last executing test programs: 1m57.805958512s ago: executing program 4 (id=2785): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0xc208ae62, 0x0) 1m57.558247404s ago: executing program 4 (id=2788): rename(&(0x7f0000000e00)='./file0\x00', &(0x7f0000001080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff6000/0x3000)=nil) prlimit64(0x0, 0xd, &(0x7f0000000340)={0x4ec}, 0x0) r2 = shmat(r1, &(0x7f0000ff9000/0x4000)=nil, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ff9000/0x2000)=nil) r3 = memfd_create(0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x9e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x6000009, 0x10, r3, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xeee141d97cdc3b16, 0x10, 0xffffffffffffffff, 0x0) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000040)=""/17) shmctl$IPC_RMID(0x0, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f000069f000/0x4000)=nil) mlock2(&(0x7f0000048000/0x2000)=nil, 0x2000, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) ftruncate(r4, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0xffffffffffffffff, r5) ptrace(0x8, r5) shmdt(r2) syz_clone3(&(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000180), {0x2a}, &(0x7f0000000400), 0x0, 0x0, &(0x7f0000000540), 0x0, {r0}}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x16, 0x9, 0x8, 0x3, 0x180, 0xffffffffffffffff, 0xab51, '\x00', 0x0, r4, 0x3, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x48) 1m55.290635035s ago: executing program 2 (id=2794): rename(&(0x7f0000000e00)='./file0\x00', &(0x7f0000001080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff6000/0x3000)=nil) prlimit64(0x0, 0xd, &(0x7f0000000340)={0x4ec}, 0x0) r2 = shmat(r1, &(0x7f0000ff9000/0x4000)=nil, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ff9000/0x2000)=nil) r3 = memfd_create(0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x9e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x6000009, 0x10, r3, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xeee141d97cdc3b16, 0x10, 0xffffffffffffffff, 0x0) shmctl$IPC_STAT(r1, 0x2, &(0x7f0000000040)=""/17) shmctl$IPC_RMID(0x0, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f000069f000/0x4000)=nil) mlock2(&(0x7f0000048000/0x2000)=nil, 0x2000, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) ftruncate(r4, 0x0) ptrace(0xffffffffffffffff, 0x0) ptrace(0x8, 0x0) shmdt(r2) syz_clone3(&(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000180), {0x2a}, &(0x7f0000000400), 0x0, 0x0, &(0x7f0000000540), 0x0, {r0}}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x16, 0x9, 0x8, 0x3, 0x180, 0xffffffffffffffff, 0xab51, '\x00', 0x0, r4, 0x3, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x48) 1m5.474356269s ago: executing program 3 (id=2933): r0 = socket(0x2b, 0x1, 0x0) connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}, 0x4}}, 0x10) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x11e, 0x1, 0x0, 0x20000000) 1m5.333957359s ago: executing program 3 (id=2934): r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f1c46b7b31afdc1338d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade", 0x55}], 0x1}, 0x0) write(r0, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000003100f000ee1000c08000b0000000000", 0x24) 1m2.611797134s ago: executing program 3 (id=2937): openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = fanotify_init(0x200, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r4, 0x61, 0x40001002, r5, 0x0) fanotify_mark(r4, 0x1, 0x4800003e, r3, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x105042, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2000000000000344, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r6, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x4f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) pipe2(&(0x7f0000000040), 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) 58.172983009s ago: executing program 3 (id=2953): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x0, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x37}]}}]}, 0x3c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x50}}, 0x0) 57.650612928s ago: executing program 3 (id=2955): r0 = socket$inet6(0xa, 0x80003, 0x6e) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_int(r1, 0x29, 0x4c, &(0x7f0000000280)=0x10000000, 0x4) 57.290715796s ago: executing program 3 (id=2957): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$netlink(0x10, 0x3, 0x15) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000005000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x23000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r4 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}}) io_uring_enter(r4, 0x5b43, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/udplite\x00') r7 = syz_open_procfs(0x0, &(0x7f0000000500)='fdinfo\x00') getdents64(r7, &(0x7f0000000080)=""/38, 0x26) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='erofs\x00', 0x0, 0x0) r8 = inotify_init1(0x0) fcntl$setown(r8, 0x8, 0xffffffffffffffff) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r9, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 54.650596691s ago: executing program 2 (id=2829): syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000082505a8a440000102030109021b00010100000009040000010701"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001900090000000000000000001c140000fe0000010000000014001200"], 0x30}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) 52.230457454s ago: executing program 4 (id=2826): rename(&(0x7f0000000e00)='./file0\x00', &(0x7f0000001080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff6000/0x3000)=nil) prlimit64(0x0, 0xd, &(0x7f0000000340)={0x4ec}, 0x0) r2 = shmat(r1, &(0x7f0000ff9000/0x4000)=nil, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ff9000/0x2000)=nil) r3 = memfd_create(0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x9e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x6000009, 0x10, r3, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xeee141d97cdc3b16, 0x10, 0xffffffffffffffff, 0x0) shmctl$IPC_STAT(r1, 0x2, 0x0) shmctl$IPC_RMID(0x0, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f000069f000/0x4000)=nil) mlock2(&(0x7f0000048000/0x2000)=nil, 0x2000, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) ftruncate(r4, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0xffffffffffffffff, r5) ptrace(0x8, r5) shmdt(r2) syz_clone3(&(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000180), {0x2a}, &(0x7f0000000400), 0x0, 0x0, &(0x7f0000000540), 0x0, {r0}}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x16, 0x9, 0x8, 0x3, 0x180, 0xffffffffffffffff, 0xab51, '\x00', 0x0, r4, 0x3, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x48) 51.390202433s ago: executing program 2 (id=2829): syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000082505a8a440000102030109021b00010100000009040000010701"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001900090000000000000000001c140000fe0000010000000014001200"], 0x30}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) 39.58583641s ago: executing program 4 (id=2826): rename(&(0x7f0000000e00)='./file0\x00', &(0x7f0000001080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff6000/0x3000)=nil) prlimit64(0x0, 0xd, &(0x7f0000000340)={0x4ec}, 0x0) r2 = shmat(r1, &(0x7f0000ff9000/0x4000)=nil, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ff9000/0x2000)=nil) r3 = memfd_create(0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x9e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x6000009, 0x10, r3, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xeee141d97cdc3b16, 0x10, 0xffffffffffffffff, 0x0) shmctl$IPC_STAT(r1, 0x2, 0x0) shmctl$IPC_RMID(0x0, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f000069f000/0x4000)=nil) mlock2(&(0x7f0000048000/0x2000)=nil, 0x2000, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) ftruncate(r4, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0xffffffffffffffff, r5) ptrace(0x8, r5) shmdt(r2) syz_clone3(&(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000180), {0x2a}, &(0x7f0000000400), 0x0, 0x0, &(0x7f0000000540), 0x0, {r0}}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x16, 0x9, 0x8, 0x3, 0x180, 0xffffffffffffffff, 0xab51, '\x00', 0x0, r4, 0x3, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x48) 39.542501736s ago: executing program 2 (id=2829): syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000082505a8a440000102030109021b00010100000009040000010701"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001900090000000000000000001c140000fe0000010000000014001200"], 0x30}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) 33.351413559s ago: executing program 0 (id=3000): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) 31.846484201s ago: executing program 0 (id=3001): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)={0x4c, r1, 0x2b8ee6cf79dab3f, 0x0, 0x0, {0x2e}, [{@pci={{0x10}, {0x11}}, {0x1c}}]}, 0x4c}}, 0x0) 31.709498353s ago: executing program 0 (id=3002): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x54, r1, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x90}, {0xc}}]}, 0x54}}, 0x0) 31.549728055s ago: executing program 0 (id=3003): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)={0x30, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVKEY={0x10, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}]}, 0x30}}, 0x0) 30.762066402s ago: executing program 0 (id=3004): rename(&(0x7f0000000e00)='./file0\x00', &(0x7f0000001080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff6000/0x3000)=nil) prlimit64(0x0, 0xd, &(0x7f0000000340)={0x4ec}, 0x0) r2 = shmat(r1, &(0x7f0000ff9000/0x4000)=nil, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ff9000/0x2000)=nil) r3 = memfd_create(0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x9e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x6000009, 0x10, r3, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xeee141d97cdc3b16, 0x10, 0xffffffffffffffff, 0x0) shmctl$IPC_STAT(r1, 0x2, 0x0) shmctl$IPC_RMID(0x0, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f000069f000/0x4000)=nil) mlock2(&(0x7f0000048000/0x2000)=nil, 0x2000, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) ftruncate(r4, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0xffffffffffffffff, r5) ptrace(0x8, r5) shmdt(r2) syz_clone3(&(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000180), {0x2a}, &(0x7f0000000400), 0x0, 0x0, &(0x7f0000000540), 0x0, {r0}}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x16, 0x9, 0x8, 0x3, 0x180, 0xffffffffffffffff, 0xab51, '\x00', 0x0, r4, 0x3, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x48) 30.665132456s ago: executing program 4 (id=2826): rename(&(0x7f0000000e00)='./file0\x00', &(0x7f0000001080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff6000/0x3000)=nil) prlimit64(0x0, 0xd, &(0x7f0000000340)={0x4ec}, 0x0) r2 = shmat(r1, &(0x7f0000ff9000/0x4000)=nil, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ff9000/0x2000)=nil) r3 = memfd_create(0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x9e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x6000009, 0x10, r3, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xeee141d97cdc3b16, 0x10, 0xffffffffffffffff, 0x0) shmctl$IPC_STAT(r1, 0x2, 0x0) shmctl$IPC_RMID(0x0, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f000069f000/0x4000)=nil) mlock2(&(0x7f0000048000/0x2000)=nil, 0x2000, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) ftruncate(r4, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0xffffffffffffffff, r5) ptrace(0x8, r5) shmdt(r2) syz_clone3(&(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000180), {0x2a}, &(0x7f0000000400), 0x0, 0x0, &(0x7f0000000540), 0x0, {r0}}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x16, 0x9, 0x8, 0x3, 0x180, 0xffffffffffffffff, 0xab51, '\x00', 0x0, r4, 0x3, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x48) 30.487935926s ago: executing program 2 (id=2829): syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000082505a8a440000102030109021b00010100000009040000010701"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001900090000000000000000001c140000fe0000010000000014001200"], 0x30}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) 25.618031122s ago: executing program 1 (id=3012): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x1c}}, 0x0) 25.45061729s ago: executing program 1 (id=3013): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x8, 0x100000, 0x3}) 25.142259064s ago: executing program 1 (id=3014): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$netlink(0x10, 0x3, 0x15) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000005000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x23000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r5 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000a40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x0, r8, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}}) io_uring_enter(r5, 0x5b43, 0x0, 0x0, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udplite\x00') r10 = syz_open_procfs(0x0, &(0x7f0000000500)='fdinfo\x00') getdents64(r10, &(0x7f0000000080)=""/38, 0x26) fchdir(r9) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='erofs\x00', 0x0, 0x0) r11 = inotify_init1(0x0) fcntl$setown(r11, 0x8, 0xffffffffffffffff) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, 0x0) r12 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r12, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 18.239842725s ago: executing program 1 (id=3016): unshare(0x2a020400) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) 18.016240234s ago: executing program 1 (id=3017): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = fanotify_init(0x200, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r4, 0x61, 0x40001002, r5, 0x0) fanotify_mark(r4, 0x1, 0x4800003e, r3, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x105042, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2000000000000344, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r6, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x4f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) pipe2(&(0x7f0000000040), 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) 1.852065834s ago: executing program 0 (id=3015): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = fanotify_init(0x200, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r4, 0x61, 0x40001002, r5, 0x0) fanotify_mark(r4, 0x1, 0x4800003e, r3, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x105042, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2000000000000344, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r6, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x4f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) pipe2(&(0x7f0000000040), 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) 985.997602ms ago: executing program 2 (id=2829): syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000082505a8a440000102030109021b00010100000009040000010701"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001900090000000000000000001c140000fe0000010000000014001200"], 0x30}, 0x1, 0x0, 0x0, 0x8000000}, 0x0) 134.120872ms ago: executing program 4 (id=2826): rename(&(0x7f0000000e00)='./file0\x00', &(0x7f0000001080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ff6000/0x3000)=nil) prlimit64(0x0, 0xd, &(0x7f0000000340)={0x4ec}, 0x0) r2 = shmat(r1, &(0x7f0000ff9000/0x4000)=nil, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ff9000/0x2000)=nil) r3 = memfd_create(0x0, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x9e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x6000009, 0x10, r3, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./bus\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xeee141d97cdc3b16, 0x10, 0xffffffffffffffff, 0x0) shmctl$IPC_STAT(r1, 0x2, 0x0) shmctl$IPC_RMID(0x0, 0x0) shmget$private(0x0, 0x4000, 0x0, &(0x7f000069f000/0x4000)=nil) mlock2(&(0x7f0000048000/0x2000)=nil, 0x2000, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) ftruncate(r4, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0xffffffffffffffff, r5) ptrace(0x8, r5) shmdt(r2) syz_clone3(&(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000180), {0x2a}, &(0x7f0000000400), 0x0, 0x0, &(0x7f0000000540), 0x0, {r0}}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x16, 0x9, 0x8, 0x3, 0x180, 0xffffffffffffffff, 0xab51, '\x00', 0x0, r4, 0x3, 0x4, 0x2, 0x0, @void, @value, @void, @value}, 0x48) 0s ago: executing program 1 (id=3018): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0) read$FUSE(r0, &(0x7f0000002240)={0x2020}, 0x2020) writev(r0, &(0x7f0000000080)=[{&(0x7f0000002080)='T01\n', 0x4}, {&(0x7f0000000040)="d7d9bedc9c220ccc8f81b568c5aa206b215b627e7e6e9c43494bffe3ba3d9693ed66bb2d98455cb0dfd2363a22747dda", 0x30}], 0x2) kernel console output (not intermixed with test programs): speed USB device number 32 using dummy_hcd [ 1720.517945][ T5354] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1720.549596][ T5354] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1720.575775][ T5354] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1720.605449][ T5354] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1720.625948][T11535] usb 1-1: Using ep0 maxpacket: 16 [ 1720.627942][T18878] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1720.650533][T11535] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1720.671759][ T5354] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1720.689467][T11535] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1720.724911][T11535] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1720.806106][T11535] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1720.837925][T11535] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1720.910158][T11535] usb 1-1: config 0 descriptor?? [ 1722.991132][T11535] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 1723.210321][T11535] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 1723.249241][T11535] microsoft 0003:045E:07DA.0013: unknown main item tag 0x0 [ 