last executing test programs: 18.502553704s ago: executing program 3 (id=1055): setresuid(0x0, 0xee01, 0x0) r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) setresuid(0x0, 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0xffffffffffffffff, r2, 0x0) shmctl$IPC_STAT(r0, 0x2, &(0x7f0000002600)=""/27) 17.40720561s ago: executing program 3 (id=1059): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000080)={{@hyper}, @hyper, 0x0, 0x0, 0x2}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000300)={{@host}, @host, 0x0, 0x0, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000000)={{@my=0x1}, @my=0x1, 0x0, 0x0, 0x421}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f00000003c0)={{@host}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff8, 0x4}) 16.028256321s ago: executing program 3 (id=1062): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1142, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)={0x0, 0x0, 0x5, {0x5, 0x0, "b1a748"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 15.387974565s ago: executing program 2 (id=1068): r0 = syz_open_dev$radio(&(0x7f0000000300), 0x2, 0x2) ioctl$VIDIOC_S_TUNER(r0, 0x4054561e, &(0x7f0000000340)={0xfffffff8, "9e9e718b3b2b6fc55d46f3e0ddf0ad2acbb97cec75b1ef433310d1295816ac72"}) 14.372857708s ago: executing program 4 (id=1069): syz_genetlink_get_family_id$ipvs(&(0x7f0000001440), 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) getresuid(&(0x7f0000000140), &(0x7f0000001340), &(0x7f0000001380)) 13.752315677s ago: executing program 2 (id=1071): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='fd\x00') readlinkat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000019240)=""/102393, 0x18ff9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x4001}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, @IFLA_BR_GROUP_FWD_MASK={0x6}]}}}]}, 0x48}}, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) r5 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r4, 0x4004af07, &(0x7f0000000240)=r5) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f00000002c0)={0x1, r5}) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000000)=0x1) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) pipe(0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1f}, 0x90) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) timer_create(0xfffffffffffffffc, 0x0, 0x0) 13.100729259s ago: executing program 1 (id=1074): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=@bridge_setlink={0x24, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x4}]}, 0x24}}, 0x0) 13.025453634s ago: executing program 4 (id=1075): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, &(0x7f0000000040)) socket$rds(0x15, 0x5, 0x0) recvmmsg(r4, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) 10.603005442s ago: executing program 3 (id=1077): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000009c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000a00000008000300", @ANYRES32=r2, @ANYBLOB="10006e8004000a00050002"], 0x2c}}, 0x0) 10.57554373s ago: executing program 4 (id=1079): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='comm\x00') write$binfmt_script(r0, &(0x7f0000000180)={'#! ', '', [{0x20, '!--\\'}]}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000240)=""/135, 0x87}], 0x1, 0x0, 0x0) 10.241447753s ago: executing program 1 (id=1081): sched_setaffinity(0x0, 0xffffffffffffff70, &(0x7f00000002c0)=0xffffffffffffff16) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$vbi(&(0x7f0000000380), 0x1, 0x2) ioctl$VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000003c0)={0x5, @sdr}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/wireless\x00') pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) socket$xdp(0x2c, 0x3, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r3, 0x4040942c, &(0x7f0000000080)={0x0, 0x5, [0x2, 0x8, 0xfffffffeffffffff, 0x2, 0x0, 0x4]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x4, 0x0, 0x8, 0x1, 0x1, 0xffff}, 0x48) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(r6, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r5}, &(0x7f00000003c0), &(0x7f0000000540)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(r2, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r8 = syz_open_dev$media(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r8, 0x80047c05, 0x0) syz_io_uring_setup(0x60e6, &(0x7f0000000280), &(0x7f0000000300)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r9, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0}) 10.193819421s ago: executing program 3 (id=1082): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300002095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='percpu_alloc_percpu\x00', r3}, 0x10) syz_io_uring_setup(0x3667, &(0x7f0000000100)={0x0, 0x0, 0x2}, 0x0, 0x0) 9.91918648s ago: executing program 4 (id=1083): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000340)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x10080, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600000000000000000000eaff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x60000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, "8ca0abedae45e69d3120ab4a1a5a8cf4b93736"}) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000040)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x10) r5 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000680)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000600000004010c00080008000c4004480000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) r6 = syz_io_uring_setup(0x39, &(0x7f0000001800)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000001880)=0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x100000001, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000780)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0, 0x10042, 0x1}) io_uring_enter(r6, 0x92, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) 6.958613617s ago: executing program 0 (id=1085): syz_genetlink_get_family_id$ipvs(&(0x7f0000001440), 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) getresuid(&(0x7f0000000140), &(0x7f0000001340), &(0x7f0000001380)) 6.953821168s ago: executing program 2 (id=1086): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$sndctrl(&(0x7f0000001a80), 0x0, 0x684580) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00007fe000/0x800000)=nil, &(0x7f0000eff000/0x4000)=nil, &(0x7f0000ce5000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, 0x0, 0x0, r0}, 0x68) 2.632564475s ago: executing program 0 (id=1087): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x0, 0x2007f}) 2.308041897s ago: executing program 1 (id=1088): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x0) fcntl$setstatus(r0, 0x4, 0x42c00) 2.233328286s ago: executing program 0 (id=1089): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r0, &(0x7f0000000780)=[{&(0x7f00000003c0)='\v\x00\x00\x00', 0x4}], 0x1) 2.111908803s ago: executing program 4 (id=1090): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000076000d0b00000008000000000360000000000000080001000100000008000a0000000000080005"], 0x30}}, 0x0) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0xe) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002100)=@newtaction={0x64, 0x30, 0xeaa3ef926154e70d, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x38}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@ipv6_newroute={0x34, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2200}, [@RTA_PRIORITY={0x8, 0x6, 0x80000000}, @RTA_EXPIRES={0x8, 0x17, 0xffffffff}, @RTA_OIF={0x8}]}, 0x34}}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@map=r3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000000), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000340), 0x14) shutdown(0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x303}, "2a4001011f891d5b", "11682d84dd05bb63db142ade2bd907f400", "fd6ed24e", "01000010ffffffff"}, 0x38) 2.06359625s ago: executing program 0 (id=1091): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=@bridge_setlink={0x24, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x4}]}, 0x24}}, 0x0) 1.96004811s ago: executing program 2 (id=1092): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fanotify_mark(0xffffffffffffffff, 0x1, 0x10, r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) execveat(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000002c0)=[&(0x7f0000000240)='/sys/kernel/debug/binder/state\x00'], 0x100) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = fanotify_init(0x1, 0x800) fanotify_mark(r6, 0x2, 0x8000038, r1, &(0x7f0000000300)='./file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r5}, 0x10) openat$uinput(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, 0x0) ioctl$BINDER_THREAD_EXIT(r7, 0x40046208, 0x0) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r8, &(0x7f0000015dc0)={0x2020}, 0x2020) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r10, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) close_range(r0, 0xffffffffffffffff, 0x0) 1.830164163s ago: executing program 1 (id=1093): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='comm\x00') write$binfmt_script(r0, &(0x7f0000000180)={'#! ', '', [{0x20, '!--\\'}]}, 0x9) r1 = syz_open_procfs(0x0, &(0x7f0000000140)='status\x00') preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000240)=""/135, 0x87}], 0x1, 0x0, 0x0) 1.817096931s ago: executing program 0 (id=1094): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x48) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000040)="0f017715b9800000c00f3235000100000f300f01cb0f01c9b8010000000f01c10f090fc7ab008000000f20e035400000000f22e00f01cf0f01c3", 0x3a}], 0x1, 0x0, 0x0, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000100)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.657705916s ago: executing program 3 (id=1095): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f00000002c0)=0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x40, 0x14, 0x0, 0x0, 0x0, {}, [@IFA_TARGET_NETNSID={0x8}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_BROADCAST={0x8, 0x4, @local}, @IFA_BROADCAST={0x8, 0x4, @local}, @IFA_BROADCAST={0x8, 0x4, @local}]}, 0x40}}, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f00000005c0)=ANY=[@ANYRES32=r3], 0x3c) 784.214649ms ago: executing program 2 (id=1096): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001700)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0x3c}}, 0x0) 686.020585ms ago: executing program 1 (id=1097): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) munmap(&(0x7f0000ba0000/0x2000)=nil, 0x2000) mremap(&(0x7f00009a1000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000fef000/0x4000)=nil) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f0000695000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000bd2000/0x1000)=nil) mremap(&(0x7f00006bd000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f0000721000/0x4000)=nil) munmap(&(0x7f0000e29000/0x1000)=nil, 0x1000) mremap(&(0x7f0000622000/0x2000)=nil, 0x2000, 0xf000, 0x3, &(0x7f0000ae7000/0xf000)=nil) munmap(&(0x7f0000b04000/0x4000)=nil, 0x4000) madvise(&(0x7f0000af8000/0x1000)=nil, 0x1000, 0x12) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) mremap(&(0x7f0000ccc000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000b0e000/0x2000)=nil) mremap(&(0x7f0000ce8000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000df3000/0x2000)=nil) mremap(&(0x7f000080f000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f000070f000/0x3000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 350.559533ms ago: executing program 2 (id=1098): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) pipe(0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x4ea, 0xffff0000, 0x0, 0x10, 0xffffffffffffffff, 0x98d, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x2, 0x6}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x3, 0x0, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x6}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, 0x0, &(0x7f00000002c0)) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x8090ae81, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x0, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040f0402001904"], 0x7) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="711230000000000061134c0000000000bf2000000000000016000200071b48013d030100000000009500020100000000bc26000000000000bf67080000000000070200000fff07006702000003000000360600000ee600f0bf052000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586a51309834c1b8894af585e9134cf05d811"], &(0x7f0000000100)='GPL\x00'}, 0x48) r5 = syz_open_pts(0xffffffffffffffff, 0x80) fadvise64(r5, 0xfffffffffffffffc, 0x0, 0x0) unshare(0x8000000) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f00000003c0)={0x3, &(0x7f0000000180)=[{0x50}, {0x28, 0x0, 0x0, 0xffffe038}, {0x6}]}, 0x10) syz_emit_ethernet(0x86, &(0x7f00000001c0)=ANY=[], 0x0) 279.194285ms ago: executing program 4 (id=1099): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000001c0)) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000005c0)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000080)=""/62, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/73, &(0x7f0000000880)=""/72}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000340)=&(0x7f00000002c0)) syz_usb_connect$hid(0x0, 0x151, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000340)=0x80000000001, 0x4) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000015c0)="a6e2976b5c4312b8d0cf325206af4d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a2", 0x3d, 0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)='2-', 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001940)="d2c6f06e3bed336d72d013eca9b92534759a5eb03f4b92a4552137093beec00c4e835d12bd60741c922986302762adf69b8b4dfa9fa7e085892104a216e6cd2aa09ed27a1621f7c5513f1cd7e769bc", 0x4f}, {&(0x7f0000001440)="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", 0x14a}, {&(0x7f00000035c0)="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", 0xe28}], 0x3}}], 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r2, r3, 0x0) getsockopt$inet6_int(r2, 0x29, 0x33, &(0x7f0000000140), &(0x7f0000000180)=0x4) tkill(0x0, 0x0) 192.859255ms ago: executing program 1 (id=1100): r0 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000f00)=ANY=[@ANYBLOB="0002020100000008ff"], 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000100)="e0b9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="88", 0xfdef}], 0x1) 0s ago: executing program 0 (id=1101): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000340)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x10080, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600000000000000000000eaff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x60000, 0x0, 0x13, 0xffffffffffffffff, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, "8ca0abedae45e69d3120ab4a1a5a8cf4b93736"}) ioctl$TIOCL_SETVESABLANK(r0, 0x541c, &(0x7f0000000040)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x10) r5 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000680)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000600000004010c00080008000c4004480000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) r6 = syz_io_uring_setup(0x39, &(0x7f0000001800)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=0x0, &(0x7f0000001880)=0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000000c0)=0x100000001, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000780)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0, 0x10042, 0x1}) io_uring_enter(r6, 0x92, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) kernel console output (not intermixed with test programs): batadv_slave_0 [ 112.790917][ T2983] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.810914][ T2983] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.818638][ T2983] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.837754][ T5268] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 112.902225][ T2983] veth1_macvtap: left promiscuous mode [ 112.910522][ T2983] veth0_macvtap: left promiscuous mode [ 112.916239][ T2983] veth1_vlan: left promiscuous mode [ 112.931577][ T2983] veth0_vlan: left promiscuous mode [ 113.037997][ T5268] usb 3-1: Using ep0 maxpacket: 8 [ 113.064447][ T5268] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 113.090395][ T5268] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 113.134709][ T5268] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 113.153511][ T5268] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.170534][ T5268] usb 3-1: Product: syz [ 113.187756][ T5268] usb 3-1: Manufacturer: syz [ 113.193603][ T5268] usb 3-1: SerialNumber: syz [ 