last executing test programs: 53.917287872s ago: executing program 1 (id=3655): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, 0x0, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) clock_getres(0x2, &(0x7f0000000280)) read$FUSE(r0, &(0x7f0000006380)={0x2020}, 0x2020) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x38, r7, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x2}]}]}]}, 0x38}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 52.459411045s ago: executing program 1 (id=3659): r0 = socket(0x15, 0x5, 0x0) r1 = accept4$nfc_llcp(r0, 0x0, &(0x7f0000000000), 0x80800) r2 = fsopen(&(0x7f00000002c0)='rpc_pipefs\x00', 0x0) r3 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x25, &(0x7f0000000000)={r6, @in={{0x2, 0x0, @empty}}}, 0x90) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000180)) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r10 = socket$unix(0x1, 0x5, 0x0) r11 = dup2(r10, r9) close_range(r11, 0xffffffffffffffff, 0x0) getsockopt$nfc_llcp(r1, 0x114, 0x0, 0x0, 0xfffffffffffffff1) 51.403241848s ago: executing program 1 (id=3661): socket$inet_tcp(0x2, 0x1, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff}) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) splice(r0, 0x0, r3, 0x0, 0x80, 0x0) write(r2, 0x0, 0x0) 49.939017771s ago: executing program 1 (id=3669): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005345c0f63cdc2e82818254950ee03568b8809a1f04c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab66c1aae9314d7381fcfeb970bea672010000000000000043144648a07a975bd89dc398712376610faa54f12495b4659be8673086f6f3543205d4bc4ce05b8b961103673dff7f158052e62bfbdcddde6985f3f1ac5d9a94cc53207899762a07282a1914452d11858e795a3ca30a101af5574f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5ed44039aab46419496362e54cfad05b4004ac71a003d7b85d07191bed4e5a8908263722d4146f7ed569985439baa355cf3d8731f5e7a237bc06d035a8d601f21746d880819f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c5b9f87d988c9fbd2b9d9b4e2d71753b1549fa734f0b2e5fcf9549804cddad721971637f9c9730a9cc384eed30345979db9c93e1c52f42cad0a4d4f9436d3f39b0ed09c395dc6e970366087a8e4daeeb1b017006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f710c490ecd085d2811a7555c53030000007f00000000bfa6478eb96b079c277e2910b7ccdc3d672ed34aa65278c549e2abb549ad954884289130bc71cee2b7de62bf48129ae1af052a2d46a6165eb0954dac7265f1f425735acf6377793946b3229e861d8ea49806b3b533345d36ecef9df700000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c000000aaae37f044bcadeb0f6846582b7653665aa336db9f0384d3c7ddf79c2e0000000000000000000000000000000000000000000000e154aa0d3e41986a668ee1e5ef93a8ceac75f44aae95e26742f895f287111f8ee86f7e3ffb63cfb0e345cf7fc63dd2b0d30977899c6f03640040af4db71f7452bfc79a05118d8bb42b63b195771e42f9942ec626bd4b5461b74324012164e8"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r4, r3, 0x2, 0x6, 0x4000}, 0x10) 48.894441616s ago: executing program 1 (id=3671): ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0x18, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@multicast2, @in6=@private1}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}]}, 0xa0}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(0x0, r7) sendmsg$NLBL_MGMT_C_REMOVEDEF(r6, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000000)={r4}) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, 0x0) 47.747061491s ago: executing program 1 (id=3674): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x4, "0000001500"}}}]}, 0x48}}, 0x0) 38.287045531s ago: executing program 4 (id=3700): r0 = socket$inet6(0xa, 0x80002, 0x88) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rt_sigaction(0x19, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r5}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = memfd_create(0x0, 0x0) fallocate(r6, 0x0, 0x400000000000000, 0x0) setreuid(0xffffffffffffffff, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) pread64(r8, &(0x7f0000000300)=""/150, 0x96, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000280)=ANY=[@ANYRES8=r7, @ANYRESHEX=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001", @ANYRESDEC=r4], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x80000001}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2}, 0x1c) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000b5d127975c6f3ba731cb6bbb"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 37.212451528s ago: executing program 4 (id=3704): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0xb00) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x2f, &(0x7f0000000000), 0x20000000) 37.039330698s ago: executing program 4 (id=3706): pipe(0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x4ea, 0xffff0000, 0x0, 0x10, 0xffffffffffffffff, 0x98d, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x2, 0x6}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x0, 0x0, 0xc}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f00000002c0)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x8090ae81, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454c9, 0x1) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x7fffffff) socket(0x0, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x419}}}, 0x7) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="711230000000000061134c0000000000bf2000000000000016000200071b48013d030100000000009500020100000000bc26000000000000bf67080000000000070200000fff07006702000003000000360600000ee600f0bf052000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586a51309834c1b8894af585e9134cf05d811"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018100000", @ANYRES32, @ANYRESDEC], &(0x7f0000000000)='GPL\x00'}, 0x90) syz_open_pts(0xffffffffffffffff, 0x80) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semtimedop(0x0, &(0x7f0000000280)=[{0x0, 0x0, 0x1000}], 0x1, 0x0) unshare(0x0) 35.229522475s ago: executing program 4 (id=3712): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001500)={&(0x7f00000013c0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000005000000020000000200000f0302000002000000000000000300000000000000000000000000000044942d000000000000000200000000000000000100000f010000000000000000000000000000008400002e5f"], &(0x7f00000014c0)=""/3, 0x69, 0x3, 0x1}, 0x20) 35.072761325s ago: executing program 4 (id=3713): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000002c0)={&(0x7f00000007c0)="d1", 0x1}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000180)={&(0x7f0000000340)="9d", 0x1}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000440)={&(0x7f0000000380)="84", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000300)={r1}) 34.362136732s ago: executing program 4 (id=3714): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/slabinfo\x00', 0x0, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/251, 0xfb}], 0x1, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x200, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) unshare(0x0) unshare(0x0) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='source', &(0x7f0000000240)='//\xf2/\x06\b/\\\\o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0}, &(0x7f0000000440)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000480)={r8, 0x32, "54054c45afe8ededf2bcd9a9f0b04db9ab6c5b2554209178cb582e60d82bc4060f86e4a03097728e2750c086ecbb5cb55951"}, &(0x7f00000004c0)=0x3a) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000), 0x106, 0x5}}, 0x20) 10.620717014s ago: executing program 2 (id=3770): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x1de) close(r1) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001000000300"/20, @ANYRES32=0x0, @ANYBLOB="0000000020800000"], 0x20}, 0x1, 0x0, 0x0, 0x8084}, 0x10) mount$fuse(0x20000000, &(0x7f00000002c0)='./file0\x00', 0x0, 0x1a8aacd, 0x0) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) syz_open_dev$evdev(0x0, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x724, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0) syz_usb_connect$printer(0x0, 0x4b, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2d0841, 0x0) dup(r2) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001400)=@base={0x9, 0x0, 0xfff, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xa}, 0x48) prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000000), 0xffffffffffffffe4) 10.344098426s ago: executing program 3 (id=3771): r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) setuid(0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) utime(&(0x7f0000000e00)='./file0\x00', 0x0) 10.132710217s ago: executing program 3 (id=3772): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ftruncate(0xffffffffffffffff, 0xc17a) preadv2(0xffffffffffffffff, &(0x7f0000001540)=[{0x0}, {&(0x7f0000001380)=""/129, 0x4000}], 0x2, 0x0, 0x0, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r2, &(0x7f0000000800)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47381c96558", 0xe}], 0x1) 7.425672589s ago: executing program 2 (id=3775): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020200008500000072000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 7.141692047s ago: executing program 2 (id=3776): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000000c0)={{@my=0x1, 0x4}, @local, 0x0, 0x0, 0x5}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000040)={{@my=0x1, 0x10000}, @host, 0x0, 0x0, 0x7}) 6.680576205s ago: executing program 2 (id=3777): ioperm(0x9, 0x7ff, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000003c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000deff00000000e6ffffff00"}}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000340)={0x0, 0x0, r5}) ioctl$PTP_PIN_SETFUNC(0xffffffffffffffff, 0x40603d07, 0x0) r6 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x1e, &(0x7f0000caaffb), 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) shmat(0x0, &(0x7f0000fa4000/0x4000)=nil, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x0, 0x0, 0x9, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}]}, 0x28}, 0x1, 0x7}, 0x0) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, 0x0, 0x0) dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x11, 0xffffffffffffffff, 0x0) 6.630883004s ago: executing program 0 (id=3778): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x1}, @IFLA_BOND_PRIMARY={0x8, 0xb, r2}]}}}]}, 0x44}, 0x1, 0x2000000000000000}, 0x0) 2.384907544s ago: executing program 2 (id=3779): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=@ipv6_deladdr={0x18, 0x15, 0x1}, 0x18}}, 0x0) 2.383917267s ago: executing program 3 (id=3780): r0 = add_key$fscrypt_v1(0x0, &(0x7f00000000c0)={'fscrypt:', @desc1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x0) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f00000000c0)={0x0, "6409cb7b566e7060ca1594e29759f254f8902b0c24aae747a475f336e4c344166de1d9ea57678bdfc5ec6322399fb6ecbac3d7e2250000b27f9ea700"}, 0x48, 0xfffffffffffffffd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) getsockopt$nfc_llcp(0xffffffffffffffff, 0x88, 0xb, 0x0, 0x2000005b) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f00000005c0)="09000000246837f73199aee6fdb9291b3091ec1a2d41d227975ad8ec030f5919f397867997", 0x25}], 0x1) mknodat$loop(0xffffffffffffff9c, 0x0, 0x0, 0x1) r4 = add_key$keyring(&(0x7f0000000240), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, 0x0, 0x0, r4) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r5, 0x101) r6 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r6, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r6, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x3a) write$binfmt_elf64(r6, &(0x7f0000000980)=ANY=[], 0x78) r7 = accept4(r5, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000340)=ANY=[@ANYBLOB="24010000170000000000000000000000000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000ac1e000100"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141468b70000000000000000001400000000004000000000000000000000000000000000000000f100000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/126], 0x124}}, 0x0) 2.343187422s ago: executing program 0 (id=3781): unshare(0x2c020400) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x10) fallocate(r0, 0x0, 0x0, 0x1c8000000) 2.159615363s ago: executing program 2 (id=3782): setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000001700), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000080)={0x0, "d2c4924d5e89213dc64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c", 0xffffffffffffffff}) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f00000002c0)={0x0, "421ae3753785259249154c944122ad063ff47d3bd7a8a45d6bb4c78a3ab4c981", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f00000000c0)={"0000080000e4e9edb6e7f4f15fbe000000497161e900", r4, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r5, 0x541b, 0x0) getpid() chdir(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000010340)={0xf, 0x4, &(0x7f0000010000)=ANY=[@ANYBLOB="180000000079f28b000000000000000000000061000000000000008b0000000000000019aed3fad386d2b1ca4cd975e6a837a6000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000101c0)={0x0}, 0x10) r6 = syz_io_uring_setup(0x4b6, &(0x7f0000010080)={0x0, 0x4}, &(0x7f0000ff0000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x0, &(0x7f0000000040)=[{0x0}, {0x0}], 0x2) unlink(0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r3, 0x40309410, &(0x7f0000010100)={0x2, 0x10000, 0x2, 0xfffffffd, 0x2, [0xf, 0x7, 0xf, 0x9]}) r7 = socket$rds(0x15, 0x5, 0x0) bind$rds(r7, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {0x0}], 0x0, 0x2}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r8 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), r8) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000010280)={&(0x7f0000010040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000010240)={&(0x7f00000102c0)=ANY=[@ANYBLOB="40000000919e235557ade035a56828329263793a842bc0ca", @ANYRES16=r9, @ANYBLOB="040026bd7000fbdbdf25020000000800050006000000080005000010000008000600080000001400028008000300030000000800070008000000"], 0x40}, 0x1, 0x0, 0x0, 0x4040015}, 0x0) 2.143139328s ago: executing program 0 (id=3783): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x15, 0x1, 0x3}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000400)={r5}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x10001, 0x401f, 0x3}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0x6, 0x12f, 0x2}) close_range(r0, 0xffffffffffffffff, 0x0) 1.197115451s ago: executing program 3 (id=3784): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_FW_DOWNLOAD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, r2, 0x1}, 0x14}}, 0x0) 872.168119ms ago: executing program 3 (id=3785): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000076000101000000006b00000007020000", @ANYRES32=0x0, @ANYBLOB="05000d80"], 0x28}, 0x1, 0x5502000000000000}, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX]) syz_io_uring_setup(0x4076, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0), 0x1000000000000081}) getpid() r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000cc0)={0x2c, r0, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x4}]}]}, 0x2c}}, 0x0) 676.209613ms ago: executing program 0 (id=3786): mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000640)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0) linkat(r1, &(0x7f0000000100)='./file1\x00', r2, &(0x7f0000000240)='./file0\x00', 0x0) unlink(&(0x7f0000000100)='./file0/file0\x00') 365.07609ms ago: executing program 0 (id=3787): write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000003c0)={'syz0\x00', {0x0, 0x0, 0x0, 0x400}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d63e286a5cefe", 0x5ac) 244.175856ms ago: executing program 3 (id=3788): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_submit(0x0, 0x0, 0x0) kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x41000000}], 0x0) kexec_load(0x0, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x6, 0xff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0xe) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_NODELAY(r5, 0x84, 0x3, 0x0, 0x0) 0s ago: executing program 0 (id=3789): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0xc0, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x74, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0x43, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x3, 0x0, 0x1, {0x5}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @local}}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x8, 0x1, 'RAS\x00'}}]}, 0xc0}}, 0x0) kernel console output (not intermixed with test programs): [U] [ 1157.941894][T17279] [U] [ 1157.944618][T17279] [U] [ 1157.948423][T17279] [U] [ 1157.951166][T17279] [U] [ 1157.953907][T17279] [U] [ 1157.956686][T17279] [U] [ 1157.961562][T17279] [U] [ 1157.964310][T17279] [U] [ 1157.967041][T17279] [U] [ 1157.969767][T17279] [U] [ 1157.973600][T17279] [U] [ 1157.976337][T17279] [U] [ 1157.979076][T17279] [U] [ 1157.981812][T17279] [U] [ 1157.985986][T17279] [U] [ 1157.988813][T17279] [U] [ 1157.991554][T17279] [U] [ 1157.994287][T17279] [U] [ 1157.998332][T17279] [U] [ 1158.001069][T17279] [U] [ 1158.003851][T17279] [U] [ 1158.006583][T17279] [U] [ 1158.010434][T17279] [U] [ 1158.013217][T17279] [U] [ 1158.015947][T17279] [U] [ 1158.018674][T17279] [U] [ 1158.022533][T17279] [U] [ 1158.025272][T17279] [U] [ 1158.028005][T17279] [U] [ 1158.030741][T17279] [U] [ 1158.034480][T17279] [U] [ 1158.037215][T17279] [U] [ 1158.039944][T17279] [U] [ 1158.042669][T17279] [U] [ 1158.046220][T17279] [U] [ 1158.048959][T17279] [U] [ 1158.051684][T17279] [U] [ 1158.054415][T17279] [U] [ 1158.062925][T17279] [U] [ 1158.065685][T17279] [U] [ 1158.068415][T17279] [U] [ 1158.071145][T17279] [U] [ 1158.074691][T17279] [U] [ 1158.077427][T17279] [U] [ 1158.080159][T17279] [U] [ 1158.082893][T17279] [U] [ 1158.086675][T17279] [U] [ 1158.089409][T17279] [U] [ 1158.092142][T17279] [U] [ 1158.094872][T17279] [U] [ 1158.098676][T17279] [U] [ 1158.101421][T17279] [U] [ 1158.104147][T17279] [U] [ 1158.106882][T17279] [U] [ 1158.110615][T17279] [U] [ 1158.113351][T17279] [U] [ 1158.116081][T17279] [U] [ 1158.118811][T17279] [U] [ 1158.122617][T17279] [U] [ 1158.125354][T17279] [U] [ 1158.128087][T17279] [U] [ 