568][ T5276] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 770.362827][ T5276] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 770.402225][ T5276] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.431273][ T5276] usb 3-1: config 0 descriptor?? [ 770.769192][ T6507] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 770.833271][T13854] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 770.867155][T13854] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 770.943275][ T5276] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.002E/input/input50 [ 770.999061][ T6507] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.053152][ T5276] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.002E/input/input51 [ 771.205418][T13851] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 771.218236][T14749] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2101'. [ 771.241330][ T5276] kye 0003:0458:5011.002E: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.2-1/input0 [ 771.257530][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 771.278243][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 771.295850][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 771.326814][T13851] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 771.327695][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 771.345946][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 771.353409][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 771.414037][ T5273] usb 5-1: Quatech SSU-100 USB to Serial Driver converter now attached to ttyUSB0 [ 771.476690][ T5304] usb 3-1: USB disconnect, device number 38 [ 771.641878][ T6507] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.807197][ T5273] usb 5-1: USB disconnect, device number 33 [ 771.833385][ T5273] ssu100 ttyUSB0: Quatech SSU-100 USB to Serial Driver converter now disconnected from ttyUSB0 [ 771.863840][ T6507] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 771.868798][ T5273] ssu100 5-1:0.0: device disconnected [ 772.292289][T14755] chnl_net:caif_netlink_parms(): no params data found [ 772.504803][ T6507] bridge_slave_1: left allmulticast mode [ 772.531369][ T6507] bridge_slave_1: left promiscuous mode [ 772.555863][ T6507] bridge0: port 2(bridge_slave_1) entered disabled state [ 772.593047][ T6507] bridge_slave_0: left allmulticast mode [ 772.605435][ T6507] bridge_slave_0: left promiscuous mode [ 772.618366][ T6507] bridge0: port 1(bridge_slave_0) entered disabled state [ 772.874267][T14798] input: syz0 as /devices/virtual/input/input52 [ 773.447076][T13882] Bluetooth: hci3: command tx timeout [ 773.641896][T14812] input: syz0 as /devices/virtual/input/input53 [ 774.675033][ T6507] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 774.700873][ T6507] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 774.723376][ T6507] bond0 (unregistering): Released all slaves [ 774.758516][T14779] dvmrp0: entered allmulticast mode [ 774.789719][T14785] pimreg: entered allmulticast mode [ 775.039996][T14828] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 775.095897][T14828] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 775.277884][T14755] bridge0: port 1(bridge_slave_0) entered blocking state [ 775.285072][T14755] bridge0: port 1(bridge_slave_0) entered disabled state [ 775.297338][T14755] bridge_slave_0: entered allmulticast mode [ 775.305729][T14755] bridge_slave_0: entered promiscuous mode [ 775.316179][ T5272] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 775.345753][T14755] bridge0: port 2(bridge_slave_1) entered blocking state [ 775.353205][T14755] bridge0: port 2(bridge_slave_1) entered disabled state [ 775.374834][T14755] bridge_slave_1: entered allmulticast mode [ 775.382117][T14755] bridge_slave_1: entered promiscuous mode [ 775.507016][ T5272] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 775.527299][T13882] Bluetooth: hci3: command tx timeout [ 775.536194][ T5272] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 775.537297][ T5304] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 775.547613][ T5272] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 775.565258][ T5272] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 775.580369][ T5272] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 775.590453][ T5272] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 775.600123][ T5272] usb 4-1: Manufacturer: syz [ 775.621089][ T5272] usb 4-1: config 0 descriptor?? [ 775.684985][T14755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 775.709661][T14755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 775.793167][ T5304] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 8192, setting to 1024 [ 775.816740][ T5304] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 1024 [ 775.851707][ T5304] usb 5-1: New USB device found, idVendor=0499, idProduct=1035, bcdDevice=56.12 [ 775.885786][ T5304] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.920526][ T5304] usb 5-1: config 0 descriptor?? [ 775.954821][ T5304] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 775.969834][ T6507] hsr_slave_0: left promiscuous mode [ 776.017557][ T6507] hsr_slave_1: left promiscuous mode [ 776.054896][ T5272] appleir 0003:05AC:8243.002F: unknown main item tag 0x0 [ 776.089596][ T5272] appleir 0003:05AC:8243.002F: No inputs registered, leaving [ 776.099234][ T6507] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 776.121637][ T6507] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 776.139745][ T5272] appleir 0003:05AC:8243.002F: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 776.183664][ T6507] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 776.235671][ T6507] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 776.299373][ T5304] usb 5-1: USB disconnect, device number 34 [ 776.365078][ T6507] veth1_macvtap: left promiscuous mode [ 776.415707][ T6507] veth0_macvtap: left promiscuous mode [ 776.435837][ T6507] veth1_vlan: left promiscuous mode [ 776.441243][ T6507] veth0_vlan: left promiscuous mode [ 776.498454][ T937] usb 4-1: USB disconnect, device number 38 [ 777.447659][ T937] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 777.550600][T14864] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2129'. [ 777.605807][T13882] Bluetooth: hci3: command tx timeout [ 777.649935][ T937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 777.661808][ T937] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 777.698236][ T937] usb 5-1: New USB device found, idVendor=eb1a, idProduct=e303, bcdDevice=fc.a0 [ 777.708784][ T937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.727866][ T937] usb 5-1: Product: syz [ 777.743111][ T937] usb 5-1: Manufacturer: syz [ 777.747951][ T937] usb 5-1: SerialNumber: syz [ 777.764351][ T937] usb 5-1: config 0 descriptor?? [ 777.800994][ T937] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (eb1a:e303, interface 0, class 0) [ 777.841193][ T937] em28xx 5-1:0.0: Video interface 0 found: bulk [ 778.445875][ T937] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 778.475109][ T6507] team0 (unregistering): Port device team_slave_1 removed [ 778.582316][ T937] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 778.595396][ T937] em28xx 5-1:0.0: board has no eeprom [ 778.667118][ T937] em28xx 5-1:0.0: Identified as Kaiomy TVnPC U2 (card=63) [ 778.685844][ T6507] team0 (unregistering): Port device team_slave_0 removed [ 778.694953][ T937] em28xx 5-1:0.0: analog set to bulk mode. [ 778.715033][ T5278] em28xx 5-1:0.0: Registering V4L2 extension [ 778.746049][ T937] usb 5-1: USB disconnect, device number 35 [ 778.766516][ T937] em28xx 5-1:0.0: Disconnecting em28xx [ 778.864712][ T5278] i2c i2c-1: Invalid 7-bit I2C address 0x00 [ 778.991790][ T5278] tuner: 1-0061: Tuner -1 found with type(s) Radio TV. [ 779.186320][ T5278] DVB: Unable to find symbol xc2028_attach() [ 779.192400][ T5278] tuner: 1-0061: Tuner has no way to set tv freq [ 779.219944][ T5278] em28xx 5-1:0.0: Config register raw data: 0xffffffed [ 779.235719][ T5278] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 779.255679][ T5278] em28xx 5-1:0.0: No AC97 audio processor [ 779.261560][ T5278] tuner: 1-0061: Tuner has no way to set tv freq [ 779.307872][ T5278] em28xx 5-1:0.0: Registered radio device as radio32 [ 779.335424][ T5278] usb 5-1: Decoder not found [ 779.345667][ T5278] em28xx 5-1:0.0: failed to create media graph [ 779.352098][ T5278] em28xx 5-1:0.0: V4L2 device radio32 deregistered [ 779.412779][ T5278] em28xx 5-1:0.0: V4L2 device video71 deregistered [ 779.440468][ T5278] em28xx 5-1:0.0: Registering input extension [ 779.457777][ T937] em28xx 5-1:0.0: Closing input extension [ 779.528322][ T937] em28xx 5-1:0.0: Freeing device [ 779.690852][T13882] Bluetooth: hci3: command tx timeout [ 780.563224][ T29] audit: type=1326 audit(1726816012.722:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14902 comm="syz.3.2143" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32579 code=0x7fc00000 [ 781.215760][ T29] audit: type=1326 audit(1726816013.372:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14902 comm="syz.3.2143" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f32579 code=0x7fc00000 [ 781.257359][T14755] team0: Port device team_slave_0 added [ 781.277990][ T29] audit: type=1326 audit(1726816013.372:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14902 comm="syz.3.2143" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32579 code=0x7fc00000 [ 781.300104][ C0] vkms_vblank_simulate: vblank timer overrun [ 781.319533][T14755] team0: Port device team_slave_1 added [ 781.374714][ T29] audit: type=1326 audit(1726816013.372:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14902 comm="syz.3.2143" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32579 code=0x7fc00000 [ 781.433274][ T29] audit: type=1326 audit(1726816013.372:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14902 comm="syz.3.2143" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32579 code=0x7fc00000 [ 781.456453][ T29] audit: type=1326 audit(1726816013.372:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14902 comm="syz.3.2143" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32579 code=0x7fc00000 [ 781.479568][ T29] audit: type=1326 audit(1726816013.372:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14902 comm="syz.3.2143" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32579 code=0x7fc00000 [ 781.502519][ T29] audit: type=1326 audit(1726816013.372:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14902 comm="syz.3.2143" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32579 code=0x7fc00000 [ 781.525749][ T29] audit: type=1326 audit(1726816013.372:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14902 comm="syz.3.2143" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32579 code=0x7fc00000 [ 781.548996][ T29] audit: type=1326 audit(1726816013.372:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14902 comm="syz.3.2143" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32579 code=0x7fc00000 [ 781.594487][T14907] netlink: 'syz.3.2144': attribute type 2 has an invalid length. [ 781.602453][T14907] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2144'. [ 781.645195][T14755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 781.666528][T14755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 781.749649][T14755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 781.777883][T14755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 781.785043][T14755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 781.811415][T14755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 781.912545][T14755] hsr_slave_0: entered promiscuous mode [ 781.950487][T14755] hsr_slave_1: entered promiscuous mode [ 782.001626][T14755] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 782.010345][T14755] Cannot create hsr debugfs directory [ 783.259019][ T6507] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 783.468822][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 783.511291][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 783.520754][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 783.539734][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 783.570840][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 783.578400][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 783.960366][ T6507] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.408914][ T6507] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.680447][T14964] input: syz0 as /devices/virtual/input/input55 [ 785.140194][ T6507] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.163955][T14963] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2162'. [ 785.570006][ T29] kauditd_printk_skb: 306 callbacks suppressed [ 785.570029][ T29] audit: type=1326 audit(1726816017.732:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14966 comm="syz.3.2164" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32579 code=0x7fc00000 [ 785.619006][ T29] audit: type=1326 audit(1726816017.732:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14966 comm="syz.3.2164" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32579 code=0x7fc00000 [ 785.658689][ T29] audit: type=1326 audit(1726816017.732:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14966 comm="syz.3.2164" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32579 code=0x7fc00000 [ 785.695868][ T54] Bluetooth: hci4: command tx timeout [ 785.797552][ T29] audit: type=1326 audit(1726816017.732:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14966 comm="syz.3.2164" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32579 code=0x7fc00000 [ 785.852203][ T29] audit: type=1326 audit(1726816017.732:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14966 comm="syz.3.2164" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32579 code=0x7fc00000 [ 785.949095][ T29] audit: type=1326 audit(1726816017.732:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14966 comm="syz.3.2164" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32579 code=0x7fc00000 [ 786.012049][ T29] audit: type=1326 audit(1726816017.732:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14966 comm="syz.3.2164" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32579 code=0x7fc00000 [ 786.076510][ T29] audit: type=1326 audit(1726816017.732:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14966 comm="syz.3.2164" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32579 code=0x7fc00000 [ 786.132113][ T29] audit: type=1326 audit(1726816017.732:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14966 comm="syz.3.2164" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32579 code=0x7fc00000 [ 786.156275][ T29] audit: type=1326 audit(1726816017.732:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14966 comm="syz.3.2164" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f32579 code=0x7fc00000 [ 786.494550][T14755] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 786.526753][T14755] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 