113.201270][ T5268] usb 3-1: config 0 descriptor?? [ 113.242145][ T5268] radio-si470x 3-1:0.0: could not find interrupt in endpoint [ 113.275241][ T5268] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -5 [ 113.308294][ T5268] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 113.445880][ T5268] usb 3-1: USB disconnect, device number 7 [ 113.597716][ T55] Bluetooth: hci1: command tx timeout [ 114.485546][ T6115] nullb0: AHDI p1 [ 114.745999][ T6123] syz.4.292: attempt to access beyond end of device [ 114.745999][ T6123] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 114.821318][ T6123] exFAT-fs (nbd4): unable to read boot sector [ 114.845487][ T6123] exFAT-fs (nbd4): failed to read boot sector [ 114.877377][ T6123] exFAT-fs (nbd4): failed to recognize exfat type [ 115.340047][ T2983] team0 (unregistering): Port device team_slave_1 removed [ 115.476682][ T2983] team0 (unregistering): Port device team_slave_0 removed [ 115.729907][ T25] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 115.857514][ T5222] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 115.930184][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 115.945918][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 115.961879][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 115.992459][ T25] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 116.017335][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.037533][ T25] usb 1-1: Product: syz [ 116.041913][ T25] usb 1-1: Manufacturer: syz [ 116.046516][ T25] usb 1-1: SerialNumber: syz [ 116.057526][ T5222] usb 5-1: Using ep0 maxpacket: 16 [ 116.078550][ T25] usb 1-1: config 0 descriptor?? [ 116.085849][ T5222] usb 5-1: New USB device found, idVendor=2770, idProduct=9050, bcdDevice=11.97 [ 116.089453][ T25] radio-si470x 1-1:0.0: could not find interrupt in endpoint [ 116.102589][ T5222] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.114708][ T5222] usb 5-1: config 0 descriptor?? [ 116.135023][ T5222] gspca_main: sq905c-2.14.0 probing 2770:9050 [ 116.136426][ T25] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -5 [ 116.157942][ T25] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 116.256731][ T5912] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 116.270786][ T5912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.303174][ T5912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 116.329840][ T5912] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.345398][ T5222] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 116.357004][ T5912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.400473][ T5262] usb 1-1: USB disconnect, device number 4 [ 116.409924][ T5222] sq905c 5-1:0.0: Get version command failed [ 116.416019][ T5222] sq905c 5-1:0.0: probe with driver sq905c failed with error -71 [ 116.461426][ T5222] usb 5-1: USB disconnect, device number 4 [ 116.486740][ T5912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.646781][ T5912] hsr_slave_0: entered promiscuous mode [ 116.718948][ T5912] hsr_slave_1: entered promiscuous mode [ 118.094906][ T29] audit: type=1326 audit(1722192831.468:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6164 comm="syz.3.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f677d977299 code=0x7ffc0000 [ 118.181160][ T29] audit: type=1326 audit(1722192831.498:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6164 comm="syz.3.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f677d977299 code=0x7ffc0000 [ 118.228572][ T29] audit: type=1326 audit(1722192831.498:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6164 comm="syz.3.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f677d977299 code=0x7ffc0000 [ 118.314451][ T29] audit: type=1326 audit(1722192831.498:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6164 comm="syz.3.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f677d977299 code=0x7ffc0000 [ 118.466603][ T5214] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 118.744318][ T29] audit: type=1326 audit(1722192831.508:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6164 comm="syz.3.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f677d977299 code=0x7ffc0000 [ 118.847687][ T5214] usb 1-1: Using ep0 maxpacket: 32 [ 118.963451][ T5214] usb 1-1: config 0 has no interfaces? [ 119.091550][ T29] audit: type=1326 audit(1722192831.508:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6164 comm="syz.3.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f677d977299 code=0x7ffc0000 [ 119.103182][ T5214] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 119.150501][ T5214] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.164452][ T5214] usb 1-1: Product: syz [ 119.165000][ T29] audit: type=1326 audit(1722192831.508:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6164 comm="syz.3.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f677d977299 code=0x7ffc0000 [ 119.211977][ T5214] usb 1-1: Manufacturer: syz [ 119.246347][ T5214] usb 1-1: SerialNumber: syz [ 119.269926][ T5214] usb 1-1: config 0 descriptor?? [ 119.300298][ T29] audit: type=1326 audit(1722192831.508:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6164 comm="syz.3.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f677d977299 code=0x7ffc0000 [ 119.377625][ T29] audit: type=1326 audit(1722192831.508:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6164 comm="syz.3.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f677d977299 code=0x7ffc0000 [ 119.479078][ T29] audit: type=1326 audit(1722192831.508:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6164 comm="syz.3.306" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f677d977299 code=0x7ffc0000 [ 119.667623][ T5214] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 119.755475][ T6181] loop0: detected capacity change from 0 to 524287999 [ 119.763828][ C0] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 119.773215][ C0] Buffer I/O error on dev loop0, logical block 0, async page read [ 119.785515][ C0] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 119.794754][ C0] Buffer I/O error on dev loop0, logical block 0, async page read [ 119.808248][ C0] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 119.816368][ T5912] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 119.817452][ C0] Buffer I/O error on dev loop0, logical block 0, async page read [ 119.832968][ C0] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 119.842171][ C0] Buffer I/O error on dev loop0, logical block 0, async page read [ 119.853634][ C0] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 119.862864][ C0] Buffer I/O error on dev loop0, logical block 0, async page read [ 119.871196][ T5912] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 119.884540][ T5222] usb 1-1: USB disconnect, device number 5 [ 119.889801][ C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 119.899619][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 119.907493][ T5214] usb 5-1: Using ep0 maxpacket: 16 [ 119.917089][ T5912] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 119.925067][ C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 119.930732][ T5214] usb 5-1: New USB device found, idVendor=2770, idProduct=9050, bcdDevice=11.97 [ 119.934279][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 119.953608][ T5214] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.954741][ C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 119.970960][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 119.979394][ T6181] ldm_validate_partition_table(): Disk read failed. [ 119.979772][ T5214] usb 5-1: config 0 descriptor?? [ 119.988332][ C1] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 120.000151][ C1] Buffer I/O error on dev loop0, logical block 0, async page read [ 120.015617][ T5912] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 120.026222][ T5214] gspca_main: sq905c-2.14.0 probing 2770:9050 [ 120.046040][ C0] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 120.055359][ C0] Buffer I/O error on dev loop0, logical block 0, async page read [ 120.066466][ T6181] Dev loop0: unable to read RDB block 0 [ 120.083012][ T6181] loop0: unable to read partition table [ 120.101151][ T6181] loop_reread_partitions: partition scan of loop0 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 120.248102][ T5214] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 120.272067][ T5214] sq905c 5-1:0.0: Get version command failed [ 120.290435][ T5214] sq905c 5-1:0.0: probe with driver sq905c failed with error -71 [ 120.363505][ T5214] usb 5-1: USB disconnect, device number 5 [ 120.398999][ T5912] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.454643][ T5912] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.476815][ T5222] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.484043][ T5222] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.545209][ T5268] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.552440][ T5268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 121.171831][ T5912] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.847240][ T5912] veth0_vlan: entered promiscuous mode [ 121.920758][ T5912] veth1_vlan: entered promiscuous mode [ 122.088248][ T5912] veth0_macvtap: entered promiscuous mode [ 122.124304][ T5912] veth1_macvtap: entered promiscuous mode [ 122.275723][ T5912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.324128][ T5912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.342496][ T5912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.354268][ T5912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.369117][ T5912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.384189][ T5912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.396944][ T5912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 122.430898][ T5912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.454583][ T5912] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 122.509114][ T5912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.552227][ T5912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.590429][ T5912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.645780][ T5912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.706976][ T5912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.748841][ T5912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.774852][ T5912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 122.805250][ T5912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 122.848040][ T5912] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 122.908392][ T5912] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.937538][ T5912] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.955310][ T5912] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.002352][ T5912] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.318123][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.325995][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.479165][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.521176][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.272077][ T6287] netlink: 68 bytes leftover after parsing attributes in process `syz.2.332'. [ 124.281206][ T6287] netlink: 36 bytes leftover after parsing attributes in process `syz.2.332'. [ 127.237963][ T5222] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 127.337810][ T6325] warning: `syz.2.341' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 127.467682][ T5222] usb 4-1: Using ep0 maxpacket: 32 [ 127.599043][ T6331] futex_wake_op: syz.1.342 tries to shift op by -1; fix this program [ 127.806206][ T5222] usb 4-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 127.928317][ T5222] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.949703][ T5222] usb 4-1: Product: syz [ 127.960311][ T5222] usb 4-1: Manufacturer: syz [ 127.971431][ T5222] usb 4-1: SerialNumber: syz [ 127.994083][ T5222] usb 4-1: config 0 descriptor?? [ 129.149664][ T5222] rtl8150 4-1:0.0: eth1: rtl8150 is detected [ 130.182391][ T5268] usb 4-1: USB disconnect, device number 7 [ 130.266629][ T6359] netlink: 96 bytes leftover after parsing attributes in process `syz.1.349'. [ 132.255325][ T6378] netlink: 168 bytes leftover after parsing attributes in process `syz.0.354'. [ 132.927671][ T5262] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 133.122465][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.129701][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.698116][ T5262] usb 1-1: Using ep0 maxpacket: 8 [ 133.968902][ T5262] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=95.0d [ 133.990090][ T5262] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.043868][ T5262] usb 1-1: Product: syz [ 134.071084][ T5262] usb 1-1: Manufacturer: syz [ 134.075721][ T5262] usb 1-1: SerialNumber: syz [ 134.118672][ T5262] usb 1-1: config 0 descriptor?? [ 134.252311][ T5216] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 134.263394][ T5216] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 134.273173][ T5216] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 134.283196][ T5216] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 134.292645][ T5216] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 134.300338][ T5216] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 134.460364][ T5262] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 134.479099][ T5262] dvb_usb_af9015 1-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 134.517722][ T5262] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 134.524210][ T5262] dvb_usb_af9035 1-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 134.584632][ T5262] usb 1-1: USB disconnect, device number 6 [ 135.118736][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 135.118853][ T29] audit: type=1326 audit(1722192848.438:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6407 comm="syz.3.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f677d977299 code=0x7ffc0000 [ 135.654782][ T29] audit: type=1326 audit(1722192848.438:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6407 comm="syz.3.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f677d977299 code=0x7ffc0000 [ 135.796496][ T29] audit: type=1326 audit(1722192848.448:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6407 comm="syz.3.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7f677d977299 code=0x7ffc0000 [ 135.890036][ T29] audit: type=1326 audit(1722192848.448:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6407 comm="syz.3.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f677d977299 code=0x7ffc0000 [ 135.992468][ T6400] chnl_net:caif_netlink_parms(): no params data found [ 136.004684][ T29] audit: type=1326 audit(1722192848.448:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6407 comm="syz.3.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f677d977299 code=0x7ffc0000 [ 136.066393][ T29] audit: type=1326 audit(1722192848.448:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6407 comm="syz.3.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f677d977299 code=0x7ffc0000 [ 136.120754][ T29] audit: type=1326 audit(1722192848.448:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6407 comm="syz.3.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f677d977299 code=0x7ffc0000 [ 136.171336][ T29] audit: type=1326 audit(1722192848.448:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6407 comm="syz.3.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f677d977299 code=0x7ffc0000 [ 136.312655][ T29] audit: type=1326 audit(1722192848.448:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6407 comm="syz.3.