last executing test programs: 4m55.033542588s ago: executing program 4 (id=326): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x12}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r7) 4m53.601513408s ago: executing program 4 (id=330): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1d, 0xe, &(0x7f0000001100)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x4, &(0x7f00000008c0)=ANY=[], 0x0}, 0x90) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r2, 0x2, 0x1, 0x0, &(0x7f0000000140)=[0x0], 0x3, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 4m52.537775122s ago: executing program 4 (id=332): syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, 0x0) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0xfffd) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x54}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000009200)=[@in={0x2, 0x0, @remote}], 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[], 0x50}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000040601080000000000000000000000000500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x20004084}, 0x10) 4m50.048042547s ago: executing program 4 (id=341): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x90) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000740)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x1, r2}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000780)={0x1, 0x0, [{0x2, 0xaf, &(0x7f0000000680)=""/175}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x20000) 4m3.270922678s ago: executing program 4 (id=341): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x90) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000740)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x1, r2}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000780)={0x1, 0x0, [{0x2, 0xaf, &(0x7f0000000680)=""/175}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x20000) 1m9.272402204s ago: executing program 4 (id=341): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x90) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000740)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x1, r2}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000780)={0x1, 0x0, [{0x2, 0xaf, &(0x7f0000000680)=""/175}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x20000) 24.496200696s ago: executing program 3 (id=625): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f00000005c0)=[{}, {}, {}], 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000880)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_open_dev$vbi(0x0, 0x0, 0x2) sendto$inet(r2, 0x0, 0x0, 0x2000077d, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) epoll_create1(0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x88141, 0x0) r3 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/kernel/address_bits', 0x0, 0x0) fchdir(r3) timerfd_create(0x0, 0x0) r4 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 21.939217054s ago: executing program 3 (id=631): r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900), 0x0) r1 = socket(0x200000100000011, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r4, &(0x7f00000002c0)={0x0, 0x3, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000000b0102000000000000000003000000080001002f26250008000340000000000c0002"], 0x4c}}, 0x0) ioctl$EVIOCGREP(r0, 0x80084503, &(0x7f0000000300)=""/15) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f000001f480)=ANY=[@ANYRESOCT=r3, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000120000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000000280)=0x5) socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0x0, '.\x00'}}) 20.447359037s ago: executing program 1 (id=634): openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) sendmmsg(r3, &(0x7f0000004240)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x101, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x80, 0x0}}, {{&(0x7f0000001bc0)=@hci={0x1f, 0x0, 0x3}, 0x80, 0x0}}], 0x2, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf2502000000", @ANYBLOB="0400050006000a004e200000080006"], 0x4c}}, 0x0) write(r0, &(0x7f0000000580)="09000000010001", 0x7) 20.417412968s ago: executing program 3 (id=635): add_key$keyring(&(0x7f0000002d80), 0x0, 0x0, 0x0, 0xffffffffffffffff) socket(0x2c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x6080, 0x0) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r4, 0x2, &(0x7f00000001c0)=[&(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x0, r3, &(0x7f0000000000)='%', 0x104000}, 0x0, 0x0]) mkdirat(0xffffffffffffffff, 0x0, 0x0) r5 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) accept$ax25(r5, 0x0, 0x0) 19.255225034s ago: executing program 1 (id=636): r0 = syz_open_procfs(0x0, &(0x7f0000000780)='net/kcm\x00') r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f00000005c0)={0x48, 0xa, r2}) syz_io_uring_setup(0xd79, &(0x7f00000035c0)={0x0, 0x10000000, 0x8, 0x0, 0x0, 0x0, r0}, &(0x7f0000000180), &(0x7f0000003580)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f00000001c0)=0x6) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) r5 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000040)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}, 0x0, 0x0, 0x0, 0x0, "84fc7ae85699753be9313b719fa4a0d61ae154579a9ded79382a48dbff5b5c4ac82552600b582c5d65c9ffc0d9842a2a9eb86c339a3ad66944224092bd1188e3d558a56e7e42e8d6522c1bb5d4642f91"}, 0xd8) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0xc0481273, &(0x7f00000000c0)) 18.195797832s ago: executing program 1 (id=638): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10) sendto$inet(r1, &(0x7f00000000c0)="18", 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @private=0xa010100}, 0x10) sendto$inet(r1, &(0x7f0000000100)='h', 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendto$packet(r0, &(0x7f00000003c0)="b37190157bbd6014d18871bedc07883392eacc36a37ac1209ff663c9435e90c6f556ca572e3be602d7a794ece2488787b6999bdf84954021991c1528086017466fac72fed2d7478c1d70c480744e9979bfaf11b119827702d196af8242b69eb8dbfe28401932c34dc0f3b2011c6a5a9ea5930a1f53be85dc41c93226e53778a638cccaf9efd810e5e38aec125e3ce108e74b21395c7db0618b49e39fc4aac7485362ba7571cbeedfaa2b54a711a95f5ce0d67996b2da946c42e093810c84f9ce8735d0624e91b9716dd4a2b65da642ab", 0xd0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000300)="99", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x4) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000200)=0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x100a840, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [{@dont_measure}, {@smackfstransmute={'smackfstransmute', 0x3d, '%:%^^#:{!!-(!\x12$^)'}}, {@audit}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@uid_gt={'uid>', r3}}]}}) recvmmsg(r1, &(0x7f0000005f80)=[{{&(0x7f0000005940)=@rc, 0x80, &(0x7f00000046c0)=[{&(0x7f00000059c0)=""/209, 0xd1}], 0x1}, 0xe}, {{&(0x7f0000006000)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000005e00)=[{&(0x7f0000005b40)=""/151, 0x97}, {&(0x7f0000005080)=""/27, 0x1b}, {&(0x7f0000005c00)}, {&(0x7f0000005c40)=""/119, 0x77}, {&(0x7f0000005cc0)=""/51, 0x33}, {&(0x7f0000005d00)=""/177, 0xb1}, {&(0x7f0000005dc0)=""/53, 0x35}], 0x7}, 0x54c}], 0x2, 0x0, 0x0) fsetxattr$smack_xattr_label(r1, &(0x7f0000000580)='security.SMACK64IPIN\x00', &(0x7f00000005c0)={'unconfined_u'}, 0xd, 0x2) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000340)="4800000014001d0d09074beafd0d8c560284606080ffe0064e204e20590000a2bc5603ca00000f7f8907000020008d42188fedc22e47ad8f75edc6d100000101ff0000000309ff5b", 0x48}], 0x1) 16.348909268s ago: executing program 1 (id=640): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(&(0x7f0000000140)='securityfs\x00', 0x0) memfd_secret(0x0) socket$nl_route(0x10, 0x3, 0x0) ptrace$setsig(0x4203, 0x0, 0x7, &(0x7f0000000200)={0x11, 0x8, 0xfffffff7}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="61124c000000000061138c0000000000bf200000000000000703000008ff0200ad0301000000000095000000000000006916000000000000bf67000000000000170600000fff07006706000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f2d3001000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9751f008554bb4f2278af6d71d79a5e12810a089dc1d4681d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a65f78238b89dc6c60bf70d742a81b72bab8395fa64810b5b1bfd3782519518c505000000b8fab4d4d897db2c544c0e0895a9044f50c50b8eac8c63d2b1cd06a39702bd547f5ebaa69520bbb15f4f01cef3c9bacec15e2e3b2bd352e93a22adfe8efe33ff2f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564bd98a621483fb2a5ff221e0d831f24759d17b8c59d0f2b0727f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d54574164bbea3e7b7f8a13cce7014137f250370b8a70ae3eaf6d6f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adf4b1be6f29358d4f5dfec405bde000000000000000000000000000000902e647cc5962eccaad64429335f3ce2a10ce72da82875427c1d16db24dca08487ba41a3fb337f8432d8176a515229e32ee11a1dd23dac038f989eafdd67f60b63f7be4d1bf325b57335b9973c73bfa89517a98b1fc15f8a2713718feb01059d570a0000e3b2a93bd745a74f9bf7f7abc5d15d56331055cc0820c5c9d676d92557c4e47cfbe27f91e0eb18e21dfdab3c84ec11377fbb00000000848060962bcbc47cefd1a2a7bd3b646614bf7cd3495663de5b63f6b5910daee8ebb7ba84a8b5b6f2d1fbc22a51a500f94c871d5e1d31ab5d7a89965bbdbf355a8544e1688a61f459f3618b3a5416eb143180d3d2c5f4e0b1a556422038801703e109e23944e53f230a3537a5412c7d0bf278c6c1684dd8de90aaa33f47dc2c7b5e4f73784fd31aa2f9d1b1623734f9cf84718b2bad31f651e3607f3ac6c427cb6c0652d21ecd4b29e96c0a3781ee820faab71040768f6b08a69fdfd0b2b7be25f19500c1b8330994efb57a53c1a67bda909630f75738ab40e7ab63d527d6c1e8cf611f05c1b6d0da1ba84d405b4d834162c88022a4625a5f7c431c39f3f9a7789f9b668ec4da9f1a981086"], &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r3, &(0x7f0000007700)={0x2020}, 0x2020) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r4, 0x4048aecb, &(0x7f00000000c0)=ANY=[]) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 15.034760565s ago: executing program 0 (id=641): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r1, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0)='virtiofs\x00', 0x0, 0x0) setreuid(0xee00, 0x0) setreuid(0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setuid(0x0) 14.972358214s ago: executing program 3 (id=642): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f0000001e40)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r4, &(0x7f0000000c40)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x0, &(0x7f0000000300)={0x0, 0x3938700}) timer_settime(0x0, 0x0, 0x0, 0x0) 13.712609942s ago: executing program 3 (id=643): r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, 0x0, 0x60) socket$inet(0x2, 0x3, 0x4) openat(0xffffffffffffff9c, 0x0, 0x40142, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x401) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000001880)=[{&(0x7f000001aa80)=""/102393, 0x18ff9}], 0x1, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x38, &(0x7f0000000100)=0x3, 0x4) listen(r2, 0x20000005) r3 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r4 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$inet6(r4, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0) 13.685069819s ago: executing program 2 (id=644): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0x8, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000340), 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, r0}, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_emit_ethernet(0xce, &(0x7f0000000740)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r2, 0x0, 0x8044851) syz_emit_ethernet(0x4a, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd600a843500140600fe8000000000000000000000000000bbff02000000000000000000000000000100004e", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="e0e4ff07000000cbd29564200043194dc510cace3221aa7ed33b3c14662a235440eacd3294d6d32e1092c7c044ace5475c69f2ecc605cb1eded59c4c51571af65770cce1cc40ec92032c15899b4bf347b8fe35b54f8f076fa6a172250cc201a89067034c5d3dc7ec2e0cc6a1bafdabcf0c0b8197"], 0x0) mount(&(0x7f0000000180)=@filename='./file1\x00', &(0x7f0000000280)='./file1\x00', 0x0, 0x0, &(0x7f00000000c0)=',\x00') fallocate(r1, 0x0, 0x4000000000, 0x0) r3 = socket$inet(0x2, 0x6, 0x0) fsetxattr$smack_xattr_label(r3, &(0x7f00000001c0)='security.SMACK64IPOUT\x00', &(0x7f0000000240)=ANY=[@ANYBLOB='@'], 0x4, 0x0) 12.974411371s ago: executing program 0 (id=645): r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$vim2m(0x0, 0x96ad, 0x2) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x200000b, 0x59033, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000582000/0x2000)=nil, 0x800000}) prlimit64(r0, 0x5, &(0x7f0000000440)={0xffffffffffbffffc}, 0x0) 12.658937674s ago: executing program 2 (id=646): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000002c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)={0x14, r4, 0x5de21d485e277b3, 0x0, 0x0, {0x6}}, 0x14}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r3) 10.805675179s ago: executing program 0 (id=647): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f00000000c0)=[{0x6}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000072"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x90) sendfile(0xffffffffffffffff, r0, 0x0, 0x800) inotify_init1(0x0) 10.760588594s ago: executing program 2 (id=648): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f0000000040)=""/247, 0x26, 0xf7, 0x1}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000003000040182000"/28, @ANYRES32, @ANYBLOB="000000000000000095000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x29, &(0x7f00000004c0), 0x3}, 0x80) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000c00)=ANY=[@ANYRES8=r3, @ANYBLOB='>'], 0x12) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000009c0)={r5, 0xf, 0x0, 0x0, 0x0, 0x0, 0xc77c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 10.714797038s ago: executing program 3 (id=649): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x3) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000e20000001801000020786c2500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCSCLOCKID(r5, 0x80084518, 0xfffffffffffffffe) 9.602655207s ago: executing program 1 (id=650): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) mincore(&(0x7f0000996000/0x2000)=nil, 0x2000, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) munlockall() mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x50032, 0xffffffffffffffff, 0x0) unshare(0x600) syncfs(0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000080)) syz_emit_ethernet(0x4a, &(0x7f0000000280)=ANY=[], 0x0) 9.23854689s ago: executing program 2 (id=651): r0 = socket$inet(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5000}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) dup(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) r3 = fanotify_init(0x200, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fanotify_mark(0xffffffffffffffff, 0x101, 0x20, r4, 0x0) fanotify_mark(r3, 0x102, 0x48001050, r2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) io_setup(0x2007, &(0x7f0000000200)) eventfd2(0x0, 0x80800) socket$inet_udplite(0x2, 0x2, 0x88) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r7, 0x400448df, &(0x7f0000000040)={0x0, 0x0, "ecd9b9"}) 8.717001258s ago: executing program 2 (id=652): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = syz_io_uring_setup(0x24f7, &(0x7f0000000640)={0x0, 0x0, 0x10100, 0xfffffffd, 0xfffffffd}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x13, 0x0, r1, 0x0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0, 0x40000021, 0x0, {0x1}}) io_uring_enter(r3, 0x4d92, 0x0, 0x0, 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) 8.715285126s ago: executing program 0 (id=662): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3d}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f0000001b40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f6fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe508185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff90326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c6be0ed9257851ed916219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c5b901dbd7387f49e0b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000053046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25132a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a068c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238e3fee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e89884cb73f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182060e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000008835196ed0c6a1c1d4c140e5ff0000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd574d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d0104361c37c61a43b5afd865b60d4cae891b73220f17d25979a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fcd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d372e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36d3cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e64701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4faa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a2689217380400a9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a000000000000000000000000000020bd79e41c682139c58ac1deb039a691ad640e12c12fe11d70fe495906f200d71778acbd4eee53a3996cb0de84bd2b059d60c0f96a53ea44e0b293865aa68df494f87db976e36ad6c06912244d4c883c4aaa60b4a1392ce0b2f2c519663b4652ff871e0f6dfff9f7d34ecf04be0a58c3d53174b67d1886e34b81ad8c60da56acc64739c3acab24aa8d0ac92d465074f915608b1b60a948bad401b1a7fb3627bbe6c45123ed44bfdf8cc143bd1b7a663dc3d0476b8e39becffc429e41f66b1e37ae52aacaff0f1dc8ea70b68c25072e20586b19127d75fa71577f265c5100000000000000000000000000028bfaaf1dce7970ae04e33a3d130761c0c0a53997716ebfa0e03c0acdb52e4af877a339d154fea243453e69bc89bb18fc501cf3a623bb871047060234ebc21155d0dc6efa64749afb63a0f8a9c28f62861e826ddf243bd9dda895a9b24d38641856dc058040a418e15139c0b13d52258254eacf045386abe27e8756c29758330146da2e25822afd92467974f70fa71a971517be63845c1eeb1a7a39a8e01750a67925746ffbc35c0046a1d660ebe5967bbc0496d0c9ba9758f9fcf46ecbd2e07523af5e56ff1d8eee549ecc92b0d13ad2edb0149b25debe70d227afb1ad45991bfb63f7cf6a8b5bcabf504d7fe21df0a23e8615055df856d88b7379a4c4499d01221d10c286c10b12ff5c89903806eab61c18721be6edc3d0fdbe2448f130b87b375f0de009ac38fd159a9f54771388f54b50caf5caf896ceb214b298b524c6cfeca9e0343038c68de8856772de2c498e191b9da24cc2a4b722c88a0fd2cca32ea9445e06549d1b5e9c1c90f4de9ce818694c1ced8354729bbec6a828876dae455e24f0f40490aaf80825d0fcdd8620b43da6b7f94c82aac9b256a469312aff3411ac73a377f01f7329a8027d9b47212c2ae9f2038152d0e99b4622a6eb35ba206e43cfbb50ef80b84a1854208c8414b309eb8a3408050772e161beac866e7247b3dc245c9ea14965f2a1a4a97c8baa5a4dd9f8904d47"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='mmap_lock_acquire_returned\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000091c2f20c81403006c050102030109021b00010000000009040000018ea44300090585da"], 0x0) r2 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x0) write$tcp_mem(r2, &(0x7f0000000100)={0x0, 0x2d, 0x0, 0xa, 0x0, 0x2c}, 0x48) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000000c0)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0)=r3, 0x12) syz_open_dev$evdev(0x0, 0x40, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.378246484s ago: executing program 0 (id=653): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) 2.377659778s ago: executing program 2 (id=654): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b00000000001b000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000006ffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0x0, 0x0, 0x0) sync() socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="b702000004000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff1d6405000000000065040400210000000404000001e37c60b7040000000000006a0a00fe000000008500000032000000b70000000000000095000000000000000ce0de7621e5e832249c04112cf7af2b75d0d1f034b1b3fb6bd3ce8fa62c7941272ff49142d860010ab162aa2264ab67e55a00000000000000edfe0969a9ddc125b686a1e83c8790c893d713b3295dad0ea697181d1e85b64126b5d72f204754d1d4a93f24215dee354e93cfc3f50ff23f8432c72012f021c84c59a9d4c142f439d3040cfee621589fb3a2f1407c7cbed48e7026f8d52d4bca2608c79aa4a73732028f88ce07ed1075da4a2ef44e3d8b88873f0b1de87dfb6d15936ec0a27cb554def9e27396df6b7851ffa26237ea6730880f06371beb3b290b7d8629a6f0373fefa0acb60888fc14ad2b83ca03ac2aee792482ced58af4140cc4ce3efef26e00c5b2200a91cb80c6065a697d6fc8aa8b65aee0783b04cff0218ce82c9687b4474da89c474c23727555fc5e5f8ad0f2f7a261140440fce1f12cc6df312accd011d888384283092d987c40bbb46f68c2431b97906f00000000349834fa147bd5923bbd4e606708034931a8f1a89bdf77093a0000427aab8e21e1a33d3fe093547532fce6549dd648ad233e05a7b3ea178007c1c32e871ac81f287c4aabbd153390b16d1d41ee433e3a54ea9ee82cf14f3a4cc523ee000000000009e106d6b5289f0000000000000000000000f7bc9f46cb71f6b889d37807865e3b4e9916dd0f72c9d58ea333b90f8886dcbf5ddda0e42ca08e3303632401f2f5212b40c0e88c957fd767dbfc80b07ad668b4f6f92fb209d7c2dbac597843c8eb7bf92fe6d0bb0b72549795c2ed19e441eb69869844152ba9da0588e42cdbc5fcd245ce5e3ef0dca64931276702a312db7956f0a75eb9caa17d47a6331c7c963cbf86a845ce27c26b7136d3e7207318b1df7a6320c64f18ccd926eaeddcde8d5006d6c38db117fb1115221a66169172720ccca770bff37e59511b2606138377eda44b2f288b491ab8aae0e11a98303b0e407e0f9d21f4a3ebbd3fabf6da9a1a1f869a339fab465d8322b7280b0734fd115a19b33c8644fff71b3c62f2e1b827e2663e06a751182e968c8ab05fb1d0115d4b11d944f2c06acc023a02b7416a9a10218d21503cda13bb5df6c992e52e1c01793b728eac000058ab3b3900d279297dadc127e2f38fc60c23af2e1fefa5a83456647191ba1953d335f59aa261fe79613df6bf43884e9649691e32680d75a541c27ffe74f9d13340f2cf1c7dc2b7db01213216cd4ecfd30efe137641471987289b7e23482e026b26eacd1b97443e2ea2d1d6e31a01ee0ae7fa195a2152b2338b086423a3883f2ce3e2f84e04f4d52c985eac4b46336908599564b47db0e6aa97ee51a360f4382fd99745725d44c77d097f69d19fe86f71c38a0226d44ebe0ecbd959f14b540745cd03b8c9f02b825ba45ca85706c73115f70871db9d2a1bc2a517b39f9648123917a5db07ba4e27f961373767e1ea8f7cc558e483abef1a9923c5cfa2081e430680950b7d7c377726b557ad31fdee17ba7057741f39d29d8ab295222f96297a777bb235416e72c84afef2bdb08fb375147b028b89f15af45bc8976b91158c13c9876daa71e7db0f5a17376be39ea79ce1246c547c740e31c64e5d293e0e5a544dd166010061d6ccae46c173b8e11721e4bce22c96af00000021f80ac6c3971006db853e3c40a5417d6eac09eb0e01ac6bd4c6dacdcb1d6d2ef9c8bdea91c984022821e961236d08f8b9072ec6cb5d5a68833fd5b4e80a5ac2bc6ff323f5ce612b59ce8177956c1affcc8baf4c8b59ab959aff9a7bd81f7c7c1f1bb92ddbeed6bce8041c7f0c1c584e6ae027678ce3cfbfea938aecc3c5119c5875b7fb35dc20f5c7aaae1e276104f607a73fe501c1045873a2b1eb80e95c87f099d98028dc82bdc7ef08c871fb3061c3c5ebd613e6e5e8cf099bb6e8c0441a133c85138b36a02c47fbedf7ed1d3ce74c9ec2c676c0b2d4b5eca61dbf5769b483c2a9f6bec666dae4e81960e9bad7f17cfc3d5bcc7b7f437110ca8ffa908c12086b2227eb202a8d56e0925ba994b05c98c39de44d25932449ddf08e5377814a40877eab4440ca01b3f50d2014a61a7d32105254b424238122386424efa3a7041254f686a5faac120942287f75e8e3db569ce47b120059d774a37e11d013be50cd2cbb00f6d2a23af61ec7d30bb7dc33a92f900b6ff1d29dc61cc40b846040dbafd00c6bcfbcf7af8ea5b4bd9593f73c6c95dd6d59483763debf02ea36803976b6cc145338e1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x702, 0xe, 0x0, &(0x7f0000000100)="e4604f89ecdb33440008d4800800", 0x0, 0x8009, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$igmp6(0xa, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000180)) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_fuse_handle_req(r2, 0x0, 0x0, 0x0) syz_fuse_handle_req(r2, 0x0, 0x0, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x90, 0x0, 0x0, {0x0, 0x0, 0xa17}}, 0x0, 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) getresuid(&(0x7f0000000040), &(0x7f00000002c0), &(0x7f0000000300)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 152.144917ms ago: executing program 0 (id=656): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x1fffe000000}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0]) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=657): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) socket$inet6(0xa, 0x2, 0x3a) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f00000000c0)={'b', ' *:* ', 'rwm\x00'}, 0x5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000680)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f0000000200)={r4}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000300)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000000240)={r5, 0x1, r3, 0x6}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r3, 0xc0182101, &(0x7f0000000280)={r5}) bpf$MAP_CREATE(0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): point 0x81 has invalid wMaxPacketSize 0 [ 266.046947][ T5275] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 266.075964][ T5275] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 266.333489][ T5275] usb 2-1: Manufacturer: syz [ 266.937375][ T5275] usb 2-1: config 0 descriptor?? [ 267.505025][ T5231] Bluetooth: hci0: command tx timeout [ 268.037087][ T5275] rc_core: IR keymap rc-hauppauge not found [ 268.059774][ T5275] Registered IR keymap rc-empty [ 268.231342][ T5275] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 268.267075][ T5275] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input7 [ 269.175202][ T5275] usb 2-1: USB disconnect, device number 5 [ 269.292109][ T7048] chnl_net:caif_netlink_parms(): no params data found [ 269.555165][ T5231] Bluetooth: hci0: command tx timeout [ 271.170726][ T6466] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 271.198368][ T6466] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 271.241095][ T6466] bond0 (unregistering): Released all slaves [ 271.299859][ T7116] netlink: 'syz.2.366': attribute type 1 has an invalid length. [ 271.436358][ T5275] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 271.458258][ T7122] veth1_to_hsr: entered promiscuous mode [ 271.464012][ T7122] vlan2: entered promiscuous mode [ 271.485970][ T7122] vlan2: entered allmulticast mode [ 271.505603][ T7122] veth1_to_hsr: entered allmulticast mode [ 271.635233][ T5231] Bluetooth: hci0: command tx timeout [ 271.677713][ T5275] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.700347][ T5275] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.715621][ T5275] usb 1-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 271.735020][ T5275] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.750717][ T5275] usb 1-1: config 0 descriptor?? [ 272.532914][ T7142] random: crng reseeded on system resumption [ 272.783958][ T7139] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 272.896518][ T5275] cougar 0003:060B:700A.0002: hidraw0: USB HID v0.00 Device [HID 060b:700a] on usb-dummy_hcd.0-1/input0 [ 273.162656][ T51] usb 1-1: USB disconnect, device number 5 [ 273.459778][ T7048] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.482635][ T7048] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.490278][ T7048] bridge_slave_0: entered allmulticast mode [ 273.506280][ T7048] bridge_slave_0: entered promiscuous mode [ 273.519061][ T7048] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.532319][ T7048] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.560261][ T7048] bridge_slave_1: entered allmulticast mode [ 273.612623][ T7048] bridge_slave_1: entered promiscuous mode [ 273.632432][ T6466] hsr_slave_0: left promiscuous mode [ 273.661497][ T6466] hsr_slave_1: left promiscuous mode [ 273.700385][ T6466] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.740032][ T6466] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.769106][ T6466] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.784954][ T6466] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.903298][ T6466] veth0_macvtap: left promiscuous mode [ 273.957700][ T6466] veth1_vlan: left promiscuous mode [ 273.962991][ T6466] veth0_vlan: left promiscuous mode [ 275.037737][ T7176] netlink: 'syz.2.377': attribute type 13 has an invalid length. [ 275.468720][ T7169] netlink: 'syz.0.376': attribute type 5 has an invalid length. [ 275.476746][ T7169] netlink: 8 bytes leftover after parsing attributes in process `syz.0.376'. [ 275.485592][ T7169] netlink: 'syz.0.376': attribute type 1 has an invalid length. [ 276.666918][ T7192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.381'. [ 276.725399][ T7192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.381'. [ 276.726118][ T7194] netlink: 256 bytes leftover after parsing attributes in process `syz.0.381'. [ 276.734205][ T7192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.381'. [ 276.837215][ T7194] Bluetooth: MGMT ver 1.23 [ 277.181559][ T7192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.381'. [ 277.236994][ T7192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.381'. [ 277.285951][ T7192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.381'. [ 278.680225][ T29] audit: type=1326 audit(1725407529.859:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7210 comm="syz.0.385" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff9ad97cef9 code=0x0 [ 278.840300][ T29] audit: type=1326 audit(1725407530.009:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7210 comm="syz.0.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9ad97cef9 code=0x7ffc0000 [ 278.913066][ T29] audit: type=1326 audit(1725407530.009:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7210 comm="syz.0.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9ad97cef9 code=0x7ffc0000 [ 278.982769][ T29] audit: type=1326 audit(1725407530.009:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7210 comm="syz.0.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff9ad97cef9 code=0x7ffc0000 [ 279.097516][ T29] audit: type=1326 audit(1725407530.009:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7210 comm="syz.0.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9ad97cef9 code=0x7ffc0000 [ 279.151682][ T6466] team0 (unregistering): Port device team_slave_1 removed [ 279.197901][ T29] audit: type=1326 audit(1725407530.009:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7210 comm="syz.0.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9ad97cef9 code=0x7ffc0000 [ 279.236700][ T29] audit: type=1326 audit(1725407530.009:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7210 comm="syz.0.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7ff9ad97cef9 code=0x7ffc0000 [ 279.265908][ T29] audit: type=1326 audit(1725407530.009:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7210 comm="syz.0.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9ad97cef9 code=0x7ffc0000 [ 279.310552][ T29] audit: type=1326 audit(1725407530.009:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7210 comm="syz.0.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9ad97cef9 code=0x7ffc0000 [ 279.378186][ T29] audit: type=1326 audit(1725407530.019:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7210 comm="syz.0.385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff9ad97cef9 code=0x7ffc0000 [ 279.519554][ T6466] team0 (unregistering): Port device team_slave_0 removed [ 280.882438][ T51] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 281.082498][ T51] usb 1-1: Using ep0 maxpacket: 32 [ 281.115365][ T51] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 281.151145][ T51] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 281.176620][ T51] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.198151][ T51] usb 1-1: Product: syz [ 281.202373][ T51] usb 1-1: Manufacturer: syz [ 281.218579][ T51] usb 1-1: SerialNumber: syz [ 281.255889][ T51] usb 1-1: bad CDC descriptors [ 281.599067][ T7048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.672361][ T7048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.995363][ T7048] team0: Port device team_slave_0 added [ 282.041610][ T7048] team0: Port device team_slave_1 added [ 282.370166][ T7048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.418179][ T7048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.653223][ T7048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.775532][ T7048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.875408][ T7048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.110959][ T7048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 283.533342][ T7048] hsr_slave_0: entered promiscuous mode [ 283.546036][ T7048] hsr_slave_1: entered promiscuous mode [ 283.553919][ T7048] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 283.562654][ T7048] Cannot create hsr debugfs directory [ 283.715372][ T9] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 283.747392][ T5309] usb 1-1: USB disconnect, device number 6 [ 284.067412][ T9] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 284.099942][ T9] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 284.125538][ T9] usb 3-1: config 0 has no interface number 0 [ 284.144745][ T9] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 284.157633][ T7254] batadv_slave_0: entered allmulticast mode [ 284.179668][ T9] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 284.218985][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.296240][ T9] usb 3-1: config 0 descriptor?? [ 284.411086][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 284.411104][ T29] audit: type=1326 audit(1725407535.589:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7257 comm="syz.3.395" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9a8ff7cef9 code=0x0 [ 286.519969][ T7291] ptrace attach of "./syz-executor exec"[5237] was attempted by " [ 286.561331][ T5318] usb 3-1: USB disconnect, device number 5 [ 286.889980][ T7048] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 287.030377][ T7048] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 287.115338][ T7048] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 287.224734][ T7048] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 287.454943][ T5318] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 288.540593][ T7048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.638830][ T5318] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 288.672800][ T7048] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.686182][ T5318] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 288.761483][ T2472] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.768619][ T2472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.780526][ T5318] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.824318][ T5318] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 288.941437][ T6464] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.948629][ T6464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.465167][ T5318] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -110 [ 290.493559][ T5318] stv0680 2-1:4.0: STV(e): camera ping failed!! [ 291.304211][ T5318] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 291.344962][ T5318] stv0680 2-1:4.0: last error: 0, command = 0x0 [ 291.373000][ T5318] usb 2-1: USB disconnect, device number 6 [ 292.272064][ T7048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.527991][ T5275] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 293.477810][ T7350] netlink: 8 bytes leftover after parsing attributes in process `syz.2.411'. [ 293.492189][ T7350] netlink: 4 bytes leftover after parsing attributes in process `syz.2.411'. [ 293.574947][ T5275] usb 2-1: Using ep0 maxpacket: 8 [ 293.601971][ T5275] usb 2-1: config 0 has an invalid interface number: 68 but max is 0 [ 293.616206][ T5275] usb 2-1: config 0 has no interface number 0 [ 293.629908][ T5275] usb 2-1: New USB device found, idVendor=0af0, idProduct=d033, bcdDevice=e0.05 [ 293.639177][ T5275] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.649749][ T5275] usb 2-1: Product: syz [ 293.656480][ T5275] usb 2-1: Manufacturer: syz [ 293.662488][ T5275] usb 2-1: SerialNumber: syz [ 293.708852][ T5275] usb 2-1: config 0 descriptor?? [ 293.906375][ T7359] netlink: 40 bytes leftover after parsing attributes in process `syz.3.413'. [ 293.953179][ T7359] netlink: 8 bytes leftover after parsing attributes in process `syz.3.413'. [ 296.046379][ T7048] veth0_vlan: entered promiscuous mode [ 296.058217][ T58] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 296.268236][ T58] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.279609][ T58] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.292096][ T7048] veth1_vlan: entered promiscuous mode [ 296.304071][ T58] usb 3-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 296.328285][ T58] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.339405][ T58] usb 3-1: config 0 descriptor?? [ 297.259745][ T7048] veth0_macvtap: entered promiscuous mode [ 297.335992][ T7048] veth1_macvtap: entered promiscuous mode [ 297.373171][ T9] usb 2-1: USB disconnect, device number 7 [ 297.446452][ T7048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.516971][ T7048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.545993][ T7048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.557101][ T7048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.574764][ T7048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.602835][ T7048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.620049][ T7389] ubi1: attaching mtd0 [ 297.689061][ T7048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.721120][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 297.773155][ T58] usbhid 3-1:0.0: can't add hid device: -71 [ 297.799104][ T7048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 297.827191][ T58] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 297.889451][ T7048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 297.921121][ T58] usb 3-1: USB disconnect, device number 6 [ 297.981015][ T7048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.076544][ T7048] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 298.229117][ T7048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.406768][ T7048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.459955][ T7048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.494578][ T5232] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 298.506324][ T5232] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 298.516150][ T5232] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 298.539239][ T5232] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 298.565221][ T5232] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 298.574643][ T5232] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 298.576110][ T7048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.725042][ T7048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.804927][ T7048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.926179][ T7048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.975652][ T7048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.025071][ T7048] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 299.097505][ T7048] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 299.204447][ T7048] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.263910][ T7048] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.337474][ T7048] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.379397][ T7048] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.440180][ T7048] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.274456][ T6466] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.295432][ T5271] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 300.354217][ T6466] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.528075][ T6449] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.613751][ T6449] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.652597][ T5271] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 300.736475][ T5271] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 300.755031][ T5232] Bluetooth: hci5: command tx timeout [ 300.805026][ T5271] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.847131][ T7404] chnl_net:caif_netlink_parms(): no params data found [ 300.899642][ T5271] aiptek 2-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 302.835140][ T5232] Bluetooth: hci5: command tx timeout [ 303.682289][ T58] usb 2-1: USB disconnect, device number 8 [ 304.533339][ T5232] Bluetooth: hci3: command 0x0406 tx timeout [ 304.736004][ T7404] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.782269][ T7404] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.844038][ T7404] bridge_slave_0: entered allmulticast mode [ 304.862974][ T7404] bridge_slave_0: entered promiscuous mode [ 304.915023][ T5231] Bluetooth: hci5: command tx timeout [ 304.952472][ T7404] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.026800][ T7404] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.080512][ T7404] bridge_slave_1: entered allmulticast mode [ 305.145350][ T7404] bridge_slave_1: entered promiscuous mode [ 305.472742][ T6466] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.440192][ T6466] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.994966][ T5232] Bluetooth: hci5: command tx timeout [ 307.359945][ T5232] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 307.371283][ T5232] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 307.395283][ T5232] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 307.438105][ T5232] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 307.445867][ T5232] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 307.453172][ T5232] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 307.527929][ T7404] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.574249][ T7404] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 308.087240][ T6466] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.376396][ T6466] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.575008][ T7404] team0: Port device team_slave_0 added [ 308.648258][ T7404] team0: Port device team_slave_1 added [ 309.566563][ T5232] Bluetooth: hci0: command tx timeout [ 310.142795][ T7404] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.185022][ T7404] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.490779][ T7538] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 311.195258][ T7404] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.295981][ T7404] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.366330][ T7404] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.424081][ T7404] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.645123][ T5232] Bluetooth: hci0: command tx timeout [ 312.998945][ T7549] netlink: 8 bytes leftover after parsing attributes in process `syz.3.443'. [ 313.008986][ T7549] netlink: 4 bytes leftover after parsing attributes in process `syz.3.443'. [ 313.416319][ T7404] hsr_slave_0: entered promiscuous mode [ 313.715102][ T5232] Bluetooth: hci0: command tx timeout [ 315.005890][ T7404] hsr_slave_1: entered promiscuous mode [ 315.085088][ T7404] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 315.099946][ T5232] Bluetooth: hci6: Malformed HCI Event: 0x22 [ 315.149684][ T7404] Cannot create hsr debugfs directory [ 315.230353][ T6466] bridge_slave_1: left allmulticast mode [ 315.255080][ T6466] bridge_slave_1: left promiscuous mode [ 315.257647][ T7567] input: syz0 as /devices/virtual/input/input9 [ 315.337073][ T6466] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.456445][ T6466] bridge_slave_0: left allmulticast mode [ 315.497354][ T6466] bridge_slave_0: left promiscuous mode [ 315.593501][ T6466] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.807964][ T5232] Bluetooth: hci0: command tx timeout [ 317.850132][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.875069][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.063953][ T6466] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 319.137354][ T6466] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 319.197336][ T6466] bond0 (unregistering): Released all slaves [ 319.930911][ T7590] netlink: 4 bytes leftover after parsing attributes in process `syz.3.455'. [ 320.011159][ T7590] bridge0: entered promiscuous mode [ 320.040641][ T7590] macvtap1: entered promiscuous mode [ 320.085651][ T7590] macvtap1: entered allmulticast mode [ 320.132620][ T7590] bridge0: entered allmulticast mode [ 320.265710][ T1746] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 320.544277][ T1746] usb 3-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 320.600852][ T1746] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.687483][ T1746] usb 3-1: config 0 descriptor?? [ 320.716011][ T7611] overlayfs: missing 'lowerdir' [ 320.729506][ T1746] gspca_main: spca508-2.14.0 probing 8086:0110 [ 320.997597][ T7618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.070622][ T7618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.265979][ T1746] gspca_spca508: reg_read err -110 [ 321.315863][ T1746] gspca_spca508: reg_read err -32 [ 321.342262][ T1746] gspca_spca508: reg_read err -32 [ 321.384514][ T1746] gspca_spca508: reg_read err -32 [ 321.405234][ T1746] gspca_spca508: reg_read err -32 [ 321.473846][ T1746] gspca_spca508: reg write: error -32 [ 321.525330][ T1746] spca508 3-1:0.0: probe with driver spca508 failed with error -32 [ 322.261060][ T6466] hsr_slave_0: left promiscuous mode [ 322.475078][ T6466] hsr_slave_1: left promiscuous mode [ 322.501056][ T5272] usb 3-1: USB disconnect, device number 7 [ 323.334140][ T6466] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 323.383064][ T6466] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 323.495899][ T6466] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 323.525697][ T6466] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.536789][ T7635] capability: warning: `syz.1.463' uses 32-bit capabilities (legacy support in use) [ 324.429142][ T6466] veth1_macvtap: left promiscuous mode [ 324.434771][ T6466] veth0_macvtap: left promiscuous mode [ 324.483717][ T6466] veth1_vlan: left promiscuous mode [ 324.512052][ T6466] veth0_vlan: left promiscuous mode [ 328.478378][ T6466] team0 (unregistering): Port device team_slave_1 removed [ 328.685147][ T6466] team0 (unregistering): Port device team_slave_0 removed [ 330.297821][ T7514] chnl_net:caif_netlink_parms(): no params data found [ 330.339184][ T7645] netlink: 'syz.2.464': attribute type 29 has an invalid length. [ 330.358566][ T7657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.468'. [ 330.655310][ T7658] netlink: 8 bytes leftover after parsing attributes in process `syz.3.468'. [ 330.955924][ T7665] netlink: 4 bytes leftover after parsing attributes in process `syz.2.470'. [ 331.046925][ T1746] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 331.245160][ T1746] usb 3-1: Using ep0 maxpacket: 32 [ 331.270650][ T1746] usb 3-1: config 33 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 183, changing to 7 [ 331.345048][ T1746] usb 3-1: config 33 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 59294, setting to 1024 [ 331.397513][ T1746] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 331.410305][ T1746] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.421215][ T1746] usb 3-1: Product: syz [ 331.432852][ T1746] usb 3-1: Manufacturer: syz [ 331.439191][ T1746] usb 3-1: SerialNumber: syz [ 331.767899][ T5313] usb 3-1: USB disconnect, device number 8 [ 332.502575][ T7404] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.915050][ T5231] Bluetooth: hci6: command 0x0406 tx timeout [ 335.238969][ T7404] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.264010][ T7514] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.627306][ T7514] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.660864][ T7514] bridge_slave_0: entered allmulticast mode [ 336.197679][ T7514] bridge_slave_0: entered promiscuous mode [ 336.746509][ T7718] capability: warning: `syz.2.480' uses deprecated v2 capabilities in a way that may be insecure [ 338.743674][ T7404] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.882523][ T7514] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.976193][ T7514] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.989486][ T7514] bridge_slave_1: entered allmulticast mode [ 339.021699][ T7514] bridge_slave_1: entered promiscuous mode [ 340.160516][ T7404] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 341.348827][ T7735] sched: RT throttling activated [ 341.471626][ T7514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.620078][ T7514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.774941][ T51] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 344.120833][ T7514] team0: Port device team_slave_0 added [ 344.169291][ T7514] team0: Port device team_slave_1 added [ 344.461212][ T7514] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.485896][ T7514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.656423][ T7514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.808300][ T7514] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.815851][ T7514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.872923][ T7514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.765236][ T7514] hsr_slave_0: entered promiscuous mode [ 346.650837][ T7514] hsr_slave_1: entered promiscuous mode [ 346.739317][ T7514] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 346.774883][ T7514] Cannot create hsr debugfs directory [ 347.132704][ T7404] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 347.212235][ T7404] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 347.276678][ T7404] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 347.337650][ T7404] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 348.376906][ T7404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.401343][ T7404] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.503580][ T6455] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.510830][ T6455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.762935][ T7785] ip6t_srh: unknown srh invflags 7D00 [ 349.764438][ T6457] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.771668][ T6457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 351.032435][ T7794] tap0: tun_chr_ioctl cmd 1074025677 [ 351.065494][ T7794] tap0: linktype set to 512 [ 351.174750][ T5231] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 351.185457][ T5231] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 351.195565][ T5231] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 351.864776][ T5231] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 351.877892][ T5231] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 351.885881][ T5231] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 352.277452][ T7796] wg2: entered promiscuous mode [ 352.282378][ T7796] wg2: entered allmulticast mode [ 353.283830][ T7404] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 353.957601][ T5232] Bluetooth: hci2: command tx timeout [ 356.035308][ T5232] Bluetooth: hci2: command tx timeout [ 357.758835][ T7814] netlink: 4 bytes leftover after parsing attributes in process `syz.2.508'. [ 357.854613][ T7814] team_slave_0: entered promiscuous mode [ 357.860826][ T7814] team_slave_1: entered promiscuous mode [ 357.900726][ T7814] macvtap1: entered promiscuous mode [ 357.930931][ T7814] team0: entered promiscuous mode [ 357.971188][ T7814] macvtap1: entered allmulticast mode [ 358.016147][ T7814] team0: entered allmulticast mode [ 358.062163][ T7814] team_slave_0: entered allmulticast mode [ 358.096455][ T7814] team_slave_1: entered allmulticast mode [ 358.124976][ T5232] Bluetooth: hci2: command tx timeout [ 358.238288][ T7814] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 358.323461][ T7514] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 358.467575][ T5231] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 358.485503][ T5231] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 358.493952][ T5231] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 358.504604][ T5231] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 358.514953][ T5231] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 358.527277][ T7514] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 358.559265][ T5231] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 358.616924][ T7817] team0: left allmulticast mode [ 358.658708][ T7817] team_slave_0: left allmulticast mode [ 358.664197][ T7817] team_slave_1: left allmulticast mode [ 358.695060][ T7817] team0: left promiscuous mode [ 358.700595][ T7817] team_slave_0: left promiscuous mode [ 358.706153][ T7817] team_slave_1: left promiscuous mode [ 358.941682][ T29] audit: type=1326 audit(1725407610.109:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7828 comm="syz.2.