1723.360038][T11535] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0013/input/input25 [ 1724.274628][T11535] microsoft 0003:045E:07DA.0013: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 1724.304810][ T5354] usb 3-1: USB disconnect, device number 22 [ 1724.409776][T11535] usb 1-1: USB disconnect, device number 32 [ 1724.473361][T18922] hpfs: bad mount options. [ 1724.889916][T11535] usb 5-1: USB disconnect, device number 30 [ 1725.034142][T18947] tipc: Failed to obtain node identity [ 1725.056527][T18947] tipc: Enabling of bearer rejected, failed to enable media [ 1725.800020][T18954] openvswitch: netlink: Message has 225 unknown bytes. [ 1725.825768][T18954] openvswitch: netlink: Actions may not be safe on all matching packets [ 1725.918808][ T29] audit: type=1400 audit(1728859081.298:862): avc: denied { ioctl } for pid=18955 comm="syz.0.2531" path="socket:[86928]" dev="sockfs" ino=86928 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 1725.995327][ T5272] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1726.015802][T18962] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2535'. [ 1726.201605][ T5272] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1726.409169][ T5272] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1726.659447][ T5272] usb 2-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 1726.831507][ T5272] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1726.863153][ T5272] usb 2-1: config 0 descriptor?? [ 1727.312247][ T5272] logitech 0003:046D:CA04.0014: unknown main item tag 0x0 [ 1727.355495][ T5272] logitech 0003:046D:CA04.0014: unknown main item tag 0x0 [ 1727.420127][ T5272] logitech 0003:046D:CA04.0014: unknown main item tag 0x0 [ 1727.489132][ T5272] logitech 0003:046D:CA04.0014: unknown main item tag 0x0 [ 1727.555756][ T5272] logitech 0003:046D:CA04.0014: unknown main item tag 0x0 [ 1727.632728][ T5272] logitech 0003:046D:CA04.0014: hidraw0: USB HID v0.00 Device [HID 046d:ca04] on usb-dummy_hcd.1-1/input0 [ 1727.744099][ T5272] logitech 0003:046D:CA04.0014: no inputs found [ 1727.754840][T18998] random: crng reseeded on system resumption [ 1727.770686][ T5272] usb 2-1: USB disconnect, device number 23 [ 1730.482317][ T1260] ieee802154 phy0 wpan0: encryption failed: -22 [ 1731.204780][T19030] hub 6-0:1.0: USB hub found [ 1731.210920][T19030] hub 6-0:1.0: 1 port detected [ 1732.405694][ T5267] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1732.488220][T19058] hub 6-0:1.0: USB hub found [ 1732.494125][T19058] hub 6-0:1.0: 1 port detected [ 1732.668056][ T5267] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1732.717292][T15487] Bluetooth: hci2: command 0x0406 tx timeout [ 1732.826445][ T5267] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1733.043726][ T5267] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1733.075711][ T5267] usb 2-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 1733.095700][ T5267] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1733.851160][ T5267] usb 2-1: config 0 descriptor?? [ 1734.159558][T18965] syz.0.2534: vmalloc error: size 3584000, failed to allocated page array size 7000, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1734.196377][T18965] CPU: 1 UID: 0 PID: 18965 Comm: syz.0.2534 Not tainted 6.12.0-rc2-syzkaller-00320-gba01565ced22 #0 [ 1734.207192][T18965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1734.217286][T18965] Call Trace: [ 1734.220593][T18965] [ 1734.223544][T18965] dump_stack_lvl+0x16c/0x1f0 [ 1734.228276][T18965] warn_alloc+0x24d/0x3a0 [ 1734.232644][T18965] ? __pfx_warn_alloc+0x10/0x10 [ 1734.237540][T18965] ? __get_vm_area_node+0x190/0x2d0 [ 1734.242789][T18965] ? __get_vm_area_node+0x1bc/0x2d0 [ 1734.248047][T18965] __vmalloc_node_range_noprof+0x114a/0x15a0 [ 1734.254075][T18965] ? __v4l2_ctrl_modify_dimensions+0x1c7/0x650 [ 1734.260264][T18965] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1734.266612][T18965] ? __get_vm_area_node+0x190/0x2d0 [ 1734.271825][T18965] ? __get_vm_area_node+0x1bc/0x2d0 [ 1734.277046][T18965] __vmalloc_node_range_noprof+0xd85/0x15a0 [ 1734.282953][T18965] ? __v4l2_ctrl_modify_dimensions+0x1c7/0x650 [ 1734.289124][T18965] ? __mutex_trylock_common+0xea/0x250 [ 1734.294608][T18965] ? __v4l2_ctrl_modify_dimensions+0x1c7/0x650 [ 1734.300783][T18965] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1734.307118][T18965] ? rcu_is_watching+0x12/0xc0 [ 1734.311892][T18965] ? rcu_is_watching+0x12/0xc0 [ 1734.316667][T18965] ? trace_kmalloc+0x2d/0xe0 [ 1734.321271][T18965] ? __kmalloc_node_noprof.cold+0x5a/0x5f [ 1734.327007][T18965] ? __v4l2_ctrl_modify_dimensions+0x1c7/0x650 [ 1734.333182][T18965] __kvmalloc_node_noprof+0x14f/0x1a0 [ 1734.338573][T18965] ? __v4l2_ctrl_modify_dimensions+0x1c7/0x650 [ 1734.344739][T18965] __v4l2_ctrl_modify_dimensions+0x1c7/0x650 [ 1734.350736][T18965] vivid_update_format_cap+0x127b/0x2530 [ 1734.356393][T18965] ? __pfx_vivid_update_format_cap+0x10/0x10 [ 1734.362386][T18965] ? v4l2_find_dv_timings_cap+0x133/0x450 [ 1734.368120][T18965] ? v4l2_match_dv_timings+0x1df/0x1010 [ 1734.373682][T18965] vivid_vid_cap_s_dv_timings+0xc0f/0xfb0 [ 1734.379428][T18965] vidioc_s_dv_timings+0xa5/0xc0 [ 1734.384386][T18965] ? v4l_stub_s_dv_timings+0x1b/0x60 [ 1734.389685][T18965] __video_do_ioctl+0xaf0/0xf00 [ 1734.394557][T18965] ? __pfx___video_do_ioctl+0x10/0x10 [ 1734.399957][T18965] video_usercopy+0x4ce/0x1600 [ 1734.404743][T18965] ? __pfx___video_do_ioctl+0x10/0x10 [ 1734.410138][T18965] ? __pfx_video_usercopy+0x10/0x10 [ 1734.415372][T18965] v4l2_ioctl+0x1ba/0x250 [ 1734.419719][T18965] ? __pfx_v4l2_ioctl+0x10/0x10 [ 1734.424592][T18965] __x64_sys_ioctl+0x18f/0x220 [ 1734.429381][T18965] do_syscall_64+0xcd/0x250 [ 1734.433902][T18965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1734.439815][T18965] RIP: 0033:0x7f8b6f57dff9 [ 1734.444249][T18965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1734.463871][T18965] RSP: 002b:00007f8b703ba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1734.472307][T18965] RAX: ffffffffffffffda RBX: 00007f8b6f735f80 RCX: 00007f8b6f57dff9 [ 1734.480290][T18965] RDX: 0000000020000200 RSI: 00000000c0845657 RDI: 0000000000000003 [ 1734.488266][T18965] RBP: 00007f8b6f5f0296 R08: 0000000000000000 R09: 0000000000000000 [ 1734.496244][T18965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1734.504224][T18965] R13: 0000000000000000 R14: 00007f8b6f735f80 R15: 00007ffd0b520a18 [ 1734.512227][T18965] [ 1734.535797][T12297] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1734.570648][T18965] Mem-Info: [ 1734.573983][T18965] active_anon:10632 inactive_anon:0 isolated_anon:0 [ 1734.573983][T18965] active_file:13556 inactive_file:44423 isolated_file:0 [ 1734.573983][T18965] unevictable:768 dirty:133 writeback:0 [ 1734.573983][T18965] slab_reclaimable:11015 slab_unreclaimable:105987 [ 1734.573983][T18965] mapped:26119 shmem:5481 pagetables:912 [ 1734.573983][T18965] sec_pagetables:0 bounce:0 [ 1734.573983][T18965] kernel_misc_reclaimable:0 [ 1734.573983][T18965] free:1259938 free_pcp:2218 free_cma:0 [ 1734.634969][T18965] Node 0 active_anon:42828kB inactive_anon:0kB active_file:54188kB inactive_file:177580kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:104400kB dirty:532kB writeback:0kB shmem:20388kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10596kB pagetables:3748kB sec_pagetables:0kB all_unreclaimable? no [ 1734.665947][ T5267] kye 0003:0458:0087.0015: item fetching failed at offset 0/2 [ 1734.685212][T18965] Node 1 active_anon:0kB inactive_anon:0kB active_file:36kB inactive_file:112kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:76kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1734.686126][ T5267] kye 0003:0458:0087.0015: parse failed [ 1734.716473][T18965] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1734.760115][T18965] lowmem_reserve[]: 0 2461 2461 0 0 [ 1734.767600][T12297] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1734.780800][T12297] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1734.783492][ T5267] kye 0003:0458:0087.0015: probe with driver kye failed with error -22 [ 1734.799338][T18965] Node 0 DMA32 free:1106700kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:42888kB inactive_anon:0kB active_file:54188kB inactive_file:177268kB unevictable:1536kB writepending:532kB present:3129332kB managed:2549168kB mlocked:0kB bounce:0kB free_pcp:1984kB local_pcp:920kB free_cma:0kB [ 1734.801234][T12297] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1734.851522][T12297] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1734.863613][T19073] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1734.874620][T18965] lowmem_reserve[]: 0 0 0 0 0 [ 1734.887074][T12297] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 1734.900061][T18965] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:312kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 1735.035623][T18965] lowmem_reserve[]: 0 0 0 0 0 [ 1735.050669][T18965] Node 1 Normal free:3924656kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:36kB inactive_file:112kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1735.231027][ T5354] usb 2-1: USB disconnect, device number 24 [ 1735.290116][T18965] lowmem_reserve[]: 0 0 0 0 0 [ 1735.342954][T18965] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1735.384630][T18965] Node 0 DMA32: 1*4kB (E) 6*8kB (ME) 461*16kB (UME) 300*32kB (UME) 204*64kB (ME) 75*128kB (UME) 69*256kB (UME) 52*512kB (UME) 27*1024kB (UME) 12*2048kB (M) 234*4096kB (UME) = 1094660kB [ 1735.995539][T18965] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1736.220811][T18965] Node 1 Normal: 180*4kB (UM) 56*8kB (UME) 44*16kB (UME) 203*32kB (UME) 86*64kB (UME) 37*128kB (UME) 14*256kB (UME) 12*512kB (UME) 3*1024kB (ME) 5*2048kB (UME) 948*4096kB (M) = 3924656kB [ 1736.489742][T18965] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1736.505885][T18965] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1736.515685][T18965] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1736.525359][T18965] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1736.536008][T18965] 66336 total pagecache pages [ 1736.540815][T18965] 0 pages in swap cache [ 1736.545412][T18965] Free swap = 123960kB [ 1736.549867][T18965] Total swap = 124996kB [ 1736.554135][T18965] 2097051 pages RAM [ 1736.558070][T18965] 0 pages HighMem/MovableOnly [ 1736.562870][T18965] 428037 pages reserved [ 1736.577679][T18965] 0 pages cma reserved [ 1737.085682][ T5267] usb 5-1: USB disconnect, device number 31 [ 1737.372519][T15487] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1737.391733][T15487] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1737.402324][T15487] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1737.415343][T15487] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1737.442693][T15487] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1737.455512][T15487] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1737.571791][T19126] Failed to initialize the IGMP autojoin socket (err -2) [ 1738.494638][ T5267] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1738.755680][ T5267] usb 5-1: Using ep0 maxpacket: 8 [ 1738.815713][ T5267] usb 5-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 1738.826055][ T5267] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1738.836074][T15506] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1738.847374][ T5267] usb 5-1: config 0 descriptor?? [ 1738.987507][T15506] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1739.013707][T15506] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1739.042026][T15506] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1739.095781][T15506] usb 2-1: New USB device found, idVendor=046d, idProduct=c287, bcdDevice= 0.00 [ 1739.107662][ T5267] usbhid 5-1:0.0: can't add hid device: -71 [ 1739.113696][ T5267] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1739.148958][T15506] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1739.164449][ T5267] usb 5-1: USB disconnect, device number 32 [ 1739.186949][T15506] usb 2-1: config 0 descriptor?? [ 1739.309508][T15487] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1739.328913][T15487] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1739.348135][T15487] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1739.359100][T15487] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1739.366998][T15487] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1739.374316][T15487] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1739.467451][T19164] Failed to initialize the IGMP autojoin socket (err -2) [ 1739.649159][T15506] logitech 0003:046D:C287.0016: unknown main item tag 0x3 [ 1739.697457][T15506] logitech 0003:046D:C287.0016: hidraw0: USB HID v0.00 Device [HID 046d:c287] on usb-dummy_hcd.1-1/input0 [ 1739.742592][T15506] logitech 0003:046D:C287.0016: no inputs found [ 1739.902120][T15506] usb 2-1: USB disconnect, device number 25 [ 1740.832317][T15487] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1740.845707][T15487] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1740.866176][T15487] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1740.880467][T15487] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1740.888109][T15487] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1740.895367][T15487] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1740.992949][T19196] Failed to initialize the IGMP autojoin socket (err -2) [ 1741.335835][ T5354] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1741.492731][ T5354] usb 5-1: Using ep0 maxpacket: 8 [ 1741.506284][ T5354] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1741.540778][ T5354] usb 5-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 1741.571011][ T5354] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 1741.599337][ T5354] usb 5-1: SerialNumber: syz [ 1741.634818][ T5354] usb 5-1: config 0 descriptor?? [ 1741.664340][ T5354] usb 5-1: Found UVC 0.00 device (05ac:8501) [ 1741.690784][ T5354] usb 5-1: No streaming interface found for terminal 36. [ 1741.936944][ T5354] usb 5-1: USB disconnect, device number 33 [ 1742.155176][ T2573] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1742.200432][ T2573] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1742.275865][T15506] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1742.475877][ T2573] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1742.476974][T15506] usb 3-1: Using ep0 maxpacket: 8 [ 1742.524618][ T2573] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1742.591215][T15506] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1742.602312][T15506] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1742.614912][T15506] usb 3-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 1742.615348][ T5225] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1742.677365][T15506] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1742.687877][ T5225] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1742.697132][T15506] usb 3-1: config 0 descriptor?? [ 1742.794411][ T5225] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1742.805427][ T5225] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1742.817657][ T5225] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1742.826415][ T5225] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1742.981145][T19238] Failed to initialize the IGMP autojoin socket (err -2) [ 1743.066054][ T5354] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1743.130454][ T2573] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1743.141054][ T2573] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1743.216195][ T5354] usb 5-1: Using ep0 maxpacket: 16 [ 1743.223699][T15506] lenovo 0003:17EF:6067.0017: unknown main item tag 0x0 [ 1743.243560][T15506] lenovo 0003:17EF:6067.0017: item fetching failed at offset 5/7 [ 1743.267967][ T5354] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 1743.281623][T15506] lenovo 0003:17EF:6067.0017: hid_parse failed [ 1743.295963][ T5354] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1743.314477][T15506] lenovo 0003:17EF:6067.0017: probe with driver lenovo failed with error -22 [ 1743.331688][ T5354] usb 5-1: Product: syz [ 1743.349806][ T5354] usb 5-1: Manufacturer: syz [ 1743.354452][ T5354] usb 5-1: SerialNumber: syz [ 1743.376895][ T5354] usb 5-1: config 0 descriptor?? [ 1743.404084][ T2573] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1743.480649][ T5354] usb 3-1: USB disconnect, device number 23 [ 1743.498240][ T2573] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1743.616233][ T5268] usb 5-1: USB disconnect, device number 34 [ 1743.712640][ T2573] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1743.762323][ T2573] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1743.792418][ T2573] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1743.826830][ T2573] netdevsim netdevsim0 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 1743.838612][ T2573] bridge_slave_1: left allmulticast mode [ 1743.844294][ T2573] bridge_slave_1: left promiscuous mode [ 1743.850704][ T2573] bridge0: port 2(bridge_slave_1) entered disabled state [ 1743.860748][ T2573] bridge_slave_0: left allmulticast mode [ 1743.867588][ T2573] bridge_slave_0: left promiscuous mode [ 1743.873333][ T2573] bridge0: port 1(bridge_slave_0) entered disabled state [ 1745.669226][ T5225] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1745.686298][ T5225] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1745.705803][ T5225] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1745.719254][ T5225] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1745.996981][ T5225] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1746.012072][ T5225] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1746.701751][ T2573] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1746.726980][ T2573] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1746.745204][ T2573] bond0 (unregistering): Released all slaves [ 1746.874321][ T2573] tipc: Left network mode [ 1746.879243][T19304] lo speed is unknown, defaulting to 1000 [ 1748.164455][T15487] Bluetooth: hci4: command tx timeout [ 