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f677d977299 code=0x7ffc0000 [ 136.336370][ T29] audit: type=1326 audit(1722192848.448:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6407 comm="syz.3.361" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f677d977299 code=0x7ffc0000 [ 136.400695][ T5216] Bluetooth: hci5: command tx timeout [ 137.352245][ T63] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.378226][ T6453] dccp_invalid_packet: P.Data Offset(0) too small [ 137.465773][ T6400] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.487687][ T6400] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.512506][ T6456] syz.3.372: attempt to access beyond end of device [ 137.512506][ T6456] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 137.526722][ T6456] efs: cannot read volume header [ 137.552241][ T6400] bridge_slave_0: entered allmulticast mode [ 137.602005][ T6400] bridge_slave_0: entered promiscuous mode [ 137.639255][ T6400] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.702070][ T6400] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.736140][ T6400] bridge_slave_1: entered allmulticast mode [ 137.775233][ T6400] bridge_slave_1: entered promiscuous mode [ 137.797052][ T6458] netlink: 168 bytes leftover after parsing attributes in process `syz.0.376'. [ 137.816876][ T6454] netlink: 'syz.3.372': attribute type 1 has an invalid length. [ 137.881010][ T63] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.048890][ T63] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.127554][ T25] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 138.166096][ T6400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.220412][ T6400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.331593][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 138.355779][ T25] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0099, bcdDevice=95.0d [ 138.381480][ T63] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.397638][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.426213][ T25] usb 1-1: Product: syz [ 138.437116][ T25] usb 1-1: Manufacturer: syz [ 138.446631][ T25] usb 1-1: SerialNumber: syz [ 138.461851][ T25] usb 1-1: config 0 descriptor?? [ 138.481488][ T5216] Bluetooth: hci5: command tx timeout [ 139.328640][ T6400] team0: Port device team_slave_0 added [ 139.386875][ T6400] team0: Port device team_slave_1 added [ 139.431523][ T25] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 139.479989][ T25] dvb_usb_af9015 1-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 139.517177][ T25] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 139.556954][ T25] dvb_usb_af9035 1-1:0.0: probe with driver dvb_usb_af9035 failed with error -22 [ 139.607997][ T25] usb 1-1: USB disconnect, device number 7 [ 140.567529][ T5216] Bluetooth: hci5: command tx timeout [ 140.666720][ T6400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 140.718914][ T6400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 140.744826][ C1] vkms_vblank_simulate: vblank timer overrun [ 140.812964][ T6400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 140.886112][ T6400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 140.914042][ T6400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.004134][ T6400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.277678][ C0] eth0: bad gso: type: 1, size: 1408 [ 141.290424][ T63] bridge_slave_1: left allmulticast mode [ 141.308426][ T63] bridge_slave_1: left promiscuous mode [ 141.315620][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.517243][ T63] bridge_slave_0: left allmulticast mode [ 141.564017][ T63] bridge_slave_0: left promiscuous mode [ 141.580481][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.639620][ T5216] Bluetooth: hci5: command tx timeout [ 142.980929][ T6512] cgroup: Unknown subsys name 'fowner>00000000000000000000' [ 143.227758][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 143.249677][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 143.262156][ T63] bond0 (unregistering): Released all slaves [ 143.281917][ T6400] hsr_slave_0: entered promiscuous mode [ 143.290137][ T6400] hsr_slave_1: entered promiscuous mode [ 143.296639][ T6400] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 143.307155][ T6400] Cannot create hsr debugfs directory [ 143.850526][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 143.850543][ T29] audit: type=1326 audit(1722192857.228:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6521 comm="syz.0.392" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f74e0777299 code=0x0 [ 144.107535][ T6528] netlink: 5 bytes leftover after parsing attributes in process `syz.0.392'. [ 144.124345][ T6528] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 144.181529][ T6528] 0ªX¹¦Dö»: entered allmulticast mode [ 144.438930][ T63] hsr_slave_0: left promiscuous mode [ 144.522580][ T63] hsr_slave_1: left promiscuous mode [ 144.554441][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.649102][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.048536][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.229407][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.310550][ T63] veth1_macvtap: left promiscuous mode [ 145.316229][ T63] veth0_macvtap: left promiscuous mode [ 145.343266][ T63] veth1_vlan: left promiscuous mode [ 145.356111][ T63] veth0_vlan: left promiscuous mode [ 145.917619][ T5216] Bluetooth: hci5: command tx timeout [ 146.416286][ T63] team0 (unregistering): Port device team_slave_1 removed [ 146.527040][ T63] team0 (unregistering): Port device team_slave_0 removed [ 147.597085][ T6580] xt_CHECKSUM: unsupported CHECKSUM operation 2 [ 147.636213][ T6580] netlink: 166 bytes leftover after parsing attributes in process `syz.3.407'. [ 148.926557][ T6400] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 149.027648][ T6400] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 149.048811][ T6604] program syz.3.414 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 149.070874][ T6605] binder: BINDER_SET_CONTEXT_MGR already set [ 149.086058][ T6400] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 149.093489][ T6605] binder: 6603:6605 ioctl 4018620d 20000100 returned -16 [ 149.135506][ T6605] binder: 6603:6605 ioctl c018620c 20000000 returned -1 [ 149.186574][ T6400] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 149.433872][ T6617] Process accounting resumed [ 149.492106][ T6400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.563177][ T6400] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.651486][ T5318] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.658716][ T5318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.699309][ T5318] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.706475][ T5318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.948125][ T29] audit: type=1326 audit(1722192863.328:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6631 comm="syz.2.421" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9e85177299 code=0x0 [ 150.617943][ T6400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.693544][ T6660] program syz.1.426 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 153.020955][ T6400] veth0_vlan: entered promiscuous mode [ 153.064791][ T6400] veth1_vlan: entered promiscuous mode [ 153.181008][ T6400] veth0_macvtap: entered promiscuous mode [ 153.221643][ T6400] veth1_macvtap: entered promiscuous mode [ 153.270142][ T6400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.289995][ T6400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.303959][ T6400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.322253][ T6400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.335608][ T6400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.353130][ T6400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.363962][ T6400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.381224][ T6400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.403970][ T6400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.433005][ T6400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.453735][ T6400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.465089][ T6400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.481842][ T6400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.493598][ T6400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.516048][ T6400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.526908][ T6400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.544592][ T6400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.567043][ T6400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.661502][ T6400] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.714840][ T6400] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.733979][ T6400] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.777572][ T6400] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.073926][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.102317][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.073095][ T1120] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.098050][ T1120] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.183096][ T6729] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 157.587796][ T6757] program syz.2.456 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 157.588851][ T6754] netlink: 16 bytes leftover after parsing attributes in process `syz.0.455'. [ 157.638099][ T6754] netlink: 16 bytes leftover after parsing attributes in process `syz.0.455'. [ 157.860833][ T6763] netlink: 'syz.2.460': attribute type 10 has an invalid length. [ 157.931245][ T6763] netlink: 210880 bytes leftover after parsing attributes in process `syz.2.460'. [ 158.505968][ T6784] geneve2: entered promiscuous mode [ 158.533571][ T6784] geneve2: entered allmulticast mode [ 160.001435][ T6808] netlink: 132 bytes leftover after parsing attributes in process `syz.0.477'. [ 160.150625][ T6809] IPv6: NLM_F_CREATE should be specified when creating new route [ 160.185433][ T6809] netlink: 1 bytes leftover after parsing attributes in process `syz.0.477'. [ 160.278749][ T6809] netlink: 8 bytes leftover after parsing attributes in process `syz.0.477'. [ 160.651808][ T29] audit: type=1326 audit(1722192874.028:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6813 comm="syz.2.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e85177299 code=0x7ffc0000 [ 160.673156][ C1] vkms_vblank_simulate: vblank timer overrun [ 160.682057][ T29] audit: type=1326 audit(1722192874.058:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6813 comm="syz.2.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e85177299 code=0x7ffc0000 [ 160.713234][ T29] audit: type=1326 audit(1722192874.058:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6813 comm="syz.2.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9e85175cd0 code=0x7ffc0000 [ 160.830455][ T29] audit: type=1326 audit(1722192874.058:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6813 comm="syz.2.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f9e85178a27 code=0x7ffc0000 [ 160.912962][ T29] audit: type=1326 audit(1722192874.058:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6813 comm="syz.2.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f9e85177299 code=0x7ffc0000 [ 160.993966][ T29] audit: type=1326 audit(1722192874.058:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6813 comm="syz.2.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f9e85178a27 code=0x7ffc0000 [ 161.047073][ T29] audit: type=1326 audit(1722192874.058:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6813 comm="syz.2.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9e85175fca code=0x7ffc0000 [ 161.151067][ T29] audit: type=1326 audit(1722192874.058:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6813 comm="syz.2.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e85177299 code=0x7ffc0000 [ 161.232071][ T29] audit: type=1326 audit(1722192874.108:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6813 comm="syz.2.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f9e85177299 code=0x7ffc0000 [ 161.357046][ T29] audit: type=1326 audit(1722192874.108:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6813 comm="syz.2.479" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e85177299 code=0x7ffc0000 [ 162.350021][ T6838] KVM: debugfs: duplicate directory 6838-4 [ 162.496591][ T6847] input: syz1 as /devices/virtual/input/input9 [ 162.756566][ T6851] netlink: 12 bytes leftover after parsing attributes in process `syz.3.490'. [ 162.852108][ T6857] netlink: 16 bytes leftover after parsing attributes in process `syz.2.494'. [ 162.873868][ T6857] netlink: 16 bytes leftover after parsing attributes in process `syz.2.494'. [ 162.899331][ T6857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.494'. [ 163.766490][ T6884] Bluetooth: MGMT ver 1.23 [ 164.534287][ T6892] netlink: 16 bytes leftover after parsing attributes in process `syz.0.506'. [ 164.589589][ T6892] netlink: 16 bytes leftover after parsing attributes in process `syz.0.506'. [ 164.626379][ T6892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.506'. [ 164.907500][ T47] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 164.957139][ T6903] netlink: 'syz.1.509': attribute type 1 has an invalid length. [ 165.008532][ T6903] syz.1.509: attempt to access beyond end of device [ 165.008532][ T6903] nbd1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 165.021448][ T6903] efs: cannot read volume header [ 165.149759][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.169404][ T6906] netdevsim netdevsim0: Direct firmware load for WÙ«Zê¤Û failed with error -2 [ 165.179422][ T6906] netdevsim netdevsim0: Falling back to sysfs fallback for: WÙ«Zê¤Û [ 165.189455][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.216616][ T47] usb 4-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 165.247073][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.279740][ T6907] [U] IÝ€ [ 165.286668][ T6907] [U] % [ 165.288144][ T47] usb 4-1: config 0 descriptor?? [ 165.297241][ T6907] [U] ËVËA*ÔÈÁ’L4°JN$²Ð [ 165.823205][ T47] cougar 0003:060B:700A.0006: hidraw0: USB HID v0.00 Device [HID 060b:700a] on usb-dummy_hcd.3-1/input0 [ 166.044906][ T47] usb 4-1: USB disconnect, device number 8 [ 166.513502][ T6920] tmpfs: Bad value for 'size' [ 168.008018][ T6941] mmap: syz.0.520 (6941) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 168.775358][ T6933] bridge0: port 3(syz_tun) entered blocking state [ 168.820194][ T6933] bridge0: port 3(syz_tun) entered disabled state [ 168.841731][ T6933] syz_tun: entered allmulticast mode [ 168.952143][ T6933] syz_tun: entered promiscuous mode [ 169.010866][ T6933] bridge0: port 3(syz_tun) entered blocking state [ 169.018575][ T6933] bridge0: port 3(syz_tun) entered forwarding state [ 169.154094][ T5262] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 169.350975][ T47] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 169.397450][ T5262] usb 4-1: Using ep0 maxpacket: 16 [ 169.430015][ T5262] usb 4-1: New USB device found, idVendor=17ef, idProduct=720c, bcdDevice= 0.90 [ 169.452848][ T5262] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.496283][ T5262] r8152-cfgselector 4-1: Unknown version 0x0000 [ 169.516027][ T5262] r8152-cfgselector 4-1: config 0 descriptor?? [ 169.570757][ T5262] r8152 4-1:0.0: Expected endpoints are not found [ 169.579879][ T47] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 169.588989][ T47] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 169.647956][ T47] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 169.657046][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.710395][ T47] usb 3-1: Product: syz [ 169.719136][ T47] usb 3-1: Manufacturer: syz [ 169.733300][ T47] usb 3-1: SerialNumber: syz [ 169.767090][ T47] cdc_ncm 3-1:1.0: skipping garbage [ 169.807541][ T5262] r8152-cfgselector 4-1: USB disconnect, device number 9 [ 171.911304][ T5216] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 171.921696][ T5216] Bluetooth: hci4: Injecting HCI hardware error event [ 172.283713][ T55] Bluetooth: hci4: hardware error 0x00 [ 172.524554][ T6949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.561430][ T6949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.906655][ T6949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.935494][ T6949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.643743][ T47] cdc_ncm 3-1:1.0: bind() failure [ 173.659278][ T47] cdc_ncm 3-1:1.1: probe with driver cdc_ncm failed with error -71 [ 173.668170][ T47] cdc_mbim 3-1:1.1: probe with driver cdc_mbim failed with error -71 [ 173.713626][ T47] usbtest 3-1:1.1: probe with driver usbtest failed with error -71 [ 173.784088][ T47] usb 3-1: USB disconnect, device number 8 [ 174.407963][ T55] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 177.717031][ T6989] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 177.977767][ T5268] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 178.285915][ T5216] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 178.297914][ T5216] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 178.317775][ T5216] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 178.359549][ T5216] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 178.367649][ T5216] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 178.739202][ T5216] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 179.409250][ T7021] netlink: 64 bytes leftover after parsing attributes in process `syz.0.546'. [ 179.480381][ T5262] libceph: connect (1)[c::]:6789 error -101 [ 179.487238][ T5262] libceph: mon0 (1)[c::]:6789 connect error [ 179.498036][ T5262] libceph: connect (1)[c::]:6789 error -101 [ 179.504094][ T5262] libceph: mon0 (1)[c::]:6789 connect error [ 179.637591][ T7025] ceph: No mds server is up or the cluster is laggy [ 179.651483][ T7034] netlink: 24 bytes leftover after parsing attributes in process `syz.2.547'. [ 179.660767][ T7034] Zero length message leads to an empty skb [ 179.783168][ T5268] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 179.802190][ T7003] chnl_net:caif_netlink_parms(): no params data found [ 179.905715][ T7039] tmpfs: Bad value for 'mpol' [ 180.007471][ T5268] usb 1-1: Using ep0 maxpacket: 8 [ 180.017809][ T5268] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.042705][ T5268] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 180.069475][ T7003] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.077097][ T5268] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.087905][ T7003] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.098547][ T7003] bridge_slave_0: entered allmulticast mode [ 180.126141][ T5268] usb 1-1: config 0 descriptor?? [ 180.128021][ T7003] bridge_slave_0: entered promiscuous mode [ 180.168241][ T5268] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 180.173043][ T7003] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.196863][ T7003] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.213728][ T7003] bridge_slave_1: entered allmulticast mode [ 180.238962][ T7003] bridge_slave_1: entered promiscuous mode [ 180.382143][ T7003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 180.412063][ T7003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 180.494212][ T7003] team0: Port device team_slave_0 added [ 180.521086][ T7003] team0: Port device team_slave_1 added [ 180.573852][ T5268] gspca_vc032x: reg_w err -71 [ 180.590406][ T5268] vc032x 1-1:0.0: probe with driver vc032x failed with error -71 [ 180.608715][ T7003] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 180.626053][ T5268] usb 1-1: USB disconnect, device number 8 [ 180.631785][ T7003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.659726][ T5262] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 180.689888][ T7003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 180.711898][ T7003] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.727486][ T7003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.764557][ T7003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.826592][ T7003] hsr_slave_0: entered promiscuous mode [ 180.833631][ T7003] hsr_slave_1: entered promiscuous mode [ 180.841812][ T7003] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 180.853714][ T7003] Cannot create hsr debugfs directory [ 180.857484][ T5262] usb 3-1: Using ep0 maxpacket: 16 [ 180.869066][ T5262] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.889544][ T5262] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.917433][ T5262] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 180.937455][ T5262] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 180.946543][ T5262] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.979836][ T5262] usb 3-1: config 0 descriptor?? [ 181.145582][ T7003] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.198893][ T5216] Bluetooth: hci2: command tx timeout [ 181.319970][ T7003] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.417012][ T5262] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 181.441366][ T5262] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0007/input/input10 [ 181.500814][ T5214] libceph: connect (1)[c::]:6789 error -101 [ 181.507009][ T5214] libceph: mon0 (1)[c::]:6789 connect error [ 181.542708][ T7003] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.566097][ T5262] microsoft 0003:045E:07DA.0007: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 181.603212][ T7063] ceph: No mds server is up or the cluster is laggy [ 181.630157][ T7070] netlink: 24 bytes leftover after parsing attributes in process `syz.0.559'. [ 181.641651][ T5262] usb 3-1: USB disconnect, device number 10 [ 181.786116][ T7003] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.907349][ T7072] tmpfs: Bad value for 'mpol' [ 182.174035][ T7003] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 182.275669][ T7003] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 182.296502][ T7003] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 182.329840][ T7003] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 182.715473][ T7003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.829704][ T7003] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.916007][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.923230][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.963022][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.970248][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.239269][ T7095] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.571'. [ 183.277975][ T5216] Bluetooth: hci2: command tx timeout [ 183.301361][ T7095] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 183.437626][ T5216] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 183.448668][ T5216] Bluetooth: hci1: Injecting HCI hardware error event [ 183.457530][ T5216] Bluetooth: hci1: hardware error 0x00 [ 183.571777][ T5224] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 183.590367][ T5224] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 183.739210][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 183.739226][ T29] audit: type=1326 audit(1722192897.108:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7099 comm="syz.0.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74e0777299 code=0x7ffc0000 [ 185.897470][ T55] Bluetooth: hci4: Opcode 0x1001 failed: -110 [ 185.948851][ T5224] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 185.957760][ T5224] Bluetooth: hci2: command tx timeout [ 185.987625][ T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 185.999737][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 186.007297][ T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 186.020502][ T5216] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 186.042959][ T5216] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 186.050629][ T29] audit: type=1326 audit(1722192897.118:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7099 comm="syz.0.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7f74e0777299 code=0x7ffc0000 [ 186.088189][ T5216] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 186.095677][ T5216] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 186.189375][ T29] audit: type=1326 audit(1722192897.158:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7099 comm="syz.0.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74e0777299 code=0x7ffc0000 [ 186.343567][ T29] audit: type=1326 audit(1722192897.158:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7099 comm="syz.0.572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74e0777299 code=0x7ffc0000 [ 186.529686][ T7003] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.708449][ T47] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 186.913421][ T7098] chnl_net:caif_netlink_parms(): no params data found [ 186.939337][ T47] usb 1-1: config 0 has no interfaces? [ 186.966122][ T47] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 186.996132][ T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 187.023967][ T47] usb 1-1: SerialNumber: syz [ 187.038496][ T47] usb 1-1: config 0 descriptor?? [ 187.284294][ T25] usb 1-1: USB disconnect, device number 9 [ 187.299743][ T7098] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.317341][ T7098] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.347065][ T7098] bridge_slave_0: entered allmulticast mode [ 187.364756][ T7098] bridge_slave_0: entered promiscuous mode [ 187.383231][ T7098] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.399713][ T7098] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.407083][ T7098] bridge_slave_1: entered allmulticast mode [ 187.423196][ T7098] bridge_slave_1: entered promiscuous mode [ 187.467549][ T5268] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 187.512279][ T7098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.570186][ T7098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.595901][ T7003] veth0_vlan: entered promiscuous mode [ 187.682244][ T7098] team0: Port device team_slave_0 added [ 187.685619][ T5268] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 187.702016][ T7003] veth1_vlan: entered promiscuous mode [ 187.717916][ T5268] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.725961][ T5268] usb 2-1: Product: syz [ 187.742285][ T7098] team0: Port device team_slave_1 added [ 187.773824][ T5268] usb 2-1: Manufacturer: syz [ 187.783909][ T5268] usb 2-1: SerialNumber: syz [ 187.815855][ T5268] usb 2-1: config 0 descriptor?? [ 187.822591][ T7098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 187.844748][ T7098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.894803][ T7098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 187.932532][ T7098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.941122][ T7098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.004239][ T5216] Bluetooth: hci2: command tx timeout [ 188.064584][ T7098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.131071][ T7144] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 188.159019][ T5216] Bluetooth: hci4: command tx timeout [ 188.244743][ T7003] veth0_macvtap: entered promiscuous mode [ 188.259149][ T5268] usb 2-1: Firmware: major: 15, minor: 97, hardware type: UNKNOWN (127) [ 188.362323][ T7098] hsr_slave_0: entered promiscuous mode [ 188.380223][ T7098] hsr_slave_1: entered promiscuous mode [ 188.388055][ T7098] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 188.395657][ T7098] Cannot create hsr debugfs directory [ 188.448863][ T7003] veth1_macvtap: entered promiscuous mode [ 188.467292][ T5268] usb 2-1: no permanent extended address found, random address set [ 188.488074][ T5268] usb 2-1: atusb_probe: initialization failed, error = -524 [ 188.506497][ T5268] atusb 2-1:0.0: probe with driver atusb failed with error -524 [ 188.591771][ T7003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.627160][ T7003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.647974][ T7003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.672261][ T7003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.687119][ T7003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.736499][ T25] usb 2-1: USB disconnect, device number 7 [ 188.745854][ T7003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.792221][ T7003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.817652][ T7003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.836995][ T7003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.874016][ T7003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.909515][ T7003] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.986508][ T7003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.045567][ T7003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.086542][ T7003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.119984][ T7003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.137447][ T7003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.157460][ T7003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.187458][ T7003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.208908][ T7003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.241659][ T7003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.267483][ T7003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.308163][ T7003] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.404311][ T7003] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.447071][ T7003] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.468008][ T7003] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.489292][ T7003] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.237527][ T5216] Bluetooth: hci4: command tx timeout [ 190.681189][ T7098] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.933498][ T7098] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.981565][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.991855][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.082618][ T7098] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.172910][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.184333][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.242293][ T7098] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.610119][ T7098] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 191.664513][ T7098] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 191.704623][ T7098] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 191.726170][ T7098] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 192.149149][ T47] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 192.311501][ T7098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 192.318737][ T5216] Bluetooth: hci4: command tx timeout [ 192.376432][ T47] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 192.416727][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.433578][ T7098] 8021q: adding VLAN 0 to HW filter on device team0 [ 192.459757][ T47] usb 2-1: config 0 descriptor?? [ 192.475486][ T7202] bond0: entered promiscuous mode [ 192.489047][ T7202] bond_slave_0: entered promiscuous mode [ 192.512421][ T7202] bond_slave_1: entered promiscuous mode [ 192.525144][ T7202] bond0: entered allmulticast mode [ 192.543354][ T7202] bond_slave_0: entered allmulticast mode [ 192.558297][ T7202] bond_slave_1: entered allmulticast mode [ 192.577711][ T29] audit: type=1326 audit(1722192905.948:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7198 comm="syz.0.606" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f74e0777299 code=0x0 [ 192.604993][ T7207] netlink: 4 bytes leftover after parsing attributes in process `syz.4.607'. [ 192.608746][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.621065][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 192.678008][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.685268][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.096751][ T7098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.107711][ T47] usb 2-1: Cannot set autoneg [ 193.123878][ T47] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 193.160594][ T47] usb 2-1: USB disconnect, device number 8 [ 193.287263][ T7098] veth0_vlan: entered promiscuous mode [ 193.331506][ T7098] veth1_vlan: entered promiscuous mode [ 193.422069][ T7098] veth0_macvtap: entered promiscuous mode [ 193.522401][ T7098] veth1_macvtap: entered promiscuous mode [ 193.754321][ T7098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.766821][ T7098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.783726][ T7098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.808948][ T7098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.824701][ T7098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.842999][ T7098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.856109][ T7098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.875772][ T7098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.955947][ T7098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 193.979139][ T7098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.994645][ T7098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.053879][ T7098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.119528][ T7098] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.348337][ T7098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.373095][ T7098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.383801][ T7098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.396699][ T7098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.408022][ T5216] Bluetooth: hci4: command tx timeout [ 194.409881][ T7098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.472863][ T7098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.504895][ T7098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.527594][ T7098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.542318][ T7098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.567645][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.574086][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.586051][ T7098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.607506][ T7098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.628596][ T7098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.654455][ T7098] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 194.700692][ T7098] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.727844][ T7098] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.736587][ T7098] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.769293][ T7098] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.737949][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.745802][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.885903][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.905146][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.028040][ T7241] tipc: Started in network mode [ 197.037283][ T7241] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 197.064643][ T7241] tipc: Enabling of bearer rejected, failed to enable media [ 197.669588][ T29] audit: type=1326 audit(1722192910.948:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7247 comm="syz.3.