1158.130816][T17279] [U] [ 1158.134870][T17279] [U] [ 1158.137611][T17279] [U] [ 1158.140343][T17279] [U] [ 1158.143071][T17279] [U] [ 1158.146819][T17279] [U] [ 1158.149564][T17279] [U] [ 1158.152300][T17279] [U] [ 1158.155034][T17279] [U] [ 1158.160128][T17279] [U] [ 1158.162878][T17279] [U] [ 1158.165605][T17279] [U] [ 1158.168339][T17279] [U] [ 1158.183536][T17279] [U] [ 1158.186308][T17279] [U] [ 1158.189044][T17279] [U] [ 1158.191777][T17279] [U] [ 1158.195603][T17279] [U] [ 1158.198345][T17279] [U] [ 1158.201076][T17279] [U] [ 1158.203809][T17279] [U] [ 1158.207593][T17279] [U] [ 1158.210331][T17279] [U] [ 1158.213062][T17279] [U] [ 1158.215794][T17279] [U] [ 1158.219375][T17279] [U] [ 1158.222122][T17279] [U] [ 1158.224929][T17279] [U] [ 1158.658867][T17269] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1158.853759][T17271] [U] [ 1158.959997][T17269] kvm: pic: non byte read [ 1158.999658][T17269] kvm: pic: non byte read [ 1159.037574][T17269] kvm: pic: non byte read [ 1159.079146][T17269] kvm: pic: non byte read [ 1159.119483][T17269] kvm: pic: non byte read [ 1159.189068][T17269] kvm: pic: single mode not supported [ 1159.189445][T17269] kvm: pic: level sensitive irq not supported [ 1159.271242][T17269] kvm: pic: non byte read [ 1162.383944][T13457] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 1162.394479][T13457] CPU: 0 UID: 0 PID: 13457 Comm: kworker/u9:2 Not tainted 6.11.0-rc3-syzkaller-00010-g6b4aa469f049 #0 [ 1162.405444][T13457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1162.415590][T13457] Workqueue: hci1 hci_rx_work [ 1162.420389][T13457] Call Trace: [ 1162.423691][T13457] [ 1162.426667][T13457] dump_stack_lvl+0x241/0x360 [ 1162.431488][T13457] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1162.436728][T13457] ? __pfx__printk+0x10/0x10 [ 1162.441384][T13457] ? sysfs_create_dir_ns+0x28a/0x3a0 [ 1162.446726][T13457] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 1162.452302][T13457] sysfs_create_dir_ns+0x2ce/0x3a0 [ 1162.457451][T13457] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1162.463158][T13457] kobject_add_internal+0x435/0x8d0 [ 1162.468492][T13457] kobject_add+0x152/0x220 [ 1162.473016][T13457] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1162.478290][T13457] ? device_add+0x3e7/0xbf0 [ 1162.482914][T13457] ? __pfx_kobject_add+0x10/0x10 [ 1162.487912][T13457] ? _raw_spin_unlock+0x28/0x50 [ 1162.492910][T13457] ? get_device_parent+0x165/0x410 [ 1162.498160][T13457] device_add+0x4e5/0xbf0 [ 1162.502576][T13457] hci_conn_add_sysfs+0xe8/0x200 [ 1162.507651][T13457] le_conn_complete_evt+0xc9f/0x12e0 [ 1162.513221][T13457] ? trace_contention_end+0x3c/0x120 [ 1162.518655][T13457] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1162.524454][T13457] ? __mutex_unlock_slowpath+0x21d/0x750 [ 1162.530321][T13457] ? __copy_skb_header+0x437/0x5b0 [ 1162.535583][T13457] ? skb_pull_data+0x112/0x230 [ 1162.540411][T13457] hci_le_enh_conn_complete_evt+0x185/0x420 [ 1162.546385][T13457] hci_event_packet+0xa55/0x1540 [ 1162.551545][T13457] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1162.556889][T13457] ? __pfx_hci_event_packet+0x10/0x10 [ 1162.562401][T13457] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1162.567667][T13457] ? hci_send_to_monitor+0xd8/0x7f0 [ 1162.572927][T13457] ? kcov_remote_start+0x97/0x7d0 [ 1162.578050][T13457] hci_rx_work+0x3e8/0xca0 [ 1162.582548][T13457] ? process_scheduled_works+0x945/0x1830 [ 1162.588378][T13457] process_scheduled_works+0xa2c/0x1830 [ 1162.594017][T13457] ? __pfx_process_scheduled_works+0x10/0x10 [ 1162.600077][T13457] ? assign_work+0x364/0x3d0 [ 1162.604728][T13457] worker_thread+0x86d/0xd40 [ 1162.609402][T13457] ? __kthread_parkme+0x169/0x1d0 [ 1162.614486][T13457] ? __pfx_worker_thread+0x10/0x10 [ 1162.619657][T13457] kthread+0x2f0/0x390 [ 1162.623783][T13457] ? __pfx_worker_thread+0x10/0x10 [ 1162.628955][T13457] ? __pfx_kthread+0x10/0x10 [ 1162.633640][T13457] ret_from_fork+0x4b/0x80 [ 1162.638156][T13457] ? __pfx_kthread+0x10/0x10 [ 1162.642807][T13457] ret_from_fork_asm+0x1a/0x30 [ 1162.647682][T13457] [ 1162.656594][T13457] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1162.671709][T13457] Bluetooth: hci1: failed to register connection device [ 1163.898958][T17346] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3169'. [ 1165.449315][T17366] overlayfs: failed to resolve './file1': -2 [ 1165.720493][T13312] Bluetooth: hci1: command 0x0406 tx timeout [ 1167.212848][T17399] netlink: 'syz.4.3185': attribute type 1 has an invalid length. [ 1167.245451][T17399] netlink: 'syz.4.3185': attribute type 1 has an invalid length. [ 1167.282457][T17399] netlink: 9108 bytes leftover after parsing attributes in process `syz.4.3185'. [ 1167.308208][T17398] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4032167445 (64514679120 ns) > initial count (63607699792 ns). Using initial count to start timer. [ 1167.310045][T17399] netlink: 'syz.4.3185': attribute type 1 has an invalid length. [ 1167.356318][T17399] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3185'. [ 1168.347829][T17406] pim6reg1: entered promiscuous mode [ 1168.374277][T17406] pim6reg1: entered allmulticast mode [ 1169.035901][T17416] overlayfs: failed to resolve './file1': -2 [ 1170.080275][T17429] netlink: 8280 bytes leftover after parsing attributes in process `syz.2.3194'. [ 1170.091707][T14862] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1170.130052][T17429] netlink: 8280 bytes leftover after parsing attributes in process `syz.2.3194'. [ 1170.236636][T17429] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3194'. [ 1170.291658][T14862] usb 5-1: Using ep0 maxpacket: 32 [ 1170.309247][T14862] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1170.362077][T14862] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1170.391764][T14862] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 1170.401274][T14862] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1170.431843][T14862] usb 5-1: config 0 descriptor?? [ 1170.514744][ T8] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1170.643080][T17449] rdma_rxe: rxe_newlink: failed to add ip6gretap0 [ 1171.301655][ T940] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1171.328836][T14862] lua 0003:1E7D:2C2E.0028: global environment stack underflow [ 1171.337724][T14862] lua 0003:1E7D:2C2E.0028: item 0 0 1 11 parsing failed [ 1171.346303][T14862] lua 0003:1E7D:2C2E.0028: parse failed [ 1171.350334][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1171.352564][T14862] lua 0003:1E7D:2C2E.0028: probe with driver lua failed with error -22 [ 1171.400752][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1171.414667][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1171.433344][ T8] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 1171.449413][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1171.502846][ T940] usb 3-1: Using ep0 maxpacket: 8 [ 1171.514304][ T940] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 1171.536067][ T8] usb 2-1: config 0 descriptor?? [ 1171.545022][ T5304] usb 5-1: USB disconnect, device number 34 [ 1171.615790][ T940] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1171.709246][ T940] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1171.728570][ T940] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1171.743876][ T940] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1172.419812][T14862] IPVS: starting estimator thread 0... [ 1172.531559][T17463] IPVS: using max 15 ests per chain, 36000 per kthread [ 1172.639388][ T940] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1172.658563][ T8] acrux 0003:1A34:0802.0029: hidraw0: USB HID v0.00 Device [HID 1a34:0802] on usb-dummy_hcd.1-1/input0 [ 1172.680590][ T8] acrux 0003:1A34:0802.0029: no inputs found [ 1172.700950][ T8] acrux 0003:1A34:0802.0029: Failed to enable force feedback support, error: -19 [ 1172.840024][T17467] tipc: Started in network mode [ 1172.978748][T17467] tipc: Node identity 86aff6006fca, cluster identity 4711 [ 1173.055484][T17467] tipc: Enabled bearer , priority 0 [ 1173.056035][T17474] : renamed from syzkaller0 [ 1173.079322][ T940] usb 3-1: usb_control_msg returned -32 [ 1173.079375][ T940] usbtmc 3-1:16.0: can't read capabilities [ 1174.896503][ T5304] tipc: Node number set to 3915773440 [ 1174.952362][T17474] tipc: Disabling bearer [ 1175.052252][ T5304] usb 2-1: reset high-speed USB device number 46 using dummy_hcd [ 1175.087277][ C1] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1175.089709][T17476] usbtmc 3-1:16.0: Unable to send data, error -71 [ 1175.936693][T17490] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3218'. [ 1176.136276][ T940] usb 2-1: USB disconnect, device number 46 [ 1176.514853][ T5307] usb 3-1: USB disconnect, device number 38 [ 1176.891549][ T5307] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1177.673751][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.718169][T17512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3214'. [ 1178.101505][ T5307] usb 3-1: Using ep0 maxpacket: 8 [ 1178.227968][ T5307] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1178.264090][ T5307] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1178.284925][ T5307] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1178.312206][ T5307] usb 3-1: Product: syz [ 1178.325477][ T5307] usb 3-1: Manufacturer: syz [ 1178.339329][ T5307] usb 3-1: SerialNumber: syz [ 1178.672514][ T940] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1178.879660][ T940] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1178.901576][ T940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1178.911531][ T940] usb 2-1: Product: syz [ 1178.915860][ T940] usb 2-1: Manufacturer: syz [ 1178.920914][ T940] usb 2-1: SerialNumber: syz [ 1178.937526][ T940] r8152-cfgselector 2-1: Unknown version 0x0000 [ 1178.951997][T12169] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1178.972007][ T940] r8152-cfgselector 2-1: config 0 descriptor?? [ 1179.151172][T12169] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1179.175912][T12169] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1179.202404][T12169] usb 5-1: config 0 descriptor?? [ 1179.241204][T12169] cp210x 5-1:0.0: cp210x converter detected [ 1179.397863][ T5307] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1179.407448][ T5307] cdc_ncm 3-1:1.0: setting tx_max = 184 [ 1179.486095][ T25] r8152-cfgselector 2-1: USB disconnect, device number 47 [ 1179.529519][T17524] input: syz1 as /devices/virtual/input/input51 [ 1179.714611][T12169] usb 5-1: cp210x converter now attached to ttyUSB0 [ 1179.846730][ T5307] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1179.891233][ T5307] usb 3-1: USB disconnect, device number 39 [ 1179.910541][ T5307] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 1179.998773][T12169] usb 5-1: USB disconnect, device number 35 [ 1180.071003][T12169] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1180.119138][T12169] cp210x 5-1:0.0: device disconnected [ 1180.502977][ T8] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1180.555042][T17537] Bluetooth: MGMT ver 1.23 [ 1181.517897][T17540] overlayfs: overlapping lowerdir path [ 1181.653487][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1181.691624][ T8] usb 2-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 1181.725320][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1181.771347][ T8] usb 2-1: config 0 descriptor?? [ 1181.785185][ T8] smsusb:smsusb_probe: board id=8, interface number 0 [ 1181.821013][ T8] smsusb:smsusb_probe: Device initialized with return code -19 [ 1182.683086][T17531] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3224'. [ 1182.722365][T17531] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3224'. [ 1182.858016][ T8] usb 2-1: USB disconnect, device number 48 [ 1182.941663][ T5304] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1183.181790][ T5304] usb 1-1: Using ep0 maxpacket: 16 [ 1183.208962][ T5304] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1183.238703][ T5304] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1183.280073][ T5304] usb 1-1: config 1 has no interface number 1 [ 1183.307011][ T5304] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1183.362322][ T5304] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1183.406990][ T5304] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1183.424808][ T5304] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1183.443522][ T5304] usb 1-1: Product: syz [ 1183.450267][ T5304] usb 1-1: Manufacturer: syz [ 1183.469912][ T5304] usb 1-1: SerialNumber: syz [ 1183.739440][ T5304] usb 1-1: found format II with max.bitrate = 0, frame size=0 [ 1183.791677][ T5304] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1183.867158][ T5304] usb 1-1: USB disconnect, device number 49 [ 1184.115236][T17384] udevd[17384]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1186.774338][T17602] input: syz0 as /devices/virtual/input/input52 [ 1188.926111][T17626] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3253'. [ 1189.106169][T17629] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3253'. [ 1189.423661][T13312] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0 [ 1189.433414][T13312] Bluetooth: hci6: Injecting HCI hardware error event [ 1189.445048][T13457] Bluetooth: hci6: hardware error 0x00 [ 1190.568332][T17642] netlink: 'syz.2.3258': attribute type 1 has an invalid length. [ 1190.576445][T17642] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.3258'. [ 1190.966861][T17657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3263'. [ 1191.040359][T17657] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1191.071563][ T5307] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1191.911904][T13457] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 1192.175568][T17657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3263'. [ 1192.276183][ T5307] usb 1-1: Using ep0 maxpacket: 32 [ 1192.283696][T17661] sctp: [Deprecated]: syz.2.3263 (pid 17661) Use of int in max_burst socket option. [ 1192.283696][T17661] Use struct sctp_assoc_value instead [ 1192.323100][ T5307] usb 1-1: New USB device found, idVendor=0458, idProduct=706e, bcdDevice=35.64 [ 1192.378721][ T5307] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1192.731229][ T5307] usb 1-1: config 0 descriptor?? [ 1193.728133][ T5307] usb 1-1: USB disconnect, device number 50 [ 1197.936670][T17723] netlink: 'syz.1.3280': attribute type 1 has an invalid length. [ 1197.944874][T17723] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3280'. [ 1199.195728][T17707] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1199.252565][T17707] kvm: pic: non byte read [ 1199.272065][T17707] kvm: pic: non byte read [ 1199.283979][T17707] kvm: pic: non byte read [ 1199.295568][T17707] kvm: pic: non byte read [ 1199.306611][T17707] kvm: pic: level sensitive irq not supported [ 1199.307159][T17707] kvm: pic: non byte read [ 1199.330961][T17707] kvm: pic: non byte read [ 1199.336984][T17707] kvm: pic: non byte read [ 1199.470433][T17739] input: syz1 as /devices/virtual/input/input53 [ 1199.569508][T17741] lo speed is unknown, defaulting to 1000 [ 1199.848500][T17743] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1199.869022][T17746] binder: 17740:17746 ioctl c0306201 200003c0 returned -22 [ 1200.759595][T13457] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 1201.273928][T17770] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3295'. [ 1201.298392][T17770] gretap0: entered promiscuous mode [ 1202.222363][T12169] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1202.459675][T17791] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3300'. [ 1203.153602][T12169] usb 2-1: Using ep0 maxpacket: 32 [ 1203.222635][T12169] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1203.437636][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 1203.437654][ T29] audit: type=1326 audit(1723597718.645:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17790 comm="syz.0.3302" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdfff1799f9 code=0x0 [ 1203.480971][T12169] usb 2-1: New USB device found, idVendor=d5ff, idProduct=0066, bcdDevice=d8.b0 [ 1203.504005][T12169] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1203.539602][T12169] usb 2-1: config 0 descriptor?? [ 1203.585648][T17799] overlayfs: failed to resolve './file1': -2 [ 1203.657462][T12169] usb 2-1: can't set config #0, error -71 [ 1203.707991][T12169] usb 2-1: USB disconnect, device number 49 [ 1204.415147][T17817] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1204.421867][ T9794] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 1204.460531][T17817] kvm: pic: non byte read [ 1204.470484][T17817] kvm: pic: level sensitive irq not supported [ 1204.470571][T17817] kvm: pic: non byte read [ 1204.524755][T17817] kvm: pic: level sensitive irq not supported [ 1204.524879][T17817] kvm: pic: non byte read [ 1204.551932][T17817] kvm: pic: level sensitive irq not supported [ 1204.552045][T17817] kvm: pic: non byte read [ 1204.807802][ T9794] usb 5-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 1204.818095][ T9794] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1204.827187][ T9794] usb 5-1: Product: syz [ 1204.831712][ T9794] usb 5-1: Manufacturer: syz [ 1204.836380][ T9794] usb 5-1: SerialNumber: syz [ 1204.862362][ T9794] usb 5-1: config 0 descriptor?? [ 1205.920180][ T9794] peak_usb 5-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 1206.108658][ T9794] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 1206.120531][ T9794] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 1206.141335][ T9794] peak_usb 5-1:0.0 can0: sending command failure: -22 [ 1206.319947][T17811] IPVS: set_ctl: invalid protocol: 29 255.255.255.255:20003 [ 1206.330258][ T9794] peak_usb 5-1:0.0: probe with driver peak_usb failed with error -22 [ 1206.664164][ T9794] usb 5-1: USB disconnect, device number 36 [ 1206.696289][T17847] ALSA: seq fatal error: cannot create timer (-22) [ 1206.737366][T17847] ALSA: seq fatal error: cannot create timer (-22) [ 1208.105971][T17860] fuse: Bad value