1748.228732][T19304] chnl_net:caif_netlink_parms(): no params data found [ 1748.407144][T12297] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1748.536474][ T29] audit: type=1400 audit(1728859103.938:863): avc: denied { read write } for pid=19371 comm="syz.4.2629" name="btrfs-control" dev="devtmpfs" ino=1117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1748.580843][ T2573] hsr_slave_0: left promiscuous mode [ 1748.595860][T12297] usb 2-1: Using ep0 maxpacket: 16 [ 1748.602959][T12297] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1748.615434][T12297] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1748.626920][T12297] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 1748.627985][ T2573] hsr_slave_1: left promiscuous mode [ 1748.643586][T12297] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1748.673307][T12297] usb 2-1: config 0 descriptor?? [ 1748.673794][ T29] audit: type=1400 audit(1728859103.968:864): avc: denied { open } for pid=19371 comm="syz.4.2629" path="/dev/btrfs-control" dev="devtmpfs" ino=1117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1748.747961][ T29] audit: type=1400 audit(1728859104.008:865): avc: denied { ioctl } for pid=19371 comm="syz.4.2629" path="/dev/btrfs-control" dev="devtmpfs" ino=1117 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1748.784387][ T2573] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1748.795831][ T2573] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1748.868561][ T2573] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1748.882479][ T2573] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1748.981271][ T2573] veth1_macvtap: left promiscuous mode [ 1749.019797][ T2573] veth0_macvtap: left promiscuous mode [ 1749.059254][ T2573] veth1_vlan: left promiscuous mode [ 1749.064744][ T2573] veth0_vlan: left promiscuous mode [ 1749.163502][T19388] hub 6-0:1.0: USB hub found [ 1749.169136][T19388] hub 6-0:1.0: 1 port detected [ 1749.609159][T12297] uclogic 0003:28BD:0071.0018: interface is invalid, ignoring [ 1749.682176][T12297] usb 2-1: USB disconnect, device number 26 [ 1750.225859][T15487] Bluetooth: hci4: command tx timeout [ 1751.523066][ T2573] team0 (unregistering): Port device team_slave_1 removed [ 1751.609341][ T2573] team0 (unregistering): Port device team_slave_0 removed [ 1752.307326][T15487] Bluetooth: hci4: command tx timeout [ 1752.447141][T19304] bridge0: port 1(bridge_slave_0) entered blocking state [ 1752.454277][T19304] bridge0: port 1(bridge_slave_0) entered disabled state [ 1752.491238][T19304] bridge_slave_0: entered allmulticast mode [ 1752.506792][T19304] bridge_slave_0: entered promiscuous mode [ 1752.523513][T12297] lo speed is unknown, defaulting to 1000 [ 1752.524206][T19304] bridge0: port 2(bridge_slave_1) entered blocking state [ 1752.552497][T19304] bridge0: port 2(bridge_slave_1) entered disabled state [ 1752.581870][T19304] bridge_slave_1: entered allmulticast mode [ 1752.598751][T19304] bridge_slave_1: entered promiscuous mode [ 1752.614463][T19426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2637'. [ 1752.652509][T19426] netlink: 'syz.3.2637': attribute type 2 has an invalid length. [ 1752.665352][T19426] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 1752.981098][T19304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1753.260284][T19304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1753.791617][T19470] random: crng reseeded on system resumption [ 1753.821988][ T29] audit: type=1400 audit(1728859109.188:866): avc: denied { write } for pid=19465 comm="syz.3.2646" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1753.845109][ C0] vkms_vblank_simulate: vblank timer overrun [ 1754.387655][T19304] team0: Port device team_slave_0 added [ 1754.435990][T15487] Bluetooth: hci4: command tx timeout [ 1754.567389][T19304] team0: Port device team_slave_1 added [ 1754.707133][T19304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1754.736005][T19304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1754.761886][ C0] vkms_vblank_simulate: vblank timer overrun [ 1754.839141][T19304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1754.910475][T19304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1754.939050][T19304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1754.964991][ C0] vkms_vblank_simulate: vblank timer overrun [ 1755.060835][T19304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1755.288590][T19304] hsr_slave_0: entered promiscuous mode [ 1755.392147][T19304] hsr_slave_1: entered promiscuous mode [ 1755.420245][T19304] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1755.445327][T19304] Cannot create hsr debugfs directory [ 1755.528242][ T29] audit: type=1400 audit(1728859110.928:867): avc: denied { remount } for pid=19489 comm="syz.4.2649" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1755.528269][T19490] hugetlbfs: Bad value 'p' for mount option 'size' [ 1755.528269][T19490] [ 1755.741296][ T29] audit: type=1400 audit(1728859111.138:868): avc: denied { unmount } for pid=17440 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1755.798450][T19304] netdevsim netdevsim0 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1755.859758][ T29] audit: type=1400 audit(1728859111.258:869): avc: denied { create } for pid=19494 comm="syz.4.2650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1755.929258][ T29] audit: type=1400 audit(1728859111.288:870): avc: denied { connect } for pid=19494 comm="syz.4.2650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1756.012395][ T29] audit: type=1400 audit(1728859111.288:871): avc: denied { write } for pid=19494 comm="syz.4.2650" laddr=fe80::a lport=9 faddr=fe80::bb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1756.047934][T19304] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1756.073254][ T29] audit: type=1400 audit(1728859111.468:872): avc: denied { connect } for pid=19498 comm="syz.4.2651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1756.093017][ C0] vkms_vblank_simulate: vblank timer overrun [ 1756.142595][ T29] audit: type=1400 audit(1728859111.528:873): avc: denied { write } for pid=19498 comm="syz.4.2651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1756.174123][T19304] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1756.363878][T19304] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1756.465896][T19511] netlink: 'syz.1.2654': attribute type 36 has an invalid length. [ 1756.488472][ T5270] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1756.669123][ T5270] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1756.692177][ T5270] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1756.714609][T19304] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1756.732818][ T5270] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 1756.804905][ T5270] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1756.819767][T19304] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1756.826803][ T5267] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1756.876535][ T5270] usb 4-1: config 0 descriptor?? [ 1756.905392][T19304] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1757.008125][T19528] hub 6-0:1.0: USB hub found [ 1757.013868][T19528] hub 6-0:1.0: 1 port detected [ 1757.368018][T12297] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1757.393020][T19304] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1757.615771][T12297] usb 2-1: Using ep0 maxpacket: 8 [ 1757.642344][T12297] usb 2-1: config 0 has an invalid interface number: 143 but max is 0 [ 1757.675696][T12297] usb 2-1: config 0 has no interface number 0 [ 1757.681847][T12297] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 1757.748133][T12297] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1757.775729][ T5267] usb 5-1: Using ep0 maxpacket: 16 [ 1757.783326][ T5267] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1757.794752][ T5267] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 1757.813912][T12297] usb 2-1: config 0 descriptor?? [ 1757.815701][ T5267] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1757.828819][T19304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1757.862463][ T5267] usb 5-1: config 0 descriptor?? [ 1757.885238][T19304] 8021q: adding VLAN 0 to HW filter on device team0 [ 1757.898873][ T5270] pyra 0003:1E7D:2CF6.0019: item fetching failed at offset 6/7 [ 1757.911418][ T5270] pyra 0003:1E7D:2CF6.0019: parse failed [ 1757.918522][ T5270] pyra 0003:1E7D:2CF6.0019: probe with driver pyra failed with error -22 [ 1757.944690][ T2573] bridge0: port 1(bridge_slave_0) entered blocking state [ 1757.951855][ T2573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1757.971341][T12297] viperboard 2-1:0.143: version 0.00 found at bus 002 address 027 [ 1758.003777][ T2573] bridge0: port 2(bridge_slave_1) entered blocking state [ 1758.010950][ T2573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1758.022705][T12297] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 1758.043836][T12297] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 1758.078384][T12297] usb 2-1: USB disconnect, device number 27 [ 1758.188515][T15506] usb 4-1: USB disconnect, device number 31 [ 1758.329130][ T5267] hid-multitouch 0003:1FD2:6007.001A: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.4-1/input0 [ 1758.496767][T19304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1758.583518][T19304] veth0_vlan: entered promiscuous mode [ 1758.585149][ T5268] usb 5-1: USB disconnect, device number 35 [ 1758.628746][T19304] veth1_vlan: entered promiscuous mode [ 1758.689262][T19304] veth0_macvtap: entered promiscuous mode [ 1758.699606][T19304] veth1_macvtap: entered promiscuous mode [ 1758.756600][T19304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1758.814857][T19304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1758.844884][T19304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1758.874567][T19304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1758.904822][T19304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1758.942482][T19304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1758.985699][T19304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1759.015872][T19304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1759.055099][T19304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1759.096164][T19304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1759.139821][T19304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1759.339311][T19304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1759.371556][T19304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1759.485953][T19304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1759.750234][ T5270] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1759.994433][T19304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1760.027129][T19304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1760.080868][T19304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1760.113326][T19304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1760.125074][ T5270] usb 4-1: Using ep0 maxpacket: 32 [ 1760.155874][T19304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1760.269596][ T5270] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1760.295741][T19304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1760.355712][ T5270] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x2 has an invalid bInterval 129, changing to 11 [ 1760.368854][T19304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1760.421778][T19304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1761.053327][T19304] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1761.113315][T19304] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1761.159191][ T5270] usb 4-1: config 0 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 1761.172431][ T5270] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1761.172470][T19304] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1761.179361][ T5270] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1761.198620][ T5270] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1761.209534][T19304] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1761.227652][ T5270] usb 4-1: config 0 descriptor?? [ 1761.339298][ T29] audit: type=1400 audit(1728859116.728:874): avc: denied { name_connect } for pid=19605 comm="syz.1.2673" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 1761.361398][ C0] vkms_vblank_simulate: vblank timer overrun [ 1761.560727][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1761.616172][ T1057] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1761.635102][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1761.648152][ T1057] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1761.682449][ T5270] hid-thrustmaster 0003:044F:B65D.001B: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.3-1/input0 [ 1761.795541][T19620] netlink: 664 bytes leftover after parsing attributes in process `syz.2.2677'. [ 1761.882239][ T5270] hid-thrustmaster 0003:044F:B65D.001B: setup data couldn't be sent [ 1761.909647][ C0] hid-thrustmaster 0003:044F:B65D.001B: URB to get model id failed with error -71 [ 1761.939182][T19625] netlink: 9384 bytes leftover after parsing attributes in process `syz.4.2678'. [ 1761.960717][ T5270] usb 4-1: USB disconnect, device number 32 [ 1761.984274][T19625] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2678'. [ 1762.019092][T19625] netlink: 'syz.4.2678': attribute type 1 has an invalid length. [ 1762.345905][T11535] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 1762.635995][T11535] usb 1-1: Using ep0 maxpacket: 8 [ 1762.834137][T11535] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1762.877281][T11535] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1762.925752][T11535] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1762.933892][T11535] usb 1-1: Product: syz [ 1762.976033][T11535] usb 1-1: Manufacturer: syz [ 1762.980690][T11535] usb 1-1: SerialNumber: syz [ 1762.994780][T19645] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 1763.546105][T15506] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1763.578462][ T5354] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1763.768047][T15506] usb 2-1: config 0 interface 0 altsetting 63 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1763.911169][ T5354] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1763.974653][T15506] usb 2-1: config 0 interface 0 altsetting 63 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1764.025901][ T5354] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1764.084047][T11535] usb 1-1: Handspring Visor / Palm OS: No valid connect info available [ 1764.093430][T15506] usb 2-1: config 0 interface 0 altsetting 63 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1764.096017][T11535] usb 1-1: Handspring Visor / Palm OS: port 158, is for unknown use [ 1764.119318][T11535] usb 1-1: Handspring Visor / Palm OS: port 15, is for unknown use [ 1764.129560][T11535] usb 1-1: Handspring Visor / Palm OS: Number of ports: 2 [ 1764.156224][ T5354] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1764.175540][T11535] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 1764.255098][T11535] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1764.299893][ T5354] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1764.308348][T15506] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1764.309367][T11535] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1764.325026][T15506] usb 2-1: New USB device found, idVendor=0c70, idProduct=f00a, bcdDevice= 0.00 [ 1764.339935][T19653] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1764.402752][T15506] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1764.476553][ T5354] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1764.537919][T15506] usb 2-1: config 0 descriptor?? [ 1766.181687][T15506] aquacomputer_d5next 0003:0C70:F00A.001C: hidraw0: USB HID v0.00 Device [HID 0c70:f00a] on usb-dummy_hcd.1-1/input0 [ 1766.201378][ T5268] usb 1-1: USB disconnect, device number 33 [ 1766.385234][T15506] usb 2-1: USB disconnect, device number 28 [ 1766.780447][T19687] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2697'. [ 1766.791086][ T5268] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1766.819606][ T5268] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1766.834051][ T5268] visor 1-1:1.0: device disconnected [ 1766.856104][T19687] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2697'. [ 1768.352564][ T9] usb 4-1: USB disconnect, device number 33 [ 1768.397719][T19702] xt_bpf: check failed: parse error [ 1769.215795][ T5267] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1769.302875][T19721] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 1769.309479][ T29] audit: type=1400 audit(1728859124.698:875): avc: denied { remount } for pid=19719 comm="syz.3.2705" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1769.455677][ T5267] usb 3-1: Using ep0 maxpacket: 16 [ 1769.465751][ T9] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 1769.482512][ T5267] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1769.502702][ T5267] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1769.533123][ T5267] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1769.575740][T11535] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1769.598296][ T5267] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1769.629116][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 1769.642236][ T9] usb 1-1: config 0 has an invalid interface number: 32 but max is 0 [ 1769.659713][ T9] usb 1-1: config 0 has no interface number 0 [ 1769.681016][ T5267] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1769.694160][ T9] usb 1-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1769.717925][ T5267] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1769.737763][T11535] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1769.755506][ T9] usb 1-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1769.765737][ T5267] usb 3-1: Manufacturer: syz [ 1769.775887][T11535] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1769.788240][ T5267] usb 3-1: config 0 descriptor?? [ 1769.797428][ T9] usb 1-1: New USB device found, idVendor=5543, idProduct=0081, bcdDevice= 0.00 [ 1769.820388][T11535] usb 5-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 1769.836244][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1769.852174][T11535] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1769.867669][ T9] usb 1-1: config 0 descriptor?? [ 1769.883834][T11535] usb 5-1: config 0 descriptor?? [ 1770.091827][ T5272] usb 3-1: USB disconnect, device number 24 [ 1771.106378][T11535] steelseries 0003:1038:12B6.001D: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.4-1/input0 [ 1771.132428][ T9] uclogic 0003:5543:0081.001E: interface is invalid, ignoring [ 1771.149002][ T9] usb 1-1: USB disconnect, device number 34 [ 1771.189418][T11535] steelseries 0003:1038:12B6.001D: hid_hw_raw_request() failed with -71 [ 1771.219437][T11535] usb 5-1: USB disconnect, device number 36 [ 1771.725710][ T5267] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1771.877457][ T5267] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1771.910279][ T5267] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1771.943365][ T5267] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1773.585802][T15944] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 1774.193561][T15944] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1774.207358][T15944] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1774.232600][T15944] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1774.293703][T15944] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1774.463550][T19778] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1774.470068][ T5267] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1774.492283][T15944] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1774.617466][T19785] netlink: 192 bytes leftover after parsing attributes in process `syz.2.2728'. [ 1776.945596][ C0] sched: DL replenish lagged too much [ 1780.163625][ T5268] usb 1-1: USB disconnect, device number 35 [ 1782.955815][ T5268] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 1783.505670][ T5268] usb 1-1: Using ep0 maxpacket: 8 [ 1783.514421][ T5268] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1783.535328][ T5268] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1783.625693][ T5268] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1783.699644][ T5268] usb 1-1: Product: syz [ 1783.744141][ T5268] usb 1-1: Manufacturer: syz [ 1783.787451][ T5268] usb 1-1: SerialNumber: syz [ 1783.847681][ T5268] usb 1-1: can't set config #1, error -71 [ 1783.931346][ T5268] usb 1-1: USB disconnect, device number 36 [ 1785.000330][ T5268] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 1785.170988][ T5268] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1785.228249][ T5268] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1785.293855][ T5268] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1785.318014][ T29] audit: type=1326 audit(1728859140.718:876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19821 comm="syz.3.2740" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd71937dff9 code=0x0 [ 1785.415402][ T5268] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1785.462959][T19812] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1785.506293][ T5354] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1785.527894][ T5268] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1785.730351][ T5354] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1785.791770][ T5354] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1785.844723][T19826] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2742'. [ 1785.853036][ T5267] usb 4-1: can't set config #27, error -71 [ 1785.865110][ T5267] usb 4-1: USB disconnect, device number 34 [ 1785.880110][ T5354] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1785.889368][ T5354] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1785.929315][ T5225] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1785.946954][T19824] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1785.948076][ T5225] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1785.992382][ T5225] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1786.008469][ T5225] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1786.024623][ T5225] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1786.032649][ T5225] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1786.051994][ T5354] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1786.274254][T15505] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1786.352353][T19836] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2745'. [ 1787.228805][T15505] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1787.266070][ T5354] usb 1-1: USB disconnect, device number 37 [ 1787.419546][T15505] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1787.623668][T15505] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1788.345695][ T5225] Bluetooth: hci3: command tx timeout [ 1788.401818][ T5267] usb 3-1: USB disconnect, device number 25 [ 1788.688494][T19829] chnl_net:caif_netlink_parms(): no params data found [ 1788.975708][T15506] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1789.011891][T19829] bridge0: port 1(bridge_slave_0) entered blocking state [ 1789.019107][T19829] bridge0: port 1(bridge_slave_0) entered disabled state [ 1789.026586][T19829] bridge_slave_0: entered allmulticast mode [ 1789.033611][T19829] bridge_slave_0: entered promiscuous mode [ 1789.043579][T19829] bridge0: port 2(bridge_slave_1) entered blocking state [ 1789.051596][T19829] bridge0: port 2(bridge_slave_1) entered disabled state [ 1789.058856][T19829] bridge_slave_1: entered allmulticast mode [ 1789.066399][T19829] bridge_slave_1: entered promiscuous mode [ 1789.159588][T15505] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1789.170434][T15506] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1789.186076][T15506] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1789.228235][T15506] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1789.245426][T15505] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1789.271283][T15506] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1789.285729][ T5272] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1789.287110][T19872] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1789.305902][T15506] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1789.342994][T15505] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1789.439590][T15505] netdevsim netdevsim1 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 1789.458253][ T5272] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 1789.475750][ T5272] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1789.508621][ T5272] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1789.524874][T19829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1789.541664][ T5272] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1789.565219][ T5272] usb 1-1: Manufacturer: syz [ 1789.583040][ T5272] usb 1-1: config 0 descriptor?? [ 1789.584280][T19829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1789.643988][T15505] bridge_slave_1: left allmulticast mode [ 1789.664140][T15505] bridge_slave_1: left promiscuous mode [ 1789.670621][ T5272] rc_core: IR keymap rc-hauppauge not found [ 1789.685977][T15505] bridge0: port 2(bridge_slave_1) entered disabled state [ 1789.694919][ T5272] Registered IR keymap rc-empty [ 1789.713168][ T5272] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1789.730635][T15505] bridge_slave_0: left allmulticast mode [ 1789.736507][T15505] bridge_slave_0: left promiscuous mode [ 1789.742235][T15505] bridge0: port 1(bridge_slave_0) entered disabled state [ 1789.757065][ T5272] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input26 [ 1790.106018][ C0] igorplugusb 1-1:0.0: receive overflow invalid: 102 [ 1790.338840][T15506] usb 1-1: USB disconnect, device number 38 [ 1790.389442][ T5225] Bluetooth: hci3: command tx timeout [ 1791.282351][T15505] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1791.301329][T15505] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1791.315146][T15505] bond0 (unregistering): Released all slaves [ 1791.371591][ T29] audit: type=1400 audit(1728859146.768:877): avc: denied { read } for pid=19899 comm="syz.0.2765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 1791.465414][T19886] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2761'. [ 1791.479150][T19886] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2761'. [ 1791.539174][T19829] team0: Port device team_slave_0 added [ 1791.799882][T19829] team0: Port device team_slave_1 added [ 1791.953378][ T1260] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.965832][T15959] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1793.022596][ T5225] Bluetooth: hci3: command tx timeout [ 1793.216751][T19912] hub 6-0:1.0: USB hub found [ 1793.222443][T19912] hub 6-0:1.0: 1 port detected [ 1793.759730][T19829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1793.785726][T15959] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1793.794945][T19829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1793.803355][T15959] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1793.835205][T15959] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1793.844538][T15959] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1793.858162][T15959] usb 1-1: config 0 descriptor?? [ 1793.870037][T15944] usb 4-1: USB disconnect, device number 35 [ 1793.891309][T19829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1794.246461][T15505] hsr_slave_0: left promiscuous mode [ 1794.569914][T15505] hsr_slave_1: left promiscuous mode [ 1794.580909][T15505] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1794.665811][T15505] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1794.725898][T15505] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1794.745735][ T5268] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1794.763780][T15505] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1794.840095][T15505] veth1_macvtap: left promiscuous mode [ 1794.866397][T15505] veth0_macvtap: left promiscuous mode [ 1794.892070][T15505] veth1_vlan: left promiscuous mode [ 1794.904471][T15505] veth0_vlan: left promiscuous mode [ 1794.925874][ T5268] usb 4-1: Using ep0 maxpacket: 32 [ 1794.939263][ T5268] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1794.958704][ T5268] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1795.012533][ T5268] usb 4-1: config 0 descriptor?? [ 1795.048776][T15959] mcp2221 0003:04D8:00DD.001F: unknown main item tag 0x0 [ 1795.056300][T15959] mcp2221 0003:04D8:00DD.001F: unknown main item tag 0x0 [ 1795.063939][T15959] mcp2221 0003:04D8:00DD.001F: unknown main item tag 0x0 [ 1795.071104][T15959] mcp2221 0003:04D8:00DD.001F: unknown main item tag 0x0 [ 1795.079362][T15959] mcp2221 0003:04D8:00DD.001F: unknown main item tag 0x0 [ 1795.087058][T15959] mcp2221 0003:04D8:00DD.001F: USB HID v0.00 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 1795.091442][ T5268] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1795.105825][ T5225] Bluetooth: hci3: command tx timeout [ 1795.383807][T15959] usb 1-1: USB disconnect, device number 39 [ 1795.391541][ T5272] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1795.406223][T12085] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1795.490981][ T5268] gspca_nw80x: reg_r err -71 [ 1795.496580][ T5268] nw80x 4-1:0.0: probe with driver nw80x failed with error -71 [ 1795.530352][ T5268] usb 4-1: USB disconnect, device number 36 [ 1795.576498][ T5272] usb 3-1: Using ep0 maxpacket: 32 [ 1795.584837][ T5272] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1795.600499][ T5272] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1795.611310][ T5272] usb 3-1: New USB device found, idVendor=1e71, idProduct=200f, bcdDevice= 0.00 [ 1795.615411][T12085] usb 5-1: Using ep0 maxpacket: 16 [ 1795.628598][ T5272] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1795.641786][T12085] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1795.642250][ T5272] usb 3-1: config 0 descriptor?? [ 1795.670024][T12085] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1795.691551][T12085] usb 5-1: Product: syz [ 1795.699552][T12085] usb 5-1: Manufacturer: syz [ 1795.704189][T12085] usb 5-1: SerialNumber: syz [ 1795.715435][T12085] usb 5-1: config 0 descriptor?? [ 1795.736986][T12085] visor 5-1:0.0: Sony Clie 3.5 converter detected [ 1796.110742][ T5272] nzxt-smart2 0003:1E71:200F.0020: unknown main item tag 0x0 [ 1796.138114][ T5272] nzxt-smart2 0003:1E71:200F.0020: item fetching failed at offset 2/5 [ 1796.147100][ T5272] nzxt-smart2 0003:1E71:200F.0020: probe with driver nzxt-smart2 failed with error -22 [ 1796.156917][T12085] usb 5-1: clie_3_5_startup: get interface number bad return length: 0 [ 1796.184251][T15505] team0 (unregistering): Port device team_slave_1 removed [ 1796.191948][T12085] visor 5-1:0.0: probe with driver visor failed with error -5 [ 1796.333652][T15959] usb 3-1: USB disconnect, device number 26 [ 1796.378166][T15505] team0 (unregistering): Port device team_slave_0 removed [ 1796.398711][ T5267] usb 5-1: USB disconnect, device number 38 [ 1796.495862][ T5272] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1796.648957][ T5272] usb 1-1: New USB device found, idVendor=0c45, idProduct=608c, bcdDevice=b5.55 [ 1796.667071][ T5272] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1796.677236][ T5272] usb 1-1: Product: syz [ 1796.681435][ T5272] usb 1-1: Manufacturer: syz [ 1796.695377][ T5272] usb 1-1: SerialNumber: syz [ 1796.713170][ T5272] usb 1-1: config 0 descriptor?? [ 1796.733495][ T5272] gspca_main: sonixb-2.14.0 probing 0c45:608c [ 1796.805758][T15959] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1797.032252][T15959] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1797.054672][T15959] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1797.074832][T15959] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1797.095676][T15959] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1797.160963][T19943] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1797.170376][ T5272] input: sonixb as /devices/platform/dummy_hcd.0/usb1/1-1/input/input27 [ 1797.190094][T15959] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1797.439373][T15506] usb 1-1: USB disconnect, device number 40 [ 1797.938962][T19829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1797.961047][T19829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1797.999943][T19829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1798.033405][T19945] IPVS: Error connecting to the multicast addr [ 1798.258559][T19829] hsr_slave_0: entered promiscuous mode [ 1798.274825][T19829] hsr_slave_1: entered promiscuous mode [ 1798.285780][T19829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1798.306291][T19829] Cannot create hsr debugfs directory [ 1798.314669][T19958] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1798.363783][ T29] audit: type=1400 audit(1728859153.758:878): avc: denied { setopt } for pid=19961 comm="syz.2.2787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1798.387842][ T29] audit: type=1400 audit(1728859153.778:879): avc: denied { bind } for pid=19961 comm="syz.2.2787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 1798.686331][ T5267] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1798.800999][T19829] netdevsim netdevsim1 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1798.840372][ T5267] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1798.868211][ T5267] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1798.891275][ T5267] usb 1-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00 [ 1798.908671][ T5267] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1798.987628][ T5267] usb 1-1: config 0 descriptor?? [ 1799.174133][T19829] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1799.338663][T19829] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1799.421625][ T5267] aquacomputer_d5next 0003:0C70:F014.0021: hidraw0: USB HID v0.00 Device [HID 0c70:f014] on usb-dummy_hcd.0-1/input0 [ 1799.525931][T19829] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1799.883866][T15506] usb 1-1: USB disconnect, device number 41 [ 1800.679016][T19829] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1800.727205][T19829] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1800.888816][T19829] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1800.910131][ T5267] usb 4-1: USB disconnect, device number 37 [ 1800.972388][T19829] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1801.177731][T19829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1801.200677][T19829] 8021q: adding VLAN 0 to HW filter on device team0 [ 1801.222959][T11278] bridge0: port 1(bridge_slave_0) entered blocking state [ 1801.230109][T11278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1801.304777][ T8430] bridge0: port 2(bridge_slave_1) entered blocking state [ 1801.311947][ T8430] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1801.892805][T19829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1802.019550][T19829] veth0_vlan: entered promiscuous mode [ 1802.041830][T19829] veth1_vlan: entered promiscuous mode [ 1802.128073][T19829] veth0_macvtap: entered promiscuous mode [ 1802.144888][T19829] veth1_macvtap: entered promiscuous mode [ 1802.170929][T19829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1802.182065][T19829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1802.192770][T19829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1802.204006][T19829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1802.215007][T19829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1802.235710][T15959] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1802.253441][T19829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1802.284106][T19829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1802.320473][T19829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1802.337121][T19829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1802.350298][T19829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1802.363206][T19829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1802.395272][T20016] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2804'. [ 