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60d577299 code=0x7ffc0000 [ 198.148189][ T29] audit: type=1326 audit(1722192910.948:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7247 comm="syz.3.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60d577299 code=0x7ffc0000 [ 198.181883][ T29] audit: type=1326 audit(1722192910.948:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7247 comm="syz.3.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7fe60d577299 code=0x7ffc0000 [ 198.205113][ T29] audit: type=1326 audit(1722192910.948:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7247 comm="syz.3.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60d577299 code=0x7ffc0000 [ 198.226698][ T29] audit: type=1326 audit(1722192910.958:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7247 comm="syz.3.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60d577299 code=0x7ffc0000 [ 198.328217][ T29] audit: type=1326 audit(1722192910.958:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7247 comm="syz.3.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe60d577299 code=0x7ffc0000 [ 198.417592][ T29] audit: type=1326 audit(1722192910.958:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7247 comm="syz.3.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60d577299 code=0x7ffc0000 [ 198.647244][ T29] audit: type=1326 audit(1722192910.958:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7247 comm="syz.3.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60d577299 code=0x7ffc0000 [ 198.676578][ T29] audit: type=1326 audit(1722192910.968:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7247 comm="syz.3.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe60d577299 code=0x7ffc0000 [ 199.578678][ T29] audit: type=1326 audit(1722192910.968:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7247 comm="syz.3.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60d577299 code=0x7ffc0000 [ 200.156066][ T7286] netlink: 28 bytes leftover after parsing attributes in process `syz.3.633'. [ 200.318278][ T9] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 200.528225][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 200.605245][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 200.767788][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 200.825117][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.887531][ T9] usb 2-1: Product: syz [ 200.918204][ T9] usb 2-1: Manufacturer: syz [ 200.947506][ T9] usb 2-1: SerialNumber: syz [ 201.229370][ T9] usb 2-1: config 0 descriptor?? [ 201.249897][ T9] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 202.267427][ T9] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 202.501856][ T9] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 203.213619][ T9] em28xx 2-1:0.0: read from i2c device at 0xa0 failed with unknown error (status=65) [ 203.317509][ T9] em28xx 2-1:0.0: board has no eeprom [ 203.456569][ T7299] sched: RT throttling activated [ 203.507507][ T9] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 203.838669][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 203.838688][ T29] audit: type=1326 audit(1722192916.948:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7289 comm="syz.4.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb9bb77299 code=0x7ffc0000 [ 204.607496][ T9] em28xx 2-1:0.0: dvb set to bulk mode. [ 204.703563][ T5214] em28xx 2-1:0.0: Binding DVB extension [ 204.719373][ T29] audit: type=1326 audit(1722192916.948:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7289 comm="syz.4.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb9bb77299 code=0x7ffc0000 [ 204.722189][ T9] usb 2-1: USB disconnect, device number 9 [ 204.815778][ T29] audit: type=1326 audit(1722192916.948:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7289 comm="syz.4.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7fcb9bb77299 code=0x7ffc0000 [ 204.869577][ T7321] netlink: 4 bytes leftover after parsing attributes in process `syz.0.645'. [ 204.912093][ T5214] em28xx 2-1:0.0: Registering input extension [ 204.927932][ T29] audit: type=1326 audit(1722192916.948:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7289 comm="syz.4.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb9bb77299 code=0x7ffc0000 [ 205.017460][ T29] audit: type=1326 audit(1722192916.948:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7289 comm="syz.4.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb9bb77299 code=0x7ffc0000 [ 205.067879][ T9] em28xx 2-1:0.0: Disconnecting em28xx [ 205.097299][ T9] em28xx 2-1:0.0: Closing input extension [ 205.121728][ T7328] syz.3.646: attempt to access beyond end of device [ 205.121728][ T7328] loop3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 205.134485][ T29] audit: type=1326 audit(1722192916.948:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7289 comm="syz.4.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcb9bb77299 code=0x7ffc0000 [ 205.251306][ T7328] vxfs: unable to read disk superblock at 1 [ 205.260410][ T29] audit: type=1326 audit(1722192916.948:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7289 comm="syz.4.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb9bb77299 code=0x7ffc0000 [ 205.296086][ T7328] syz.3.646: attempt to access beyond end of device [ 205.296086][ T7328] loop3: rw=0, sector=16, nr_sectors = 2 limit=0 [ 205.336392][ T9] em28xx 2-1:0.0: Freeing device [ 205.739825][ T7338] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 205.777188][ T55] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 206.117250][ T29] audit: type=1326 audit(1722192916.948:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7289 comm="syz.4.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb9bb77299 code=0x7ffc0000 [ 206.138992][ T7328] vxfs: unable to read disk superblock at 8 [ 206.144906][ T7328] vxfs: can't find superblock. [ 206.152329][ T29] audit: type=1326 audit(1722192916.948:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7289 comm="syz.4.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcb9bb77299 code=0x7ffc0000 [ 206.356030][ T29] audit: type=1326 audit(1722192916.948:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7289 comm="syz.4.636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb9bb77299 code=0x7ffc0000 [ 206.388127][ T55] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 206.436498][ T55] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 206.471534][ T55] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 206.492975][ T55] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 206.502320][ T55] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 207.927061][ T55] Bluetooth: hci4: ISO packet for unknown connection handle 4095 [ 207.978640][ T7358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.656'. [ 208.079557][ T7358] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.088769][ T7358] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.137748][ T7358] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.145433][ T7358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.154099][ T7358] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.161885][ T7358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.196284][ T7358] team0: Port device bridge0 added [ 208.566107][ T55] Bluetooth: hci6: command tx timeout [ 208.780925][ T7329] chnl_net:caif_netlink_parms(): no params data found [ 210.212790][ T7403] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.248031][ T7403] bridge_slave_1: left allmulticast mode [ 210.268875][ T7403] bridge_slave_1: left promiscuous mode [ 210.274843][ T7403] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.345593][ T7329] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.427862][ T5318] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 210.518515][ T7329] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.667757][ T55] Bluetooth: hci6: command tx timeout [ 210.700226][ T7329] bridge_slave_0: entered allmulticast mode [ 210.787572][ T7419] netlink: 72 bytes leftover after parsing attributes in process `syz.4.667'. [ 212.089426][ T55] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 212.098914][ T55] Bluetooth: hci4: Injecting HCI hardware error event [ 212.109674][ T5216] Bluetooth: hci4: hardware error 0x00 [ 212.142814][ T7329] bridge_slave_0: entered promiscuous mode [ 212.264577][ T7329] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.306521][ T7329] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.355886][ T7329] bridge_slave_1: entered allmulticast mode [ 212.399788][ T7329] bridge_slave_1: entered promiscuous mode [ 212.585878][ T7431] @: renamed from vlan0 (while UP) [ 212.625093][ T7329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.676458][ T7329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.727268][ T55] Bluetooth: hci6: command tx timeout [ 212.884875][ T7329] team0: Port device team_slave_0 added [ 213.105184][ T7329] team0: Port device team_slave_1 added [ 214.450848][ T5216] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 214.835314][ T5216] Bluetooth: hci6: command tx timeout [ 214.867244][ T7329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.884629][ T7329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.961754][ T7329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.013761][ T7329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.052369][ T7329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.137397][ T7329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.789667][ T7329] hsr_slave_0: entered promiscuous mode [ 216.876973][ T7329] hsr_slave_1: entered promiscuous mode [ 216.883499][ T5216] Bluetooth: hci6: command tx timeout [ 216.909240][ T7329] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 216.922181][ T7329] Cannot create hsr debugfs directory [ 217.305814][ T7468] @: renamed from vlan0 (while UP) [ 217.352520][ T7483] netlink: 4 bytes leftover after parsing attributes in process `syz.3.685'. [ 219.799530][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 219.799555][ T29] audit: type=1326 audit(1722192933.168:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7500 comm="syz.0.693" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f74e0777299 code=0x0 [ 219.836406][ T7329] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.941403][ T7506] netlink: 'syz.1.696': attribute type 15 has an invalid length. [ 220.245288][ T7329] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.505321][ T7329] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.821957][ T7329] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.538774][ T7329] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 226.610165][ T7329] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 226.700252][ T7329] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 226.760342][ T7555] autofs4:pid:7555:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.2), cmd(0xc0189378) [ 226.774486][ T7329] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 226.799640][ T7555] autofs4:pid:7555:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189378) [ 227.159048][ T7561] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 227.499789][ C0] vcan0: j1939_tp_rxtimer: 0xffff888025773400: rx timeout, send abort [ 227.848373][ T7329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.895366][ T7329] 8021q: adding VLAN 0 to HW filter on device team0 [ 228.009378][ C0] vcan0: j1939_tp_rxtimer: 0xffff888025773400: abort rx timeout. Force session deactivation [ 228.050754][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.058058][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 228.129575][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.136812][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.319897][ T7329] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 228.847578][ T5319] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 228.933037][ T7599] ebt_among: wrong size: 2080 against expected 2280, rounded to 2280 [ 228.937546][ T7329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.043335][ T7329] veth0_vlan: entered promiscuous mode [ 229.075044][ T7329] veth1_vlan: entered promiscuous mode [ 229.080922][ T5319] usb 4-1: Using ep0 maxpacket: 16 [ 229.096675][ T5319] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 229.118695][ T5319] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 229.140293][ T5319] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.185610][ T5319] usb 4-1: Product: syz [ 229.206624][ T5319] usb 4-1: Manufacturer: syz [ 229.233468][ T5319] usb 4-1: SerialNumber: syz [ 229.255358][ T5319] usb 4-1: config 0 descriptor?? [ 229.264722][ T7329] veth0_macvtap: entered promiscuous mode [ 229.284653][ T5319] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 229.320726][ T7329] veth1_macvtap: entered promiscuous mode [ 229.357075][ T5319] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 229.471867][ T7329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.528072][ T7329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.563299][ T7329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.590317][ T7329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.600900][ T7329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.645442][ T7329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.677128][ T7329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.711092][ T7329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.743037][ T7329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.782788][ T7329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.815822][ T7329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.860144][ T7329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.902383][ T5319] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 229.909341][ T7329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 229.942454][ T7329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.971734][ T7329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.035019][ T7329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.097529][ T7329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.127130][ T7329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.147411][ T7329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.219103][ T7329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.257536][ T7329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.281899][ T7329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.283402][ T7609] ecryptfs_parse_options: eCryptfs: unrecognized option [&@] [ 230.306121][ T7329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.316456][ T7609] ecryptfs_parse_options: eCryptfs: unrecognized option [ention_end] [ 230.327194][ T7329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.347548][ T7609] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 230.368834][ T7329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.388939][ T7609] Error parsing options; rc = [-22] [ 230.394670][ T7329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.424477][ T7329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.453379][ T7329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.471286][ T7329] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.483858][ T7329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.539962][ T7329] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.565551][ T5319] em28xx 4-1:0.0: read from i2c device at 0xa0 failed with unknown error (status=65) [ 230.567696][ T7329] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.608695][ T5319] em28xx 4-1:0.0: board has no eeprom [ 230.635252][ T7329] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.697825][ T7329] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.847657][ T5319] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 