for 'fd' [ 1208.415543][ T9794] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1208.901506][ T9794] usb 5-1: Using ep0 maxpacket: 16 [ 1208.920503][ T9794] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1208.974527][ T9794] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1208.995084][ T9794] usb 5-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00 [ 1209.010866][ T9794] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1209.061276][ T9794] usb 5-1: config 0 descriptor?? [ 1209.954262][T17872] Bluetooth: MGMT ver 1.23 [ 1209.958789][T17872] Bluetooth: hci3: unsupported parameter 65535 [ 1209.965104][T17872] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 1210.041004][T17875] batadv_slave_1: entered promiscuous mode [ 1210.452287][T17870] batadv_slave_1: left promiscuous mode [ 1211.291547][ T9794] usbhid 5-1:0.0: can't add hid device: -71 [ 1211.297639][ T9794] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1211.325311][ T9794] usb 5-1: USB disconnect, device number 37 [ 1211.921488][T17892] sock: sock_timestamping_bind_phc: sock not bind to device [ 1213.905947][T17924] Process accounting resumed [ 1214.223701][ T29] audit: type=1326 audit(1723597729.435:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17930 comm="syz.4.3344" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe87dd799f9 code=0x0 [ 1220.661948][T17945] netlink: 332 bytes leftover after parsing attributes in process `syz.0.3359'. [ 1220.717008][T17949] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 1221.397110][ T5304] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1223.212399][T13312] Bluetooth: hci3: command 0x0406 tx timeout [ 1223.651505][ T5304] usb 4-1: Using ep0 maxpacket: 8 [ 1223.662625][ T5304] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1223.674932][ T5304] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1223.689412][ T5304] usb 4-1: New USB device found, idVendor=0c70, idProduct=f0bd, bcdDevice= 0.00 [ 1223.706064][ T5304] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1223.766356][ T5304] usb 4-1: config 0 descriptor?? [ 1223.779681][T17974] fuse: Bad value for 'fd' [ 1223.786798][ T5304] usb 4-1: can't set config #0, error -71 [ 1223.819318][ T5304] usb 4-1: USB disconnect, device number 44 [ 1224.701616][ T5304] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1224.813613][T17986] tipc: Enabled bearer , priority 10 [ 1224.903988][ T5304] usb 4-1: Using ep0 maxpacket: 8 [ 1224.948510][ T5304] usb 4-1: config 0 has no interfaces? [ 1224.961704][ T5304] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1224.983977][ T5304] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1225.002074][ T5304] usb 4-1: config 0 descriptor?? [ 1225.137314][T17997] veth0_vlan: entered allmulticast mode [ 1225.575622][T18000] veth0_vlan: left promiscuous mode [ 1225.576672][T18000] veth0_vlan: entered promiscuous mode [ 1226.641590][ T5304] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1226.811526][T12169] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1226.861209][ T5304] usb 3-1: config 0 has no interfaces? [ 1226.870433][ T5304] usb 3-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 1226.880503][ T5304] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1226.893312][ T5304] usb 3-1: config 0 descriptor?? [ 1227.023742][T12169] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1227.049893][T12169] usb 2-1: config 0 has no interface number 0 [ 1227.064682][T12169] usb 2-1: config 0 interface 1 has no altsetting 0 [ 1227.081574][T12169] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1227.091979][T12169] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1227.104552][T12169] usb 2-1: config 0 descriptor?? [ 1227.135156][T12169] cp210x 2-1:0.1: cp210x converter detected [ 1227.236970][ T3039] usb 3-1: USB disconnect, device number 40 [ 1227.556559][T12169] cp210x 2-1:0.1: failed to get vendor val 0x000e size 3: -32 [ 1227.839731][ T25] usb 4-1: USB disconnect, device number 45 [ 1227.844493][T12169] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1228.502840][T12169] usb 2-1: USB disconnect, device number 50 [ 1228.548424][T12169] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1228.579355][T18026] fuse: Bad value for 'fd' [ 1228.628576][T12169] cp210x 2-1:0.1: device disconnected [ 1231.649012][T18036] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1232.689352][T18081] dns_resolver: Unsupported content type (98) [ 1232.728818][ T29] audit: type=1326 audit(1723597747.935:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18077 comm="syz.0.3389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfff1799f9 code=0x7ffc0000 [ 1232.786839][ T29] audit: type=1326 audit(1723597747.935:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18077 comm="syz.0.3389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfff1799f9 code=0x7ffc0000 [ 1232.829144][T18081] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1232.859327][ T29] audit: type=1326 audit(1723597747.975:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18077 comm="syz.0.3389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=130 compat=0 ip=0x7fdfff1799f9 code=0x7ffc0000 [ 1232.892769][ T29] audit: type=1326 audit(1723597747.975:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18077 comm="syz.0.3389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfff1799f9 code=0x7ffc0000 [ 1232.948120][ T29] audit: type=1326 audit(1723597747.975:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18077 comm="syz.0.3389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdfff1799f9 code=0x7ffc0000 [ 1232.985040][ T29] audit: type=1326 audit(1723597747.975:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18077 comm="syz.0.3389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfff1799f9 code=0x7ffc0000 [ 1233.082975][T18088] netlink: 'syz.4.3390': attribute type 1 has an invalid length. [ 1233.090906][T18088] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3390'. [ 1233.829102][ T29] audit: type=1326 audit(1723597747.975:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18077 comm="syz.0.3389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdfff1799f9 code=0x7ffc0000 [ 1233.861581][ T29] audit: type=1326 audit(1723597747.975:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18077 comm="syz.0.3389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfff1799f9 code=0x7ffc0000 [ 1233.890733][ T29] audit: type=1326 audit(1723597747.975:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18077 comm="syz.0.3389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfff1799f9 code=0x7ffc0000 [ 1233.914197][T18090] fuse: Bad value for 'fd' [ 1233.922132][ T29] audit: type=1326 audit(1723597747.985:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18077 comm="syz.0.3389" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fdfff1799f9 code=0x7ffc0000 [ 1234.995769][T18114] x_tables: unsorted underflow at hook 4 [ 1235.119277][T13457] Bluetooth: hci1: unexpected event 0x06 length: 23 > 3 [ 1235.643571][T18127] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1236.166713][T18140] 9pnet_virtio: no channels available for device syz [ 1236.343036][ T940] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1236.379207][T12169] libceph: connect (1)[c::]:6789 error -101 [ 1236.394835][T12169] libceph: mon0 (1)[c::]:6789 connect error [ 1236.422206][T18146] lo speed is unknown, defaulting to 1000 [ 1236.475154][T18144] ceph: No mds server is up or the cluster is laggy [ 1236.769043][ T940] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1236.778266][T12169] libceph: connect (1)[c::]:6789 error -101 [ 1236.898758][ T940] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1236.982233][T12169] libceph: mon0 (1)[c::]:6789 connect error [ 1236.992397][ T940] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1237.024964][ T940] usb 1-1: config 0 descriptor?? [ 1237.517065][ T940] (null): keene_cmd_main failed (-71) [ 1237.557672][ T940] video4linux radio32: keene_cmd_main failed (-71) [ 1237.600868][ T940] radio-keene 1-1:0.0: V4L2 device registered as radio32 [ 1237.636214][ T940] usb 1-1: USB disconnect, device number 51 [ 1238.602023][T18171] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 1238.657382][T18171] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 1239.287879][T13312] Bluetooth: hci1: command 0x0406 tx timeout [ 1239.299158][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.394426][T18174] tipc: Enabling of bearer rejected, failed to enable media [ 1240.176348][ T5304] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1240.534634][ T5304] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1240.706529][ T5304] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1240.861499][ T5304] usb 2-1: New USB device found, idVendor=056a, idProduct=00bc, bcdDevice= 0.00 [ 1240.870615][ T5304] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1240.906862][ T5304] usb 2-1: config 0 descriptor?? [ 1241.146434][T13457] Bluetooth: hci1: unexpected event 0x04 length: 14 > 10 [ 1250.536180][T18201] netlink: 'syz.2.3419': attribute type 7 has an invalid length. [ 1250.613327][T18201] : entered promiscuous mode [ 1250.791670][T13457] Bluetooth: hci1: command 0x0406 tx timeout [ 1251.214702][ T5304] usbhid 2-1:0.0: can't add hid device: -32 [ 1251.267755][ T5304] usbhid 2-1:0.0: probe with driver usbhid failed with error -32 [ 1251.742501][ T9794] usb 2-1: USB disconnect, device number 51 [ 1253.068489][T16983] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1253.081084][T16983] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1253.097582][T18214] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1253.108848][T16983] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1253.116596][T18214] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1253.126228][T16983] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1253.140847][T18214] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1253.152052][T18214] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1253.174584][T16983] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1253.183130][T16983] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1253.215663][T16983] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1253.222904][T16983] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1253.335858][T13457] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1253.354691][T17264] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1253.372512][T13457] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1253.382761][T13457] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1253.410262][T13457] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1253.418932][T13457] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1253.429464][T13457] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1253.535123][T18214] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1253.549797][T18214] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1253.563557][T18214] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1253.572000][T13312] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1253.579867][T13312] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1253.589954][T13312] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1253.611679][T13312] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1253.619752][T18214] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1253.620255][T13312] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1253.635682][T13312] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1253.636373][T18214] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1253.652950][T18214] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1253.882647][T17264] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1253.942220][T18211] lo speed is unknown, defaulting to 1000 [ 1254.014364][T17264] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1254.046319][T18210] lo speed is unknown, defaulting to 1000 [ 1254.061088][T18219] lo speed is unknown, defaulting to 1000 [ 1254.086291][T18218] lo speed is unknown, defaulting to 1000 [ 1254.117779][T17264] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1254.167607][T18216] lo speed is unknown, defaulting to 1000 [ 1254.837727][T18211] chnl_net:caif_netlink_parms(): no params data found [ 1254.896552][T17264] bridge_slave_1: left allmulticast mode [ 1254.904660][T17264] bridge_slave_1: left promiscuous mode [ 1254.918450][T17264] bridge0: port 2(bridge_slave_1) entered disabled state [ 1254.931922][T17264] bridge_slave_0: left allmulticast mode [ 1254.937659][T17264] bridge_slave_0: left promiscuous mode [ 1254.951623][T17264] bridge0: port 1(bridge_slave_0) entered disabled state [ 1255.341847][T18214] Bluetooth: hci5: command tx timeout [ 1255.349294][T13457] Bluetooth: hci4: command tx timeout [ 1255.587458][T13457] Bluetooth: hci0: command tx timeout [ 1255.681336][T17264] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1255.699849][T17264] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1255.715658][T17264] bond0 (unregistering): Released all slaves [ 1255.742801][T13457] Bluetooth: hci1: command tx timeout [ 1255.743694][T18214] Bluetooth: hci3: command tx timeout [ 1255.859986][T18210] chnl_net:caif_netlink_parms(): no params data found [ 1256.140053][T18219] chnl_net:caif_netlink_parms(): no params data found [ 1256.317017][T18216] chnl_net:caif_netlink_parms(): no params data found [ 1256.430988][T18211] bridge0: port 1(bridge_slave_0) entered blocking state [ 1256.451704][T18211] bridge0: port 1(bridge_slave_0) entered disabled state [ 1256.460356][T18211] bridge_slave_0: entered allmulticast mode [ 1256.484365][T18211] bridge_slave_0: entered promiscuous mode [ 1256.502884][T18218] chnl_net:caif_netlink_parms(): no params data found [ 1256.614093][T18211] bridge0: port 2(bridge_slave_1) entered blocking state [ 1256.621256][T18211] bridge0: port 2(bridge_slave_1) entered disabled state [ 1256.632248][T18211] bridge_slave_1: entered allmulticast mode [ 1256.639861][T18211] bridge_slave_1: entered promiscuous mode [ 1256.860442][T18210] bridge0: port 1(bridge_slave_0) entered blocking state [ 1256.882825][T18210] bridge0: port 1(bridge_slave_0) entered disabled state [ 1256.890156][T18210] bridge_slave_0: entered allmulticast mode [ 1256.897819][T18210] bridge_slave_0: entered promiscuous mode [ 1256.983948][T18211] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1257.010964][T18210] bridge0: port 2(bridge_slave_1) entered blocking state [ 1257.018949][T18210] bridge0: port 2(bridge_slave_1) entered disabled state [ 1257.036446][T18210] bridge_slave_1: entered allmulticast mode [ 1257.049604][T18210] bridge_slave_1: entered promiscuous mode [ 1257.059416][T18216] bridge0: port 1(bridge_slave_0) entered blocking state [ 1257.068573][T18216] bridge0: port 1(bridge_slave_0) entered disabled state [ 1257.077721][T18216] bridge_slave_0: entered allmulticast mode [ 1257.085892][T18216] bridge_slave_0: entered promiscuous mode [ 1257.100737][T18216] bridge0: port 2(bridge_slave_1) entered blocking state [ 1257.116975][T18216] bridge0: port 2(bridge_slave_1) entered disabled state [ 1257.125392][T18216] bridge_slave_1: entered allmulticast mode [ 1257.132807][T18216] bridge_slave_1: entered promiscuous mode [ 1257.151254][T18211] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1257.210088][T17264] hsr_slave_0: left promiscuous mode [ 1257.216294][T17264] hsr_slave_1: left promiscuous mode [ 1257.222901][T17264] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1257.230371][T17264] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1257.243262][T17264] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1257.250782][T17264] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1257.286715][T17264] veth1_macvtap: left promiscuous mode [ 1257.292505][T17264] veth0_macvtap: left promiscuous mode [ 1257.298136][T17264] veth1_vlan: left promiscuous mode [ 1257.304338][T17264] veth0_vlan: left promiscuous mode [ 1257.424353][T18214] Bluetooth: hci5: command tx timeout [ 1257.429833][T18214] Bluetooth: hci4: command tx timeout [ 1257.669959][T18214] Bluetooth: hci0: command tx timeout [ 1257.821780][T18214] Bluetooth: hci1: command tx timeout [ 1257.851443][T18214] Bluetooth: hci3: command tx timeout [ 1258.147934][T17264] team0 (unregistering): Port device team_slave_1 removed [ 1258.238697][T17264] team0 (unregistering): Port device team_slave_0 removed [ 1259.139952][T18211] team0: Port device team_slave_0 added [ 1259.201777][T18219] bridge0: port 1(bridge_slave_0) entered blocking state [ 1259.208987][T18219] bridge0: port 1(bridge_slave_0) entered disabled state [ 1259.217069][T18219] bridge_slave_0: entered allmulticast mode [ 1259.226332][T18219] bridge_slave_0: entered promiscuous mode [ 1259.276274][T18210] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1259.318360][T18216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1259.332460][T18211] team0: Port device team_slave_1 added [ 1259.423592][T18219] bridge0: port 2(bridge_slave_1) entered blocking state [ 1259.431232][T18219] bridge0: port 2(bridge_slave_1) entered disabled state [ 1259.440490][T18219] bridge_slave_1: entered allmulticast mode [ 1259.453136][T18219] bridge_slave_1: entered promiscuous mode [ 1259.481121][T18210] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1259.501891][T18214] Bluetooth: hci5: command tx timeout [ 1259.506972][T13457] Bluetooth: hci4: command tx timeout [ 1259.515149][T18216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1259.727844][T18211] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1259.761971][T13457] Bluetooth: hci0: command tx timeout [ 1259.762575][T18211] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1259.827903][T18211] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1259.903523][T18219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1259.912828][T13457] Bluetooth: hci3: command tx timeout [ 1259.912881][T13457] Bluetooth: hci1: command tx timeout [ 1259.951118][T18218] bridge0: port 1(bridge_slave_0) entered blocking state [ 