786.556700][ T6507] bridge_slave_1: left allmulticast mode [ 786.562420][ T6507] bridge_slave_1: left promiscuous mode [ 786.583846][ T6507] bridge0: port 2(bridge_slave_1) entered disabled state [ 786.604766][ T6507] bridge_slave_0: left allmulticast mode [ 786.611058][ T6507] bridge_slave_0: left promiscuous mode [ 786.619982][ T6507] bridge0: port 1(bridge_slave_0) entered disabled state [ 787.775271][ T54] Bluetooth: hci4: command tx timeout [ 788.243316][ T6507] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 788.271742][ T6507] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 788.290839][ T6507] bond0 (unregistering): Released all slaves [ 788.320229][T14755] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 788.339007][T14755] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 788.491396][ T54] Bluetooth: hci2: command 0x0c1a tx timeout [ 788.497933][ T937] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 788.504627][ T937] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 788.653233][T14956] chnl_net:caif_netlink_parms(): no params data found [ 789.198318][T14956] bridge0: port 1(bridge_slave_0) entered blocking state [ 789.224611][T14956] bridge0: port 1(bridge_slave_0) entered disabled state [ 789.249942][T14956] bridge_slave_0: entered allmulticast mode [ 789.267314][T14956] bridge_slave_0: entered promiscuous mode [ 789.300624][T14956] bridge0: port 2(bridge_slave_1) entered blocking state [ 789.313853][T14956] bridge0: port 2(bridge_slave_1) entered disabled state [ 789.330330][T14956] bridge_slave_1: entered allmulticast mode [ 789.346566][T14956] bridge_slave_1: entered promiscuous mode [ 789.482715][T14956] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 789.543346][T14956] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 789.749496][T14956] team0: Port device team_slave_0 added [ 789.778570][T14956] team0: Port device team_slave_1 added [ 789.847986][ T54] Bluetooth: hci4: command tx timeout [ 789.895877][T14956] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 789.903057][T14956] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 790.015809][T14956] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 790.068279][T14956] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 790.075291][T14956] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 790.195808][T14956] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 790.235235][T14755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 790.431661][T14755] 8021q: adding VLAN 0 to HW filter on device team0 [ 790.462320][T14956] hsr_slave_0: entered promiscuous mode [ 790.496135][T14956] hsr_slave_1: entered promiscuous mode [ 790.530568][T14956] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 790.549446][T14956] Cannot create hsr debugfs directory [ 790.569329][ T1591] bridge0: port 1(bridge_slave_0) entered blocking state [ 790.576543][ T1591] bridge0: port 1(bridge_slave_0) entered forwarding state [ 790.642803][ T1591] bridge0: port 2(bridge_slave_1) entered blocking state [ 790.650048][ T1591] bridge0: port 2(bridge_slave_1) entered forwarding state [ 790.659824][ T54] Bluetooth: hci0: command 0x0c1a tx timeout [ 790.669871][ T937] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 790.677466][ T937] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 791.519285][T14755] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 791.899068][T14755] veth0_vlan: entered promiscuous mode [ 791.926091][ T54] Bluetooth: hci4: command tx timeout [ 792.120632][T14755] veth1_vlan: entered promiscuous mode [ 792.283613][T14755] veth0_macvtap: entered promiscuous mode [ 792.321305][T14956] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 792.353186][T14755] veth1_macvtap: entered promiscuous mode [ 792.369087][T14956] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 792.408695][T14956] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 792.490664][T14956] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 792.522236][T14755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 792.556721][T14755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 792.601087][T14755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 792.635661][T14755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 792.686286][T14755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 792.726749][T14755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 792.745757][T14755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 792.785775][T14755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 792.818044][T14755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 792.855981][T14755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 792.878337][T14755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 792.928299][T14755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 792.955658][T14755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 792.985679][T14755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.015607][T14755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 793.055641][T14755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.097441][T14755] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 793.206090][ T54] Bluetooth: hci1: command 0x0c1a tx timeout [ 793.212535][T14755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 793.227726][ T937] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 793.233888][ T937] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 793.242583][T14755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.253473][T14755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 793.266851][T14755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.277318][T14755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 793.291429][T14755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.302000][T14755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 793.312913][T14755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.343938][T14755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 793.380224][T14755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.416721][T14755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 793.450800][T14755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.462296][T14755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 793.474022][T14755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.485048][T14755] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 793.517886][T14755] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.553021][T14755] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 793.667218][T14755] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.691053][T14755] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.715690][T14755] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.724564][T14755] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 794.100672][T14956] 8021q: adding VLAN 0 to HW filter on device bond0 [ 794.180972][T14956] 8021q: adding VLAN 0 to HW filter on device team0 [ 794.237599][T13851] bridge0: port 1(bridge_slave_0) entered blocking state [ 794.245419][T13851] bridge0: port 1(bridge_slave_0) entered forwarding state [ 794.309886][T13851] bridge0: port 2(bridge_slave_1) entered blocking state [ 794.317109][T13851] bridge0: port 2(bridge_slave_1) entered forwarding state [ 794.517132][T14956] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 794.686661][T14956] veth0_vlan: entered promiscuous mode [ 794.731898][T14956] veth1_vlan: entered