1802.415484][T15959] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1802.437085][T19829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1802.451557][T15959] usb 1-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 1802.489557][T15959] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1802.498103][T19829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1802.541905][T15959] usb 1-1: config 0 descriptor?? [ 1802.547078][T19829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1802.575550][T19829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1802.592928][T19829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1802.609070][T19829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1802.621723][T19829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1802.643697][T19829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1802.658631][T19829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1802.673786][T19829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1802.713389][T19829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1802.763940][T19829] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1802.814994][T19829] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1802.850864][T19829] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1802.875325][T19829] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1803.014441][T15959] logitech 0003:046D:C626.0022: hidraw0: USB HID v10.00 Device [HID 046d:c626] on usb-dummy_hcd.0-1/input0 [ 1803.236865][T15959] usb 1-1: USB disconnect, device number 42 [ 1803.583720][T15943] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1803.599773][T15943] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1803.632335][T11278] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1803.642638][T11278] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1803.972635][T20029] hub 6-0:1.0: USB hub found [ 1803.978493][T15959] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1803.986626][T20029] hub 6-0:1.0: 1 port detected [ 1804.355029][T15959] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1804.531853][T15959] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1804.643671][T15959] usb 4-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 1804.685670][T15959] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1804.714687][T15959] usb 4-1: config 0 descriptor?? [ 1805.026083][T20046] tipc: Started in network mode [ 1805.043041][T20046] tipc: Node identity ac1414aa, cluster identity 4711 [ 1805.066703][T20046] tipc: Enabled bearer , priority 10 [ 1805.137967][T15959] dragonrise 0003:0079:0011.0023: unknown main item tag 0x0 [ 1805.152660][T15959] dragonrise 0003:0079:0011.0023: unknown main item tag 0x0 [ 1805.179368][T15959] dragonrise 0003:0079:0011.0023: unknown main item tag 0x0 [ 1805.218294][T15959] dragonrise 0003:0079:0011.0023: unknown main item tag 0x0 [ 1805.255719][T15959] dragonrise 0003:0079:0011.0023: unknown main item tag 0x0 [ 1805.301709][T15959] dragonrise 0003:0079:0011.0023: hidraw0: USB HID v0.00 Device [HID 0079:0011] on usb-dummy_hcd.3-1/input0 [ 1805.374966][T15959] usb 4-1: USB disconnect, device number 38 [ 1806.395333][ T5272] tipc: Node number set to 2886997162 [ 1807.213741][T20093] xt_bpf: check failed: parse error [ 1811.710073][T20132] pimreg7: entered allmulticast mode [ 1813.119178][T15487] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1813.136005][T15487] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1813.145871][T15487] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1813.155084][T15487] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1813.164041][T15487] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1813.171407][T15487] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1813.300556][T20151] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2835'. [ 1813.335251][ T5225] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1813.361883][ T5225] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1813.372966][ T5225] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1813.381409][ T5225] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1813.391186][ T5225] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1813.399615][ T5225] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1814.017880][T20168] hub 6-0:1.0: USB hub found [ 1814.023541][T20168] hub 6-0:1.0: 1 port detected [ 1814.231303][T20144] chnl_net:caif_netlink_parms(): no params data found [ 1815.775874][ T5225] Bluetooth: hci7: command tx timeout [ 1815.775886][T15487] Bluetooth: hci8: command tx timeout [ 1815.829247][T20144] bridge0: port 1(bridge_slave_0) entered blocking state [ 1815.889992][T20144] bridge0: port 1(bridge_slave_0) entered disabled state [ 1815.945845][T20144] bridge_slave_0: entered allmulticast mode [ 1815.964162][T20144] bridge_slave_0: entered promiscuous mode [ 1815.991890][T20153] chnl_net:caif_netlink_parms(): no params data found [ 1816.043270][T20144] bridge0: port 2(bridge_slave_1) entered blocking state [ 1816.153820][T20144] bridge0: port 2(bridge_slave_1) entered disabled state [ 1816.206693][T20144] bridge_slave_1: entered allmulticast mode [ 1816.264154][T20144] bridge_slave_1: entered promiscuous mode [ 1816.744131][T20196] hub 6-0:1.0: USB hub found [ 1816.750443][T20196] hub 6-0:1.0: 1 port detected [ 1817.414550][T20144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1817.527530][T20144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1817.770389][T20144] team0: Port device team_slave_0 added [ 1817.832262][ T5225] Bluetooth: hci7: command tx timeout [ 1817.835686][T11535] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1817.837739][ T5225] Bluetooth: hci8: command tx timeout [ 1817.862850][T20144] team0: Port device team_slave_1 added [ 1817.869053][T20209] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2846'. [ 1817.882537][T20209] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2846'. [ 1817.997459][T11535] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1818.018590][T11535] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1818.045762][T11535] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1818.085837][T11535] usb 2-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00 [ 1818.105061][T11535] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1818.128957][T11535] usb 2-1: config 0 descriptor?? [ 1819.145981][T11535] logitech-hidpp-device 0003:046D:C262.0024: hidraw0: USB HID v0.00 Device [HID 046d:c262] on usb-dummy_hcd.1-1/input0 [ 1819.176377][T11535] usb 2-1: USB disconnect, device number 29 [ 1819.333492][T20144] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1819.513768][T20144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1819.561551][T20144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1819.678410][T20229] xt_bpf: check failed: parse error [ 1819.701013][T20153] bridge0: port 1(bridge_slave_0) entered blocking state [ 1819.728529][T20153] bridge0: port 1(bridge_slave_0) entered disabled state [ 1819.768671][T20153] bridge_slave_0: entered allmulticast mode [ 1819.814869][T20153] bridge_slave_0: entered promiscuous mode [ 1819.839948][T20144] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1819.884815][T20144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1819.911024][T15487] Bluetooth: hci8: command tx timeout [ 1819.911067][T15487] Bluetooth: hci7: command tx timeout [ 1820.125841][T20144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1820.225767][T20234] hub 6-0:1.0: USB hub found [ 1820.232602][T20234] hub 6-0:1.0: 1 port detected [ 1820.865903][T20153] bridge0: port 2(bridge_slave_1) entered blocking state [ 1820.883320][T20153] bridge0: port 2(bridge_slave_1) entered disabled state [ 1820.901532][T20153] bridge_slave_1: entered allmulticast mode [ 1820.912955][T20153] bridge_slave_1: entered promiscuous mode [ 1821.173472][T20153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1821.198368][T20242] nbd: must specify an index to disconnect [ 1821.420837][T20199] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1821.653612][T20153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1821.675793][T20252] netlink: zone id is out of range [ 1821.680952][T20252] netlink: zone id is out of range [ 1821.686329][T20252] netlink: zone id is out of range [ 1821.691457][T20252] netlink: zone id is out of range [ 1821.696739][T20252] netlink: zone id is out of range [ 1821.701873][T20252] netlink: zone id is out of range [ 1821.709406][T20252] netlink: zone id is out of range [ 1821.714540][T20252] netlink: zone id is out of range [ 1821.720073][T20252] netlink: zone id is out of range [ 1821.725284][T20252] netlink: zone id is out of range [ 1821.985964][ T5225] Bluetooth: hci7: command tx timeout [ 1821.991763][T15487] Bluetooth: hci8: command tx timeout [ 1822.418981][T20258] netlink: 'syz.3.2862': attribute type 1 has an invalid length. [ 1822.455725][T20258] netlink: 9380 bytes leftover after parsing attributes in process `syz.3.2862'. [ 1822.481827][T20258] netlink: 11 bytes leftover after parsing attributes in process `syz.3.2862'. [ 1822.600450][T20199] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1822.701596][T20144] hsr_slave_0: entered promiscuous mode [ 1822.738492][T20144] hsr_slave_1: entered promiscuous mode [ 1822.760991][T20144] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1822.782186][T20144] Cannot create hsr debugfs directory [ 1822.818322][T20153] team0: Port device team_slave_0 added [ 1822.844971][T20260] netlink: 'syz.1.2863': attribute type 2 has an invalid length. [ 1823.336607][T20199] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1823.564643][T20153] team0: Port device team_slave_1 added [ 1823.695475][T20199] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1823.823465][T20153] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1823.844550][T20153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1823.870738][ C1] vkms_vblank_simulate: vblank timer overrun [ 1824.035036][T20153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1826.488152][T20153] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1826.495144][T20153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1826.542082][T20153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1826.730065][T20153] hsr_slave_0: entered promiscuous mode [ 1826.760065][T20153] hsr_slave_1: entered promiscuous mode [ 1826.782209][T20153] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1826.790455][T20153] Cannot create hsr debugfs directory [ 1826.957533][T20199] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1827.079199][T20199] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1827.145363][T20199] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1827.218277][T20199] netdevsim netdevsim4 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 1827.274652][T20199] bridge_slave_1: left allmulticast mode [ 1827.284372][T20199] bridge_slave_1: left promiscuous mode [ 1827.315968][T20199] bridge0: port 2(bridge_slave_1) entered disabled state [ 1827.351946][T20199] bridge_slave_0: left allmulticast mode [ 1827.371436][T20199] bridge_slave_0: left promiscuous mode [ 1827.390839][T20199] bridge0: port 1(bridge_slave_0) entered disabled state [ 1827.945401][T20310] hub 6-0:1.0: USB hub found [ 1827.951113][T20310] hub 6-0:1.0: 1 port detected [ 1828.921588][ T29] audit: type=1400 audit(1728859184.318:880): avc: denied { create } for pid=20314 comm="syz.3.2878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1828.962686][ T29] audit: type=1400 audit(1728859184.358:881): avc: denied { ioctl } for pid=20314 comm="syz.3.2878" path="socket:[93309]" dev="sockfs" ino=93309 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1828.987375][ C1] vkms_vblank_simulate: vblank timer overrun [ 1829.185296][T20199] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1829.197695][T20199] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1829.211737][T20199] bond0 (unregistering): Released all slaves [ 1829.243972][T20144] netdevsim netdevsim4 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1829.620161][T20144] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1829.625865][T15959] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1829.809421][T15959] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1829.855674][T15959] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1829.865456][T15959] usb 2-1: New USB device found, idVendor=046d, idProduct=c286, bcdDevice= 0.00 [ 1829.890021][T15959] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1829.894718][T20144] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1830.079253][T20144] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1830.118237][T15959] usb 2-1: config 0 descriptor?? [ 1830.258450][T20342] hub 6-0:1.0: USB hub found [ 1830.265371][T20342] hub 6-0:1.0: 1 port detected [ 1830.794935][T20199] hsr_slave_0: left promiscuous mode [ 1830.830345][T20199] hsr_slave_1: left promiscuous mode [ 1830.847499][T20199] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1830.855022][T20199] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1830.873212][T20199] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1830.893380][T20199] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1830.956115][T20199] veth1_macvtap: left promiscuous mode [ 1830.961719][T20199] veth0_macvtap: left promiscuous mode [ 1830.985947][T20199] veth1_vlan: left promiscuous mode [ 1831.001512][T20199] veth0_vlan: left promiscuous mode [ 1831.023288][T15959] logitech 0003:046D:C286.0025: hidraw0: USB HID v0.00 Device [HID 046d:c286] on usb-dummy_hcd.1-1/input0 [ 1831.052448][T15959] logitech 0003:046D:C286.0025: no inputs found [ 1831.262690][T15959] usb 2-1: USB disconnect, device number 30 [ 1832.299411][T20371] hub 6-0:1.0: USB hub found [ 1832.305115][T20371] hub 6-0:1.0: 1 port detected [ 1832.933124][T20199] team0 (unregistering): Port device team_slave_1 removed [ 1832.995233][T20199] team0 (unregistering): Port device team_slave_0 removed [ 1833.994598][ T29] audit: type=1400 audit(1728859189.368:882): avc: denied { create } for pid=20379 comm="syz.1.2892" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1834.035371][ T29] audit: type=1400 audit(1728859189.368:883): avc: denied { map } for pid=20379 comm="syz.1.2892" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=93463 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1834.060042][ T29] audit: type=1400 audit(1728859189.368:884): avc: denied { read write } for pid=20379 comm="syz.1.2892" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=93463 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1834.532038][T20153] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1834.781656][T20153] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1837.673876][T20153] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1837.905646][T20153] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1838.096751][T20426] hub 6-0:1.0: USB hub found [ 1838.105424][T20426] hub 6-0:1.0: 1 port detected [ 1838.852493][T20430] hub 6-0:1.0: USB hub found [ 1838.858206][T20430] hub 6-0:1.0: 1 port detected [ 1839.346145][T12085] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1839.376748][T20153] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1839.427296][T20153] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1839.563442][T12085] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1839.581007][T12085] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1839.616771][T12085] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1839.669634][T12085] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1839.764274][T20153] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1839.802721][T20432] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1839.875883][T20153] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1840.000483][T12085] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 1840.390508][ T29] audit: type=1400 audit(1728859195.788:885): avc: denied { unmount } for pid=17219 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1841.502265][T20199] bridge_slave_1: left allmulticast mode [ 1841.532160][T20199] bridge_slave_1: left promiscuous mode [ 1841.774214][T20199] bridge0: port 2(bridge_slave_1) entered disabled state [ 1841.788470][T20199] bridge_slave_0: left allmulticast mode [ 1841.794286][T20199] bridge_slave_0: left promiscuous mode [ 1841.800610][T20199] bridge0: port 1(bridge_slave_0) entered disabled state [ 1843.618381][T20236] usb 1-1: USB disconnect, device number 43 [ 1845.011722][ T29] audit: type=1400 audit(1728859200.408:886): avc: denied { ioctl } for pid=20492 comm="syz.1.2915" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=93624 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1846.034688][T15959] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1846.415803][T15959] usb 1-1: Using ep0 maxpacket: 32 [ 1846.423199][T15959] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1846.447934][T15959] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1846.465341][T15959] usb 1-1: config 0 descriptor?? [ 1846.474982][T15959] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1846.562586][T20199] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1846.574482][T20199] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1846.587981][T20199] bond0 (unregistering): Released all slaves [ 1846.675762][ T5354] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1846.774055][T20199] bond1 (unregistering): Released all slaves [ 1846.908559][ T5354] usb 2-1: Using ep0 maxpacket: 32 [ 1846.945273][ T5354] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1846.967902][T20153] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1846.985672][ T5354] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1847.007518][ T5354] usb 2-1: config 0 descriptor?? [ 1847.024342][T20153] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1847.025134][ T5354] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1847.079290][T20153] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1847.087764][T15959] gspca_vc032x: reg_w err -71 [ 1847.092494][T15959] gspca_vc032x: I2c Bus Busy Wait 00 [ 1847.137671][T15959] gspca_vc032x: I2c Bus Busy Wait 00 [ 1847.148671][T20153] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1847.155492][T15959] gspca_vc032x: I2c Bus Busy Wait 00 [ 1847.188860][T15959] gspca_vc032x: I2c Bus Busy Wait 00 [ 1847.194196][T15959] gspca_vc032x: I2c Bus Busy Wait 00 [ 1847.222986][T15959] gspca_vc032x: I2c Bus Busy Wait 00 [ 1847.230227][T15959] gspca_vc032x: I2c Bus Busy Wait 00 [ 1847.235544][T15959] gspca_vc032x: I2c Bus Busy Wait 00 [ 1847.265850][T15959] gspca_vc032x: I2c Bus Busy Wait 00 [ 1847.287882][T15959] gspca_vc032x: I2c Bus Busy Wait 00 [ 1847.303428][T15959] gspca_vc032x: I2c Bus Busy Wait 00 [ 1847.330615][T15959] gspca_vc032x: I2c Bus Busy Wait 00 [ 1847.356051][T15959] gspca_vc032x: I2c Bus Busy Wait 00 [ 1847.370447][T15959] gspca_vc032x: I2c Bus Busy Wait 00 [ 1847.376168][T15959] gspca_vc032x: I2c Bus Busy Wait 00 [ 1847.381487][T15959] gspca_vc032x: I2c Bus Busy Wait 00 [ 1847.387281][T15959] gspca_vc032x: I2c Bus Busy Wait 00 [ 1847.392826][T15959] gspca_vc032x: I2c Bus Busy Wait 00 [ 1847.398268][T15959] gspca_vc032x: Unknown sensor... [ 1847.403359][T15959] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 1847.428130][T15959] usb 1-1: USB disconnect, device number 44 [ 1847.683216][T20144] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1847.694947][T15959] usb 2-1: USB disconnect, device number 31 [ 1847.740524][T20144] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1847.900470][T20199] hsr_slave_0: left promiscuous mode [ 1847.907642][T20199] hsr_slave_1: left promiscuous mode [ 1847.923828][T20199] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1847.951941][T20199] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1847.980686][T20199] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1848.032937][T20199] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1848.103044][T20199] veth1_macvtap: left promiscuous mode [ 1848.109025][T20199] veth0_macvtap: left promiscuous mode [ 1848.114645][T20199] veth1_vlan: left promiscuous mode [ 1848.120034][T20199] veth0_vlan: left promiscuous mode [ 1849.574986][T20550] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2929'. [ 1851.276056][ T5354] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1851.428021][ T5354] usb 2-1: Using ep0 maxpacket: 16 [ 1851.439681][ T5354] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1851.475646][ T5354] usb 2-1: New USB device found, idVendor=258a, idProduct=0033, bcdDevice= 0.00 [ 1851.489831][ T5354] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1851.524890][ T5354] usb 2-1: config 0 descriptor?? [ 1851.845241][T20199] team0 (unregistering): Port device team_slave_1 removed [ 1851.970502][ T5354] glorious 0003:258A:0033.0026: unknown main item tag 0x0 [ 1851.982782][ T5354] glorious 0003:258A:0033.0026: item fetching failed at offset 4/5 [ 1852.002384][T20199] team0 (unregistering): Port device team_slave_0 removed [ 1852.012938][ T5354] glorious 0003:258A:0033.0026: probe with driver glorious failed with error -22 [ 1852.207052][T15506] usb 2-1: USB disconnect, device number 32 [ 1853.046196][ T5270] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1853.082720][T20144] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1853.100743][T20144] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1853.120897][T20564] netlink: 'syz.3.2934': attribute type 4 has an invalid length. [ 1853.137788][T20564] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2934'. [ 1853.226438][ T5270] usb 2-1: Using ep0 maxpacket: 16 [ 1853.258834][ T5270] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1853.295780][ T5270] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1853.351341][ T1260] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.361370][ T1260] net_ratelimit: 65 callbacks suppressed [ 1853.361388][ T1260] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 1853.382984][ T5270] usb 2-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 1853.430168][T20153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1853.438880][ T5270] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1853.508144][ T5270] usb 2-1: config 0 descriptor?? [ 1853.925535][T20153] 8021q: adding VLAN 0 to HW filter on device team0 [ 1854.259795][ T8430] bridge0: port 1(bridge_slave_0) entered blocking state [ 1854.266996][ T8430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1854.428176][T20144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1854.461942][ T5270] nzxt-kraken2 0003:1E71:170E.0027: item fetching failed at offset 4/5 [ 1854.475353][ T5270] nzxt-kraken2 0003:1E71:170E.0027: hid parse failed with -22 [ 1854.483032][ T5270] nzxt-kraken2 0003:1E71:170E.0027: probe with driver nzxt-kraken2 failed with error -22 [ 1854.527890][T20144] 8021q: adding VLAN 0 to HW filter on device team0 [ 1854.595102][T15943] bridge0: port 2(bridge_slave_1) entered blocking state [ 1854.602286][T15943] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1854.695112][T15506] usb 2-1: USB disconnect, device number 33 [ 1854.762611][T15943] bridge0: port 1(bridge_slave_0) entered blocking state [ 1854.769789][T15943] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1854.814937][T15943] bridge0: port 2(bridge_slave_1) entered blocking state [ 1854.822103][T15943] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1855.027178][T20656] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1855.335495][T20144] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1855.387697][T20153] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1855.963496][T20153] veth0_vlan: entered promiscuous mode [ 1856.042441][T20153] veth1_vlan: entered promiscuous mode [ 1856.183990][T20153] veth0_macvtap: entered promiscuous mode [ 1856.221177][T20682] openvswitch: netlink: Actions may not be safe on all matching packets [ 1856.236579][T20153] veth1_macvtap: entered promiscuous mode [ 1856.296480][T20153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1856.332241][T20153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1856.342371][T20153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1856.352926][T20153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1856.363308][T20153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1856.374344][T20153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1856.384822][T20153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1856.395504][T20153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1856.407072][T20153] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1856.417811][T20153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1856.428491][T20153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1856.443080][T20153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1856.453611][T20153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1856.463829][T20153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1856.474559][T20153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1856.484936][T20153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1856.496184][T20153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1856.508007][T20153] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1856.894000][T20153] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1857.387056][ T29] audit: type=1400 audit(1728859212.778:887): avc: denied { remount } for pid=20700 comm="syz.1.2950" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 1857.446371][T20153] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1857.682626][T20144] veth0_vlan: entered promiscuous mode [ 1857.708840][T20144] veth1_vlan: entered promiscuous mode [ 1857.728329][T20153] wireguard: wg0: Could not create IPv4 socket [ 1857.767303][T20153] wireguard: wg1: Could not create IPv4 socket [ 1857.784731][T20153] wireguard: wg2: Could not create IPv4 socket [ 1857.799220][T20711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2953'. [ 1857.826428][T20711] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2953'. [ 1857.844900][T20711] netlink: 'syz.3.2953': attribute type 14 has an invalid length. [ 1858.138580][T20144] veth0_macvtap: entered promiscuous mode [ 1858.215187][T20144] veth1_macvtap: entered promiscuous mode [ 1858.535864][T20144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1858.562926][T20726] netlink: 'syz.1.2956': attribute type 4 has an invalid length. [ 1858.585616][T20726] netlink: 'syz.1.2956': attribute type 2 has an invalid length. [ 1858.601752][T20144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1858.641168][T20144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1858.702355][T20144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1858.735773][T20144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1858.781495][T20144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1858.819340][T20144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1858.850740][T20144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1858.878050][T20144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1858.916612][T20144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1858.988151][T20144] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1859.159080][T20740] hub 6-0:1.0: USB hub found [ 1859.164797][T20740] hub 6-0:1.0: 1 port detected [ 1859.946189][T20144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1859.983700][T11535] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1860.005686][T20144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1860.016555][T20144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1860.056263][T20144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1860.095784][T20144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1860.137420][T11535] usb 2-1: Using ep0 maxpacket: 8 [ 1860.149386][T20752] ax25_connect(): syz.0.2961 uses autobind, please contact jreuter@yaina.de [ 1860.165645][T20144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1860.206211][T11535] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1860.212530][ T29] audit: type=1400 audit(1728859215.548:888): avc: denied { connect } for pid=20750 comm="syz.0.2961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 1860.213820][T20144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1860.245467][T11535] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1860.275669][T11535] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1860.302430][T20144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1860.315935][T11535] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1860.328370][T20144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1860.337791][T11535] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1860.361525][T11535] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1860.363275][T20144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1860.371264][T11535] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1860.623858][T11535] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1860.810540][T20144] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1860.863922][T11535] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1861.100739][T20144] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1861.117490][T11535] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1861.135271][T11535] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1861.143489][T11535] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1861.155124][T11535] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1861.196847][T11535] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1861.222851][T20144] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 1861.242263][T11535] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1861.415774][T11535] usb 2-1: string descriptor 0 read error: -22 [ 1861.443124][T11535] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1861.890372][T20144] wireguard: wg0: Could not create IPv4 socket [ 1862.315947][T20144] wireguard: wg1: Could not create IPv4 socket [ 1862.352580][T11535] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1862.363449][T11535] usb 2-1: can't set config #168, error -71 [ 1862.372173][T11535] usb 2-1: USB disconnect, device number 34 [ 1862.396108][T20144] wireguard: wg2: Could not create IPv4 socket [ 1862.699380][T15487] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1862.714525][T15487] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1862.736480][T15487] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1862.756779][T15487] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1862.775748][T15487] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1862.798535][T15487] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1863.080291][T20773] Failed to initialize the IGMP autojoin socket (err -2) [ 1864.068096][T15505] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1864.131837][T15505] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1864.203437][T15505] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1864.267338][T15505] netdevsim netdevsim2 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 1864.338585][T15505] bridge_slave_1: left allmulticast mode [ 1864.344286][T15505] bridge_slave_1: left promiscuous mode [ 1864.380810][T15505] bridge0: port 2(bridge_slave_1) entered disabled state [ 1864.556644][T15505] bridge_slave_0: left allmulticast mode [ 1864.563068][T15505] bridge_slave_0: left promiscuous mode [ 1864.591424][T15505] bridge0: port 1(bridge_slave_0) entered disabled state [ 1864.924841][T20805] hub 6-0:1.0: USB hub found [ 1864.936112][T20805] hub 6-0:1.0: 1 port detected [ 1865.690541][T15487] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1865.702996][T15487] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1865.712422][T15487] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1865.922500][T15487] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1865.933501][T15487] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1865.945865][T15487] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1865.994517][T20819] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1866.087162][T20821] hub 6-0:1.0: USB hub found [ 1866.092856][T20821] hub 6-0:1.0: 1 port detected [ 1866.327175][T20819] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1866.342208][T20819] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1866.368765][T20819] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1866.419506][T20819] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1866.433383][T20819] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1867.078804][T20829] hub 6-0:1.0: USB hub found [ 1867.084565][T20829] hub 6-0:1.0: 1 port detected [ 1868.077090][T15487] Bluetooth: hci5: command tx timeout [ 1868.436663][ T5268] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1868.626150][T15487] Bluetooth: hci6: command tx timeout [ 1868.628235][ T5268] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1868.674870][ T5268] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1868.819410][ T5268] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1868.969901][ T5268] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1869.428294][T15505] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1869.698697][T20844] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1869.719190][T14754] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1869.731309][T14754] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1869.742880][T14754] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1869.753215][T14754] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1869.764634][T14754] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1869.804407][T14754] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1870.108479][ T5268] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1870.407822][T20819] Bluetooth: hci5: command tx timeout [ 1870.706039][T14754] Bluetooth: hci6: command tx timeout [ 1870.759139][T15505] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1871.395897][T14754] Bluetooth: hci4: command 0x0406 tx timeout [ 1871.498886][T15505] bond0 (unregistering): Released all slaves [ 1871.653024][T20857] Failed to initialize the IGMP autojoin socket (err -2) [ 1871.842793][T20812] Failed to initialize the IGMP autojoin socket (err -2) [ 1871.849765][T20817] Failed to initialize the IGMP autojoin socket (err -2) [ 1871.908645][ T5268] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1871.916488][T15487] Bluetooth: hci7: command tx timeout [ 1871.930750][T15505] hsr_slave_0: left promiscuous mode [ 1871.941156][T15505] hsr_slave_1: left promiscuous mode [ 1871.952295][T15505] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1871.964867][T15505] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1871.983554][T15505] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1872.003763][T15505] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1872.059228][T15505] veth1_macvtap: left promiscuous mode [ 1872.065027][T15505] veth0_macvtap: left promiscuous mode [ 1872.076761][ T5268] usb 1-1: Using ep0 maxpacket: 32 [ 1872.080687][T15505] veth1_vlan: left promiscuous mode [ 1872.088982][ T5268] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1872.091432][T15505] veth0_vlan: left promiscuous mode [ 1872.115724][ T5268] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1872.126540][ T5268] usb 1-1: New USB device found, idVendor=056a, idProduct=0319, bcdDevice= 0.00 [ 1872.145747][ T5268] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1872.160234][ T5268] usb 1-1: config 0 descriptor?? [ 1872.468317][T15487] Bluetooth: hci5: command tx timeout [ 1872.607524][T15506] usb 2-1: USB disconnect, device number 35 [ 1872.785953][T15487] Bluetooth: hci6: command tx timeout [ 1872.861633][ T5270] usb 