1259.959782][T18218] bridge0: port 1(bridge_slave_0) entered disabled state [ 1259.967458][T18218] bridge_slave_0: entered allmulticast mode [ 1259.975226][T18218] bridge_slave_0: entered promiscuous mode [ 1259.984921][T18218] bridge0: port 2(bridge_slave_1) entered blocking state [ 1259.993427][T18218] bridge0: port 2(bridge_slave_1) entered disabled state [ 1260.000707][T18218] bridge_slave_1: entered allmulticast mode [ 1260.008550][T18218] bridge_slave_1: entered promiscuous mode [ 1260.071222][T18216] team0: Port device team_slave_0 added [ 1260.079536][T18211] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1260.090950][T18211] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1260.122691][T18211] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1260.143515][T18219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1260.191160][T18210] team0: Port device team_slave_0 added [ 1260.202897][T18210] team0: Port device team_slave_1 added [ 1260.214040][T18216] team0: Port device team_slave_1 added [ 1260.393887][T18218] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1260.406957][T18218] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1260.438128][T18210] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1260.445283][T18210] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1260.473610][T18210] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1260.487191][T18210] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1260.494400][T18210] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1260.521265][T18210] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1260.579426][T18219] team0: Port device team_slave_0 added [ 1260.613917][T18216] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1260.620919][T18216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1260.653835][T18216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1260.713314][T18211] hsr_slave_0: entered promiscuous mode [ 1260.729058][T18211] hsr_slave_1: entered promiscuous mode [ 1260.738365][T18211] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1260.759912][T18211] Cannot create hsr debugfs directory [ 1260.768442][T18219] team0: Port device team_slave_1 added [ 1260.828537][T18218] team0: Port device team_slave_0 added [ 1260.852719][T18218] team0: Port device team_slave_1 added [ 1260.859628][T18216] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1260.882747][T18216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1260.923729][T18216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1261.025709][T18210] hsr_slave_0: entered promiscuous mode [ 1261.043099][T18210] hsr_slave_1: entered promiscuous mode [ 1261.051981][T18210] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1261.059607][T18210] Cannot create hsr debugfs directory [ 1261.252027][T18219] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1261.259015][T18219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1261.285629][T18219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1261.299675][T18219] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1261.306896][T18219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1261.335831][T18219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1261.353360][T18218] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1261.360347][T18218] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1261.388452][T18218] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1261.407775][T18218] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1261.414824][T18218] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1261.441755][T18218] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1261.560179][T18216] hsr_slave_0: entered promiscuous mode [ 1261.575895][T18216] hsr_slave_1: entered promiscuous mode [ 1261.581913][T18214] Bluetooth: hci4: command tx timeout [ 1261.591762][T18214] Bluetooth: hci5: command tx timeout [ 1261.597412][T18216] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1261.605430][T18216] Cannot create hsr debugfs directory [ 1261.707700][T18219] hsr_slave_0: entered promiscuous mode [ 1261.714682][T18219] hsr_slave_1: entered promiscuous mode [ 1261.720989][T18219] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1261.729434][T18219] Cannot create hsr debugfs directory [ 1261.821734][T18214] Bluetooth: hci0: command tx timeout [ 1261.931934][T18218] hsr_slave_0: entered promiscuous mode [ 1261.938812][T18218] hsr_slave_1: entered promiscuous mode [ 1261.945860][T18218] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1261.953540][T18218] Cannot create hsr debugfs directory [ 1261.983748][T18214] Bluetooth: hci1: command tx timeout [ 1261.984099][T13457] Bluetooth: hci3: command tx timeout [ 1262.136084][T17264] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1262.366207][T17264] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1262.517235][T18211] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1262.679279][T17264] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1262.812213][T18211] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1262.880024][T17264] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1262.998539][T18211] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1263.156877][T18211] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1263.477881][T17264] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1263.612639][T17264] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1263.795682][T18211] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1263.890795][T17264] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1263.927198][T18211] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1264.089117][T17264] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1264.108513][T18211] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1264.202584][T18211] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1264.585618][T18211] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1264.604501][T17264] bridge_slave_0: left allmulticast mode [ 1264.610318][T17264] bridge_slave_0: left promiscuous mode [ 1264.631872][T17264] bridge0: port 1(bridge_slave_0) entered disabled state [ 1264.646841][T17264] bridge_slave_1: left allmulticast mode [ 1264.661157][T17264] bridge_slave_1: left promiscuous mode [ 1264.668047][T17264] bridge0: port 2(bridge_slave_1) entered disabled state [ 1264.684161][T17264] bridge_slave_0: left allmulticast mode [ 1264.690100][T17264] bridge_slave_0: left promiscuous mode [ 1264.696740][T17264] bridge0: port 1(bridge_slave_0) entered disabled state [ 1264.722701][T17264] bridge_slave_1: left allmulticast mode [ 1264.728403][T17264] bridge_slave_1: left promiscuous mode [ 1264.734582][T17264] bridge0: port 2(bridge_slave_1) entered disabled state [ 1264.744965][T17264] bridge_slave_0: left allmulticast mode [ 1264.750762][T17264] bridge_slave_0: left promiscuous mode [ 1264.757273][T17264] bridge0: port 1(bridge_slave_0) entered disabled state [ 1265.990853][T17264] team0: Port device bridge0 removed [ 1266.362716][T17264] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1266.377954][T17264] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1266.399177][T17264] bond0 (unregistering): Released all slaves [ 1266.629192][T17264] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1266.642564][T17264] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1266.655271][T17264] bond0 (unregistering): Released all slaves [ 1266.886919][T17264] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1266.901530][T17264] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1266.923426][T17264] bond0 (unregistering): Released all slaves [ 1267.075983][T18210] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1267.253487][T18210] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1267.264486][T17264] tipc: Disabling bearer [ 1267.282286][T17264] tipc: Left network mode [ 1267.294080][T18211] 8021q: adding VLAN 0 to HW filter on device team0 [ 1267.349723][T18210] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1267.372103][T17264] tipc: Left network mode [ 1267.376645][T18210] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1267.424376][ T2535] bridge0: port 1(bridge_slave_0) entered blocking state [ 1267.431612][ T2535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1267.472389][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 1267.479552][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1267.734304][T18211] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1268.089134][T18210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1268.197634][T18219] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1268.246939][T18210] 8021q: adding VLAN 0 to HW filter on device team0 [ 1268.311771][T18219] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1268.326772][T18219] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1268.360406][T18219] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1268.467722][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 1268.475005][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1268.564269][T18211] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1268.589373][ T1311] bridge0: port 2(bridge_slave_1) entered blocking state [ 1268.596589][ T1311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1268.825343][T17264] hsr_slave_0: left promiscuous mode [ 1268.832447][T17264] hsr_slave_1: left promiscuous mode [ 1268.838863][T17264] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1268.848220][T17264] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1268.857227][T17264] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1268.866771][T17264] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1268.879540][T17264] hsr_slave_0: left promiscuous mode [ 1268.886301][T17264] hsr_slave_1: left promiscuous mode [ 1268.893022][T17264] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1268.900511][T17264] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1268.909668][T17264] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1268.917335][T17264] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1268.937205][T17264] hsr_slave_0: left promiscuous mode [ 1268.943592][T17264] hsr_slave_1: left promiscuous mode [ 1268.949511][T17264] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1268.957519][T17264] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1268.966251][T17264] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1268.974864][T17264] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1269.054897][T17264] veth1_macvtap: left promiscuous mode [ 1269.060485][T17264] veth0_macvtap: left promiscuous mode [ 1269.066456][T17264] veth1_vlan: left promiscuous mode [ 1269.074309][T17264] veth1_macvtap: left promiscuous mode [ 1269.079856][T17264] veth0_macvtap: left promiscuous mode [ 1269.089032][T17264] veth1_vlan: left promiscuous mode [ 1269.094594][T17264] veth0_vlan: left promiscuous mode [ 1269.103876][T17264] veth1_macvtap: left promiscuous mode [ 1269.109524][T17264] veth0_macvtap: left promiscuous mode [ 1269.126118][T17264] veth1_vlan: left promiscuous mode [ 1269.131888][T17264] veth0_vlan: left promiscuous mode [ 1270.158143][T17264] team0 (unregistering): Port device team_slave_1 removed [ 1270.238851][T17264] team0 (unregistering): Port device team_slave_0 removed [ 1271.735850][T17264] team0 (unregistering): Port device team_slave_1 removed [ 1271.805754][T17264] team0 (unregistering): Port device team_slave_0 removed [ 1273.254651][T17264] team0 (unregistering): Port device team_slave_1 removed [ 1273.345872][T17264] team0 (unregistering): Port device team_slave_0 removed [ 1274.554196][T18211] veth0_vlan: entered promiscuous mode [ 1274.651949][T18211] veth1_vlan: entered promiscuous mode [ 1274.726588][T18219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1274.880359][T18218] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1274.963941][T18219] 8021q: adding VLAN 0 to HW filter on device team0 [ 1274.971154][T18216] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1274.986979][T18216] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1275.088165][T18218] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1275.129771][T18216] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1275.166973][T18216] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1275.215291][ T2535] bridge0: port 1(bridge_slave_0) entered blocking state [ 1275.222471][ T2535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1275.239031][T18210] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1275.357499][T18218] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1275.426465][ T2586] bridge0: port 2(bridge_slave_1) entered blocking state [ 1275.433760][ T2586] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1275.508673][T18218] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1275.648691][T18211] veth0_macvtap: entered promiscuous mode [ 1275.776574][T18211] veth1_macvtap: entered promiscuous mode [ 1276.065797][T18218] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1276.098119][T18211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1276.110523][T18211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1276.133875][T18211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1276.155878][T18211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1276.168750][T18211] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1276.188573][T18210] veth0_vlan: entered promiscuous mode [ 1276.200381][T18218] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1276.243341][T18211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1276.271623][T18211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1276.291253][T18211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1276.315649][T18211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1276.326328][T18211] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1276.348638][T18211] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1276.374311][T18211] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1276.392220][T18218] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1276.428132][T18211] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1276.452033][T18211] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1276.461147][T18211] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1276.470960][T18211] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1276.483731][T18210] veth1_vlan: entered promiscuous mode [ 1276.501190][T18218] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1276.605591][T18216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1276.689786][T17264] IPVS: stop unused estimator thread 0... [ 1276.752374][T17264] IPVS: stop unused estimator thread 0... [ 1276.788029][T18216] 8021q: adding VLAN 0 to HW filter on device team0 [ 1276.925173][T18210] veth0_macvtap: entered promiscuous mode [ 1276.973011][ T1311] bridge0: port 1(bridge_slave_0) entered blocking state [ 1276.980230][ T1311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1277.066078][T18210] veth1_macvtap: entered promiscuous mode [ 1277.087940][ T1311] bridge0: port 2(bridge_slave_1) entered blocking state [ 1277.095170][ T1311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1277.150643][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1277.195928][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1277.287868][T18219] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1277.371025][T18210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1277.394830][T18210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1277.414187][T18210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1277.425751][T18210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1277.436496][T18210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1277.447695][T18210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1277.462260][T18210] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1277.485482][ T1311] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1277.495030][ T1311] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1277.573109][T18210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1277.585292][T18210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1277.596666][T18210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1277.617500][T18210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1277.632281][T18210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1277.652310][T18210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1277.682807][T18210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1277.701486][T18210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1277.916327][T18210] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1278.551012][T18218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1278.587895][T18210] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1278.602884][T18210] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1278.618667][T18210] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1278.661459][T18210] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1278.698405][T18218] 8021q: adding VLAN 0 to HW filter on device team0 [ 1278.791631][T17264] bridge0: port 1(bridge_slave_0) entered blocking state [ 1278.798831][T17264] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1278.910569][T17264] bridge0: port 2(bridge_slave_1) entered blocking state [ 1278.917819][T17264] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1279.208376][T18219] veth0_vlan: entered promiscuous mode [ 1279.260403][T17264] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1279.289130][T17264] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1279.479663][T18219] veth1_vlan: entered promiscuous mode [ 1279.535161][T17264] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1279.576898][T18216] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1279.601492][T17264] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1279.810640][T18219] veth0_macvtap: entered promiscuous mode [ 1279.903093][T18219] veth1_macvtap: entered promiscuous mode [ 