promiscuous mode [ 794.848511][T14956] veth0_macvtap: entered promiscuous mode [ 794.892769][T14956] veth1_macvtap: entered promiscuous mode [ 794.982998][T14956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 795.008060][T14956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.056004][T14956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 795.091368][T14956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.119720][T14956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 795.153840][T14956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.187033][T14956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 795.227223][T14956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.258285][T14956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 795.297100][T14956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.325783][T14956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 795.369534][T14956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.395751][T14956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 795.435207][T14956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.465588][T14956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 795.505626][T14956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.542906][T14956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 795.568021][T14956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.591862][T14956] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 795.665804][T14956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 795.695190][T14956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.717496][T14956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 795.742095][T14956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.766687][T14956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 795.794157][T14956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.809952][T14956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 795.827218][T14956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.850065][T14956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 795.874218][T14956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.887592][T14956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 795.912875][T14956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.928265][T14956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 795.945838][T14956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 795.967273][T14956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 795.988875][T14956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.011291][T14956] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 796.034968][T14956] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 796.049907][T14956] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 796.087527][ T54] Bluetooth: hci3: command 0x0c1a tx timeout [ 796.094146][ T937] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 796.121860][T14956] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.131264][ T937] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 796.140530][T14956] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.149992][T14956] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.159077][T14956] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.246411][ T54] Bluetooth: hci4: command 0x0c1a tx timeout [ 798.252699][ T937] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 798.286027][ T937] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 798.776582][T13882] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 798.963092][T13853] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 798.973271][T13853] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 798.991071][ T5225] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 799.000347][ T5225] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 799.010423][ T5225] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 799.018298][ T5225] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 799.026643][ T5225] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 799.129457][ T5225] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 799.151255][ T5225] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 799.159622][ T5225] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 799.169370][ T5225] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 799.610997][ T6507] hsr_slave_0: left promiscuous mode [ 799.638570][ T6507] hsr_slave_1: left promiscuous mode [ 799.685870][ T6507] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 799.693720][ T6507] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 799.781454][ T6507] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 799.801870][ T6507] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 799.922254][ T6507] veth1_macvtap: left promiscuous mode [ 799.935770][ T6507] veth0_macvtap: left promiscuous mode [ 799.942131][ T6507] veth1_vlan: left promiscuous mode [ 799.955473][ T6507] veth0_vlan: left promiscuous mode [ 799.983781][T15124] loop3: detected capacity change from 0 to 7 [ 800.043214][T15124] Dev loop3: unable to read RDB block 7 [ 800.058004][T15124] loop3: AHDI p1 p2 [ 800.062014][T15124] loop3: partition table partially beyond EOD, truncated [ 800.115890][T15124] loop3: p1 size 7567738 extends beyond EOD, truncated [ 800.198859][T14754] udevd[14754]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 801.159650][ T5225] Bluetooth: hci0: command tx timeout [ 801.211283][ T5225] Bluetooth: hci5: command tx timeout [ 801.496993][T15140] input: syz0 as /devices/virtual/input/input56 [ 802.556846][ T6507] team0 (unregistering): Port device team_slave_1 removed [ 802.717387][ T6507] team0 (unregistering): Port device team_slave_0 removed [ 803.206383][ T5225] Bluetooth: hci0: command tx timeout [ 803.295677][ T5225] Bluetooth: hci5: command tx timeout [ 804.903079][ T6522] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 804.911081][ T6519] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 804.924299][ T6519] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 804.955065][ T6522] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 805.115693][ T1591] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 805.123574][ T1591] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 805.275096][ T6519] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 805.283017][ T6519] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 805.290862][ T5225] Bluetooth: hci0: command tx timeout [ 805.365936][ T5225] Bluetooth: hci5: command tx timeout [ 806.019476][T15118] chnl_net:caif_netlink_parms(): no params data found [ 806.161241][T15111] chnl_net:caif_netlink_parms(): no params data found [ 806.230949][T15183] netlink: 'syz.1.2100': attribute type 10 has an invalid length. [ 807.366345][ T5225] Bluetooth: hci0: command tx timeout [ 807.405824][ T5278] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 807.451527][ T5225] Bluetooth: hci5: command tx timeout [ 807.571010][ T5278] usb 5-1: Using ep0 maxpacket: 8 [ 807.584869][ T5278] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 807.614463][ T5278] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 807.634919][ T5278] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 807.646682][ T5278] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 807.657079][ T5278] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 807.671747][ T5278] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 807.681130][ T5278] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.920883][ T5278] usb 5-1: usb_control_msg returned -32 [ 807.957045][ T5278] usbtmc 5-1:16.0: can't read capabilities [ 812.746040][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 812.752425][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 815.835733][ T5275] usb 5-1: USB disconnect, device number 36 [ 815.965780][T15238] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2201'. [ 815.991575][T15238] unsupported nlmsg_type 40 [ 825.841336][T13882] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 829.170049][ T54] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 831.368540][ T54] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 838.114139][T13853] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 838.897708][T13882] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 838.909147][T13882] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 839.515949][T13882] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 840.055883][T13882] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 840.705662][T13882] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 841.451970][T13853] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 841.691319][T13878] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 842.179375][ T5225] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 842.435772][ T5225] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 842.866836][T13853] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 843.129900][ T5225] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 844.446724][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 846.205739][T13853] Bluetooth: hci6: command tx timeout [ 849.508605][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 849.699865][T13853] Bluetooth: hci4: command tx timeout [ 849.707200][T13853] Bluetooth: hci6: command tx timeout [ 849.933504][ T5225] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 849.941815][ T5225] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 850.555916][ T5225] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 851.066563][ T5225] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 852.823782][T13853] Bluetooth: hci6: command tx timeout [ 852.829471][T13853] Bluetooth: hci4: command tx timeout [ 854.630485][ T5225] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 854.911260][T13853] Bluetooth: hci4: command tx timeout [ 854.917080][T13853] Bluetooth: hci6: command tx timeout [ 859.708314][T13882] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 859.716248][T13882] Bluetooth: hci4: command tx timeout [ 859.721820][T13882] Bluetooth: hci1: command tx timeout [ 861.958721][T13882] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 861.966128][T13882] Bluetooth: hci1: command tx timeout [ 864.118719][T13882] Bluetooth: hci1: command tx timeout [ 866.381250][T13853] Bluetooth: hci1: command tx timeout [ 869.481269][T13853] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 869.665574][T15259] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 872.127506][T13853] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 872.366052][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 872.372633][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 873.969082][T13853] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 874.996609][ T5225] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 875.609274][ T5225] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 875.947877][ T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 876.106744][ T5225] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 876.948585][ T54] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 877.597551][ T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 877.745859][ T5225] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 878.880537][T13882] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 879.389373][T13882] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 882.249339][ T54] Bluetooth: hci5: command tx timeout [ 887.238062][T13853] Bluetooth: hci5: command tx timeout [ 887.485656][T15271] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 891.165601][T13882] Bluetooth: hci5: command tx timeout [ 891.589415][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 893.835826][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 893.844480][ T54] Bluetooth: hci5: command tx timeout [ 894.097439][ T5225] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 894.645651][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 895.055682][ T54] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 895.320300][T13878] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 895.580459][ T54] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 895.727048][T13878] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 896.365748][T13878] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 896.373302][T13878] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 897.566955][ T54] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 897.715847][T13878] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 898.166008][T13878] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 898.173182][T13878] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 898.468487][ T54] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 898.886954][ T54] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 899.118131][T13878] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 899.500625][T13878] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 902.585695][ T5225] Bluetooth: hci3: command tx timeout [ 902.855770][T13882] Bluetooth: hci7: command tx timeout [ 902.875368][T13882] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 906.010619][ T5225] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 906.018559][ T5225] Bluetooth: hci3: command tx timeout [ 906.024724][ T5225] Bluetooth: hci7: command tx timeout [ 906.030466][ T5225] Bluetooth: hci8: command tx timeout [ 908.078460][ T5225] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 908.087830][ T5225] Bluetooth: hci8: command tx timeout [ 908.093432][ T5225] Bluetooth: hci7: command tx timeout [ 908.099001][ T5225] Bluetooth: hci3: command tx timeout [ 910.248498][ T5225] Bluetooth: hci3: command tx timeout [ 910.253989][ T5225] Bluetooth: hci7: command tx timeout [ 910.259943][ T5225] Bluetooth: hci8: command tx timeout [ 912.785583][ T5225] Bluetooth: hci8: command tx timeout [ 912.986998][T13882] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 917.667926][ T5225] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 919.580421][ T5225] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 927.071409][T13853] Bluetooth: hci0: command 0x0406 tx timeout [ 927.219353][T15286] Bluetooth: hci9: Opcode 0x0c1a failed: -110 [ 933.057639][T13853] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 933.255949][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 933.262480][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 935.030317][T13853] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 935.443592][T13878] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 935.677097][ T5225] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 935.886324][T13878] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 936.288572][T13878] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 936.798446][ T5225] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 937.406904][T13878] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 