1-1: USB disconnect, device number 45 [ 1873.985913][T15487] Bluetooth: hci7: command tx timeout [ 1874.055986][T20913] hub 6-0:1.0: USB hub found [ 1874.061753][T20913] hub 6-0:1.0: 1 port detected [ 1874.565677][T15487] Bluetooth: hci5: command tx timeout [ 1874.871566][T15487] Bluetooth: hci6: command tx timeout [ 1875.003716][T15505] team0 (unregistering): Port device team_slave_1 removed [ 1875.098216][T15505] team0 (unregistering): Port device team_slave_0 removed [ 1876.066430][T15487] Bluetooth: hci7: command tx timeout [ 1876.960446][T20857] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1877.004252][T20819] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1877.081142][T20977] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2985'. [ 1877.091812][T20819] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1877.091819][T20977] tipc: Invalid UDP bearer configuration [ 1877.098980][T20977] tipc: Enabling of bearer rejected, failed to enable media [ 1877.113738][T20819] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1877.146641][T20819] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1877.167112][T20819] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1877.176434][T20819] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1877.186563][T20987] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2986'. [ 1877.226179][T20987] netlink: 'syz.0.2986': attribute type 1 has an invalid length. [ 1877.233954][T20987] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2986'. [ 1877.313957][T15487] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1877.324628][T15487] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1877.341092][T15487] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1877.349114][T15487] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1877.409665][T15487] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1877.441521][T15487] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1877.526676][T20857] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1877.654401][T20980] Failed to initialize the IGMP autojoin socket (err -2) [ 1877.732912][T20988] Failed to initialize the IGMP autojoin socket (err -2) [ 1878.154080][T20819] Bluetooth: hci7: command tx timeout [ 1879.267680][T20819] Bluetooth: hci2: command tx timeout [ 1879.745774][T20819] Bluetooth: hci5: command tx timeout [ 1881.349255][T20819] Bluetooth: hci2: command tx timeout [ 1881.825824][T20819] Bluetooth: hci5: command tx timeout [ 1883.426726][T20819] Bluetooth: hci2: command tx timeout [ 1883.905817][T20819] Bluetooth: hci5: command tx timeout [ 1884.071134][T21117] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3001'. [ 1884.818377][T20857] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1888.092721][T15487] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1888.106547][T15487] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1888.114957][T15487] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1888.124868][T15487] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1888.136405][T15487] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1888.147505][T15487] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1889.287866][T20819] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1889.297831][T20819] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1889.306513][T20819] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1889.317382][T20819] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1889.325086][T20819] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1889.338694][T20819] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1889.933606][T21187] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3010'. [ 1889.957334][T21187] openvswitch: netlink: Actions may not be safe on all matching packets [ 1890.229704][T20819] Bluetooth: hci2: command tx timeout [ 1891.509019][T20819] Bluetooth: hci5: command tx timeout [ 1892.307180][T20819] Bluetooth: hci2: command tx timeout [ 1893.586164][T20819] Bluetooth: hci5: command tx timeout [ 1894.386346][T20819] Bluetooth: hci2: command tx timeout [ 1895.665983][T20819] Bluetooth: hci5: command tx timeout [ 1896.192772][T15487] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1896.202840][T15487] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1896.214268][T15487] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1896.223996][T15487] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1896.255691][T15487] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1896.263484][T15487] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1896.465769][T15487] Bluetooth: hci2: command tx timeout [ 1897.265077][T20857] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1897.639221][T21296] Failed to initialize the IGMP autojoin socket (err -2) [ 1897.746601][T15487] Bluetooth: hci5: command tx timeout [ 1898.305882][T15487] Bluetooth: hci6: command tx timeout [ 1900.385912][T15487] Bluetooth: hci6: command tx timeout [ 1902.465753][T15487] Bluetooth: hci6: command tx timeout [ 1904.546287][T15487] Bluetooth: hci6: command tx timeout [ 1909.380562][T20819] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1909.394708][T20819] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1909.409959][T20819] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1909.419379][T20819] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1909.427596][T20819] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1909.435169][T20819] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1911.505917][T20819] Bluetooth: hci3: command tx timeout [ 1913.433293][T21161] Failed to initialize the IGMP autojoin socket (err -2) [ 1913.595774][T20819] Bluetooth: hci3: command tx timeout [ 1913.619068][T21172] Failed to initialize the IGMP autojoin socket (err -2) [ 1913.684972][T21498] Failed to initialize the IGMP autojoin socket (err -2) [ 1913.801174][T20857] netdevsim netdevsim3 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 1913.963971][T20857] netdevsim netdevsim3 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 1914.066629][T20857] netdevsim netdevsim3 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 1914.164185][T20857] netdevsim netdevsim3 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 1914.327948][T15505] netdevsim netdevsim4 eth9: set [1, 0] type 2 family 0 port 6081 - 0 [ 1914.452159][T15505] netdevsim netdevsim4 eth10: set [1, 0] type 2 family 0 port 6081 - 0 [ 1914.502061][T20857] netdevsim netdevsim3 netdevsim0: renamed from eth5 [ 1914.633017][T20857] netdevsim netdevsim3 netdevsim1: renamed from eth6 [ 1914.806945][ T1260] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.817888][ T1260] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 1914.907456][T15505] netdevsim netdevsim4 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 1915.026350][T20857] netdevsim netdevsim3 netdevsim2: renamed from eth7 [ 1915.254541][T20857] netdevsim netdevsim3 netdevsim3: renamed from eth8 [ 1915.464234][T15505] netdevsim netdevsim4 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 1915.588334][T15505] bridge_slave_1: left allmulticast mode [ 1915.594035][T15505] bridge_slave_1: left promiscuous mode [ 1915.692729][T15505] bridge0: port 2(bridge_slave_1) entered disabled state [ 1915.806301][T15505] bridge_slave_0: left allmulticast mode [ 1915.839618][T15505] bridge_slave_0: left promiscuous mode [ 1915.872024][T15505] bridge0: port 1(bridge_slave_0) entered disabled state [ 1916.407519][T15487] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1916.454935][T15487] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1916.467565][T15487] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1916.476295][T15487] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1916.486056][T15487] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1916.494120][T15487] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1916.962260][T20819] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1916.975750][T20819] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1916.987085][T20819] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1916.996784][T20819] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1917.004455][T20819] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1917.015922][T20819] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1917.133915][T15487] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1917.146040][T15487] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1917.155022][T15487] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1917.168104][T15487] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1917.185733][T15487] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1917.193167][T15487] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1917.238780][T15487] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1917.253354][T15487] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1917.274024][T15487] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1917.282379][T15487] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1917.290118][T15487] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1917.297685][T15487] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1918.545933][T15487] Bluetooth: hci2: command tx timeout [ 1919.107975][T15487] Bluetooth: hci3: command tx timeout [ 1919.266216][T15487] Bluetooth: hci6: command tx timeout [ 1919.365639][T15487] Bluetooth: hci5: command tx timeout [ 1920.632462][T15505] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1920.641784][T15487] Bluetooth: hci2: command tx timeout [ 1920.706728][T15505] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1920.812870][T15505] bond0 (unregistering): Released all slaves [ 1921.027133][T21509] Failed to initialize the IGMP autojoin socket (err -2) [ 1921.099152][T21512] Failed to initialize the IGMP autojoin socket (err -2) [ 1921.285620][T15487] Bluetooth: hci3: command tx timeout [ 1921.321865][T21507] Failed to initialize the IGMP autojoin socket (err -2) [ 1921.346219][T15487] Bluetooth: hci6: command tx timeout [ 1921.427641][T21511] Failed to initialize the IGMP autojoin socket (err -2) [ 1921.435276][T15487] Bluetooth: hci5: command tx timeout [ 1922.705997][T15487] Bluetooth: hci2: command tx timeout [ 1923.345816][T15487] Bluetooth: hci3: command tx timeout [ 1923.425905][T15487] Bluetooth: hci6: command tx timeout [ 1923.505747][T15487] Bluetooth: hci5: command tx timeout [ 1925.363681][T15487] Bluetooth: hci2: command tx timeout [ 1925.438628][T15487] Bluetooth: hci3: command tx timeout [ 1925.515953][T15487] Bluetooth: hci6: command tx timeout [ 1925.591632][T15487] Bluetooth: hci5: command tx timeout [ 1929.480202][T20819] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1929.498962][T20819] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1929.513008][T20819] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1929.522075][T20819] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1929.530570][T20819] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1929.543365][T20819] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1931.585735][T15487] Bluetooth: hci4: command tx timeout [ 1933.665849][T15487] Bluetooth: hci4: command tx timeout [ 1935.745729][T15487] Bluetooth: hci4: command tx timeout [ 1938.539837][T15487] Bluetooth: hci4: command tx timeout [ 1976.232582][ T1260] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.249612][ T1260] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 1978.162201][T20819] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1978.182393][T20819] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1978.191105][T20819] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1978.199774][T20819] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1978.207895][T20819] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1978.215218][T20819] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1978.843814][T15487] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1978.859243][T15487] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1978.868371][T15487] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1978.888997][T15487] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1978.896705][T15487] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 1978.904796][T15487] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1979.133929][T20819] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1979.151133][T20819] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1979.159551][T20819] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1979.168076][T20819] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1979.177999][T20819] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 1979.189733][T20819] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1979.240722][T15487] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1979.254359][T15487] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1979.263379][T15487] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1979.272132][T15487] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1979.279852][T15487] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 1979.287747][T15487] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1980.306025][T15487] Bluetooth: hci8: command tx timeout [ 1981.025989][T15487] Bluetooth: hci9: command tx timeout [ 1981.265871][T15487] Bluetooth: hci10: command tx timeout [ 1981.347473][T15487] Bluetooth: hci11: command tx timeout [ 1982.401873][T15487] Bluetooth: hci8: command tx timeout [ 1983.105976][T15487] Bluetooth: hci9: command tx timeout [ 1983.347791][T15487] Bluetooth: hci10: command tx timeout [ 1983.425784][T15487] Bluetooth: hci11: command tx timeout [ 1984.467570][T15487] Bluetooth: hci8: command tx timeout [ 1985.185966][T15487] Bluetooth: hci9: command tx timeout [ 1985.426903][T15487] Bluetooth: hci10: command tx timeout [ 1985.505761][T15487] Bluetooth: hci11: command tx timeout [ 1986.549435][T15487] Bluetooth: hci8: command tx timeout [ 1987.265953][T15487] Bluetooth: hci9: command tx timeout [ 1987.505775][T15487] Bluetooth: hci10: command tx timeout [ 1987.585750][T15487] Bluetooth: hci11: command tx timeout [ 1990.042550][T20819] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1990.055391][T20819] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1990.064152][T20819] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1990.074083][T20819] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1990.086010][T20819] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 1990.096748][T20819] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1992.145713][T15487] Bluetooth: hci12: command tx timeout [ 1993.675497][T15487] Bluetooth: hci7: command 0x0406 tx timeout [ 1994.232039][T20819] Bluetooth: hci12: command tx timeout [ 1996.305717][T20819] Bluetooth: hci12: command tx timeout [ 1998.391834][T20819] Bluetooth: hci12: command tx timeout [ 2025.448366][T15505] hsr_slave_0: left promiscuous mode [ 2025.709105][T15505] hsr_slave_1: left promiscuous mode [ 2025.872101][T15505] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2025.895766][T15505] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2025.992727][T15505] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2026.045755][T15505] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2026.204832][T15505] veth1_macvtap: left promiscuous mode [ 2026.260966][T15505] veth0_macvtap: left promiscuous mode [ 2026.291983][T15505] veth1_vlan: left promiscuous mode [ 2026.330089][T15505] veth0_vlan: left promiscuous mode [ 2036.462483][T15487] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2036.472582][T15487] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2036.481471][T15487] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2036.493159][T15487] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2036.501588][T15487] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2036.509858][T15487] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2036.974937][T20819] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2036.986843][T20819] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2036.995234][T20819] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2037.003650][T20819] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2037.014485][T20819] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2037.022176][T20819] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2037.676689][ T1260] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.697461][ T1260] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 2038.546027][T20819] Bluetooth: hci2: command tx timeout [ 2039.115918][T20819] Bluetooth: hci3: command tx timeout [ 2039.268093][T15487] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2039.279925][T15487] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2039.288392][T15487] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2039.296786][T15487] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2039.314828][T15487] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2039.323888][T15487] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2039.894815][T20819] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2039.914946][T20819] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2039.924374][T20819] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2039.937579][T20819] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2039.948250][T20819] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 2039.955645][T20819] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2040.630632][T20819] Bluetooth: hci2: command tx timeout [ 2041.185841][T20819] Bluetooth: hci3: command tx timeout [ 2041.425839][T20819] Bluetooth: hci4: command tx timeout [ 2042.065881][T20819] Bluetooth: hci5: command tx timeout [ 2042.705855][T20819] Bluetooth: hci2: command tx timeout [ 2043.265716][T20819] Bluetooth: hci3: command tx timeout [ 2043.505837][T20819] Bluetooth: hci4: command tx timeout [ 2044.145750][T20819] Bluetooth: hci5: command tx timeout [ 2044.785980][T20819] Bluetooth: hci2: command tx timeout [ 