1279.975939][T18219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1280.017873][T18219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1280.051858][T18219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1280.097886][T18219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1280.127550][T18219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1280.155958][T18219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1280.180015][T18219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1280.193163][T18219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1280.218737][T18219] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1280.296031][T18219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1280.338219][T18219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1280.376446][T18219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1280.433015][T18219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1280.444620][T18219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1280.457951][T18219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1280.486977][T18219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1280.515039][T18219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1280.549135][T18219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1280.572843][T18219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1280.606534][T18219] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1280.659254][T18218] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1280.872365][T18219] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1280.942227][T18219] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1280.950988][T18219] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1280.995543][T18219] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1281.129184][T18421] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1281.201501][T18421] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1281.314564][T18421] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1281.356931][T18446] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:16x16 (0x47524247, 8, 0, 0, 0) [ 1281.370015][T18421] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1281.523331][T18421] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1281.529917][T18421] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1281.631207][T18421] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1281.650596][T18218] veth0_vlan: entered promiscuous mode [ 1281.669294][T18421] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1281.703282][T18216] veth0_vlan: entered promiscuous mode [ 1281.766285][T18421] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1281.784621][T18218] veth1_vlan: entered promiscuous mode [ 1281.802566][T18421] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1281.990578][T18216] veth1_vlan: entered promiscuous mode [ 1282.223259][T18216] veth0_macvtap: entered promiscuous mode [ 1282.322996][T18218] veth0_macvtap: entered promiscuous mode [ 1282.422157][T18216] veth1_macvtap: entered promiscuous mode [ 1282.433908][T18218] veth1_macvtap: entered promiscuous mode [ 1282.690061][T18216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1282.711562][T18216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1282.731863][T18216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1282.761834][T18216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1282.803855][T18216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1282.835833][T18216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1282.865169][T18216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1282.883518][T18216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1282.911476][T18216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1282.951438][T18216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1282.983335][T18216] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1283.003002][T18218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1283.024405][T18218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1283.059288][T18218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1283.091431][T18218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1283.121582][T18218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1283.142635][T18218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1283.171830][T18218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1283.194033][T18218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1283.211513][T18218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1283.231476][T18218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1283.241769][T18218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1283.261655][T18218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1283.286817][T18218] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1283.334312][ T2535] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1283.367554][ T2535] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1283.378035][T18216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1283.392869][T18216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1283.466039][T18472] afs: Unknown parameter ']"D&9NӥpeFF&{9@' [ 1283.707031][T18216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1283.808921][T18216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1283.958038][T18216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1284.057270][T18216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1284.081524][T18216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1284.092180][T18216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1284.102170][T18216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1284.121421][T18216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1284.131273][T18216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1284.161435][T18216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1284.186076][T18216] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1284.202665][T18218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1284.242582][T18218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1284.261398][T18218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1284.302004][T18218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1284.321400][T18218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1284.340588][T18218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1284.361020][T18218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1284.371680][T18218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1284.382173][T18218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1284.401621][T18218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1284.421504][T18218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1284.451428][T18218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1284.473873][T18218] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1284.497018][T18218] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1284.519187][T18218] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1284.548123][T18218] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1284.570661][T18218] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1284.621398][T18218] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1284.630168][T18218] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1284.727968][T18216] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1284.762139][T18216] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1284.770919][T18216] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1284.794326][T18216] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1284.865173][ T2949] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1285.061455][ T2949] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1285.576578][T18487] lo speed is unknown, defaulting to 1000 [ 1285.753626][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1285.770822][T17264] bridge_slave_0: left allmulticast mode [ 1285.777640][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1285.801556][T17264] bridge_slave_0: left promiscuous mode [ 1285.807418][T17264] bridge0: port 1(bridge_slave_0) entered disabled state [ 1288.128099][T17264] bridge2 (unregistering): left promiscuous mode [ 1288.190974][T17264] team0: Port device bridge2 removed [ 1288.660776][T17264] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1288.690152][T17264] bond_slave_0: left promiscuous mode [ 1288.700106][T17264] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1288.710229][T17264] bond_slave_1: left promiscuous mode [ 1288.722271][T17264] bond0 (unregistering): Released all slaves [ 1289.056590][ T2949] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1289.081101][ T2949] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1289.211589][ T9794] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1289.275156][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1289.298120][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1289.395125][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1289.420040][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1289.521546][ T9794] usb 4-1: Using ep0 maxpacket: 8 [ 1289.535644][ T9794] usb 4-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 1289.544988][ T9794] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1289.558014][ T9794] usb 4-1: config 0 descriptor?? [ 1289.563439][ T5307] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1289.711701][ T9794] viperboard 4-1:0.0: version 0.00 found at bus 004 address 046 [ 1289.749641][ T9794] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 1289.761818][ T9794] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 1289.797528][ T5307] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1289.810856][ T5307] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 1289.869100][ T5307] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1289.891522][T17264] batadv_slave_1: left promiscuous mode [ 1289.898635][ T9794] usb 4-1: USB disconnect, device number 46 [ 1289.949751][ T5307] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1289.988465][ T5307] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1290.018598][ T5307] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1290.027808][T17264] hsr_slave_0: left promiscuous mode [ 1290.062935][ T5307] usb 1-1: config 0 descriptor?? [ 1290.078690][T18526] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1290.093068][T17264] hsr_slave_1: left promiscuous mode [ 1290.152116][T17264] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1290.174178][T17264] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1290.191306][T17264] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1290.269936][T17264] veth1_macvtap: left promiscuous mode [ 1290.321655][T17264] veth0_macvtap: left promiscuous mode [ 1290.342877][T17264] veth1_vlan: left promiscuous mode [ 1290.364305][T17264] veth0_vlan: left promiscuous mode [ 1290.481524][ T3039] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1290.592607][T18542] netlink: 'syz.1.3440': attribute type 4 has an invalid length. [ 1290.600742][T18542] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.3440'. [ 1290.816347][ T5307] plantronics 0003:047F:FFFF.002A: unknown main item tag 0xd [ 1291.149592][ T3039] usb 5-1: Using ep0 maxpacket: 8 [ 1291.193567][ T5307] plantronics 0003:047F:FFFF.002A: No inputs registered, leaving [ 1291.235149][ T3039] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 1291.300035][ T5307] plantronics 0003:047F:FFFF.002A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 1291.317010][ T3039] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1291.350648][ T3039] usb 5-1: Product: syz [ 1291.380766][ T3039] usb 5-1: Manufacturer: syz [ 1291.399698][ T3039] usb 5-1: SerialNumber: syz [ 1291.419140][ T3039] usb 5-1: config 0 descriptor?? [ 1291.448624][T18547] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1291.464966][ T3039] gspca_main: sq930x-2.14.0 probing 2770:930c [ 1291.686939][T18538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1291.715181][T18538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1291.991220][T18554] syz.3.3443: attempt to access beyond end of device [ 1291.991220][T18554] nbd3: rw=4096, sector=0, nr_sectors = 2 limit=0 [ 1291.992702][ T3039] gspca_sq930x: reg_r 001f failed -110 [ 1292.024697][ T3039] sq930x 5-1:0.0: probe with driver sq930x failed with error -110 [ 1292.138847][ T43] block nbd3: Attempted send on invalid socket [ 1292.149702][ T43] blk_print_req_error: 31 callbacks suppressed [ 1292.149720][ T43] I/O error, dev nbd3, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 0 [ 1292.562045][T18361] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1292.771208][T18361] usb 3-1: Using ep0 maxpacket: 32 [ 1292.800190][T18361] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1292.848072][T18361] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1292.860517][T18361] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1292.869854][T18361] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1293.008239][T18361] hub 3-1:4.0: USB hub found [ 1293.211287][T18361] hub 3-1:4.0: 2 ports detected [ 1293.216592][T18361] usb 3-1: selecting invalid altsetting 1 [ 1293.224337][T18361] hub 3-1:4.0: Using single TT (err -22) [ 1293.282356][T17264] team_slave_1 (unregistering): left promiscuous mode [ 1293.294466][T17264] team0 (unregistering): Port device team_slave_1 removed [ 1293.413080][T17264] team_slave_0 (unregistering): left promiscuous mode [ 1293.472448][T17264] team0 (unregistering): Port device team_slave_0 removed [ 1294.311147][T18361] hub 3-1:4.0: hub_hub_status failed (err = -32) [ 1294.356622][T18361] hub 3-1:4.0: config failed, can't get hub status (err -32) [ 1294.691658][T18547] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3441'. [ 1294.734532][T18547] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1294.738521][ T25] usb 1-1: USB disconnect, device number 52 [ 1294.795456][ T940] lo speed is unknown, defaulting to 1000 [ 1294.902635][ T5307] usb 5-1: USB disconnect, device number 38 [ 1295.102063][ T3039] usb 3-1: USB disconnect, device number 41 [ 1295.195392][T18579] netlink: 'syz.3.3450': attribute type 7 has an invalid length. [ 1296.673057][ T5307] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1297.221591][ T5307] usb 3-1: Using ep0 maxpacket: 32 [ 1297.240162][ T5307] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1297.279881][ T5307] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1297.301973][ T5307] usb 3-1: config 0 descriptor?? [ 1297.315229][ T5307] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1297.491965][ T5304] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1297.714152][ T5304] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1297.734764][ T5304] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1297.748506][ T5304] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1297.761585][ T5304] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1297.793387][ T5304] usb 1-1: config 0 descriptor?? [ 1297.817697][T18621] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1298.250268][T18608] binder: 18606:18608 ioctl c0306201 20000580 returned -14 [ 1298.272694][T18627] netlink: 'syz.3.3468': attribute type 11 has an invalid length. [ 1298.351161][T18628] netlink: 'syz.1.3467': attribute type 12 has an invalid length. [ 1298.359504][T18628] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3467'. [ 1300.131441][ T5307] gspca_vc032x: reg_w err -110 [ 1300.136286][ T5307] gspca_vc032x: I2c Bus Busy Wait 00 [ 1300.162723][ T5304] usb 1-1: string descriptor 0 read error: -71 [ 1300.228477][T18645] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1300.276540][T18645] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1300.292807][T18645] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3470'. [ 1300.295779][ T5304] uclogic 0003:256C:006D.002B: failed retrieving string descriptor #200: -71 [ 1300.319843][T18645] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1300.392549][ T5304] uclogic 0003:256C:006D.002B: failed retrieving pen parameters: -71 [ 1300.401118][ T5304] uclogic 0003:256C:006D.002B: failed probing pen v2 parameters: -71 [ 1300.413067][ T5304] uclogic 0003:256C:006D.002B: failed probing parameters: -71 [ 1300.428541][ T5304] uclogic 0003:256C:006D.002B: probe with driver uclogic failed with error -71 [ 1300.429649][ T5307] gspca_vc032x: I2c Bus Busy Wait 00 [ 1300.442006][ T5304] usb 1-1: USB disconnect, device number 53 [ 1301.032462][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 1301.084792][ T5307] gspca_vc032x: I2c Bus Busy Wait 00 [ 1301.090162][ T5307] gspca_vc032x: I2c Bus Busy Wait 00 [ 1301.179550][ T5307] gspca_vc032x: I2c Bus Busy Wait 00 [ 1301.203219][ T5307] gspca_vc032x: I2c Bus Busy Wait 00 [ 1301.224570][ T5307] gspca_vc032x: I2c Bus Busy Wait 00 [ 1301.229897][ T5307] gspca_vc032x: I2c Bus Busy Wait 00 [ 1301.281458][ T5307] gspca_vc032x: I2c Bus Busy Wait 00 [ 1301.286925][ T5307] gspca_vc032x: I2c Bus Busy Wait 00 [ 1301.337995][ T5307] gspca_vc032x: I2c Bus Busy Wait 00 [ 1301.371429][ T5307] gspca_vc032x: I2c Bus Busy Wait 00 [ 1301.376897][ T5307] gspca_vc032x: I2c Bus Busy Wait 00 [ 1301.415196][ T5307] gspca_vc032x: I2c Bus Busy Wait 00 [ 1301.420678][ T5307] gspca_vc032x: I2c Bus Busy Wait 00 [ 1301.458367][ T5307] gspca_vc032x: I2c Bus Busy Wait 00 [ 1301.482540][ T5307] gspca_vc032x: I2c Bus Busy Wait 00 [ 1301.511035][ T5307] gspca_vc032x: I2c Bus Busy Wait 00 [ 1301.526668][ T5307] gspca_vc032x: Unknown sensor... [ 1301.550386][T18661] Bluetooth: MGMT ver 1.23 [ 1301.550902][ T5307] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 1301.831041][ T5274] usb 3-1: USB disconnect, device number 42 [ 1303.951871][T18676] overlayfs: overlapping lowerdir path [ 1304.890223][T18692] REISERFS warning (device nullb0): super-6502 reiserfs_getopt: unknown mount option "l~^[ MaJƷc-*\ynSnYefNoX+%+BO" [ 1305.219581][T18701] netlink: 165 bytes leftover after parsing attributes in process `syz.2.3481'. [ 1305.230696][T18701] netlink: 277 bytes leftover after parsing attributes