230.965349][ T5319] em28xx 4-1:0.0: dvb set to bulk mode. [ 230.981031][ T25] em28xx 4-1:0.0: Binding DVB extension [ 231.021090][ T2537] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.075327][ T5319] usb 4-1: USB disconnect, device number 11 [ 231.087970][ T2537] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.126636][ T5319] em28xx 4-1:0.0: Disconnecting em28xx [ 231.193134][ T25] em28xx 4-1:0.0: Registering input extension [ 231.213058][ T5319] em28xx 4-1:0.0: Closing input extension [ 231.299929][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.332701][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.358062][ T5319] em28xx 4-1:0.0: Freeing device [ 235.961606][ T7666] tap0: tun_chr_ioctl cmd 1074025677 [ 235.967145][ T7666] tap0: linktype set to 804 [ 236.011819][ T5318] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 236.237133][ T5318] usb 3-1: Using ep0 maxpacket: 16 [ 236.245228][ T5318] usb 3-1: New USB device found, idVendor=2001, idProduct=4002, bcdDevice=df.bf [ 236.254991][ T5318] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.286573][ T5318] usb 3-1: config 0 descriptor?? [ 236.357910][ T5268] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 236.563539][ T5268] usb 1-1: Using ep0 maxpacket: 8 [ 236.579360][ T5268] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 236.597540][ T5268] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 236.621494][ T5268] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 236.649833][ T5268] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 236.680280][ T5268] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 236.757250][ T5268] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 236.814282][ T5268] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.963140][ T7689] sp0: Synchronizing with TNC [ 237.395004][ T5268] usb 1-1: usb_control_msg returned -32 [ 237.466384][ T5268] usbtmc 1-1:16.0: can't read capabilities [ 238.720227][ T5318] pegasus 3-1:0.0: can't locate MII phy, using default [ 238.851594][ T5318] pegasus 3-1:0.0: eth1, D-Link DSB-650TX, 76:dd:bf:4c:86:61 [ 238.875407][ T5318] usb 3-1: USB disconnect, device number 11 [ 239.513566][ T5318] usb 1-1: USB disconnect, device number 10 [ 242.249494][ T5267] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 242.564937][ T7744] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 242.591298][ T7744] CIFS mount error: No usable UNC path provided in device string! [ 242.591298][ T7744] [ 242.602127][ T7744] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 243.217893][ T5267] usb 3-1: Using ep0 maxpacket: 32 [ 243.235750][ T5267] usb 3-1: New USB device found, idVendor=2040, idProduct=c602, bcdDevice= 1.8e [ 243.277438][ T5267] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.299327][ T5267] usb 3-1: config 0 descriptor?? [ 243.324989][ T5267] usb 3-1: dvb_usb_v2: found a 'HCW 126xxx' in warm state [ 243.550958][ T5267] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 243.562902][ T5267] dvbdev: DVB: registering new adapter (HCW 126xxx) [ 243.577488][ T5267] usb 3-1: media controller created [ 244.564511][ T5267] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 244.778688][ T5267] usb 3-1: selecting invalid altsetting 1 [ 244.784463][ T5267] set interface failed [ 244.784980][ T5267] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 244.810429][ T5267] error writing reg: 0xff, val: 0x00 [ 244.923995][ T5267] dvb_usb_mxl111sf 3-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 245.023366][ T5267] usb 3-1: USB disconnect, device number 12 [ 245.040152][ T5222] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 245.289855][ T5222] usb 5-1: Using ep0 maxpacket: 32 [ 245.366859][ T5222] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.397398][ T5222] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.427490][ T5222] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 245.491252][ T5222] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.505051][ T5222] usb 5-1: config 0 descriptor?? [ 245.517902][ T5222] hub 5-1:0.0: USB hub found [ 245.782536][ T7786] ======================================================= [ 245.782536][ T7786] WARNING: The mand mount option has been deprecated and [ 245.782536][ T7786] and is ignored by this kernel. Remove the mand [ 245.782536][ T7786] option from the mount to silence this warning. [ 245.782536][ T7786] ======================================================= [ 245.968660][ T5222] hub 5-1:0.0: 1 port detected [ 246.669555][ T7793] netlink: 76 bytes leftover after parsing attributes in process `syz.1.783'. [ 246.708192][ T7786] devpts: called with bogus options [ 246.787567][ T5222] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 246.794956][ T5222] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 246.889972][ T5222] usbhid 5-1:0.0: can't add hid device: -71 [ 246.945400][ T5222] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 247.046409][ T5222] usb 5-1: USB disconnect, device number 6 [ 248.138097][ T7820] netlink: 32 bytes leftover after parsing attributes in process `syz.1.791'. [ 248.174628][ T5265] IPVS: starting estimator thread 0... [ 248.287746][ T7824] IPVS: using max 33 ests per chain, 79200 per kthread [ 248.786369][ T7842] syz_tun: entered promiscuous mode [ 248.821443][ T7842] syz_tun: left promiscuous mode [ 248.968972][ T5265] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 249.627903][ T5265] usb 2-1: Using ep0 maxpacket: 32 [ 250.140742][ T5265] usb 2-1: New USB device found, idVendor=2040, idProduct=c602, bcdDevice= 1.8e [ 250.176244][ T5265] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.231503][ T5265] usb 2-1: config 0 descriptor?? [ 250.252598][ T7856] could not allocate digest TFM handle sha256-arm64-neon [ 250.281402][ T5265] usb 2-1: dvb_usb_v2: found a 'HCW 126xxx' in warm state [ 250.551842][ T7870] team_slave_0: entered promiscuous mode [ 250.555935][ T5265] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 250.558498][ T7870] team_slave_1: entered promiscuous mode [ 251.245153][ T5265] dvbdev: DVB: registering new adapter (HCW 126xxx) [ 251.252611][ T5265] usb 2-1: media controller created [ 251.353959][ T5265] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 251.408995][ T7870] macvtap1: entered promiscuous mode [ 251.414335][ T7870] team0: entered promiscuous mode [ 251.460687][ T7870] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 251.490100][ T5265] usb 2-1: selecting invalid altsetting 1 [ 251.495871][ T5265] set interface failed [ 251.495897][ T5265] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 251.540065][ T5265] error writing reg: 0xff, val: 0x00 [ 251.595433][ T7883] devpts: called with bogus options [ 251.635500][ T5265] dvb_usb_mxl111sf 2-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 251.665234][ T7883] netlink: 76 bytes leftover after parsing attributes in process `syz.2.812'. [ 251.688754][ T5265] usb 2-1: USB disconnect, device number 10 [ 252.113539][ T7893] syz_tun: entered promiscuous mode [ 252.147706][ T29] audit: type=1326 audit(1722192965.518:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7897 comm="syz.3.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60d577299 code=0x7ffc0000 [ 252.198037][ T7893] syz_tun: left promiscuous mode [ 252.248401][ T29] audit: type=1326 audit(1722192965.518:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7897 comm="syz.3.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60d577299 code=0x7ffc0000 [ 252.347492][ T29] audit: type=1326 audit(1722192965.568:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7897 comm="syz.3.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7fe60d577299 code=0x7ffc0000 [ 252.427650][ T29] audit: type=1326 audit(1722192965.568:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7897 comm="syz.3.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60d577299 code=0x7ffc0000 [ 252.547530][ T29] audit: type=1326 audit(1722192965.568:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7897 comm="syz.3.818" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60d577299 code=0x7ffc0000 [ 252.615665][ T7915] netlink: 'syz.2.825': attribute type 8 has an invalid length. [ 252.817865][ T7920] devpts: called with bogus options [ 252.864334][ T7920] netlink: 76 bytes leftover after parsing attributes in process `syz.1.826'. [ 253.029527][ T7922] trusted_key: encrypted_key: insufficient parameters specified [ 253.087828][ T7922] trusted_key: encrypted_key: master key parameter 'trusted:' is invalid [ 253.712623][ T7942] netlink: 176 bytes leftover after parsing attributes in process `syz.3.836'. [ 253.847520][ T5319] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 254.059239][ T5319] usb 2-1: Using ep0 maxpacket: 32 [ 254.092405][ T5319] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 254.122335][ T5319] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 254.169608][ T5319] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 254.182457][ T5319] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 254.214929][ T5319] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 254.244075][ T5319] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.262520][ T5319] usb 2-1: Product: syz [ 254.266746][ T5319] usb 2-1: Manufacturer: syz [ 254.295182][ T5319] usb 2-1: SerialNumber: syz [ 254.679413][ T5319] usb 2-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 254.697438][ T5319] usb 2-1: found format II with max.bitrate = 0, frame size=0 [ 254.705113][ T5319] usb 2-1: 2:1 : unknown format tag 0x0 is detected. processed as MPEG. [ 254.716793][ T5319] usb 2-1: found format II with max.bitrate = 0, frame size=0 [ 254.892708][ T5319] usb 2-1: USB disconnect, device number 11 [ 255.155716][ T7970] netlink: 176 bytes leftover after parsing attributes in process `syz.3.848'. [ 255.419089][ T7554] udevd[7554]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 256.008229][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.014614][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.083347][ T7998] syz_tun: entered promiscuous mode [ 256.168328][ T7998] syz_tun: left promiscuous mode [ 256.528090][ T941] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 256.765430][ T941] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.900926][ T941] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.972626][ T941] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 257.627599][ T941] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1d00, bcdDevice= 0.00 [ 257.636687][ T941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.666561][ T941] usb 2-1: config 0 descriptor?? [ 257.869511][ T25] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 258.069550][ T25] usb 3-1: config 0 interface 0 has no altsetting 0 [ 258.092802][ T25] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 258.132701][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.151600][ T941] corsair-cpro 0003:1B1C:1D00.0008: hidraw0: USB HID v0.00 Device [HID 1b1c:1d00] on usb-dummy_hcd.1-1/input0 [ 258.160963][ T25] usb 3-1: config 0 descriptor?? [ 258.386364][ T941] corsair-cpro 0003:1B1C:1D00.0008: probe with driver corsair-cpro failed with error -38 [ 258.534633][ T941] usb 2-1: USB disconnect, device number 12 [ 258.785416][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 258.796992][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 258.817666][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 258.829236][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 258.837766][ T55] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 258.845476][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 258.896816][ T25] video4linux radio32: keene_cmd_set failed (-71) [ 258.904175][ T25] radio-keene 3-1:0.0: V4L2 device registered as radio32 [ 258.920850][ T25] usb 3-1: USB disconnect, device number 13 [ 259.506689][ T8030] chnl_net:caif_netlink_parms(): no params data found [ 259.879676][ T8030] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.924271][ T8030] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.954515][ T8030] bridge_slave_0: entered allmulticast mode [ 259.971289][ T8030] bridge_slave_0: entered promiscuous mode [ 259.998418][ T8030] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.032121][ T8030] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.056319][ T8030] bridge_slave_1: entered allmulticast mode [ 260.098617][ T8030] bridge_slave_1: entered promiscuous mode [ 260.267296][ T8065] netlink: 4 bytes leftover after parsing attributes in process `syz.2.882'. [ 260.958896][ T55] Bluetooth: hci0: command tx timeout [ 261.027200][ T8030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.100472][ T8030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.322717][ T8065] netlink: 12 bytes leftover after parsing attributes in process `syz.2.882'. [ 261.627611][ T941] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 261.713245][ T8030] team0: Port device team_slave_0 added [ 261.809188][ T8030] team0: Port device team_slave_1 added [ 261.871943][ T941] usb 3-1: Using ep0 maxpacket: 32 [ 261.969253][ T941] usb 3-1: config 33 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 183, changing to 7 [ 262.039811][ T941] usb 3-1: config 33 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 59294, setting to 1024 [ 262.220800][ T941] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 262.271278][ T941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.367393][ T941] usb 3-1: Product: syz [ 262.402175][ T941] usb 3-1: Manufacturer: syz [ 262.406825][ T941] usb 3-1: SerialNumber: syz [ 262.917841][ T941] usb 3-1: USB disconnect, device number 14 [ 262.952332][ T8030] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.983125][ T8030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.017571][ T25] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 263.049994][ T55] Bluetooth: hci0: command tx timeout [ 263.097620][ T8030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.135055][ T8030] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.169852][ T8030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.226393][ T8030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.255802][ T25] usb 2-1: config 0 interface 0 has no altsetting 0 [ 263.263198][ T25] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 263.294577][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.323983][ T25] usb 2-1: config 0 descriptor?? [ 263.443676][ T8030] hsr_slave_0: entered promiscuous mode [ 263.498041][ T8030] hsr_slave_1: entered promiscuous mode [ 263.533874][ T8030] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 263.578726][ T8030] Cannot create hsr debugfs directory [ 265.129678][ T25] video4linux radio32: keene_cmd_main failed (-110) [ 265.162575][ T55] Bluetooth: hci0: command tx timeout [ 265.849218][ T25] radio-keene 2-1:0.0: V4L2 device registered as radio32 [ 266.000240][ T5214] usb 2-1: USB disconnect, device number 13 [ 266.666355][ T8030] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.758932][ T8130] netlink: 8 bytes leftover after parsing attributes in process `syz.3.901'. [ 266.787434][ T5262] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 266.893772][ T8030] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.007512][ T5262] usb 5-1: Using ep0 maxpacket: 8 [ 267.011722][ T8030] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.110286][ T5262] usb 5-1: New USB device found, idVendor=04e6, idProduct=000a, bcdDevice= 2.00 [ 267.173168][ T5262] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.197470][ T5216] Bluetooth: hci0: command tx timeout [ 267.225343][ T8138] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.903'. [ 267.253840][ T8030] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.265991][ T5262] usb 5-1: Product: syz [ 267.274793][ T5262] usb 5-1: Manufacturer: syz [ 267.281592][ T8138] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 267.289879][ T5262] usb 5-1: SerialNumber: syz [ 267.306340][ T5262] usb 5-1: config 0 descriptor?? [ 267.331990][ T5262] usb-storage 5-1:0.0: USB Mass Storage device detected [ 267.563154][ T5214] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 267.625629][ T8030] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 267.686120][ T8030] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 267.736879][ T8030] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 267.779190][ T5214] usb 4-1: config 0 interface 0 has no altsetting 0 [ 267.826340][ T5214] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 267.827793][ T8030] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 267.842274][ T5214] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.855920][ T5214] usb 4-1: config 0 descriptor?? [ 267.866831][ T5265] usb 5-1: USB disconnect, device number 7 [ 268.321263][ T5216] Bluetooth: hci5: command 0x0406 tx timeout [ 268.472670][ T8030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.544731][ T5214] video4linux radio32: keene_cmd_set failed (-71) [ 268.574774][ T5214] radio-keene 4-1:0.0: V4L2 device registered as radio32 [ 268.611113][ T5214] usb 4-1: USB disconnect, device number 12 [ 268.660324][ T8030] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.691630][ T5267] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.698869][ T5267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.866394][ T5267] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.873663][ T5267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.624782][ T8030] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.792488][ T8030] veth0_vlan: entered promiscuous mode [ 269.895701][ T8030] veth1_vlan: entered promiscuous mode [ 270.023184][ T8030] veth0_macvtap: entered promiscuous mode [ 270.090566][ T8030] veth1_macvtap: entered promiscuous mode [ 270.217171][ T8030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.263617][ T8030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.322526][ T8030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.365946][ T8030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.373900][ T8179] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 270.387305][ T941] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 270.435796][ T8030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.487733][ T8030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.520583][ T8179] kvm: pic: non byte read [ 270.525304][ T8179] kvm: pic: non byte read [ 270.569273][ T8179] kvm: pic: non byte read [ 270.590876][ T8179] kvm: pic: non byte read [ 270.598154][ T8030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.608125][ T941] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 270.639857][ T8179] kvm: pic: non byte read [ 270.652520][ T941] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 270.672475][ T8179] kvm: pic: non byte read [ 270.687449][ T941] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 270.700863][ T8179] kvm: pic: level sensitive irq not supported [ 270.700978][ T8179] kvm: pic: non byte read [ 270.715048][ T941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.732404][ T8179] kvm: pic: non byte read [ 270.743201][ T8030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.749728][ T8183] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 270.753470][ T8030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.777947][ T8030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.818344][ T8030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.843791][ T8030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.860625][ T8030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.863594][ T941] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 270.876541][ T8030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.899962][ T8030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.913276][ T8030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.943580][ T8030] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.976005][ T8030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.001372][ T8030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.070923][ T8030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.132925][ T8030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.211160][ T8030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.227573][ T941] usb 4-1: USB disconnect, device number 13 [ 271.283473][ T8030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.331756][ T8030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.422769][ T8030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.490141][ T8030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.537747][ T8030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.599350][ T8030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.652581][ T7733] udevd[7733]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 271.667630][ T8030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.714959][ T8030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.751762][ T8030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.789155][ T8030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.847538][ T8030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.897912][ T8030] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 271.983456][ T8030] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.010173][ T8030] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.040330][ T8030] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.083468][ T8030] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.360992][ T2983] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.386842][ T2983] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.484960][ T2983] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.533270][ T2983] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.550385][ T8232] atomic_op ffff88808171a998 conn xmit_atomic 0000000000000000 [ 274.856919][ T8239] netlink: 2036 bytes leftover after parsing attributes in process `syz.3.935'. [ 274.905539][ T8239] netlink: 24 bytes leftover after parsing attributes in process `syz.3.935'. [ 275.062629][ T8245] netlink: 6 bytes leftover after parsing attributes in process `syz.1.938'. [ 275.487442][ T5265] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 275.771312][ T5265] usb 5-1: config 0 interface 0 has no altsetting 0 [ 275.801521][ T5265] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 275.875254][ T5265] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.927443][ T5265] usb 5-1: config 0 descriptor?? [ 275.945193][ T8262] atomic_op ffff88808bcb5198 conn xmit_atomic 0000000000000000 [ 276.649566][ T8242] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 276.775231][ T5265] video4linux radio32: keene_cmd_set failed (-71) [ 276.822040][ T5265] radio-keene 5-1:0.0: V4L2 device registered as radio32 [ 276.847479][ T5319] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 276.911172][ T5265] usb 5-1: USB disconnect, device number 8 [ 277.070957][ T5319] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 277.147638][ T5319] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 277.220025][ T5319] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 277.267722][ T5319] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 277.306380][ T5319] usb 1-1: SerialNumber: syz [ 277.351558][ T5319] usb 1-1: bad CDC descriptors [ 277.727469][ T5319] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 278.047572][ T5319] usb 2-1: Using ep0 maxpacket: 8 [ 278.220347][ T5319] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ee [ 278.247483][ T5319] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.258545][ T5216] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 278.270995][ T5319] usb 2-1: Product: syz [ 278.275201][ T5319] usb 2-1: Manufacturer: syz [ 278.281838][ T5216] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 278.297504][ T5319] usb 2-1: SerialNumber: syz [ 278.302220][ T5216] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 278.314752][ T5319] usb 2-1: config 0 descriptor?? [ 278.322345][ T5216] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 278.333604][ T5216] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 278.344218][ T5216] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 278.611522][ T5319] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 278.744073][ T941] usb 1-1: USB disconnect, device number 11 [ 279.044132][ T5319] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 279.068128][ T5319] usb 2-1: USB disconnect, device number 14 [ 279.093897][ T8294] "syz.3.957" (8294) uses obsolete ecb(arc4) skcipher [ 279.420323][ T8289] chnl_net:caif_netlink_parms(): no params data found [ 279.999038][ T8289] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.027732][ T8289] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.035047][ T8289] bridge_slave_0: entered allmulticast mode [ 280.130302][ T8289] bridge_slave_0: entered promiscuous mode [ 280.140746][ T8289] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.158900][ T8289] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.173822][ T8289] bridge_slave_1: entered allmulticast mode [ 280.448805][ T5216] Bluetooth: hci7: command tx timeout [ 280.807843][ T8289] bridge_slave_1: entered promiscuous mode [ 281.226430][ T8289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.259222][ T29] audit: type=1326 audit(1722192994.638:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8328 comm="syz.3.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60d577299 code=0x7ffc0000 [ 281.280157][ T8289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.398189][ T29] audit: type=1326 audit(1722192994.638:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8328 comm="syz.3.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60d577299 code=0x7ffc0000 [ 281.487545][ T29] audit: type=1326 audit(1722192994.648:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8328 comm="syz.3.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7fe60d577299 code=0x7ffc0000 [ 281.575394][ T8289] team0: Port device team_slave_0 added [ 281.600005][ T29] audit: type=1326 audit(1722192994.648:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8328 comm="syz.3.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe60d577299 code=0x7ffc0000 [ 281.646479][ T8289] team0: Port device team_slave_1 added [ 281.754758][ T29] audit: type=1326 audit(1722192994.648:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8328 comm="syz.3.966" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fe60d577299 code=0x7ffc0000 [ 281.835908][ T29] audit: type=1326 audit(1722192994.648:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8332 comm="syz.0.968" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9ac7d77299 code=0x0 [ 281.994118][ T8289] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.053483][ T8289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.187420][ T8289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.236746][ T8289] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.296749][ T8289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.477772][ T5216] Bluetooth: hci7: command tx timeout [ 282.517567][ T8289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.901816][ T8289] hsr_slave_0: entered promiscuous mode [ 282.940503][ T8289] hsr_slave_1: entered promiscuous mode [ 283.038154][ T8289] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 283.075354][ T8289] Cannot create hsr debugfs directory [ 283.793824][ T29] audit: type=1326 audit(1722192997.168:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8374 comm="syz.1.984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f3177299 code=0x7ffc0000 [ 283.866112][ T29] audit: type=1326 audit(1722192997.168:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8374 comm="syz.1.984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f3177299 code=0x7ffc0000 [ 283.959238][ T29] audit: type=1326 audit(1722192997.168:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8374 comm="syz.1.984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f88f3177299 code=0x7ffc0000 [ 284.100309][ T29] audit: type=1326 audit(1722192997.168:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8374 comm="syz.1.984" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f3177299 code=0x7ffc0000 [ 284.398068][ T8289] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.568366][ T5216] Bluetooth: hci7: command tx timeout [ 284.909899][ T8289] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.389614][ T8289] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.740542][ T8289] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.239106][ T8289] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 286.341050][ T8289] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 286.593507][ T8425] syz.1.1000: attempt to access beyond end of device [ 286.593507][ T8425] loop1: rw=0, sector=0, nr_sectors = 1 limit=0 [ 286.607218][ T8425] FAT-fs (loop1): unable to read boot sector [ 286.758075][ T5216] Bluetooth: hci7: command tx timeout [ 291.307758][ T8289] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 291.411914][ T8289] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 292.016881][ T8289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.101989][ T8289] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.236778][ T5265] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.244178][ T5265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.287163][ T5265] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.294387][ T5265] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.508420][ T8456] capability: warning: `syz.3.1013' uses 32-bit capabilities (legacy support in use) [ 292.622234][ T8289] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 293.670169][ T8289] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.910580][ T8289] veth0_vlan: entered promiscuous mode [ 294.014193][ T8471] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 294.026248][ T8289] veth1_vlan: entered promiscuous mode [ 294.206132][ T8289] veth0_macvtap: entered promiscuous mode [ 294.233209][ T8289] veth1_macvtap: entered promiscuous mode [ 294.306326][ T8289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.317608][ T8289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.327828][ T8289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.340818][ T8289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.350848][ T8289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.361975][ T8289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.372018][ T8289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.385954][ T8289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.396772][ T8289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.411800][ T8289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.434395][ T8289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.448933][ T8289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.473142][ T8289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.493459][ T8289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.510900][ T8289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.523675][ T8289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.534026][ T8289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 294.547577][ T8289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.560252][ T8289] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 294.574054][ T8289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.584679][ T8289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.595307][ T8289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.605912][ T8289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.620168][ T8289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.667487][ T8289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.741836][ T8289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.847480][ T8289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.954002][ T8289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.995616][ T8289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.047407][ T8289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.107432][ T8289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.150735][ T8289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.177162][ T8289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.219047][ T8289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.231966][ T8289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.250747][ T8289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.278848][ T8289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.308947][ T8289] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 295.388757][ T8289] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.442266][ T8289] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.487646][ T8289] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.510361][ T8289] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 295.695917][ T8500] MTD: Couldn't look up 'mountinfo': -2 [ 296.569553][ T8105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.595838][ T8105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.781900][ T8516] netlink: 341 bytes leftover after parsing attributes in process `syz.1.1027'. [ 297.718201][ T2953] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 297.726029][ T2953] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.190224][ T29] kauditd_printk_skb: 71 callbacks suppressed [ 299.190241][ T29] audit: type=1326 audit(1722193012.568:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8548 comm="syz.0.