2045.345871][T20819] Bluetooth: hci3: command tx timeout [ 2045.585720][T20819] Bluetooth: hci4: command tx timeout [ 2046.225734][T20819] Bluetooth: hci5: command tx timeout [ 2047.665817][T20819] Bluetooth: hci4: command tx timeout [ 2048.305672][T20819] Bluetooth: hci5: command tx timeout [ 2050.729354][T15487] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2050.739452][T15487] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2050.748350][T15487] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2050.756284][T15487] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2050.764992][T15487] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 2050.779592][T15487] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2052.865876][T15487] Bluetooth: hci6: command tx timeout [ 2054.945932][T15487] Bluetooth: hci6: command tx timeout [ 2057.025660][T15487] Bluetooth: hci6: command tx timeout [ 2059.105774][T15487] Bluetooth: hci6: command tx timeout [ 2098.485898][ T30] INFO: task syz.0.3004:21138 blocked for more than 143 seconds. [ 2098.493684][ T30] Not tainted 6.12.0-rc2-syzkaller-00320-gba01565ced22 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 2098.585607][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2098.594334][ T30] task:syz.0.3004 state:D stack:25968 pid:21138 tgid:21137 ppid:19304 flags:0x00004002 [ 2098.765646][ T30] Call Trace: [ 2098.768982][ T30] [ 2098.771945][ T30] __schedule+0xef5/0x5750 [ 2098.866383][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 2098.871671][ T30] ? __pfx___schedule+0x10/0x10 [ 2098.925591][ T30] ? schedule+0x298/0x350 [ 2098.929997][ T30] ? __pfx_lock_release+0x10/0x10 [ 2098.935052][ T30] ? trace_lock_acquire+0x14a/0x1d0 [ 2099.035970][ T30] ? lock_acquire+0x2f/0xb0 [ 2099.040543][ T30] ? schedule+0x1fd/0x350 [ 2099.044916][ T30] schedule+0xe7/0x350 [ 2099.106616][ T30] schedule_preempt_disabled+0x13/0x30 [ 2099.143779][ T1260] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.155355][ T1260] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 2099.198701][ T30] __mutex_lock+0x5b8/0x9c0 [ 2099.203278][ T30] ? msleep+0x5d/0xd0 [ 2099.282135][ T30] ? netdev_run_todo+0xdfc/0x12d0 [ 2099.305888][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 2099.311000][ T30] ? rcu_barrier+0x344/0x700 [ 2099.345836][ T30] ? netdev_run_todo+0xdfc/0x12d0 [ 2099.350941][ T30] ? rtnl_lock+0x9/0x20 [ 2099.355126][ T30] netdev_run_todo+0xdfc/0x12d0 [ 2099.405803][ T30] ? __pfx_netdev_run_todo+0x10/0x10 [ 2099.411177][ T30] ? kvfree+0x47/0x50 [ 2099.415208][ T30] ? __pfx_netdev_state_change+0x10/0x10 [ 2099.463628][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 2099.468999][ T30] tun_chr_close+0xea/0x230 [ 2099.474447][ T30] __fput+0x3f6/0xb60 [ 2099.535862][ T30] task_work_run+0x14e/0x250 [ 2099.540543][ T30] ? __pfx_task_work_run+0x10/0x10 [ 2099.555657][ T30] do_exit+0xadd/0x2d70 [ 2099.559887][ T30] ? get_signal+0x8f2/0x2770 [ 2099.564519][ T30] ? __pfx_do_exit+0x10/0x10 [ 2099.629727][ T30] do_group_exit+0xd3/0x2a0 [ 2099.634314][ T30] get_signal+0x25fb/0x2770 [ 2099.675463][ T30] ? __pfx_get_signal+0x10/0x10 [ 2099.694717][ T30] ? task_work_add+0x1d6/0x370 [ 2099.715776][ T30] arch_do_signal_or_restart+0x90/0x7e0 [ 2099.721396][ T30] ? __fget_files+0x244/0x3f0 [ 2099.743627][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 2099.765237][ T30] ? ksys_read+0x1ad/0x260 [ 2099.783233][ T30] ? __pfx_ksys_read+0x10/0x10 [ 2099.794591][ T30] syscall_exit_to_user_mode+0x150/0x2a0 [ 2099.820449][ T30] do_syscall_64+0xda/0x250 [ 2099.825026][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2099.851971][ T30] RIP: 0033:0x7f7c78d7dff9 [ 2099.856481][ T30] RSP: 002b:00007f7c79b45038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2099.864936][ T30] RAX: 0000000000018ff8 RBX: 00007f7c78f35f80 RCX: 00007f7c78d7dff9 [ 2099.895785][ T30] RDX: 0000000000018ff8 RSI: 0000000020019680 RDI: 0000000000000003 [ 2099.903824][ T30] RBP: 00007f7c78df0296 R08: 0000000000000000 R09: 0000000000000000 [ 2099.943296][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2099.961415][ T30] R13: 0000000000000000 R14: 00007f7c78f35f80 R15: 00007ffe4dcd9868 [ 2099.985622][ T30] [ 2099.995102][ T30] [ 2099.995102][ T30] Showing all locks held in the system: [ 2100.015187][ T30] 1 lock held by khungtaskd/30: [ 2100.026224][ T30] #0: ffffffff8e1b8340 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x7f/0x390 [ 2100.054188][ T30] 3 locks held by kworker/u8:6/1057: [ 2100.069580][ T30] #0: ffff88801b089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0 [ 2100.102001][ T30] #1: ffffc90004297d80 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 2100.128031][ T30] #2: ffffffff8fee15a8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0x51/0xc0 [ 2100.158077][ T30] 2 locks held by klogd/4664: [ 2100.162799][ T30] 2 locks held by dhcpcd/4888: [ 2100.179096][ T30] #0: ffffffff8ff7fdd0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 2100.198452][ T30] #1: ffffffff8fee15a8 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0xb4/0xb10 [ 2100.231562][ T30] 2 locks held by getty/4977: [ 2100.236344][ T30] #0: ffff8880326f20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 2100.261792][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xfba/0x1480 [ 2100.289803][ T30] 3 locks held by kworker/1:4/5268: [ 2100.295039][ T30] 3 locks held by kworker/1:6/5354: [ 2100.322244][ T30] #0: ffff88801b080948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0 [ 2100.345741][ T30] #1: ffffc90004247d80 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 2100.382312][ T30] #2: ffffffff8fee15a8 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 2100.411575][ T30] 3 locks held by kworker/u8:12/8494: [ 2100.417768][ T30] #0: ffff88814bd2d148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0 [ 2100.445734][ T30] #1: ffffc90003207d80 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 2100.485517][ T30] #2: ffffffff8fee15a8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x12/0x30 [ 2100.505604][ T30] 4 locks held by kworker/1:7/12297: [ 2100.510941][ T30] 3 locks held by kworker/u9:4/15487: [ 2100.535586][ T30] #0: ffff888064ebf948 ((wq_completion)hci9){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0 [ 2100.570540][ T30] #1: ffffc9000a4c7d80 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 2100.612453][ T30] #2: ffff888062538d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x170/0x410 [ 2100.643041][ T30] 5 locks held by kworker/u8:1/15505: [ 2100.648502][ T30] #0: ffff88801beeb148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0 [ 2100.675586][ T30] #1: ffffc900042f7d80 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 2100.711943][ T30] #2: ffffffff8fecbc10 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xbb/0xb40 [ 2100.735788][ T30] #3: ffffffff8fee15a8 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0x8c/0xae0 [ 2100.756122][ T30] #4: ffffffff8e05b950 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x54d/0x1e50 [ 2100.821979][ T30] 3 locks held by kworker/1:1/15506: [ 2100.842233][ T30] 3 locks held by kworker/u9:1/20819: [ 2100.855595][ T30] #0: ffff88806cbb0148 ((wq_completion)hci8){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0 [ 2100.891650][ T30] #1: ffffc90004177d80 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 2100.921526][ T30] #2: ffff88805af98d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x170/0x410 [ 2100.942318][ T30] 1 lock held by syz-executor/20857: [ 2100.959697][ T30] #0: ffffffff8fee15a8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x38/0x230 [ 2100.977895][ T30] 1 lock held by syz.0.3004/21138: [ 2100.983045][ T30] #0: ffffffff8fee15a8 (rtnl_mutex){+.+.}-{3:3}, at: netdev_run_todo+0xdfc/0x12d0 [ 2100.996602][ T30] 1 lock held by syz-executor/21509: [ 2101.001918][ T30] #0: ffffffff8fee15a8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x38/0x230 [ 2101.017736][ T30] 1 lock held by syz-executor/21526: [ 2101.023056][ T30] #0: ffffffff8fee15a8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 2101.037147][ T30] 1 lock held by syz-executor/21532: [ 2101.042466][ T30] #0: ffffffff8fee15a8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 2101.057311][ T30] 1 lock held by syz-executor/21534: [ 2101.063335][ T30] #0: ffffffff8fee15a8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 2101.077380][ T30] 1 lock held by syz-executor/21536: [ 2101.082969][ T30] #0: ffffffff8fee15a8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 2101.095585][ T30] 1 lock held by syz-executor/21539: [ 2101.100902][ T30] #0: ffffffff8fee15a8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 2101.118165][ T30] 1 lock held by syz-executor/21550: [ 2101.123486][ T30] #0: ffffffff8fee15a8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 2101.137393][ T30] 1 lock held by syz-executor/21556: [ 2101.142714][ T30] #0: ffffffff8fee15a8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 2101.156349][ T30] 1 lock held by syz-executor/21559: [ 2101.161680][ T30] #0: ffffffff8fee15a8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 2101.175677][ T30] 1 lock held by syz-executor/21562: [ 2101.180995][ T30] #0: ffffffff8fee15a8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 2101.196726][T14754] Bluetooth: hci8: command 0x0406 tx timeout [ 2101.202773][T14754] Bluetooth: hci9: command 0x0406 tx timeout [ 2101.216532][ T30] 1 lock held by syz-executor/21565: [ 2101.221851][ T30] #0: ffffffff8fee15a8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x372/0xea0 [ 2101.241277][ T30] [ 2101.243636][ T30] ============================================= [ 2101.243636][ T30] [ 2101.255597][ T30] NMI backtrace for cpu 0 [ 2101.259955][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00320-gba01565ced22 #0 [ 2101.270479][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2101.280557][ T30] Call Trace: [ 2101.283852][ T30] [ 2101.286806][ T30] dump_stack_lvl+0x116/0x1f0 [ 2101.291525][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 2101.296489][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2101.302510][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 2101.308525][ T30] watchdog+0xf0c/0x1240 [ 2101.312801][ T30] ? __pfx_watchdog+0x10/0x10 [ 2101.317501][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 2101.322736][ T30] ? __kthread_parkme+0x148/0x220 [ 2101.327795][ T30] ? __pfx_watchdog+0x10/0x10 [ 2101.332497][ T30] kthread+0x2c1/0x3a0 [ 2101.336588][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 2101.341813][ T30] ? __pfx_kthread+0x10/0x10 [ 2101.346435][ T30] ret_from_fork+0x45/0x80 [ 2101.350871][ T30] ? __pfx_kthread+0x10/0x10 [ 2101.355490][ T30] ret_from_fork_asm+0x1a/0x30 [ 2101.360303][ T30] [ 2101.364089][ T30] Sending NMI from CPU 0 to CPUs 1: [ 2101.369921][ C1] NMI backtrace for cpu 1 [ 2101.369937][ C1] CPU: 1 UID: 0 PID: 12297 Comm: kworker/1:7 Not tainted 6.12.0-rc2-syzkaller-00320-gba01565ced22 #0 [ 2101.369970][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2101.369988][ C1] Workqueue: events nsim_dev_trap_report_work [ 2101.370026][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 2101.370072][ C1] Code: 7e 60 e8 a3 ff ff ff 31 c0 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 65 48 8b 15 14 59 76 7e 65 8b 05 15 59 76 7e a9 00 01 [ 2101.370105][ C1] RSP: 0018:ffffc90000a184e0 EFLAGS: 00000202 [ 2101.370125][ C1] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff813eebe9 [ 2101.370144][ C1] RDX: ffff888025ac9e00 RSI: 0000000000000000 RDI: 0000000000000005 [ 2101.370162][ C1] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 2101.370179][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: ffff88813fffa800 [ 2101.370196][ C1] R13: 0000000000000008 R14: 0000000000000002 R15: ffff88806e0ed940 [ 2101.370215][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 2101.370241][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2101.370260][ C1] CR2: 0000000020032000 CR3: 000000000df7c000 CR4: 00000000003526f0 [ 2101.370278][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2101.370295][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2101.370312][ C1] Call Trace: [ 2101.370321][ C1] [ 2101.370330][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 2101.370362][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 2101.370403][ C1] ? nmi_handle+0x1a9/0x5c0 [ 2101.370432][ C1] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 2101.370475][ C1] ? default_do_nmi+0x6a/0x160 [ 2101.370502][ C1] ? exc_nmi+0x170/0x1e0 [ 2101.370526][ C1] ? end_repeat_nmi+0xf/0x53 [ 2101.370565][ C1] ? __virt_addr_valid+0x299/0x590 [ 2101.370599][ C1] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 2101.370643][ C1] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 2101.370687][ C1] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 2101.370731][ C1] [ 2101.370739][ C1] [ 2101.370747][ C1] __virt_addr_valid+0x4a9/0x590 [ 2101.370781][ C1] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 2101.370815][ C1] kasan_addr_to_slab+0xd/0x80 [ 2101.370844][ C1] __kasan_record_aux_stack+0xe/0xd0 [ 2101.370883][ C1] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 2101.370916][ C1] __call_rcu_common.constprop.0+0x99/0x7a0 [ 2101.370947][ C1] ? percpu_counter_add_batch+0xb5/0x1e0 [ 2101.370989][ C1] dst_release+0x1f8/0x270 [ 2101.371020][ C1] skb_release_head_state+0x234/0x290 [ 2101.371065][ C1] consume_skb+0x85/0x100 [ 2101.371097][ C1] nft_synproxy_do_eval+0xa51/0xd60 [ 2101.371133][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 2101.371167][ C1] ? mark_lock+0xb5/0xc60 [ 2101.371191][ C1] ? mark_lock+0xb5/0xc60 [ 2101.371216][ C1] ? mark_lock+0xb5/0xc60 [ 2101.371240][ C1] ? __pfx_nft_synproxy_eval+0x10/0x10 [ 2101.371276][ C1] nft_do_chain+0x2e6/0x18f0 [ 2101.371312][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 2101.371344][ C1] ? ipt_do_table+0xd4c/0x1aa0 [ 2101.371380][ C1] ? __local_bh_enable_ip+0xa4/0x120 [ 2101.371412][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 2101.371456][ C1] nft_do_chain_inet+0x18b/0x350 [ 2101.371486][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 2101.371518][ C1] ? __pfx_ipt_do_table+0x10/0x10 [ 2101.371550][ C1] ? nf_nat_ipv4_local_in+0x181/0x720 [ 2101.371592][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 2101.371622][ C1] nf_hook_slow+0xbb/0x200 [ 2101.371664][ C1] nf_hook.constprop.0+0x42e/0x750 [ 2101.371706][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 2101.371750][ C1] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 2101.371792][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 2101.371818][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 2101.371866][ C1] ip_local_deliver+0x169/0x1f0 [ 2101.371908][ C1] ? __pfx_ip_local_deliver+0x10/0x10 [ 2101.371950][ C1] ip_rcv+0x2c3/0x5d0 [ 2101.371973][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 2101.371995][ C1] __netif_receive_skb_one_core+0x199/0x1e0 [ 2101.372032][ C1] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 2101.372070][ C1] ? trace_lock_acquire+0x14a/0x1d0 [ 2101.372111][ C1] ? process_backlog+0x3f1/0x15f0 [ 2101.372147][ C1] ? process_backlog+0x3f1/0x15f0 [ 2101.372181][ C1] __netif_receive_skb+0x1d/0x160 [ 2101.372216][ C1] process_backlog+0x443/0x15f0 [ 2101.372254][ C1] __napi_poll.constprop.0+0xb7/0x550 [ 2101.372293][ C1] net_rx_action+0xa92/0x1010 [ 2101.372329][ C1] ? tmigr_handle_remote+0x153/0xdd0 [ 2101.372362][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 2101.372397][ C1] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 2101.372426][ C1] ? run_timer_base+0x119/0x190 [ 2101.372471][ C1] ? run_timer_base+0x11e/0x190 [ 2101.372508][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 2101.372548][ C1] handle_softirqs+0x213/0x8f0 [ 2101.372581][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 2101.372613][ C1] ? irqtime_account_irq+0x18d/0x2e0 [ 2101.372644][ C1] ? nsim_dev_trap_report_work+0x870/0xc80 [ 2101.372681][ C1] do_softirq+0xb2/0xf0 [ 2101.372711][ C1] [ 2101.372719][ C1] [ 2101.372728][ C1] __local_bh_enable_ip+0x100/0x120 [ 2101.372760][ C1] nsim_dev_trap_report_work+0x870/0xc80 [ 2101.372803][ C1] process_one_work+0x9c5/0x1ba0 [ 2101.372835][ C1] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 2101.372872][ C1] ? __pfx_process_one_work+0x10/0x10 [ 2101.372903][ C1] ? assign_work+0x1a0/0x250 [ 2101.372945][ C1] worker_thread+0x6c8/0xf00 [ 2101.372978][ C1] ? __pfx_worker_thread+0x10/0x10 [ 2101.373004][ C1] kthread+0x2c1/0x3a0 [ 2101.373035][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 2101.373065][ C1] ? __pfx_kthread+0x10/0x10 [ 2101.373106][ C1] ret_from_fork+0x45/0x80 [ 2101.373131][ C1] ? __pfx_kthread+0x10/0x10 [ 2101.373164][ C1] ret_from_fork_asm+0x1a/0x30 [ 2101.373210][ C1] [ 2102.040140][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 2102.047034][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00320-gba01565ced22 #0 [ 2102.057562][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2102.067642][ T30] Call Trace: [ 2102.070939][ T30] [ 2102.073884][ T30] dump_stack_lvl+0x3d/0x1f0 [ 2102.078509][ T30] panic+0x71d/0x800 [ 2102.082437][ T30] ? __pfx_panic+0x10/0x10 [ 2102.086885][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 2102.092294][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2102.098307][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 2102.103705][ T30] ? watchdog+0xd76/0x1240 [ 2102.108140][ T30] ? watchdog+0xd69/0x1240 [ 2102.112580][ T30] watchdog+0xd87/0x1240 [ 2102.116852][ T30] ? __pfx_watchdog+0x10/0x10 [ 2102.121547][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 2102.126779][ T30] ? __kthread_parkme+0x148/0x220 [ 2102.131833][ T30] ? __pfx_watchdog+0x10/0x10 [ 2102.136534][ T30] kthread+0x2c1/0x3a0 [ 2102.140631][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 2102.145856][ T30] ? __pfx_kthread+0x10/0x10 [ 2102.150475][ T30] ret_from_fork+0x45/0x80 [ 2102.154913][ T30] ? __pfx_kthread+0x10/0x10 [ 2102.159534][ T30] ret_from_fork_asm+0x1a/0x30 [ 2102.164346][ T30] [ 2102.167664][ T30] Kernel Offset: disabled [ 2102.171980][ T30] Rebooting in 86400 seconds..