in process `syz.2.3481'. [ 1305.404221][T18705] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3488'. [ 1305.776036][T14862] usb 1-1: new low-speed USB device number 54 using dummy_hcd [ 1306.616703][T18713] dlm: no local IP address has been set [ 1306.624288][T18713] dlm: cannot start dlm midcomms -107 [ 1307.342208][ T2949] bridge_slave_1: left allmulticast mode [ 1307.371490][ T2949] bridge_slave_1: left promiscuous mode [ 1307.377444][ T2949] bridge0: port 2(bridge_slave_1) entered disabled state [ 1307.413295][ T2949] bridge_slave_0: left allmulticast mode [ 1307.429316][ T2949] bridge_slave_0: left promiscuous mode [ 1307.443953][ T2949] bridge0: port 1(bridge_slave_0) entered disabled state [ 1307.513382][T14862] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 1307.539214][T14862] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 1307.570308][T14862] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1307.610128][T14862] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1307.659650][T14862] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 1307.681422][T14862] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1307.711266][T14862] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1307.745047][T14862] usb 1-1: string descriptor 0 read error: -22 [ 1307.761794][T14862] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1307.781169][T14862] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1307.812126][T14862] usb 1-1: config 0 descriptor?? [ 1307.830274][T14862] hub 1-1:0.0: bad descriptor, ignoring hub [ 1307.847095][T14862] hub 1-1:0.0: probe with driver hub failed with error -5 [ 1307.883404][T14862] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input56 [ 1309.411513][ T2949] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1309.431060][ T2949] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1309.450854][ T2949] bond0 (unregistering): Released all slaves [ 1309.500306][T18700] bridge1: entered promiscuous mode [ 1309.521776][T18700] bridge1: entered allmulticast mode [ 1309.602246][T18732] wg1: entered promiscuous mode [ 1309.609024][T18732] wg1: entered allmulticast mode [ 1309.624026][T18732] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 1309.668736][ T5274] usb 1-1: USB disconnect, device number 54 [ 1309.686059][T18737] pimreg: entered allmulticast mode [ 1309.699909][ T2949] : left promiscuous mode [ 1310.082682][T18214] Bluetooth: hci6: sending frame failed (-49) [ 1310.095973][T13457] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 1310.110898][T18755] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 1310.387639][ T5274] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1310.408567][T18762] veth0_vlan: entered allmulticast mode [ 1310.597234][ T5274] usb 1-1: Using ep0 maxpacket: 16 [ 1310.607610][ T5274] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1310.607650][ T5274] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1310.607676][ T5274] usb 1-1: Product: syz [ 1310.607695][ T5274] usb 1-1: Manufacturer: syz [ 1310.607713][ T5274] usb 1-1: SerialNumber: syz [ 1310.621278][ T5274] usb 1-1: config 0 descriptor?? [ 1310.871069][ T2949] hsr_slave_0: left promiscuous mode [ 1310.875588][ T2949] hsr_slave_1: left promiscuous mode [ 1310.876600][ T2949] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1310.876665][ T2949] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1310.877587][ T2949] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1310.877623][ T2949] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1311.724578][ T2949] veth1_macvtap: left promiscuous mode [ 1311.724672][ T2949] veth0_macvtap: left promiscuous mode [ 1311.724843][ T2949] veth1_vlan: left promiscuous mode [ 1311.724993][ T2949] veth0_vlan: left promiscuous mode [ 1311.839122][ T5304] usb 1-1: USB disconnect, device number 55 [ 1314.740828][ T5307] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1315.150084][ T5307] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1315.204672][ T5307] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1315.286010][ T5307] usb 5-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 1315.351023][ T5307] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1315.651590][ T5307] usb 5-1: config 0 descriptor?? [ 1315.690244][ T5307] radioshark2 5-1:0.0: Invalid radioSHARK2 device [ 1315.712978][ T5307] radioshark2 5-1:0.0: probe with driver radioshark2 failed with error -22 [ 1315.728710][ T5307] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1315.941717][T14862] usb 5-1: USB disconnect, device number 39 [ 1315.972010][ T2949] team0 (unregistering): Port device team_slave_1 removed [ 1316.308366][ T2949] team0 (unregistering): Port device team_slave_0 removed [ 1317.452629][T18818] QAT: Stopping all acceleration devices. [ 1319.254526][T18771] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3507'. [ 1319.291573][T18771] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3507'. [ 1323.680469][T18887] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3538'. [ 1323.690435][T18887] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3538'. [ 1324.297997][T18899] Process accounting resumed [ 1324.802033][T18909] tipc: Started in network mode [ 1325.741877][T18909] tipc: Node identity ffffffff, cluster identity 4711 [ 1325.794649][T18909] tipc: Node number set to 4294967295 [ 1326.476873][T18925] tipc: Enabling of bearer rejected, failed to enable media [ 1328.029193][ T29] kauditd_printk_skb: 25 callbacks suppressed [ 1328.029215][ T29] audit: type=1326 audit(1723598613.204:612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18949 comm="syz.2.3561" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe988b799f9 code=0x0 [ 1328.323950][T18361] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1328.512846][T18968] binder: BINDER_SET_CONTEXT_MGR already set [ 1328.525942][T18968] binder: 18963:18968 ioctl 4018620d 20000000 returned -16 [ 1328.534160][T18361] usb 1-1: config 0 has an invalid interface number: 65 but max is 0 [ 1328.542909][T18361] usb 1-1: config 0 has no interface number 0 [ 1328.551895][T18361] usb 1-1: New USB device found, idVendor=06cd, idProduct=0119, bcdDevice=de.0f [ 1328.580631][T18361] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1328.631657][T18361] usb 1-1: config 0 descriptor?? [ 1328.656003][T18361] keyspan 1-1:0.65: Keyspan 1 port adapter converter detected [ 1328.672262][T18361] keyspan 1-1:0.65: found no endpoint descriptor for endpoint 87 [ 1328.702212][T18361] keyspan 1-1:0.65: found no endpoint descriptor for endpoint 7 [ 1328.739024][T18361] keyspan 1-1:0.65: found no endpoint descriptor for endpoint 81 [ 1328.781606][T18361] keyspan 1-1:0.65: found no endpoint descriptor for endpoint 1 [ 1328.820851][T18361] keyspan 1-1:0.65: found no endpoint descriptor for endpoint 2 [ 1328.851001][T18361] keyspan 1-1:0.65: found no endpoint descriptor for endpoint 85 [ 1328.883902][T18361] keyspan 1-1:0.65: found no endpoint descriptor for endpoint 5 [ 1328.933499][T18361] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1328.961753][T18361] usb 1-1: USB disconnect, device number 56 [ 1329.023015][T18361] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1329.061701][T18361] keyspan 1-1:0.65: device disconnected [ 1329.200502][T18976] netlink: 268 bytes leftover after parsing attributes in process `syz.2.3566'. [ 1329.220440][T18975] bridge1: entered promiscuous mode [ 1329.626018][T18986] sg_write: data in/out 196608/1 bytes for SCSI command 0xf2-- guessing data in; [ 1329.626018][T18986] program syz.0.3570 not setting count and/or reply_len properly [ 1329.719304][T18986] sg_write: data in/out 1818846731/53 bytes for SCSI command 0x46-- guessing data in; [ 1329.719304][T18986] program syz.0.3570 not setting count and/or reply_len properly [ 1338.766091][T19026] overlayfs: overlapping lowerdir path [ 1338.841424][T19024] Bluetooth: MGMT ver 1.23 [ 1340.209009][T19042] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 1340.231594][ T7300] Bluetooth: hci6: Frame reassembly failed (-84) [ 1341.118971][T19044] ieee802154 phy0 wpan0: encryption failed: -22 [ 1341.273730][T19051] netlink: 'syz.0.3588': attribute type 10 has an invalid length. [ 1341.333042][T19054] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3592'. [ 1341.367097][T19051] veth1_macvtap: left promiscuous mode [ 1341.624927][T19062] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3592'. [ 1341.765501][ T5307] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1341.832273][ T25] IPVS: starting estimator thread 0... [ 1341.936006][T19073] IPVS: using max 23 ests per chain, 55200 per kthread [ 1341.955277][ T5307] usb 1-1: Using ep0 maxpacket: 16 [ 1341.981453][ T5307] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 1342.024911][ T5307] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 1342.051228][ T5307] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1342.095987][ T5307] usb 1-1: config 0 descriptor?? [ 1342.155939][T13457] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1342.166552][T18214] Bluetooth: hci6: command 0x1003 tx timeout [ 1343.653350][T19051] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1343.683241][T19051] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1343.728800][ T5307] hid-generic 0003:0158:0100.002C: unknown main item tag 0x1 [ 1343.737108][ T5307] hid-generic 0003:0158:0100.002C: unexpected long global item [ 1343.745360][ T5307] hid-generic 0003:0158:0100.002C: probe with driver hid-generic failed with error -22 [ 1343.841757][ T3039] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1343.859838][T18361] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 1343.927182][ T5307] usb 1-1: USB disconnect, device number 57 [ 1344.031768][ T3039] usb 4-1: Using ep0 maxpacket: 32 [ 1344.040118][ T3039] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1344.043418][T18361] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1344.058828][ T3039] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1344.065446][T18361] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1344.070000][ T3039] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1344.092451][T18361] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1344.095403][ T3039] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1344.102327][ T5274] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1344.118129][ T3039] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1344.122068][T18361] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1344.126344][ T3039] usb 4-1: Product: syz [ 1344.126366][ T3039] usb 4-1: Manufacturer: 䙡 [ 1344.126384][ T3039] usb 4-1: SerialNumber: syz [ 1344.154234][T18361] usb 5-1: Product: syz [ 1344.159104][T18361] usb 5-1: Manufacturer: syz [ 1344.164258][T18361] usb 5-1: SerialNumber: syz [ 1344.173233][T19091] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1344.326796][ T5274] usb 3-1: Using ep0 maxpacket: 8 [ 1344.348445][ T5274] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1344.358836][ T5274] usb 3-1: config 1 has no interface number 1 [ 1344.365514][ T5274] usb 3-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 1344.387019][ T5274] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1344.401062][T18361] usblp 5-1:1.0: usblp0: USB Bidirectional printer dev 40 if 0 alt 0 proto 2 vid 0x0525 pid 0xA4A8 [ 1344.414442][ T5274] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1344.426539][ T5274] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1344.439842][ T5274] usb 3-1: Product: syz [ 1344.444395][ T5274] usb 3-1: Manufacturer: syz [ 1344.449348][ T5274] usb 3-1: SerialNumber: syz [ 1344.537435][ T3039] usb 4-1: 0:2 : does not exist [ 1344.585823][ T3039] usb 4-1: USB disconnect, device number 47 [ 1344.619490][T19103] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3605'. [ 1344.677634][T19091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1344.703648][ T5274] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1344.729590][T19091] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1344.769226][ T5274] usb 3-1: USB disconnect, device number 43 [ 1344.784007][ C0] usblp0: nonzero read bulk status received: -71 [ 1344.865149][T19091] usblp0: error -71 reading from printer [ 1344.892821][ C0] usblp0: nonzero read bulk status received: -71 [ 1344.983722][T19101] udevd[19101]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1345.011638][ T8] usb 5-1: USB disconnect, device number 40 [ 1345.095630][ T8] usblp0: removed [ 1347.744272][T19147] binder: BINDER_SET_CONTEXT_MGR already set [ 1347.756096][T19147] binder: 19144:19147 ioctl 4018620d 20000040 returned -16 [ 1349.184689][T19158] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3620'. [ 1351.630525][T19168] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1351.953803][T19190] block nbd4: shutting down sockets [ 1352.238133][T19199] netlink: 1212 bytes leftover after parsing attributes in process `syz.3.3629'. [ 1353.165210][T19218] binder: 19217:19218 ioctl 400c620e 200003c0 returned -22 [ 1353.242757][ T5274] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1353.676106][ T5274] usb 1-1: Using ep0 maxpacket: 32 [ 1353.688101][ T5274] usb 1-1: config 0 has no interfaces? [ 1353.693914][ T5274] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1353.703278][ T5274] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1353.715558][ T5274] usb 1-1: config 0 descriptor?? [ 1353.747855][ T940] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1354.288695][T19214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1354.319491][T19214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1354.373092][ T5307] usb 1-1: USB disconnect, device number 58 [ 1354.696114][ T940] usb 4-1: Using ep0 maxpacket: 32 [ 1355.390751][ T940] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1355.427369][ T940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1355.511422][ T940] usb 4-1: config 0 descriptor?? [ 1355.534543][ T940] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1355.652528][ T5307] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1355.817689][T19258] Bluetooth: hci6: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 1355.856261][ T7300] Bluetooth: hci6: Frame reassembly failed (-84) [ 1355.957661][ T5307] usb 1-1: device descriptor read/all, error -71 [ 1356.019486][T19264] program syz.0.3656 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1356.169184][T19269] syz.1.3655[19269] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1356.169384][T19269] syz.1.3655[19269] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1357.305339][ T940] gspca_nw80x: reg_w err -110 [ 1357.329217][ T940] nw80x 4-1:0.0: probe with driver nw80x failed with error -110 [ 1358.408060][T13457] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 1358.606131][T14862] usb 4-1: USB disconnect, device number 48 [ 1359.531181][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.559069][ T8] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1361.913404][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 1361.923219][ T8] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 1361.945443][ T8] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1361.985995][ T8] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1362.019830][ T8] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1362.084669][ T8] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1362.120819][ T8] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1362.140324][ T8] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1362.148992][ T8] usb 3-1: Product: syz [ 1362.165658][T19318] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3672'. [ 1362.185271][ T8] usb 3-1: Manufacturer: syz [ 1362.190333][T19318] openvswitch: netlink: VXLAN extension 1024 out of range max 1 [ 1362.195964][ T8] usb 3-1: SerialNumber: syz [ 1362.225990][ T8] usb 3-1: config 0 descriptor?? [ 1362.253078][ T8] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1362.298344][ T8] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1364.013265][T19336] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3678'. [ 1364.197804][ T2949] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1364.208172][T14862] usb 3-1: USB disconnect, device number 44 [ 1364.235978][ T5307] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1364.275474][T14862] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 1364.949676][ T5307] usb 1-1: Using ep0 maxpacket: 8 [ 1364.985600][ T5307] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1365.078377][ T5307] usb 1-1: config 1 has no interface number 1 [ 1365.175024][ T5307] usb 1-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 1365.211538][ T2949] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1365.231861][ T5307] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1365.411928][T19357] vivid-000: ================= START STATUS ================= [ 1365.419724][T19357] vivid-000: Generate PTS: true [ 1365.426123][T19357] vivid-000: Generate SCR: true [ 1365.431042][T19357] tpg source WxH: 320x180 (Y'CbCr) [ 1365.436329][T19357] tpg field: 1 [ 1365.439729][T19357] tpg crop: 320x180@0x0 [ 1365.444519][T19357] tpg compose: 320x180@0x0 [ 1365.449050][T19357] tpg colorspace: 8 [ 1365.452897][T19357] tpg transfer function: 0/2 [ 1365.457584][T19357] tpg Y'CbCr encoding: 0/1 [ 1365.462068][T19357] tpg quantization: 0/1 [ 1365.466525][T19357] tpg RGB range: 0/2 [ 1365.470460][T19357] vivid-000: ================== END STATUS ================== [ 1366.795283][T13457] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1366.815134][T13457] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1366.835331][T13457] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1366.848984][T13457] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1366.857283][T13457] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1366.869515][T13457] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1366.997609][ T5274] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1367.128533][ T5307] usb 1-1: string descriptor 0 read error: -71 [ 1367.135692][ T5307] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1367.145372][ T5307] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1367.161579][ T5307] usb 1-1: can't set config #1, error -71 [ 1367.174032][ T5307] usb 1-1: USB disconnect, device number 61 [ 1367.214513][ T2949] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1367.256531][ T5274] usb 4-1: Using ep0 maxpacket: 8 [ 1367.279240][ T5274] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 1367.308927][ T5274] usb 4-1: config 0 has too many interfaces: 241, using maximum allowed: 32 [ 1367.496530][ T2949] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1367.537592][ T5274] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 241 [ 1367.546876][ T5274] usb 4-1: config 0 has no interface number 0 [ 1367.559661][ T5274] usb 4-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1367.581893][ T5274] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1367.598265][ T5274] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1367.636392][ T5307] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1367.689398][T19371] syz.2.3687: attempt to access beyond end of device [ 1367.689398][T19371] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 1367.703939][T19371] hpfs: hpfs_map_sector(): read error [ 1367.969464][ T5307] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1368.047361][ T5307] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1368.227148][ T5307] usb 1-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 1368.255899][ T5274] usb 4-1: string descriptor 0 read error: -71 [ 1368.262242][ T5274] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 1368.284089][ T5274] usb 4-1: New USB device strings: Mfr=228, Product=255, SerialNumber=0 [ 1368.312505][ T5304] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1368.328151][ T5274] usb 4-1: config 0 descriptor?? [ 1368.342284][ T5274] usb 4-1: can't set config #0, error -71 [ 1368.362956][ T5274] usb 4-1: USB disconnect, device number 49 [ 1368.385282][ T5307] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1368.419406][ T5307] usb 1-1: config 0 descriptor?? [ 1368.513717][ T5304] usb 5-1: Using ep0 maxpacket: 32 [ 1368.550699][ T5304] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 1368.580268][ T5304] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 1368.613169][ T5304] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1368.628517][T19352] chnl_net:caif_netlink_parms(): no params data found [ 1368.672628][ T5304] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1368.712740][ T5304] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1368.723902][ T5304] usb 5-1: Product: syz [ 1368.728142][ T5304] usb 5-1: Manufacturer: syz [ 1368.745819][ T5304] usb 5-1: SerialNumber: syz [ 1368.775099][T19365] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1368.820641][ T5304] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input57 [ 1368.841173][ T5307] appleir 0003:05AC:8241.002D: item fetching failed at offset 5/7 [ 1368.868921][ T2949] bridge_slave_1: left allmulticast mode [ 1368.880361][ C0] appletouch 5-1:1.0: atp_complete: usb_submit_urb failed with result -1 [ 1368.894207][T18214] Bluetooth: hci5: command tx timeout [ 1368.903890][ T5307] appleir 0003:05AC:8241.002D: parse failed [ 1368.920206][ T2949] bridge_slave_1: left promiscuous mode [ 1368.950902][ T2949] bridge0: port 2(bridge_slave_1) entered disabled state [ 1368.962154][ T5307] appleir 0003:05AC:8241.002D: probe with driver appleir failed with error -22 [ 1368.972115][T19383] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3691'. [ 1369.008599][ T2949] bridge_slave_0: left allmulticast mode [ 1369.052950][ T2949] bridge_slave_0: left promiscuous mode [ 1369.076004][ T2949] bridge0: port 1(bridge_slave_0) entered disabled state [ 1369.076552][ T5274] usb 1-1: USB disconnect, device number 62 [ 1369.291426][ T5307] usb 5-1: USB disconnect, device number 41 [ 1369.380195][ T5307] appletouch 5-1:1.0: input: appletouch disconnected [ 1370.871200][T19402] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3695'. [ 1370.888188][T18214] Bluetooth: hci5: command tx timeout [ 1370.905772][T19402] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3695'. [ 1370.958058][T19403] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3695'. [ 1371.688317][ T29] audit: type=1326 audit(1723598659.038:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19410 comm="syz.4.3700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1602d799f9 code=0x7ffc0000 [ 1371.724260][ T29] audit: type=1326 audit(1723598659.038:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19410 comm="syz.4.3700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1602d799f9 code=0x7ffc0000 [ 1371.745575][T19414] binder: BC_ATTEMPT_ACQUIRE not supported [ 1371.748941][ T29] audit: type=1326 audit(1723598659.070:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19410 comm="syz.4.3700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f1602d799f9 code=0x7ffc0000 [ 1371.755342][T19414] binder: 19413:19414 ioctl c0306201 200005c0 returned -22 [ 1371.781778][ T29] audit: type=1326 audit(1723598659.070:616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19410 comm="syz.4.3700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1602d799f9 code=0x7ffc0000 [ 1371.805252][ T29] audit: type=1326 audit(1723598659.070:617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19410 comm="syz.4.3700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1602d799f9 code=0x7ffc0000 [ 1371.829176][ T29] audit: type=1326 audit(1723598659.070:618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19410 comm="syz.4.3700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1602d799f9 code=0x7ffc0000 [ 1371.853556][ T29] audit: type=1326 audit(1723598659.070:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19410 comm="syz.4.3700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1602d799f9 code=0x7ffc0000 [ 1371.897577][ T29] audit: type=1326 audit(1723598659.070:620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19410 comm="syz.4.3700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1602d799f9 code=0x7ffc0000 [ 1371.920887][ T29] audit: type=1326 audit(1723598659.070:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19410 comm="syz.4.3700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1602d799f9 code=0x7ffc0000 [ 1371.945500][ T29] audit: type=1326 audit(1723598659.070:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=19410 comm="syz.4.3700" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1602d799f9 code=0x7ffc0000 [ 1371.969931][ T5307] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1372.156752][ T5307] usb 1-1: Using ep0 maxpacket: 16 [ 1372.178339][ T5307] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE5, changing to 0x85 [ 1372.190303][ T5307] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1372.231998][ T5307] usb 1-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice=3d.25 [ 1372.241342][ T5307] usb 1-1: New USB device strings: Mfr=4, Product=106, SerialNumber=3 [ 1372.263427][ T5307] usb 1-1: Product: syz [ 1372.265413][ T5274] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1372.268185][ T5307] usb 1-1: Manufacturer: syz [ 1372.280781][ T5307] usb 1-1: SerialNumber: syz [ 1372.306228][ T5307] usb 1-1: config 0 descriptor?? [ 1372.321065][ T5307] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input58 [ 1372.334876][ T2949] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1372.348823][ T2949] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1372.377446][ T2949] bond0 (unregistering): Released all slaves [ 1372.453038][ T5274] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice=80.99 [ 1372.479534][ T5274] usb 4-1: New USB device strings: Mfr=8, Product=0, SerialNumber=3 [ 1372.490946][ T5274] usb 4-1: Manufacturer: syz [ 1372.496143][ T5274] usb 4-1: SerialNumber: syz [ 1372.506195][ T5274] usb 4-1: config 0 descriptor?? [ 1372.780026][ T8] usb 1-1: USB disconnect, device number 63 [ 1372.846002][ T3039] usb 4-1: USB disconnect, device number 50 [ 1372.858664][T18214] Bluetooth: hci5: command tx timeout [ 1374.100800][T19352] bridge0: port 1(bridge_slave_0) entered blocking state [ 1374.161388][T19352] bridge0: port 1(bridge_slave_0) entered disabled state [ 1374.168729][T19352] bridge_slave_0: entered allmulticast mode [ 1374.231093][T19352] bridge_slave_0: entered promiscuous mode [ 1374.249838][T19352] bridge0: port 2(bridge_slave_1) entered blocking state [ 1374.288481][T19352] bridge0: port 2(bridge_slave_1) entered disabled state [ 1374.308452][T19352] bridge_slave_1: entered allmulticast mode [ 1374.333244][T19352] bridge_slave_1: entered promiscuous mode [ 1374.848943][T18214] Bluetooth: hci5: command tx timeout [ 1375.453520][T19352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1375.566228][T19352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1381.780222][T19352] team0: Port device team_slave_0 added [ 1381.834825][T19352] team0: Port device team_slave_1 added [ 1381.895444][T19461] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3716'. [ 1381.921790][T19461] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1381.952807][T19461] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1381.979694][T19461] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1381.996473][T19461] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1382.191759][T19471] tipc: Started in network mode [ 1382.191783][T19471] tipc: Node identity id-name-, cluster identity 4711 [ 1382.191842][T19471] tipc: Enabling of bearer rejected, failed to enable media [ 1382.515127][ T2949] hsr_slave_0: left promiscuous mode [ 1382.551388][ T2949] hsr_slave_1: left promiscuous mode [ 1382.582159][ T2949] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1382.589650][ T2949] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1382.625441][ T2949] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1382.663667][ T2949] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1382.741921][ T2949] veth1_macvtap: left promiscuous mode [ 1382.762452][ T2949] veth0_macvtap: left promiscuous mode [ 1382.784716][ T2949] veth1_vlan: left promiscuous mode [ 1382.790475][ T2949] veth0_vlan: left promiscuous mode [ 1383.804494][T18361] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1384.618990][T18361] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1384.694844][T18361] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1384.872109][T18361] usb 3-1: New USB device found, idVendor=056a, idProduct=009f, bcdDevice= 0.00 [ 1384.913040][T18361] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1384.927294][T18361] usb 3-1: config 0 descriptor?? [ 1385.121215][ T2949] team0 (unregistering): Port device team_slave_1 removed [ 1385.340493][ T2949] team0 (unregistering): Port device team_slave_0 removed [ 1385.597656][T18361] wacom 0003:056A:009F.002E: hidraw0: USB HID v0.00 Device [HID 056a:009f] on usb-dummy_hcd.2-1/input0 [ 1386.081139][T18361] usb 3-1: USB disconnect, device number 45 [ 1386.852504][T13457] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1386.865753][T13457] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1386.875139][T13457] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1386.883491][T13457] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1386.894031][T13457] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1386.904561][T13457] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1388.310573][T19534] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3734'. [ 1388.499915][T19352] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1388.508139][T19352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1388.537692][T19352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1388.722140][T19352] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1388.729252][T19352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1388.840233][T19352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1388.874374][T13457] Bluetooth: hci6: command tx timeout [ 1389.401207][T19352] hsr_slave_0: entered promiscuous mode [ 1389.435856][T19532] delete_channel: no stack [ 1389.634344][T19352] hsr_slave_1: entered promiscuous mode [ 1389.900500][T19548] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3737'. [ 1390.626125][T19572] netlink: 120 bytes leftover after parsing attributes in process `syz.0.3741'. [ 1390.840894][T13457] Bluetooth: hci6: command tx timeout [ 1390.929595][ T2949] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1391.514147][ T2949] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1391.733234][T19590] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3746'. [ 1392.033330][ T2949] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1392.112926][T19598] syz.3.3745: attempt to access beyond end of device [ 1392.112926][T19598] nbd3: rw=0, sector=0, nr_sectors = 8 limit=0 [ 1392.126142][T19598] hpfs: hpfs_map_sector(): read error [ 1392.850269][T13457] Bluetooth: hci6: command tx timeout [ 1393.592513][ T2949] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1393.615661][T19613] tmpfs: Bad value for 'mpol' [ 1393.801956][T19513] chnl_net:caif_netlink_parms(): no params data found [ 1393.839911][T19616] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3753'. [ 1393.906808][T19611] kvm: pic: non byte write [ 1394.050866][T19620] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3754'. [ 1394.627228][T19639] xt_connbytes: Forcing CT accounting to be enabled [ 1394.642733][T19352] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1394.651337][T19639] Cannot find add_set index 0 as target [ 1394.686328][T19513] bridge0: port 1(bridge_slave_0) entered blocking state [ 1394.728468][T19513] bridge0: port 1(bridge_slave_0) entered disabled state [ 1394.752096][T19513] bridge_slave_0: entered allmulticast mode [ 1394.776523][T19513] bridge_slave_0: entered promiscuous mode [ 1394.803946][T13457] Bluetooth: hci6: command tx timeout [ 1394.841644][ T2949] bridge_slave_1: left allmulticast mode [ 1394.848728][ T2949] bridge_slave_1: left promiscuous mode [ 1394.864135][ T2949] bridge0: port 2(bridge_slave_1) entered disabled state [ 1394.921217][ T2949] bridge_slave_0: left allmulticast mode [ 1394.953481][ T2949] bridge_slave_0: left promiscuous mode [ 1394.989114][ T2949] bridge0: port 1(bridge_slave_0) entered disabled state [ 1397.744523][ T2949] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1397.942668][ T2949] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1397.955012][ T2949] bond0 (unregistering): Released all slaves [ 1397.971233][T19352] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1398.516295][T19352] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1398.680694][T19352] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1398.748134][T19513] bridge0: port 2(bridge_slave_1) entered blocking state [ 1398.786975][T19513] bridge0: port 2(bridge_slave_1) entered disabled state [ 1398.812163][T19513] bridge_slave_1: entered allmulticast mode [ 1398.824612][T19513] bridge_slave_1: entered promiscuous mode [ 1399.193504][T19513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1399.214102][T19685] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4102857745 (32822861960 ns) > initial count (10843324416 ns). Using initial count to start timer. [ 1399.294917][T19513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1399.398479][T19692] netlink: 44306 bytes leftover after parsing attributes in process `syz.3.3768'. [ 1399.602462][T19513] team0: Port device team_slave_0 added [ 1399.637302][ T2949] hsr_slave_0: left promiscuous mode [ 1399.662144][ T2949] hsr_slave_1: left promiscuous mode [ 1399.688580][ T2949] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1399.710213][ T2949] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1399.746973][ T2949] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1399.767368][ T9794] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1399.779988][ T2949] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1399.827310][ T2949] veth1_macvtap: left promiscuous mode [ 1399.842166][ T2949] veth0_macvtap: left promiscuous mode [ 1399.852294][ T2949] veth1_vlan: left promiscuous mode [ 1399.928445][ T9794] usb 3-1: device descriptor read/64, error -71 [ 1400.196248][ T2949] pimreg (unregistering): left allmulticast mode [ 1400.204718][ T9794] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1400.366090][ T9794] usb 3-1: device descriptor read/64, error -71 [ 1400.493359][ T9794] usb usb3-port1: attempt power cycle [ 1400.901442][ T9794] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1400.947470][ T9794] usb 3-1: device descriptor read/8, error -71 [ 1401.043214][ T2949] team0 (unregistering): Port device team_slave_1 removed [ 1401.130925][ T2949] team0 (unregistering): Port device team_slave_0 removed [ 1401.235135][ T9794] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1401.279204][ T9794] usb 3-1: device descriptor read/8, error -71 [ 1401.402908][ T9794] usb usb3-port1: unable to enumerate USB device [ 1401.960914][T19513] team0: Port device team_slave_1 added [ 1407.236079][T19513] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1407.243085][T19513] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1407.270408][T19513] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1407.301471][T19749] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1407.471375][T19513] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1407.512359][T19513] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1407.547624][T19513] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1408.480726][T19756] dccp_close: ABORT with 120 bytes unread [ 1408.742735][T19352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1408.793514][T19513] hsr_slave_0: entered promiscuous mode [ 1408.829978][T19513] hsr_slave_1: entered promiscuous mode [ 1408.862142][T19513] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1408.897960][T19513] Cannot create hsr debugfs directory [ 1409.173260][T19352] 8021q: adding VLAN 0 to HW filter on device