937.538745][ T5225] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 938.008547][ T5225] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 938.247500][T13878] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 938.716826][T13878] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 944.328091][T13882] Bluetooth: hci9: command tx timeout [ 949.165734][T13853] Bluetooth: hci9: command tx timeout [ 949.171352][T13853] Bluetooth: hci10: command tx timeout [ 953.235558][T13882] Bluetooth: hci10: command tx timeout [ 953.241234][T13882] Bluetooth: hci9: command tx timeout [ 956.365755][T13882] Bluetooth: hci9: command tx timeout [ 956.371432][T13882] Bluetooth: hci10: command tx timeout [ 956.646501][ T5225] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 960.330342][T13882] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 960.338530][T13882] Bluetooth: hci10: command tx timeout [ 960.948999][T13878] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 960.961313][T13878] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 961.867214][T13878] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 962.675694][T13878] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 963.239682][ T54] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 963.249855][ T54] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 963.815823][ T54] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 964.227128][ T54] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 964.234414][ T54] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 964.241754][ T54] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 964.595845][ T54] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 965.165115][ T54] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 965.717044][ T54] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 965.724525][ T54] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 966.892231][T13878] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 967.335671][T13882] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 968.586980][T13878] Bluetooth: hci11: command tx timeout [ 973.436816][ T5225] Bluetooth: hci6: command 0x0406 tx timeout [ 973.443107][ T5225] Bluetooth: hci4: command 0x0406 tx timeout [ 973.449613][ T5225] Bluetooth: hci12: command tx timeout [ 973.456624][ T5225] Bluetooth: hci11: command tx timeout [ 973.547274][T15308] Bluetooth: hci13: Opcode 0x0c1a failed: -110 [ 977.715721][T13878] Bluetooth: hci11: command tx timeout [ 977.721303][T13878] Bluetooth: hci12: command tx timeout [ 980.996350][T13878] Bluetooth: hci12: command tx timeout [ 981.001933][T13878] Bluetooth: hci11: command tx timeout [ 981.007809][T13878] Bluetooth: hci1: command 0x0406 tx timeout [ 983.063543][T13853] Bluetooth: hci12: command tx timeout [ 983.294394][ T6507] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 983.306442][T13878] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 985.945195][T13882] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 986.405625][T13882] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 993.628675][T13853] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 993.886066][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.892548][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.237185][T13882] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 994.789334][T13882] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 994.797985][T13882] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 995.633266][ T5225] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 995.640785][ T5225] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 995.886796][T13878] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 996.549283][T13878] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 997.136535][ T54] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 997.365800][ T54] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 998.496531][ T54] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 998.887695][ T5225] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 999.145815][ T54] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 999.865766][ T5225] Bluetooth: hci13: command tx timeout [ 1000.018674][ T54] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 1000.569880][T13853] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 1002.694177][ T5225] Bluetooth: hci13: command tx timeout [ 1006.484923][T13853] Bluetooth: hci13: command tx timeout [ 1006.490852][T13853] Bluetooth: hci14: command tx timeout [ 1008.685555][T13882] Bluetooth: hci5: command 0x0406 tx timeout [ 1008.691960][T13882] Bluetooth: hci14: command tx timeout [ 1008.697623][T13882] Bluetooth: hci13: command tx timeout [ 1011.515536][T13882] Bluetooth: hci14: command tx timeout [ 1015.845576][T13853] Bluetooth: hci14: command tx timeout [ 1015.851246][T13853] Bluetooth: hci15: command tx timeout [ 1018.015630][T13882] Bluetooth: hci15: command tx timeout [ 1018.474947][ T35] kworker/u8:2 (35) used greatest stack depth: 18672 bytes left [ 1022.545602][T13853] Bluetooth: hci15: command tx timeout [ 1022.931322][ T5225] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1023.465644][ T30] INFO: task kworker/1:7:5307 blocked for more than 147 seconds. [ 1023.473810][ T30] Not tainted 6.11.0-syzkaller-07337-g2004cef11ea0 #0 [ 1023.535652][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1023.544414][ T30] task:kworker/1:7 state:D stack:20816 pid:5307 tgid:5307 ppid:2 flags:0x00004000 [ 1023.635683][ T30] Workqueue: events_power_efficient reg_check_chans_work [ 1023.643069][ T30] Call Trace: [ 1023.686448][ T30] [ 1023.689488][ T30] __schedule+0x1893/0x4b50 [ 1023.694279][ T30] ? try_to_wake_up+0x971/0x1480 [ 1023.745572][ T30] ? schedule+0x90/0x320 [ 1023.749928][ T30] ? __pfx___schedule+0x10/0x10 [ 1023.754847][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1023.797001][ T30] ? __pfx_lock_release+0x10/0x10 [ 1023.802139][ T30] ? kick_pool+0x45c/0x620 [ 1023.825655][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1023.831307][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 1023.865520][ T30] ? schedule+0x90/0x320 [ 1023.869885][ T30] schedule+0x14b/0x320 [ 1023.874134][ T30] schedule_preempt_disabled+0x13/0x30 [ 1023.905558][ T30] __mutex_lock+0x6a7/0xd70 [ 1023.910436][ T30] ? __mutex_lock+0x52a/0xd70 [ 1023.915267][ T30] ? reg_check_chans_work+0x99/0xfd0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1023.976483][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1024.005715][ T30] ? process_scheduled_works+0x976/0x1850 [ 1024.011555][ T30] reg_check_chans_work+0x99/0xfd0 [ 1024.028788][T13882] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1024.065730][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 1024.070952][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1024.115522][ T30] ? __pfx_reg_check_chans_work+0x10/0x10 [ 1024.121448][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1024.155546][ T30] ? process_scheduled_works+0x976/0x1850 [ 1024.161373][ T30] process_scheduled_works+0xa63/0x1850 [ 1024.205659][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 1024.211841][ T30] ? assign_work+0x364/0x3d0 [ 1024.245563][ T30] worker_thread+0x870/0xd30 [ 1024.250355][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1024.295711][ T30] ? __kthread_parkme+0x169/0x1d0 [ 1024.300856][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1024.335638][ T30] kthread+0x2f0/0x390 [ 1024.339800][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1024.344972][ T30] ? __pfx_kthread+0x10/0x10 [ 1024.425604][ T30] ret_from_fork+0x4b/0x80 [ 1024.430172][ T30] ? __pfx_kthread+0x10/0x10 [ 1024.434812][ T30] ret_from_fork_asm+0x1a/0x30 [ 1024.535671][ T30] [ 1024.538828][ T30] [ 1024.538828][ T30] Showing all locks held in the system: [ 1024.585667][ T30] 1 lock held by khungtaskd/30: [ 1024.590600][ T30] #0: ffffffff8e9389e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 1024.635570][ T30] 6 locks held by kworker/1:2/937: [ 1024.640780][ T30] 2 locks held by kworker/u8:6/2570: [ 1024.695521][ T30] 2 locks held by getty/4982: [ 1024.700269][ T30] #0: ffff88814c0660a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1024.745643][ T30] #1: ffffc900031232f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 1024.785561][ T30] 3 locks held by kworker/u9:2/5225: [ 1024.791028][ T30] #0: ffff8880539fc148 ((wq_completion)hci7){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1024.855486][ T30] #1: ffffc90003887d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1024.905534][ T30] #2: ffff88807b12cd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 1024.945558][ T30] 2 locks held by kworker/0:4/5272: [ 1024.950827][ T30] 3 locks held by kworker/0:7/5275: [ 1024.985536][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1025.035653][ T30] #1: ffffc90003e6fd00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1025.085519][ T30] #2: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 1025.125589][ T30] 3 locks held by kworker/1:7/5307: [ 1025.130864][ T30] #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1025.225532][ T30] #1: ffffc90004167d00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1025.265671][ T30] #2: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 1025.295584][ T30] 6 locks held by kworker/u8:9/6507: [ 1025.300940][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1025.335518][ T30] #1: ffffc900038e7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1025.375509][ T30] #2: ffffffff8fcbd010 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 1025.385209][ T30] #3: ffff88807e8c40e8 (&dev->mutex){....}-{3:3}, at: devlink_pernet_pre_exit+0x13b/0x440 [ 1025.435483][ T30] #4: ffff88807e8c1250 (&devlink->lock_key#77){+.+.}-{3:3}, at: devlink_pernet_pre_exit+0x14d/0x440 [ 1025.475488][ T30] #5: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0 [ 1025.484561][ T30] 3 locks held by kworker/u8:14/6519: [ 1025.515610][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1025.575542][ T30] #1: ffffc90003eafd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1025.625677][ T30] #2: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 1025.634891][ T30] 3 locks held by kworker/u9:3/13853: [ 1025.675484][ T30] #0: ffff88804d1a0948 ((wq_completion)hci0){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1025.725525][ T30] #1: ffffc90003a6fd00 ((work_completion)(&hdev->power_on)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1025.775519][ T30] #2: ffff888098248d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_power_on+0x1bf/0x6b0 [ 1025.785157][ T30] 3 locks held by kworker/u9:7/13882: [ 1025.845893][ T30] #0: ffff88805b59d148 ((wq_completion)hci8){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 1025.865546][ T30] #1: ffffc900031bfd00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 1025.915506][ T30] #2: ffff888021fccd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 1025.944658][ T30] 2 locks held by syz.2.2117/14814: [ 1025.955512][ T30] 1 lock held by syz-executor/15111: [ 1025.960876][ T30] #0: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 1025.985550][ T30] 2 locks held by syz-executor/15118: [ 1025.990997][ T30] #0: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 1026.015567][ T30] #1: ffffffff8e7d28d0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x5ea/0x1da0 [ 1026.035510][ T30] 2 locks held by syz-executor/15258: [ 1026.040947][ T30] #0: ffffffff8fcbd010 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 1026.065537][ T30] #1: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1f/0x1e0 [ 1026.075034][ T30] 2 locks held by syz-executor/15260: [ 1026.095560][ T30] #0: ffffffff8fcbd010 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 1026.105101][ T30] #1: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1f/0x1e0 [ 1026.135529][ T30] 2 locks held by syz-executor/15267: [ 1026.140976][ T30] #0: ffffffff8fcbd010 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 1026.165563][ T30] #1: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1f/0x1e0 [ 1026.175025][ T30] 2 locks held by syz-executor/15273: [ 1026.195536][ T30] #0: ffffffff8fcbd010 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 1026.205077][ T30] #1: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 1026.235517][ T30] 2 locks held by syz-executor/15283: [ 1026.240971][ T30] #0: ffffffff8fcbd010 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 1026.265523][ T30] #1: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 1026.285526][ T30] 2 locks held by syz-executor/15287: [ 1026.290978][ T30] #0: ffffffff8fcbd010 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 1026.315515][ T30] #1: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 1026.335539][ T30] 2 locks held by syz-executor/15289: [ 1026.340978][ T30] #0: ffffffff8fcbd010 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 1026.365525][ T30] #1: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 1026.385541][ T30] 2 locks held by syz-executor/15298: [ 1026.390997][ T30] #0: ffffffff8fcbd010 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 1026.425493][ T30] #1: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 1026.445503][ T30] 2 locks held by syz-executor/15302: [ 1026.451044][ T30] #0: ffffffff8fcbd010 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 1026.475550][ T30] #1: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 1026.495562][ T30] 2 locks held by syz-executor/15310: [ 1026.501016][ T30] #0: ffffffff8fcbd010 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 1026.518986][ T30] #1: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 1026.545528][ T30] 2 locks held by syz-executor/15312: [ 1026.550976][ T30] #0: ffffffff8fcbd010 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 1026.575552][ T30] #1: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 1026.595552][ T30] 2 locks held by syz-executor/15329: [ 1026.601002][ T30] #0: ffffffff8fcbd010 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 1026.625548][ T30] #1: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 1026.645722][ T30] 2 locks held by syz-executor/15330: [ 1026.651174][ T30] #0: ffffffff8fcbd010 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 1026.675544][ T30] #1: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 1026.695591][ T30] 2 locks held by syz-executor/15332: [ 1026.701037][ T30] #0: ffffffff8fcbd010 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 1026.725663][ T30] #1: ffffffff8fcc9b08 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 1026.745514][ T30] [ 1026.747915][ T30] ============================================= [ 1026.747915][ T30] [ 1026.765520][ T30] NMI backtrace for cpu 0 [ 1026.769932][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-07337-g2004cef11ea0 #0 [ 1026.780125][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1026.790219][ T30] Call Trace: [ 1026.793530][ T30] [ 1026.796496][ T30] dump_stack_lvl+0x241/0x360 [ 