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ac7d77299 code=0x7ffc0000 [ 299.363891][ T29] audit: type=1326 audit(1722193012.598:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8548 comm="syz.0.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f9ac7d77299 code=0x7ffc0000 [ 299.367823][ T25] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 299.530213][ T29] audit: type=1326 audit(1722193012.598:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8548 comm="syz.0.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ac7d77299 code=0x7ffc0000 [ 299.616267][ T29] audit: type=1326 audit(1722193012.608:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8548 comm="syz.0.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ac7d77299 code=0x7ffc0000 [ 299.701925][ T29] audit: type=1326 audit(1722193012.608:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8548 comm="syz.0.1042" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9ac7d77299 code=0x7ffc0000 [ 299.798079][ T25] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1 [ 299.904664][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64 [ 299.967563][ T25] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 300.078073][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.139312][ T25] usb 3-1: config 0 descriptor?? [ 301.701360][ T8550] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.877819][ T8550] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.009622][ T8577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.058035][ T8577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.453888][ T25] ath6kl: Failed to read usb control message: -71 [ 303.464917][ T25] ath6kl: Unable to read the bmi data from the device: -71 [ 303.472423][ T25] ath6kl: Unable to recv target info: -71 [ 303.606660][ T25] ath6kl: Failed to init ath6kl core: -71 [ 303.997171][ T8602] xt_CT: No such helper "netbios-ns" [ 304.097836][ T25] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 304.197642][ T25] usb 3-1: USB disconnect, device number 15 [ 304.331685][ T55] Bluetooth: hci2: command 0x0406 tx timeout [ 304.687489][ T5265] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 304.887020][ T8622] xt_l2tp: invalid flags combination: 0 [ 305.444969][ T5265] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.464729][ T5265] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.901856][ T29] audit: type=1400 audit(1722193019.268:204): lsm=SMACK fn=smack_task_setscheduler action=denied subject="N" object="_" requested=w pid=8618 comm="syz.1.1066" opid=8618 ocomm="syz.1.1066" [ 305.930245][ T5265] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 305.987476][ T5265] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.779263][ T5265] usb 4-1: config 0 descriptor?? [ 307.221427][ T5265] hid-steam 0003:28DE:1142.0009: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 307.355410][ T5265] hid-steam 0003:28DE:1142.0009: Steam wireless receiver connected [ 309.629916][ T5265] hid-steam 0003:28DE:1142.000A: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.3-1/input0 [ 309.738175][ T5265] usb 4-1: USB disconnect, device number 14 [ 309.813246][ T5265] hid-steam 0003:28DE:1142.0009: Steam wireless receiver disconnected [ 310.232164][ T8659] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 314.615348][ T8675] netlink: 'syz.4.1083': attribute type 21 has an invalid length. [ 315.398017][ T8675] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1083'. [ 315.419404][ T8660] syz.1.1081 (8660) used greatest stack depth: 17976 bytes left [ 315.481636][ T8670] syz.3.1082 (8670) used greatest stack depth: 17968 bytes left [ 317.489736][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.496071][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.823141][ T8722] binder: 8716:8722 ioctl 4018620d 0 returned -22 [ 319.601352][ T8731] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1090'. [ 320.718454][ T30] INFO: task syz.3.528:6958 blocked for more than 143 seconds. [ 321.267839][ T30] Not tainted 6.10.0-syzkaller-12888-g5437f30d3458 #0 [ 321.333784][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 321.379145][ T30] task:syz.3.528 state:D stack:25584 pid:6958 tgid:6957 ppid:5227 flags:0x00004004 [ 321.890199][ T8759] netlink: 'syz.0.1101': attribute type 21 has an invalid length. [ 321.898421][ T8759] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1101'. [ 322.209383][ T8759] evm: overlay not supported [ 322.837513][ T30] Call Trace: [ 322.850440][ T30] [ 322.884438][ T30] __schedule+0x17ae/0x4a10 [ 322.987532][ T30] ? __pfx___schedule+0x10/0x10 [ 323.000804][ T30] ? __pfx_lock_release+0x10/0x10 [ 323.019694][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 323.107454][ T30] ? schedule+0x90/0x320 [ 323.114448][ T30] schedule+0x14b/0x320 [ 323.160866][ T30] schedule_preempt_disabled+0x13/0x30 [ 323.177558][ T30] __ww_mutex_lock+0xec2/0x2790 [ 323.182464][ T30] ? __ww_mutex_lock+0xb08/0x2790 [ 323.227419][ T30] ? drm_modeset_lock+0x6f/0x90 [ 323.232338][ T30] ? __pfx___ww_mutex_lock+0x10/0x10 [ 323.264018][ T30] ? __drm_mode_object_find+0x448/0x5d0 [ 323.296349][ T30] ? __pfx___drm_mode_object_find+0x10/0x10 [ 323.337449][ T30] ww_mutex_lock+0x40/0x1f0 [ 323.342022][ T30] ? drm_modeset_lock+0x65/0x90 [ 323.346904][ T30] drm_modeset_lock+0x6f/0x90 [ 323.435769][ T30] drm_mode_getcrtc+0x152/0x770 [ 323.462078][ T30] drm_ioctl_kernel+0x33a/0x440 [ 323.467007][ T30] ? __pfx_drm_mode_getcrtc+0x10/0x10 [ 323.519134][ T30] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 323.548228][ T30] ? __might_fault+0xc6/0x120 [ 323.552995][ T30] drm_ioctl+0x611/0xad0 [ 323.557278][ T30] ? __pfx_drm_mode_getcrtc+0x10/0x10 [ 323.613931][ T30] ? __pfx_drm_ioctl+0x10/0x10 [ 323.665132][ T30] ? bpf_lsm_file_ioctl+0x9/0x10 [ 323.688928][ T30] ? security_file_ioctl+0x87/0xb0 [ 323.694108][ T30] ? __pfx_drm_ioctl+0x10/0x10 [ 323.758608][ T30] __se_sys_ioctl+0xfc/0x170 [ 323.763266][ T30] do_syscall_64+0xf3/0x230 [ 323.809662][ T30] ? clear_bhb_loop+0x35/0x90 [ 323.814407][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.884016][ T30] RIP: 0033:0x7f677d977299 [ 323.897429][ T30] RSP: 002b:00007f677e702048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 323.905902][ T30] RAX: ffffffffffffffda RBX: 00007f677db05f80 RCX: 00007f677d977299 [ 323.994054][ T30] RDX: 00000000200002c0 RSI: 00000000c06864a1 RDI: 0000000000000008 [ 324.044358][ T30] RBP: 00007f677d9e48e6 R08: 0000000000000000 R09: 0000000000000000 [ 324.084431][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 324.127350][ T30] R13: 000000000000000b R14: 00007f677db05f80 R15: 00007ffcaa7c28c8 [ 324.135397][ T30] [ 324.189411][ T30] [ 324.189411][ T30] Showing all locks held in the system: [ 324.197175][ T30] 1 lock held by khungtaskd/30: [ 324.258478][ T30] #0: ffffffff8e737660 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 324.309014][ T30] 2 locks held by kworker/0:2/941: [ 324.314171][ T30] #0: ffff888015480948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 324.392062][ T30] #1: ffffc90003e87d00 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 324.450874][ T30] 2 locks held by getty/4967: [ 324.455611][ T30] #0: ffff88802ae8a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 324.525437][ T30] #1: ffffc900031232f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 324.587425][ T30] 3 locks held by syz.4.511/6902: [ 324.592500][ T30] 1 lock held by syz.3.528/6958: [ 324.637482][ T30] #0: ffff8880206d80b0 (crtc_ww_class_mutex){+.+.}-{3:3}, at: drm_modeset_lock+0x6f/0x90 [ 324.657440][ T30] 1 lock held by syz.2.603/7189: [ 324.662413][ T30] #0: ffff8880206d80b0 (crtc_ww_class_mutex){+.+.}-{3:3}, at: drm_modeset_lock+0x6f/0x90 [ 324.727423][ T30] 1 lock held by syz-executor/8030: [ 324.732670][ T30] #0: ffffffff8e73ca38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 324.814056][ T30] 1 lock held by syz.2.900/8127: [ 324.844354][ T30] 2 locks held by kworker/u8:17/8679: [ 324.871794][ T30] #0: ffff88801ab32948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 324.924359][ T30] #1: ffffc90004e1fd00 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 324.997414][ T30] 2 locks held by kworker/u8:31/8699: [ 325.002805][ T30] 1 lock held by syz.2.1098/8741: [ 325.030713][ T30] #0: ffff88805e41ac08 (&sb->s_type->i_mutex_key#9){+.+.}-{3:3}, at: sock_close+0x90/0x240 [ 325.069802][ T30] 1 lock held by syz.4.1099/8747: [ 325.090521][ T30] #0: ffffffff8e73ca38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 325.129192][ T30] 2 locks held by vhost-8747/8748: [ 325.134353][ T30] #0: ffff88802ed800e8 (&vtsk->exit_mutex){+.+.}-{3:3}, at: vhost_task_fn+0x2f3/0x3f0 [ 325.203217][ T30] #1: ffff88807861d378 (&worker->mutex){+.+.}-{3:3}, at: vhost_worker_killed+0x57/0x390 [ 325.251211][ T30] [ 325.282203][ T30] ============================================= [ 325.282203][ T30] [ 325.293244][ T5216] Bluetooth: hci7: Controller not accepting commands anymore: ncmd = 0 [ 325.302700][ T5216] Bluetooth: hci7: Injecting HCI hardware error event [ 325.330159][ T5216] Bluetooth: hci7: hardware error 0x00 [ 325.387881][ T30] NMI backtrace for cpu 0 [ 325.392259][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-syzkaller-12888-g5437f30d3458 #0 [ 325.402434][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 325.412503][ T30] Call Trace: [ 325.415792][ T30] [ 325.418735][ T30] dump_stack_lvl+0x241/0x360 [ 325.423441][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 325.428652][ T30] ? __pfx__printk+0x10/0x10 [ 325.433250][ T30] ? vprintk_emit+0x631/0x770 [ 325.437937][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 325.443159][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 325.448112][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 325.453561][ T30] ? _printk+0xd5/0x120 [ 325.457720][ T30] ? __pfx__printk+0x10/0x10 [ 325.462304][ T30] ? __wake_up_klogd+0xcc/0x110 [ 325.467154][ T30] ? __pfx__printk+0x10/0x10 [ 325.471753][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 325.476773][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 325.482755][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 325.488732][ T30] watchdog+0xfee/0x1030 [ 325.492975][ T30] ? watchdog+0x1ea/0x1030 [ 325.497398][ T30] ? __pfx_watchdog+0x10/0x10 [ 325.502079][ T30] kthread+0x2f0/0x390 [ 325.506158][ T30] ? __pfx_watchdog+0x10/0x10 [ 325.510840][ T30] ? __pfx_kthread+0x10/0x10 [ 325.515423][ T30] ret_from_fork+0x4b/0x80 [ 325.519867][ T30] ? __pfx_kthread+0x10/0x10 [ 325.524453][ T30] ret_from_fork_asm+0x1a/0x30 [ 325.529234][ T30] [ 325.533660][ T30] Sending NMI from CPU 0 to CPUs 1: [ 325.540148][ C1] NMI backtrace for cpu 1 [ 325.540162][ C1] CPU: 1 UID: 0 PID: 5262 Comm: kworker/1:2 Not tainted 6.10.0-syzkaller-12888-g5437f30d3458 #0 [ 325.540182][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 325.540192][ C1] Workqueue: events free_obj_work [ 325.540214][ C1] RIP: 0010:unwind_next_frame+0x1d6d/0x2a00 [ 325.540241][ C1] Code: 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 fa 71 b6 00 4c 89 33 43 0f b6 04 2f 84 c0 0f 85 5a 09 00 00 44 8b 75 00 44 89 f7 <8b> 9c 24 8c 00 00 00 89 de e8 75 5f 52 00 41 39 de 0f 85 c4 00 00 [ 325.540255][ C1] RSP: 0018:ffffc90003f17568 EFLAGS: 00000246 [ 325.540268][ C1] RAX: 0000000000000000 RBX: ffffffff90875cd6 RCX: ffff88801f47bc00 [ 325.540280][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 325.540290][ C1] RBP: ffffc90003f17640 R08: ffffffff8141354b R09: ffffffff814120bf [ 325.540302][ C1] R10: 0000000000000003 R11: ffff88801f47bc00 R12: ffffc90003f17a00 [ 325.540313][ C1] R13: dffffc0000000000 R14: 0000000000000001 R15: 1ffff920007e2ec8 [ 325.540324][ C1] FS: 0000000000000000(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 325.540338][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 325.540349][ C1] CR2: 00007ffcddacbc78 CR3: 000000000e534000 CR4: 00000000003506f0 [ 325.540363][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 325.540372][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 325.540382][ C1] Call Trace: [ 325.540388][ C1] [ 325.540396][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 325.540412][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 325.540436][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 325.540451][ C1] ? nmi_handle+0x2a/0x5a0 [ 325.540474][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 325.540495][ C1] ? nmi_handle+0x14f/0x5a0 [ 325.540509][ C1] ? nmi_handle+0x2a/0x5a0 [ 325.540525][ C1] ? unwind_next_frame+0x1d6d/0x2a00 [ 325.540548][ C1] ? default_do_nmi+0x63/0x160 [ 325.540564][ C1] ? exc_nmi+0x123/0x1f0 [ 325.540579][ C1] ? end_repeat_nmi+0xf/0x53 [ 325.540605][ C1] ? unwind_next_frame+0x196f/0x2a00 [ 325.540627][ C1] ? deref_stack_reg+0xab/0x260 [ 325.540650][ C1] ? unwind_next_frame+0x1d6d/0x2a00 [ 325.540674][ C1] ? unwind_next_frame+0x1d6d/0x2a00 [ 325.540698][ C1] ? unwind_next_frame+0x1d6d/0x2a00 [ 325.540726][ C1] [ 325.540731][ C1] [ 325.540742][ C1] ? kasan_save_track+0x3f/0x80 [ 325.540761][ C1] ? kasan_save_track+0x3f/0x80 [ 325.540776][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 325.540797][ C1] arch_stack_walk+0x151/0x1b0 [ 325.540815][ C1] ? free_obj_work+0x4ff/0x6d0 [ 325.540830][ C1] ? kasan_save_free_info+0x40/0x50 [ 325.540856][ C1] stack_trace_save+0x118/0x1d0 [ 325.540876][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 325.540898][ C1] ? stack_depot_save_flags+0x29/0x830 [ 325.540919][ C1] kasan_save_track+0x3f/0x80 [ 325.540934][ C1] ? kasan_save_track+0x3f/0x80 [ 325.540979][ C1] ? free_obj_work+0x4ff/0x6d0 [ 325.540993][ C1] kasan_save_free_info+0x40/0x50 [ 325.541015][ C1] poison_slab_object+0xe0/0x150 [ 325.541033][ C1] ? free_obj_work+0x4ff/0x6d0 [ 325.541048][ C1] __kasan_slab_free+0x37/0x60 [ 325.541065][ C1] kmem_cache_free+0x145/0x350 [ 325.541090][ C1] free_obj_work+0x4ff/0x6d0 [ 325.541108][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 325.541128][ C1] ? __pfx_free_obj_work+0x10/0x10 [ 325.541145][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 325.541172][ C1] ? process_scheduled_works+0x945/0x1830 [ 325.541192][ C1] process_scheduled_works+0xa2c/0x1830 [ 325.541227][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 325.541253][ C1] ? assign_work+0x364/0x3d0 [ 325.541275][ C1] worker_thread+0x86d/0xd40 [ 325.541303][ C1] ? __kthread_parkme+0x169/0x1d0 [ 325.541326][ C1] ? __pfx_worker_thread+0x10/0x10 [ 325.541347][ C1] kthread+0x2f0/0x390 [ 325.541360][ C1] ? __pfx_worker_thread+0x10/0x10 [ 325.541380][ C1] ? __pfx_kthread+0x10/0x10 [ 325.541394][ C1] ret_from_fork+0x4b/0x80 [ 325.541416][ C1] ? __pfx_kthread+0x10/0x10 [ 325.541429][ C1] ret_from_fork_asm+0x1a/0x30 [ 325.541459][ C1] [ 325.545940][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 325.957078][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.10.0-syzkaller-12888-g5437f30d3458 #0 [ 325.967224][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 325.977279][ T30] Call Trace: [ 325.980553][ T30] [ 325.983479][ T30] dump_stack_lvl+0x241/0x360 [ 325.988168][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 325.993373][ T30] ? __pfx__printk+0x10/0x10 [ 325.997954][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 326.003933][ T30] ? vscnprintf+0x5d/0x90 [ 326.008251][ T30] panic+0x349/0x860 [ 326.012136][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 326.018276][ T30] ? __pfx_panic+0x10/0x10 [ 326.022681][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 326.028042][ T30] ? __irq_work_queue_local+0x137/0x410 [ 326.033579][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 326.038940][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 326.045078][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 326.051221][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 326.057365][ T30] watchdog+0x102d/0x1030 [ 326.061699][ T30] ? watchdog+0x1ea/0x1030 [ 326.066112][ T30] ? __pfx_watchdog+0x10/0x10 [ 326.070781][ T30] kthread+0x2f0/0x390 [ 326.074836][ T30] ? __pfx_watchdog+0x10/0x10 [ 326.079503][ T30] ? __pfx_kthread+0x10/0x10 [ 326.084082][ T30] ret_from_fork+0x4b/0x80 [ 326.088501][ T30] ? __pfx_kthread+0x10/0x10 [ 326.093086][ T30] ret_from_fork_asm+0x1a/0x30 [ 326.097852][ T30] [ 326.100957][ T30] Kernel Offset: disabled [ 326.105266][ T30] Rebooting in 86400 seconds..