team0 [ 1409.210477][T19779] 9pnet_fd: Insufficient options for proto=fd [ 1409.276363][ T7300] bridge0: port 1(bridge_slave_0) entered blocking state [ 1409.283726][ T7300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1409.381661][T19785] overlayfs: failed to get inode (-116) [ 1409.390526][T19785] overlayfs: failed to get inode (-116) [ 1409.494249][ T1311] bridge0: port 2(bridge_slave_1) entered blocking state [ 1409.501498][ T1311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1410.011500][T19796] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3789'. [ 1410.034087][T19796] netlink: 31 bytes leftover after parsing attributes in process `syz.0.3789'. [ 1410.044561][T19796] netlink: 'syz.0.3789': attribute type 3 has an invalid length. [ 1488.230630][T18214] Bluetooth: hci5: command 0x0406 tx timeout [ 1510.091747][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1510.098769][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P19796/1:b..l P19797/1:b..l [ 1510.108939][ C1] rcu: (detected by 1, t=10502 jiffies, g=128309, q=217 ncpus=2) [ 1510.116878][ C1] task:rm state:R running task stack:23680 pid:19797 tgid:19797 ppid:19765 flags:0x00000000 [ 1510.131034][ C1] Call Trace: [ 1510.134347][ C1] [ 1510.137327][ C1] __schedule+0x17ae/0x4a10 [ 1510.141928][ C1] ? __pfx___schedule+0x10/0x10 [ 1510.146837][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1510.152902][ C1] ? preempt_schedule_irq+0xf0/0x1c0 [ 1510.158235][ C1] preempt_schedule_irq+0xfb/0x1c0 [ 1510.163390][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1510.169173][ C1] irqentry_exit+0x5e/0x90 [ 1510.173635][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1510.179684][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x31/0x70 [ 1510.185885][ C1] Code: 24 65 48 8b 0c 25 00 d7 03 00 65 8b 15 00 60 70 7e 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 1c 16 00 00 00 74 2c <8b> 91 f8 15 00 00 83 fa 02 75 21 48 8b 91 00 16 00 00 48 8b 32 48 [ 1510.205536][ C1] RSP: 0018:ffffc9000fb176f8 EFLAGS: 00000246 [ 1510.211654][ C1] RAX: ffffffff8ba326ff RBX: 000000000000000b RCX: ffff8880242cbc00 [ 1510.219663][ C1] RDX: 0000000000000000 RSI: 000000000000000b RDI: 0000000000000000 [ 1510.227677][ C1] RBP: ffffc9000fb178f0 R08: ffffffff8ba326ed R09: ffffffff8ba32552 [ 1510.235692][ C1] R10: 0000000000000004 R11: ffff8880242cbc00 R12: 0000000000000001 [ 1510.243695][ C1] R13: 00007f9911ff3fff R14: 000000000000000f R15: 00007f9911ff7fff [ 1510.251711][ C1] ? mt_validate+0xd52/0x4aa0 [ 1510.256517][ C1] ? mt_validate+0xeed/0x4aa0 [ 1510.261238][ C1] ? mt_validate+0xeff/0x4aa0 [ 1510.265991][ C1] mt_validate+0xeff/0x4aa0 [ 1510.270598][ C1] ? mt_validate+0x1a1/0x4aa0 [ 1510.275331][ C1] ? __pfx_mt_validate+0x10/0x10 [ 1510.280315][ C1] ? __mutex_unlock_slowpath+0x21d/0x750 [ 1510.286027][ C1] ? uprobe_mmap+0xa0d/0x11a0 [ 1510.290786][ C1] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1510.296927][ C1] ? __pfx_lock_release+0x10/0x10 [ 1510.302021][ C1] validate_mm+0xe7/0x530 [ 1510.306447][ C1] ? vma_set_page_prot+0x1d7/0x530 [ 1510.311630][ C1] ? __pfx_validate_mm+0x10/0x10 [ 1510.316627][ C1] mmap_region+0x1a61/0x2090 [ 1510.321262][ C1] ? mark_lock+0x9a/0x350 [ 1510.325842][ C1] ? __pfx_mmap_region+0x10/0x10 [ 1510.330858][ C1] ? thp_get_unmapped_area_vmflags+0x269/0x380 [ 1510.337074][ C1] ? cap_mmap_addr+0x163/0x2c0 [ 1510.342060][ C1] ? __get_unmapped_area+0x2f0/0x360 [ 1510.347422][ C1] do_mmap+0x8f9/0x1010 [ 1510.351643][ C1] ? __pfx_do_mmap+0x10/0x10 [ 1510.356317][ C1] ? __pfx_down_write_killable+0x10/0x10 [ 1510.361994][ C1] ? __pfx_ima_file_mmap+0x10/0x10 [ 1510.367253][ C1] ? security_mmap_file+0x178/0x1a0 [ 1510.372627][ C1] vm_mmap_pgoff+0x1dd/0x3d0 [ 1510.377360][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1510.382529][ C1] ? __fget_files+0x29/0x470 [ 1510.387180][ C1] ? __fget_files+0x3f6/0x470 [ 1510.392013][ C1] ksys_mmap_pgoff+0x4f1/0x720 [ 1510.396835][ C1] ? __x64_sys_mmap+0x7f/0x140 [ 1510.401747][ C1] do_syscall_64+0xf3/0x230 [ 1510.406300][ C1] ? clear_bhb_loop+0x35/0x90 [ 1510.411029][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1510.416966][ C1] RIP: 0033:0x7f9911fe2b74 [ 1510.421427][ C1] RSP: 002b:00007ffcc8d822c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1510.429972][ C1] RAX: ffffffffffffffda RBX: 00007ffcc8d82308 RCX: 00007f9911fe2b74 [ 1510.438067][ C1] RDX: 0000000000000005 RSI: 0000000000014000 RDI: 00007f9911d1a000 [ 1510.446075][ C1] RBP: 00007ffcc8d826a0 R08: 0000000000000003 R09: 0000000000007000 [ 1510.454086][ C1] R10: 0000000000000812 R11: 0000000000000246 R12: 00007f9911fbefc0 [ 1510.462172][ C1] R13: 00007ffcc8d82728 R14: 0000000000006f68 R15: 0000000000000000 [ 1510.470200][ C1] [ 1510.473244][ C1] task:syz.0.3789 state:R running task stack:22680 pid:19796 tgid:19795 ppid:18211 flags:0x00004000 [ 1510.485032][ C1] Call Trace: [ 1510.488343][ C1] [ 1510.491476][ C1] __schedule+0x17ae/0x4a10 [ 1510.496061][ C1] ? __pfx___schedule+0x10/0x10 [ 1510.500978][ C1] ? prb_read_valid+0xa9/0xf0 [ 1510.505719][ C1] ? preempt_schedule+0xe1/0xf0 [ 1510.510607][ C1] preempt_schedule_common+0x84/0xd0 [ 1510.515959][ C1] preempt_schedule+0xe1/0xf0 [ 1510.520674][ C1] ? __pfx_preempt_schedule+0x10/0x10 [ 1510.526084][ C1] ? _printk+0xd5/0x120 [ 1510.530278][ C1] ? _printk+0xd5/0x120 [ 1510.534474][ C1] ? __pfx___down_trylock_console_sem+0x10/0x10 [ 1510.540759][ C1] preempt_schedule_thunk+0x1a/0x30 [ 1510.545990][ C1] ? vprintk_emit+0x619/0x770 [ 1510.550693][ C1] ? vprintk_emit+0x68b/0x770 [ 1510.555402][ C1] vprintk_emit+0x690/0x770 [ 1510.559944][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 1510.565003][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1510.570934][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1510.577316][ C1] _printk+0xd5/0x120 [ 1510.581347][ C1] ? __nla_validate_parse+0x4f4/0x3090 [ 1510.586944][ C1] ? __pfx__printk+0x10/0x10 [ 1510.591696][ C1] ? rcu_is_watching+0x15/0xb0 [ 1510.596657][ C1] __nla_validate_parse+0x1af9/0x3090 [ 1510.602109][ C1] ? __pfx___nla_validate_parse+0x10/0x10 [ 1510.607894][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 1510.612983][ C1] __nla_validate+0x3e/0x60 [ 1510.617622][ C1] ctnetlink_parse_tuple_filter+0x9bb/0x10b0 [ 1510.623769][ C1] ? __pfx_validate_chain+0x10/0x10 [ 1510.629017][ C1] ? ctnetlink_parse_tuple_filter+0x7e3/0x10b0 [ 1510.635479][ C1] ? __pfx_ctnetlink_parse_tuple_filter+0x10/0x10 [ 1510.641951][ C1] ? __lock_acquire+0x137a/0x2040 [ 1510.647052][ C1] ctnetlink_new_conntrack+0x210/0x2240 [ 1510.652652][ C1] ? __mutex_trylock_common+0x183/0x2e0 [ 1510.658244][ C1] ? __pfx___might_resched+0x10/0x10 [ 1510.663580][ C1] ? __pfx_ctnetlink_new_conntrack+0x10/0x10 [ 1510.669620][ C1] ? rcu_is_watching+0x15/0xb0 [ 1510.674430][ C1] ? trace_contention_end+0x3c/0x120 [ 1510.679760][ C1] ? __mutex_lock+0x2ef/0xd70 [ 1510.684683][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 1510.689782][ C1] ? nfnetlink_rcv_msg+0x225/0x1180 [ 1510.695082][ C1] nfnetlink_rcv_msg+0xbec/0x1180 [ 1510.700138][ C1] ? kernel_text_address+0xa7/0xe0 [ 1510.705285][ C1] ? nfnetlink_rcv_msg+0x225/0x1180 [ 1510.710547][ C1] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1510.716080][ C1] ? netlink_deliver_tap+0x19d/0x1b0 [ 1510.721493][ C1] ? netlink_unicast+0x7be/0x990 [ 1510.726580][ C1] ? netlink_sendmsg+0x8e4/0xcb0 [ 1510.731564][ C1] ? __sock_sendmsg+0x221/0x270 [ 1510.736665][ C1] ? ____sys_sendmsg+0x525/0x7d0 [ 1510.741678][ C1] ? __sys_sendmsg+0x2b0/0x3a0 [ 1510.746486][ C1] ? do_syscall_64+0xf3/0x230 [ 1510.751206][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1510.757333][ C1] netlink_rcv_skb+0x1e3/0x430 [ 1510.762149][ C1] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1510.767650][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1510.773000][ C1] ? safesetid_security_capable+0xb2/0x1d0 [ 1510.778910][ C1] ? bpf_lsm_capable+0x9/0x10 [ 1510.783628][ C1] ? security_capable+0x90/0xb0 [ 1510.788536][ C1] nfnetlink_rcv+0x297/0x2a90 [ 1510.793260][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1510.799053][ C1] ? __dev_queue_xmit+0x2da/0x3e90 [ 1510.804260][ C1] ? __dev_queue_xmit+0x1763/0x3e90 [ 1510.809512][ C1] ? kasan_save_track+0x51/0x80 [ 1510.814404][ C1] ? do_syscall_64+0xf3/0x230 [ 1510.819119][ C1] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1510.824267][ C1] ? __dev_queue_xmit+0x2da/0x3e90 [ 1510.829434][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1510.834875][ C1] ? ref_tracker_free+0x643/0x7e0 [ 1510.840001][ C1] ? __asan_memcpy+0x40/0x70 [ 1510.844627][ C1] ? __pfx_ref_tracker_free+0x10/0x10 [ 1510.850055][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 1510.855295][ C1] ? skb_clone+0x240/0x390 [ 1510.859762][ C1] ? __pfx_lock_release+0x10/0x10 [ 1510.864921][ C1] ? __netlink_deliver_tap+0x77e/0x7c0 [ 1510.870427][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 1510.875686][ C1] netlink_unicast+0x7f0/0x990 [ 1510.880515][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 1510.885839][ C1] ? __virt_addr_valid+0x183/0x530 [ 1510.890988][ C1] ? __check_object_size+0x49c/0x900 [ 1510.896342][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 1510.901584][ C1] netlink_sendmsg+0x8e4/0xcb0 [ 1510.906408][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1510.911817][ C1] ? __import_iovec+0x536/0x820 [ 1510.916791][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1510.922115][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 1510.927667][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1510.932987][ C1] __sock_sendmsg+0x221/0x270 [ 1510.937720][ C1] ____sys_sendmsg+0x525/0x7d0 [ 1510.942536][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1510.947885][ C1] __sys_sendmsg+0x2b0/0x3a0 [ 1510.952516][ C1] ? __pfx___sys_sendmsg+0x10/0x10 [ 1510.957719][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1510.964094][ C1] ? do_syscall_64+0x100/0x230 [ 1510.968894][ C1] ? do_syscall_64+0xb6/0x230 [ 1510.973605][ C1] do_syscall_64+0xf3/0x230 [ 1510.978139][ C1] ? clear_bhb_loop+0x35/0x90 [ 1510.982859][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1510.988785][ C1] RIP: 0033:0x7f71c71799f9 [ 1510.993225][ C1] RSP: 002b:00007f71c7ee2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1511.001684][ C1] RAX: ffffffffffffffda RBX: 00007f71c7315f80 RCX: 00007f71c71799f9 [ 1511.009785][ C1] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 1511.017877][ C1] RBP: 00007f71c71e78ee R08: 0000000000000000 R09: 0000000000000000 [ 1511.025883][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1511.033890][ C1] R13: 0000000000000000 R14: 00007f71c7315f80 R15: 00007ffe412e2d08 [ 1511.042003][ C1] [ 1511.045060][ C1] rcu: rcu_preempt kthread starved for 10567 jiffies! g128309 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1511.056381][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1511.066378][ C1] rcu: RCU grace-period kthread stack dump: [ 1511.072285][ C1] task:rcu_preempt state:R running task stack:24912 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 1511.084079][ C1] Call Trace: [ 1511.087381][ C1] [ 1511.090337][ C1] __schedule+0x17ae/0x4a10 [ 1511.094913][ C1] ? __pfx___schedule+0x10/0x10 [ 1511.099802][ C1] ? __pfx_lock_release+0x10/0x10 [ 1511.104868][ C1] ? __asan_memset+0x23/0x50 [ 1511.109519][ C1] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 1511.115368][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1511.121741][ C1] ? schedule+0x90/0x320 [ 1511.126018][ C1] schedule+0x14b/0x320 [ 1511.130212][ C1] schedule_timeout+0x1be/0x310 [ 1511.135101][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1511.140511][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1511.145844][ C1] ? prepare_to_swait_event+0x32e/0x350 [ 1511.151436][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 1511.156324][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 1511.161572][ C1] ? rcu_gp_init+0x1256/0x1630 [ 1511.166393][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 1511.171366][ C1] ? __pfx_rcu_implicit_dynticks_qs+0x10/0x10 [ 1511.177469][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1511.182798][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1511.188748][ C1] ? finish_swait+0xd4/0x1e0 [ 1511.193381][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 1511.198283][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1511.203522][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1511.209461][ C1] ? __kthread_parkme+0x169/0x1d0 [ 1511.214621][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1511.219994][ C1] kthread+0x2f0/0x390 [ 1511.224137][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1511.229411][ C1] ? __pfx_kthread+0x10/0x10 [ 1511.234179][ C1] ret_from_fork+0x4b/0x80 [ 1511.238672][ C1] ? __pfx_kthread+0x10/0x10 [ 1511.243334][ C1] ret_from_fork_asm+0x1a/0x30 [ 1511.248176][ C1] [ 1511.251234][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1511.257597][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted 6.11.0-rc3-syzkaller-00010-g6b4aa469f049 #0 [ 1511.267977][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1511.278077][ C1] RIP: 0010:acpi_safe_halt+0x21/0x30 [ 1511.283484][ C1] Code: 90 90 90 90 90 90 90 90 90 65 48 8b 04 25 00 d7 03 00 48 f7 00 08 00 00 00 75 10 66 90 0f 00 2d e5 92 9b 00 f3 0f 1e fa fb f4 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 [ 1511.303232][ C1] RSP: 0018:ffffc900001a7d08 EFLAGS: 00000246 [ 1511.309349][ C1] RAX: ffff888017af0000 RBX: ffff88801bac5864 RCX: 0000000005903069 [ 1511.317367][ C1] RDX: 0000000000000001 RSI: ffff88801bac5800 RDI: ffff88801bac5864 [ 1511.325372][ C1] RBP: 000000000003a678 R08: ffff8880b9337c7b R09: 1ffff11017266f8f [ 1511.333384][ C1] R10: dffffc0000000000 R11: ffffffff8badac90 R12: ffff88801b310800 [ 1511.341391][ C1] R13: 0000000000000000 R14: 0000000000000001 R15: ffffffff8eecaa20 [ 1511.349396][ C1] FS: 0000000000000000(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 1511.358367][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1511.364978][ C1] CR2: 00007f55b6b10000 CR3: 000000007c942000 CR4: 00000000003506f0 [ 1511.372992][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1511.380996][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1511.389017][ C1] Call Trace: [ 1511.392321][ C1] [ 1511.395186][ C1] ? rcu_check_gp_kthread_starvation+0x278/0x310 [ 1511.401568][ C1] ? print_other_cpu_stall+0x1470/0x15a0 [ 1511.407256][ C1] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 1511.413113][ C1] ? __pfx_lock_release+0x10/0x10 [ 1511.418205][ C1] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 1511.424529][ C1] ? rcu_sched_clock_irq+0xa2c/0x10d0 [ 1511.429967][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 1511.435738][ C1] ? hrtimer_run_queues+0x16c/0x460 [ 1511.440984][ C1] ? update_process_times+0x1ce/0x230 [ 1511.446421][ C1] ? tick_nohz_handler+0x37c/0x500 [ 1511.451575][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 1511.457248][ C1] ? __hrtimer_run_queues+0x551/0xd50 [ 1511.462742][ C1] ? ktime_get_update_offsets_now+0x3c/0x250 [ 1511.468794][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 1511.474562][ C1] ? ktime_get_update_offsets_now+0x22d/0x250 [ 1511.480708][ C1] ? hrtimer_interrupt+0x396/0x990 [ 1511.485903][ C1] ? __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 1511.492114][ C1] ? sysvec_apic_timer_interrupt+0xa1/0xc0 [ 1511.497965][ C1] [ 1511.500921][ C1] [ 1511.503877][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1511.510070][ C1] ? __pfx_acpi_idle_enter+0x10/0x10 [ 1511.515397][ C1] ? acpi_safe_halt+0x21/0x30 [ 1511.520108][ C1] acpi_idle_enter+0xe4/0x140 [ 1511.524822][ C1] cpuidle_enter_state+0x112/0x480 [ 1511.529970][ C1] ? __pfx_menu_select+0x10/0x10 [ 1511.535038][ C1] cpuidle_enter+0x5d/0xa0 [ 1511.539489][ C1] do_idle+0x375/0x5d0 [ 1511.543604][ C1] ? __pfx_do_idle+0x10/0x10 [ 1511.548249][ C1] cpu_startup_entry+0x42/0x60 [ 1511.553046][ C1] start_secondary+0x100/0x100 [ 1511.557849][ C1] common_startup_64+0x13e/0x147 [ 1511.562934][ C1] [ 1513.183733][T19796] netlink: 'syz.0.3789': attribute type 2 has an invalid length. [ 1513.194849][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 1513.213869][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 1513.216649][ T5313] kworker/1:6 (5313) used greatest stack depth: 16336 bytes left [ 1513.426205][T19796] netlink: 31 bytes leftover after parsing attributes in process `syz.0.3789'. SYZFAIL: failed to send rpc fd=3 want=108432 sent=0 n=-1 (errno 32: Broken pipe) [ 1513.618289][T16983] Bluetooth: hci6: command 0x0406 tx timeout [ 1515.831652][ T2949] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1516.053242][ T2949] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1516.249679][ T2949] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1516.381585][ T2949] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1516.574258][ T2949] bridge_slave_1: left allmulticast mode [ 1516.581591][ T2949] bridge_slave_1: left promiscuous mode [ 1516.587434][ T2949] bridge0: port 2(bridge_slave_1) entered disabled state [ 1516.609868][ T2949] bridge_slave_0: left allmulticast mode [ 1516.615672][ T2949] bridge_slave_0: left promiscuous mode [ 1516.630119][ T2949] bridge0: port 1(bridge_slave_0) entered disabled state [ 1517.477651][ T2949] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1517.489126][ T2949] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1517.501427][ T2949] bond0 (unregistering): Released all slaves [ 1517.607822][ T2949] tipc: Left network mode [ 1517.887718][ T2949] hsr_slave_0: left promiscuous mode [ 1517.901103][ T2949] hsr_slave_1: left promiscuous mode [ 1517.948422][ T2949] veth0_macvtap: left promiscuous mode [ 1517.954588][ T2949] veth1_vlan: left promiscuous mode [ 1517.966437][ T2949] veth0_vlan: left promiscuous mode [ 1518.727322][ T2949] team0 (unregistering): Port device team_slave_1 removed [ 1518.789452][ T2949] team0 (unregistering): Port device team_slave_0 removed [ 1519.902602][ T2949] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1520.035583][ T2949] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0