1026.801280][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1026.806535][ T30] ? __pfx__printk+0x10/0x10 [ 1026.811270][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 1026.816312][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1026.821818][ T30] ? _printk+0xd5/0x120 [ 1026.826018][ T30] ? __pfx__printk+0x10/0x10 [ 1026.830654][ T30] ? __wake_up_klogd+0xcc/0x110 [ 1026.835551][ T30] ? __pfx__printk+0x10/0x10 [ 1026.840196][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 1026.845266][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1026.851329][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 1026.857355][ T30] watchdog+0xff4/0x1040 [ 1026.861684][ T30] ? watchdog+0x1ea/0x1040 [ 1026.866151][ T30] ? __pfx_watchdog+0x10/0x10 [ 1026.870877][ T30] kthread+0x2f0/0x390 [ 1026.875070][ T30] ? __pfx_watchdog+0x10/0x10 [ 1026.879788][ T30] ? __pfx_kthread+0x10/0x10 [ 1026.884411][ T30] ret_from_fork+0x4b/0x80 [ 1026.888873][ T30] ? __pfx_kthread+0x10/0x10 [ 1026.893500][ T30] ret_from_fork_asm+0x1a/0x30 [ 1026.898330][ T30] [ 1026.901753][ T30] Sending NMI from CPU 0 to CPUs 1: [ 1026.907092][ C1] NMI backtrace for cpu 1 [ 1026.907107][ C1] CPU: 1 UID: 0 PID: 937 Comm: kworker/1:2 Not tainted 6.11.0-syzkaller-07337-g2004cef11ea0 #0 [ 1026.907130][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1026.907144][ C1] Workqueue: events nsim_dev_trap_report_work [ 1026.907168][ C1] RIP: 0010:check_preemption_disabled+0xb/0x120 [ 1026.907201][ C1] Code: 8c eb 1c 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 41 57 41 56 41 54 53 48 83 ec 10 <65> 48 8b 04 25 28 00 00 00 48 89 44 24 08 65 8b 1d dc 8e 44 74 65 [ 1026.907218][ C1] RSP: 0018:ffffc90000a18968 EFLAGS: 00000082 [ 1026.907234][ C1] RAX: ffffffff93e0f690 RBX: 0000000000000246 RCX: ffffffff81705160 [ 1026.907248][ C1] RDX: 0000000000000000 RSI: ffffffff8c0ae4a0 RDI: ffffffff8c60dd00 [ 1026.907262][ C1] RBP: ffffc90000a18ad0 R08: ffffffff901c5aaf R09: 1ffffffff2038b55 [ 1026.907277][ C1] R10: dffffc0000000000 R11: fffffbfff2038b56 R12: 1ffff92000143140 [ 1026.907291][ C1] R13: ffffffff898f655b R14: ffffc90000a18a50 R15: dffffc0000000000 [ 1026.907313][ C1] FS: 0000000000000000(0000) GS:ffff8880b8900000(0000) knlGS:0000000000000000 [ 1026.907330][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1026.907343][ C1] CR2: 000000002de1cff8 CR3: 000000000e734000 CR4: 00000000003506f0 [ 1026.907360][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1026.907371][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1026.907383][ C1] Call Trace: [ 1026.907390][ C1] [ 1026.907398][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1026.907419][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1026.907448][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1026.907468][ C1] ? nmi_handle+0x2a/0x5a0 [ 1026.907494][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1026.907518][ C1] ? nmi_handle+0x14f/0x5a0 [ 1026.907535][ C1] ? nmi_handle+0x2a/0x5a0 [ 1026.907555][ C1] ? check_preemption_disabled+0xb/0x120 [ 1026.907583][ C1] ? default_do_nmi+0x63/0x160 [ 1026.907604][ C1] ? exc_nmi+0x123/0x1f0 [ 1026.907623][ C1] ? end_repeat_nmi+0xf/0x53 [ 1026.907753][ C1] ? process_backlog+0x33b/0x15b0 [ 1026.907804][ C1] ? lock_release+0xb0/0xa30 [ 1026.907831][ C1] ? check_preemption_disabled+0xb/0x120 [ 1026.907859][ C1] ? check_preemption_disabled+0xb/0x120 [ 1026.907888][ C1] ? check_preemption_disabled+0xb/0x120 [ 1026.907916][ C1] [ 1026.907922][ C1] [ 1026.907931][ C1] lock_release+0x1bc/0xa30 [ 1026.907959][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1026.907985][ C1] ? process_backlog+0x33b/0x15b0 [ 1026.908007][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1026.908033][ C1] ? __pfx_lock_release+0x10/0x10 [ 1026.908059][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 1026.908089][ C1] process_backlog+0x6ed/0x15b0 [ 1026.908114][ C1] ? process_backlog+0x33b/0x15b0 [ 1026.908139][ C1] ? __pfx_process_backlog+0x10/0x10 [ 1026.908161][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1026.908189][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1026.908217][ C1] __napi_poll+0xcb/0x490 [ 1026.908239][ C1] net_rx_action+0x89b/0x1240 [ 1026.908271][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 1026.908296][ C1] ? sched_clock+0x4a/0x70 [ 1026.908332][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1026.908365][ C1] handle_softirqs+0x2c5/0x980 [ 1026.908392][ C1] ? do_softirq+0x11b/0x1e0 [ 1026.908417][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1026.908446][ C1] do_softirq+0x11b/0x1e0 [ 1026.908468][ C1] [ 1026.908475][ C1] [ 1026.908482][ C1] ? __pfx_do_softirq+0x10/0x10 [ 1026.908506][ C1] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 1026.908534][ C1] ? rcu_is_watching+0x15/0xb0 [ 1026.908556][ C1] __local_bh_enable_ip+0x1bb/0x200 [ 1026.908580][ C1] ? nsim_dev_trap_report_work+0x75d/0xaa0 [ 1026.908610][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1026.908633][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1026.908657][ C1] ? nsim_dev_trap_report_work+0x6a7/0xaa0 [ 1026.908676][ C1] nsim_dev_trap_report_work+0x75d/0xaa0 [ 1026.908701][ C1] ? process_scheduled_works+0x976/0x1850 [ 1026.908725][ C1] process_scheduled_works+0xa63/0x1850 [ 1026.908762][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1026.908791][ C1] ? assign_work+0x364/0x3d0 [ 1026.908816][ C1] worker_thread+0x870/0xd30 [ 1026.908844][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1026.908869][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1026.908896][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1026.908920][ C1] kthread+0x2f0/0x390 [ 1026.908937][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1026.908961][ C1] ? __pfx_kthread+0x10/0x10 [ 1026.908978][ C1] ret_from_fork+0x4b/0x80 [ 1026.909002][ C1] ? __pfx_kthread+0x10/0x10 [ 1026.909019][ C1] ret_from_fork_asm+0x1a/0x30 [ 1026.909051][ C1] [ 1027.055524][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1027.055554][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-07337-g2004cef11ea0 #0 [ 1027.055583][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 1027.055600][ T30] Call Trace: [ 1027.055614][ T30] [ 1027.055627][ T30] dump_stack_lvl+0x241/0x360 [ 1027.055672][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1027.055708][ T30] ? __pfx__printk+0x10/0x10 [ 1027.055740][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1027.055783][ T30] ? vscnprintf+0x5d/0x90 [ 1027.055812][ T30] panic+0x349/0x880 [ 1027.055847][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1027.055876][ T30] ? __pfx_panic+0x10/0x10 [ 1027.055906][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 1027.055964][ T30] ? __irq_work_queue_local+0x137/0x410 [ 1027.056004][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1027.056031][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1027.056057][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 1027.056088][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 1027.056118][ T30] watchdog+0x1033/0x1040 [ 1027.056152][ T30] ? watchdog+0x1ea/0x1040 [ 1027.056189][ T30] ? __pfx_watchdog+0x10/0x10 [ 1027.056219][ T30] kthread+0x2f0/0x390 [ 1027.056244][ T30] ? __pfx_watchdog+0x10/0x10 [ 1027.056274][ T30] ? __pfx_kthread+0x10/0x10 [ 1027.056300][ T30] ret_from_fork+0x4b/0x80 [ 1027.056334][ T30] ? __pfx_kthread+0x10/0x10 [ 1027.056359][ T30] ret_from_fork_asm+0x1a/0x30 [ 1027.056409][ T30] [ 1027.531896][ T30] Kernel Offset: disabled [ 1027.536253][ T30] Rebooting in 86400 seconds..