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f934937cef9 code=0x7ffc0000 [ 359.017166][ T7514] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 359.024101][ T29] audit: type=1326 audit(1725407610.109:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7828 comm="syz.2.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f934937cef9 code=0x7ffc0000 [ 359.068058][ T7514] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 359.108900][ T29] audit: type=1326 audit(1725407610.119:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7828 comm="syz.2.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f934937cef9 code=0x7ffc0000 [ 359.361074][ T29] audit: type=1326 audit(1725407610.149:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7828 comm="syz.2.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f934937cef9 code=0x7ffc0000 [ 360.225582][ T5231] Bluetooth: hci2: command tx timeout [ 360.249723][ T29] audit: type=1326 audit(1725407610.149:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7828 comm="syz.2.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f934937cef9 code=0x7ffc0000 [ 360.300335][ T7799] chnl_net:caif_netlink_parms(): no params data found [ 360.424899][ T29] audit: type=1326 audit(1725407610.149:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7828 comm="syz.2.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7f934937cef9 code=0x7ffc0000 [ 360.519297][ T29] audit: type=1326 audit(1725407610.149:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7828 comm="syz.2.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f934937cef9 code=0x7ffc0000 [ 360.595215][ T5231] Bluetooth: hci5: command tx timeout [ 360.642037][ T29] audit: type=1326 audit(1725407610.149:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7828 comm="syz.2.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f934937cef9 code=0x7ffc0000 [ 360.666444][ T29] audit: type=1326 audit(1725407610.149:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7828 comm="syz.2.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f934937cef9 code=0x7ffc0000 [ 360.695006][ T29] audit: type=1326 audit(1725407610.149:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7828 comm="syz.2.502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f934937cef9 code=0x7ffc0000 [ 362.675665][ T5231] Bluetooth: hci5: command tx timeout [ 363.678775][ T7799] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.688178][ T7799] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.696436][ T7799] bridge_slave_0: entered allmulticast mode [ 363.706799][ T7799] bridge_slave_0: entered promiscuous mode [ 363.719202][ T7799] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.415029][ T7799] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.445047][ T7799] bridge_slave_1: entered allmulticast mode [ 364.476141][ T7799] bridge_slave_1: entered promiscuous mode [ 364.758960][ T5231] Bluetooth: hci5: command tx timeout [ 364.929084][ T7799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 365.039114][ T7879] batadv0: entered promiscuous mode [ 365.089823][ T7514] 8021q: adding VLAN 0 to HW filter on device bond0 [ 365.148228][ T7799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 365.432344][ T7799] team0: Port device team_slave_0 added [ 365.509514][ T7799] team0: Port device team_slave_1 added [ 365.665330][ T5271] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 366.545463][ T5271] usb 3-1: New USB device found, idVendor=04b4, idProduct=6830, bcdDevice=86.cf [ 366.564681][ T5271] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.631220][ T5271] ums-cypress 3-1:1.0: USB Mass Storage device detected [ 366.789959][ T7799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.835008][ T5231] Bluetooth: hci5: command tx timeout [ 366.840795][ T7799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.899074][ T7799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.977059][ T7799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.984053][ T7799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.185249][ T7799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.242138][ T7889] netlink: 'syz.2.512': attribute type 12 has an invalid length. [ 367.307656][ T1746] usb 3-1: USB disconnect, device number 10 [ 367.677887][ T5232] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 367.715627][ T5232] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 367.740859][ T5232] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 367.756390][ T5232] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 367.764087][ T5232] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 367.771567][ T5232] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 367.829773][ T7799] hsr_slave_0: entered promiscuous mode [ 367.924515][ T7799] hsr_slave_1: entered promiscuous mode [ 367.975024][ T7799] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 368.013130][ T7799] Cannot create hsr debugfs directory [ 369.249540][ T5231] Bluetooth: hci5: command tx timeout [ 369.874993][ T5231] Bluetooth: hci0: command tx timeout [ 370.419415][ T6474] bridge_slave_1: left allmulticast mode [ 370.428690][ T6474] bridge_slave_1: left promiscuous mode [ 370.448830][ T6474] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.485221][ T6474] bridge_slave_0: left allmulticast mode [ 370.505247][ T6474] bridge_slave_0: left promiscuous mode [ 370.510954][ T6474] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.045088][ T5231] Bluetooth: hci0: command tx timeout [ 377.765114][ T5231] Bluetooth: hci0: command tx timeout [ 378.973060][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.979664][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.795026][ T5231] Bluetooth: hci0: command tx timeout [ 381.846073][ T6474] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 382.015453][ T6474] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 382.049426][ T6474] bond0 (unregistering): Released all slaves [ 382.196375][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 382.196395][ T29] audit: type=1326 audit(1725407633.349:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7977 comm="syz.2.526" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f934937cef9 code=0x0 [ 382.294535][ T7821] chnl_net:caif_netlink_parms(): no params data found [ 382.615572][ T6474] hsr_slave_0: left promiscuous mode [ 382.625392][ T6474] hsr_slave_1: left promiscuous mode [ 382.632976][ T6474] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 382.721222][ T6474] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 383.149845][ T7992] syz.2.528 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 383.165017][ T58] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 383.407822][ T58] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 383.459247][ T58] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 383.542246][ T58] usb 4-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 383.617113][ T58] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.681781][ T58] usb 4-1: config 0 descriptor?? [ 384.164612][ T8004] trusted_key: encrypted_key: key trusted:syz not found [ 384.289271][ T6474] team0 (unregistering): Port device team_slave_1 removed [ 384.445677][ T58] usbhid 4-1:0.0: can't add hid device: -71 [ 384.485014][ T58] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 384.533673][ T58] usb 4-1: USB disconnect, device number 7 [ 384.736691][ T6474] team0 (unregistering): Port device team_slave_0 removed [ 387.205101][ T5313] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 387.435001][ T5313] usb 4-1: Using ep0 maxpacket: 32 [ 387.458251][ T5313] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 387.484430][ T5313] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=a6.13 [ 387.504921][ T5313] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.513121][ T5313] usb 4-1: Product: syz [ 387.533543][ T5313] usb 4-1: Manufacturer: syz [ 387.540086][ T5313] usb 4-1: SerialNumber: syz [ 387.589302][ T5313] usb 4-1: config 0 descriptor?? [ 387.608829][ T5313] pvrusb2: Hardware description: Terratec Grabster AV400 [ 387.637185][ T5313] pvrusb2: ********** [ 387.641219][ T5313] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 387.694964][ T5313] pvrusb2: Important functionality might not be entirely working. [ 387.728437][ T5313] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 387.766992][ T5313] pvrusb2: ********** [ 387.843045][ T2031] pvrusb2: Invalid write control endpoint [ 388.142926][ T51] usb 4-1: USB disconnect, device number 8 [ 388.212465][ T2031] pvrusb2: Invalid write control endpoint [ 388.275674][ T2031] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 388.331067][ T2031] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 388.374285][ T2031] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 388.403791][ T2031] pvrusb2: Device being rendered inoperable [ 388.464949][ T2031] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 388.515850][ T2031] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 388.585429][ T2031] pvrusb2: Attached sub-driver cx25840 [ 388.635065][ T2031] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 388.715052][ T2031] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 390.211728][ T7821] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.252818][ T8033] ntfs3: nullb0: Primary boot signature is not NTFS. [ 390.261191][ T7821] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.323323][ T7821] bridge_slave_0: entered allmulticast mode [ 390.596548][ T8052] netlink: 36 bytes leftover after parsing attributes in process `syz.3.534'. [ 390.652076][ T8053] Bluetooth: MGMT ver 1.23 [ 391.252483][ T7821] bridge_slave_0: entered promiscuous mode [ 391.297563][ T7821] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.389534][ T7821] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.420167][ T7821] bridge_slave_1: entered allmulticast mode [ 391.450614][ T7821] bridge_slave_1: entered promiscuous mode [ 391.717613][ T7799] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.153144][ T7821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.290927][ T7799] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.383082][ T7821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.695796][ T7799] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.798252][ T7821] team0: Port device team_slave_0 added [ 392.935303][ T7799] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.026834][ T7821] team0: Port device team_slave_1 added [ 393.174727][ T7821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 393.224969][ T7821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.284987][ T7821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 393.545027][ T7821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 393.552024][ T7821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.679259][ T7821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 393.940913][ T7913] chnl_net:caif_netlink_parms(): no params data found [ 394.063323][ T7821] hsr_slave_0: entered promiscuous mode [ 394.098174][ T7821] hsr_slave_1: entered promiscuous mode [ 394.118291][ T7821] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 394.148145][ T7821] Cannot create hsr debugfs directory [ 395.200041][ T7913] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.207399][ T7913] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.214688][ T7913] bridge_slave_0: entered allmulticast mode [ 395.246417][ T7913] bridge_slave_0: entered promiscuous mode [ 395.297613][ T7799] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 395.346018][ T7799] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 395.377752][ T7799] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 395.408679][ T7913] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.445002][ T7913] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.452221][ T7913] bridge_slave_1: entered allmulticast mode [ 395.515924][ T7913] bridge_slave_1: entered promiscuous mode [ 395.747004][ T7799] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 395.867519][ T7913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 395.991145][ T7913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 396.526313][ T7913] team0: Port device team_slave_0 added [ 396.571513][ T6474] bridge_slave_1: left allmulticast mode [ 396.584951][ T6474] bridge_slave_1: left promiscuous mode [ 396.605196][ T6474] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.648602][ T6474] bridge_slave_0: left allmulticast mode [ 396.654303][ T6474] bridge_slave_0: left promiscuous mode [ 396.685518][ T6474] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.987983][ T6474] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 398.019220][ T6474] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 398.057176][ T6474] bond0 (unregistering): Released all slaves [ 398.353794][ T7913] team0: Port device team_slave_1 added [ 398.431997][ T6474] hsr_slave_0: left promiscuous mode [ 398.439034][ T6474] hsr_slave_1: left promiscuous mode [ 398.512005][ T6474] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 398.565765][ T6474] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 399.335806][ T5232] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 399.375131][ T5232] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 399.385281][ T5232] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 399.393706][ T5232] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 399.402997][ T5232] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 399.410478][ T5232] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 399.638991][ T6474] team0 (unregistering): Port device team_slave_1 removed [ 399.746741][ T6474] team0 (unregistering): Port device team_slave_0 removed [ 400.718030][ T7913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 400.744923][ T7913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.874887][ T7913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 400.985769][ T7913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.025355][ T7913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 401.094845][ T7913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.377902][ T7913] hsr_slave_0: entered promiscuous mode [ 401.394993][ T7913] hsr_slave_1: entered promiscuous mode [ 401.445703][ T7913] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 401.453279][ T7913] Cannot create hsr debugfs directory [ 401.556426][ T5232] Bluetooth: hci7: command tx timeout [ 401.968603][ T7821] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 402.017068][ T7821] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 402.154203][ T7799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 402.247916][ T7821] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 402.305490][ T7821] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 402.616418][ T5231] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 402.640707][ T7799] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.648616][ T5231] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 402.657125][ T5231] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 402.675045][ T4616] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 402.705117][ T4616] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 402.725189][ T4616] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 403.092208][ T6457] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.099422][ T6457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 403.146066][ T6457] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.153174][ T6457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 403.417190][ T6474] bridge_slave_1: left allmulticast mode [ 403.422889][ T6474] bridge_slave_1: left promiscuous mode [ 403.435090][ T6474] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.466630][ T6474] bridge_slave_0: left allmulticast mode [ 403.472294][ T6474] bridge_slave_0: left promiscuous mode [ 403.485664][ T6474] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.635209][ T5232] Bluetooth: hci7: command tx timeout [ 404.845188][ T5232] Bluetooth: hci8: command tx timeout [ 405.125706][ T6474] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 405.168651][ T6474] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 405.252378][ T6474] bond0 (unregistering): Released all slaves [ 405.658714][ T8090] chnl_net:caif_netlink_parms(): no params data found [ 405.731495][ T5232] Bluetooth: hci7: command tx timeout [ 406.574547][ T8090] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.616187][ T8090] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.630152][ T8090] bridge_slave_0: entered allmulticast mode [ 406.646146][ T8090] bridge_slave_0: entered promiscuous mode [ 406.698700][ T8090] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.749631][ T8090] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.757883][ T8090] bridge_slave_1: entered allmulticast mode [ 406.770504][ T8090] bridge_slave_1: entered promiscuous mode [ 406.901796][ T6474] hsr_slave_0: left promiscuous mode [ 406.915528][ T5232] Bluetooth: hci8: command tx timeout [ 406.935783][ T6474] hsr_slave_1: left promiscuous mode [ 406.941959][ T6474] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 406.985248][ T6474] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 407.036905][ T6474] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 407.044411][ T6474] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 407.189418][ T6474] veth1_macvtap: left promiscuous mode [ 407.215094][ T6474] veth0_macvtap: left promiscuous mode [ 407.220823][ T6474] veth1_vlan: left promiscuous mode [ 407.245408][ T6474] veth0_vlan: left promiscuous mode [ 407.795327][ T5232] Bluetooth: hci7: command tx timeout [ 408.995449][ T5232] Bluetooth: hci8: command tx timeout [ 409.086276][ T6474] team0 (unregistering): Port device team_slave_1 removed [ 409.298556][ T6474] team0 (unregistering): Port device team_slave_0 removed [ 410.828008][ T4616] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 410.838560][ T4616] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 410.848355][ T4616] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 410.895166][ T4616] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 410.903790][ T4616] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 410.911363][ T4616] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 411.078163][ T4616] Bluetooth: hci8: command tx timeout [ 412.042143][ T7913] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 412.168121][ T7913] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 412.247390][ T8090] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 412.348016][ T8090] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 412.446400][ T7913] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 412.661862][ T7821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.740763][ T7913] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 412.872550][ T8090] team0: Port device team_slave_0 added [ 412.893597][ T8090] team0: Port device team_slave_1 added [ 413.074928][ T4616] Bluetooth: hci9: command tx timeout [ 413.417566][ T8090] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 413.424560][ T8090] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.516547][ T8090] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 413.624251][ T7821] 8021q: adding VLAN 0 to HW filter on device team0 [ 413.777145][ T8090] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 413.784152][ T8090] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 413.885121][ T8090] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 414.361324][ T8090] hsr_slave_0: entered promiscuous mode [ 414.386917][ T8090] hsr_slave_1: entered promiscuous mode [ 414.394169][ T6457] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.401340][ T6457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 414.638540][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.645847][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 414.725342][ T8119] chnl_net:caif_netlink_parms(): no params data found [ 415.108735][ T8105] chnl_net:caif_netlink_parms(): no params data found [ 415.156236][ T4616] Bluetooth: hci9: command tx timeout [ 415.214010][ T7821] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 415.315177][ T7821] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 415.571748][ T7913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 416.466768][ T7913] 8021q: adding VLAN 0 to HW filter on device team0 [ 416.585644][ T8119] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.592756][ T8119] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.695348][ T8119] bridge_slave_0: entered allmulticast mode [ 416.702831][ T8119] bridge_slave_0: entered promiscuous mode [ 416.797132][ T8119] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.804231][ T8119] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.835623][ T8119] bridge_slave_1: entered allmulticast mode [ 416.865521][ T8119] bridge_slave_1: entered promiscuous mode [ 417.235751][ T4616] Bluetooth: hci9: command tx timeout [ 417.301115][ T6457] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.308412][ T6457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.457344][ T8105] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.464513][ T8105] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.535377][ T8105] bridge_slave_0: entered allmulticast mode [ 417.542735][ T8105] bridge_slave_0: entered promiscuous mode [ 417.625996][ T8119] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 417.678995][ T8119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 417.968249][ T8105] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.005558][ T8105] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.012977][ T8105] bridge_slave_1: entered allmulticast mode [ 418.077924][ T8105] bridge_slave_1: entered promiscuous mode [ 418.625396][ T5232] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 418.655023][ T5232] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 418.674490][ T5232] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 418.706070][ T8090] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.745187][ T5232] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 418.753413][ T5232] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 418.760889][ T5232] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 418.880896][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.888039][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 418.963758][ T8119] team0: Port device team_slave_0 added [ 419.262864][ T8090] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.315390][ T5232] Bluetooth: hci9: command tx timeout [ 419.456465][ T8090] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.504304][ T8105] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 419.528216][ T8105] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.608714][ T8119] team0: Port device team_slave_1 added [ 419.703383][ T6474] bridge_slave_1: left allmulticast mode [ 419.709635][ T6474] bridge_slave_1: left promiscuous mode [ 419.727099][ T6474] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.741819][ T6474] bridge_slave_0: left allmulticast mode [ 419.747577][ T6474] bridge_slave_0: left promiscuous mode [ 419.753243][ T6474] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.835339][ T5232] Bluetooth: hci2: command tx timeout [ 421.135188][ T6474] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 421.211748][ T6474] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 421.238933][ T6474] bond0 (unregistering): Released all slaves [ 421.427936][ T8090] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.575869][ T8105] team0: Port device team_slave_0 added [ 421.628339][ T8105] team0: Port device team_slave_1 added [ 421.714452][ T6474] hsr_slave_0: left promiscuous mode [ 421.744671][ T6474] hsr_slave_1: left promiscuous mode [ 421.775246][ T6474] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 421.805372][ T6474] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 422.797371][ T6474] team0 (unregistering): Port device team_slave_1 removed [ 422.924969][ T5232] Bluetooth: hci2: command tx timeout [ 423.015513][ T6474] team0 (unregistering): Port device team_slave_0 removed [ 424.873109][ T8119] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 424.908126][ T8119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 424.939181][ T8119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 424.976540][ T8119] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 424.983525][ T8119] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.015846][ T5232] Bluetooth: hci2: command tx timeout [ 425.104867][ T8119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.154688][ T7913] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 425.175471][ T7913] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 425.239821][ T8105] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 425.254937][ T8105] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.414889][ T8105] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 425.499612][ T8105] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 425.554938][ T8105] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.674535][ T8105] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 426.061641][ T8119] hsr_slave_0: entered promiscuous mode [ 426.106909][ T8119] hsr_slave_1: entered promiscuous mode [ 426.169947][ T8119] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 426.184879][ T8119] Cannot create hsr debugfs directory [ 426.392166][ T8105] hsr_slave_0: entered promiscuous mode [ 426.447185][ T8105] hsr_slave_1: entered promiscuous mode [ 426.502458][ T8105] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 426.524953][ T8105] Cannot create hsr debugfs directory [ 426.601753][ T7913] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 427.075186][ T5232] Bluetooth: hci2: command tx timeout [ 427.588864][ T8090] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 427.807740][ T8090] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 428.385779][ T4616] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 428.397110][ T4616] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 428.406332][ T4616] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 428.435051][ T4616] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 428.451922][ T8090] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 428.459762][ T4616] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 428.467334][ T4616] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 428.915311][ T8090] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 429.342781][ T8181] chnl_net:caif_netlink_parms(): no params data found [ 429.634205][ T8105] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.956780][ T8105] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.257483][ T8105] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.595422][ T4616] Bluetooth: hci0: command tx timeout [ 430.737432][ T8105] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.882470][ T8181] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.925704][ T8181] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.933355][ T8181] bridge_slave_0: entered allmulticast mode [ 430.976332][ T8181] bridge_slave_0: entered promiscuous mode [ 431.147080][ T6457] bridge_slave_1: left allmulticast mode [ 431.164587][ T6457] bridge_slave_1: left promiscuous mode [ 431.175339][ T6457] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.273030][ T6457] bridge_slave_0: left allmulticast mode [ 431.295246][ T6457] bridge_slave_0: left promiscuous mode [ 431.300942][ T6457] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.656668][ T6457] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 432.675287][ T4616] Bluetooth: hci0: command tx timeout [ 432.689536][ T6457] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 432.741706][ T6457] bond0 (unregistering): Released all slaves [ 433.011997][ T8181] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.035315][ T8181] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.042626][ T8181] bridge_slave_1: entered allmulticast mode [ 433.118332][ T8181] bridge_slave_1: entered promiscuous mode [ 433.193250][ T6457] hsr_slave_0: left promiscuous mode [ 433.208350][ T6457] hsr_slave_1: left promiscuous mode [ 433.216793][ T6457] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 433.275676][ T6457] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 434.265694][ T6457] team0 (unregistering): Port device team_slave_1 removed [ 434.479289][ T6457] team0 (unregistering): Port device team_slave_0 removed [ 434.764951][ T4616] Bluetooth: hci0: command tx timeout [ 436.347986][ T8181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 436.406859][ T8181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 436.731910][ T8208] chnl_net:caif_netlink_parms(): no params data found [ 436.834951][ T4616] Bluetooth: hci0: command tx timeout [ 436.987245][ T8181] team0: Port device team_slave_0 added [ 436.998144][ T8090] 8021q: adding VLAN 0 to HW filter on device bond0 [ 437.163779][ T8181] team0: Port device team_slave_1 added [ 437.564661][ T8181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 437.619650][ T8181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 437.744237][ T8181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 437.824132][ T8090] 8021q: adding VLAN 0 to HW filter on device team0 [ 437.860706][ T6455] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.867915][ T6455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 437.929698][ T8105] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 438.138860][ T8181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 438.145942][ T8181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.230171][ T8181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 438.308935][ T6455] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.316161][ T6455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 438.367647][ T8105] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 438.465289][ T8208] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.550811][ T8208] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.569602][ T8208] bridge_slave_0: entered allmulticast mode [ 438.604001][ T8208] bridge_slave_0: entered promiscuous mode [ 438.632552][ T8208] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.690724][ T8208] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.725165][ T8208] bridge_slave_1: entered allmulticast mode [ 438.732018][ T8208] bridge_slave_1: entered promiscuous mode [ 439.056300][ T8105] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 439.238529][ T8208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 439.617223][ T8181] hsr_slave_0: entered promiscuous mode [ 439.653001][ T8181] hsr_slave_1: entered promiscuous mode [ 439.666498][ T8181] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 439.674067][ T8181] Cannot create hsr debugfs directory [ 439.745109][ T8105] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 439.827707][ T8208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 439.956943][ T8090] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 439.994950][ T8090] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 440.284437][ T8208] team0: Port device team_slave_0 added [ 440.358997][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.366355][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.396140][ T8208] team0: Port device team_slave_1 added [ 440.988805][ T8208] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 441.004948][ T8208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 441.046271][ T8208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 441.235576][ T8208] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 441.242571][ T8208] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 441.344806][ T8208] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 441.742494][ T8090] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 441.903576][ T8208] hsr_slave_0: entered promiscuous mode [ 441.918426][ T8208] hsr_slave_1: entered promiscuous mode [ 441.955436][ T8208] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 441.963051][ T8208] Cannot create hsr debugfs directory [ 442.045672][ T8105] 8021q: adding VLAN 0 to HW filter on device bond0 [ 442.541025][ T8119] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 442.739785][ T8119] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 442.795588][ T8119] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 442.937039][ T6457] bridge_slave_1: left allmulticast mode [ 442.995710][ T6457] bridge_slave_1: left promiscuous mode [ 443.001511][ T6457] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.075661][ T6457] bridge_slave_0: left allmulticast mode [ 443.081379][ T6457] bridge_slave_0: left promiscuous mode [ 443.114998][ T6457] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.350452][ T6457] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 444.361853][ T6457] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 444.411275][ T6457] bond0 (unregistering): Released all slaves [ 444.540833][ T8105] 8021q: adding VLAN 0 to HW filter on device team0 [ 444.589340][ T8119] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 444.767728][ T8090] veth0_vlan: entered promiscuous mode [ 444.830154][ T6457] hsr_slave_0: left promiscuous mode [ 444.853332][ T6457] hsr_slave_1: left promiscuous mode [ 444.869294][ T6457] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 444.905621][ T6457] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 446.088005][ T6457] team0 (unregistering): Port device team_slave_1 removed [ 446.406778][ T6457] team0 (unregistering): Port device team_slave_0 removed [ 448.691679][ T6464] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.698850][ T6464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 448.776223][ T6464] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.783411][ T6464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.846106][ T8090] veth1_vlan: entered promiscuous mode [ 449.222246][ T8105] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 449.597976][ T8181] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 449.632772][ T8090] veth0_macvtap: entered promiscuous mode [ 449.723496][ T8119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 449.763648][ T8181] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 449.807499][ T8181] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 449.948248][ T8181] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 449.970688][ T8090] veth1_macvtap: entered promiscuous mode [ 450.178704][ T8119] 8021q: adding VLAN 0 to HW filter on device team0 [ 450.228128][ T8090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.334934][ T8090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.415908][ T8090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.465727][ T8090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.484921][ T8090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.524842][ T8090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.554985][ T8090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 450.626232][ T8090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 450.655225][ T8090] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 450.782962][ T6474] bridge0: port 1(bridge_slave_0) entered blocking state [ 450.790109][ T6474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 450.876887][ T6474] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.884161][ T6474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 450.938104][ T8090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 450.984915][ T8090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.004915][ T8090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.020726][ T8090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.036163][ T8090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.074983][ T8090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.124849][ T8090] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 451.164730][ T8090] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 451.195684][ T8090] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 451.258457][ T8090] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.304981][ T8090] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.313723][ T8090] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.402041][ T8090] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.533295][ T8105] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 452.206246][ T8119] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 452.336137][ T8181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 452.385712][ T8208] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 452.464541][ T8208] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 452.535711][ T8208] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 452.588008][ T6457] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.673469][ T6457] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.736635][ T8105] veth0_vlan: entered promiscuous mode [ 452.818586][ T8208] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 452.887486][ T8181] 8021q: adding VLAN 0 to HW filter on device team0 [ 452.981370][ T8105] veth1_vlan: entered promiscuous mode [ 453.042720][ T6457] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.049890][ T6457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 453.099785][ T6457] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.107012][ T6457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 453.205593][ T6455] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.213623][ T6455] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.363368][ T8119] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 453.630163][ T8105] veth0_macvtap: entered promiscuous mode [ 453.728540][ T8105] veth1_macvtap: entered promiscuous mode [ 453.836240][ T8181] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 453.924335][ T8119] veth0_vlan: entered promiscuous mode [ 454.093344][ T8208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 454.177476][ T8105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.228346][ T8105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.339002][ T8105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.358764][ T8105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.377441][ T8105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.402140][ T8105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.424536][ T8105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.483560][ T8105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.536496][ T8105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 454.574891][ T8105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.599240][ T8105] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 454.633124][ T8105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 454.674807][ T8105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.704795][ T8105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 454.755079][ T8105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.788810][ T8105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 454.818930][ T8105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.853543][ T8105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 454.888952][ T8105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.914377][ T8105] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 454.955875][ T8105] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 454.976658][ T8105] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 454.999281][ T8119] veth1_vlan: entered promiscuous mode [ 455.292236][ T8105] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.372060][ T8105] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.406815][ T8105] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.425925][ T8105] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.450150][ T8181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 456.664292][ T8208] 8021q: adding VLAN 0 to HW filter on device team0 [ 456.828074][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.835292][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 456.956548][ T8119] veth0_macvtap: entered promiscuous mode [ 457.006229][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.013379][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 457.245475][ T8119] veth1_macvtap: entered promiscuous mode [ 457.285952][ T8181] veth0_vlan: entered promiscuous mode [ 457.392181][ T6464] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.464937][ T6464] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.472828][ T8181] veth1_vlan: entered promiscuous mode [ 457.553115][ T8119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 457.624989][ T8119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.689234][ T8119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 457.734865][ T8119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.766548][ T8119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 457.790667][ T8119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.802938][ T8119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 457.815553][ T8119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.826019][ T8119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 457.854827][ T8119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.865165][ T8119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 457.885033][ T8119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.926703][ T8119] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 458.014969][ T8119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 458.040752][ T8119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.098369][ T8119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 458.134879][ T8119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.154821][ T8119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 458.184842][ T8119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.219845][ T8119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 458.245057][ T8119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.289868][ T8119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 458.339311][ T8119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.364850][ T8119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 458.380807][ T8119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 458.395849][ T8119] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 458.577921][ T6457] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.587778][ T8119] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.605268][ T6457] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.631193][ T8119] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.641108][ T8119] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.668473][ T8119] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.781730][ T8208] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 459.060946][ T8181] veth0_macvtap: entered promiscuous mode [ 459.201817][ T8181] veth1_macvtap: entered promiscuous mode [ 459.275389][ T8355] netlink: 12 bytes leftover after parsing attributes in process `syz.3.537'. [ 459.490833][ T8181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 459.595244][ T8181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.605361][ T8181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 459.616572][ T8181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.626761][ T8181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 459.695463][ T8181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.695485][ T8181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 459.695496][ T8181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.695510][ T8181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 459.695518][ T8181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.695530][ T8181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 459.695537][ T8181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.695544][ T8181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 459.695551][ T8181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.734963][ T8181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 459.752709][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 459.752733][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 460.120213][ T8181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 460.185060][ T8181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.210152][ T8181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 460.236641][ T8181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.294987][ T8181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 460.331921][ T8181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.364818][ T8181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 460.404595][ T8181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.435103][ T8181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 460.501432][ T8181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.501634][ T51] IPVS: starting estimator thread 0... [ 460.667766][ T8181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 460.685496][ T8181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.695818][ T8181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 460.714998][ T8181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.726700][ T8181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 460.800076][ T8369] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 461.621619][ T8367] IPVS: using max 19 ests per chain, 45600 per kthread [ 461.647896][ T8181] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.729780][ T8181] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.766583][ T8181] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.840255][ T8181] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.072910][ T6474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.105979][ T6474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.659702][ T8208] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 462.918906][ T6453] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.981248][ T6453] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.157039][ T6474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.320418][ T6474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.465087][ T8356] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 463.982591][ T8356] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 464.049605][ T8356] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 464.192104][ T8356] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 464.251101][ T8356] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 464.297025][ T8356] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.355234][ T8356] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 464.493904][ T8356] usb 4-1: invalid MIDI out EP 0 [ 465.743782][ T8272] udevd[8272]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 465.836646][ T8208] veth0_vlan: entered promiscuous mode [ 465.946295][ T8356] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 469.603157][ T8208] veth1_vlan: entered promiscuous mode [ 469.701443][ T29] audit: type=1400 audit(1725407720.879:71): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="_" object="unconfined_u" requested=w pid=8396 comm="syz.2.547" saddr=172.20.20.170 src=20000 daddr=172.20.20.170 dest=20000 netif=lo [ 469.750364][ T51] usb 4-1: USB disconnect, device number 9 [ 469.956016][ T8208] veth0_macvtap: entered promiscuous mode [ 470.048687][ T8208] veth1_macvtap: entered promiscuous mode [ 471.197787][ T8208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.269361][ T8208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.341942][ T8208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.441846][ T8208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.524897][ T8208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.591757][ T8208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.687650][ T8208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.815095][ T4616] Bluetooth: Wrong link type (-71) [ 471.879356][ T8208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.913067][ T8208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 472.002104][ T8208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.056279][ T8208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 472.268111][ T8208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.502604][ T8208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 472.563700][ T8208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.600153][ T8208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 472.633118][ T8208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.658941][ T8208] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 472.677603][ T8422] netlink: 'syz.3.550': attribute type 3 has an invalid length. [ 472.719953][ T8208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.915032][ T8208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.216551][ T4616] Bluetooth: Frame is too long (len 10, expected len 9) [ 473.795555][ T8208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.883593][ T8208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.945543][ T8208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 473.986957][ T8208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.005137][ T8208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 474.047690][ T8443] netlink: 'syz.1.557': attribute type 1 has an invalid length. [ 474.064792][ T8208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.100945][ T8208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 474.144911][ T51] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 474.890111][ T8208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.935339][ T8208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 474.966505][ T8208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.014838][ T8208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 475.040354][ T8208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.067132][ T8208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 475.086419][ T51] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 475.103341][ T8208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.114917][ T51] usb 3-1: config 1 has an invalid descriptor of length 110, skipping remainder of the config [ 475.138743][ T8208] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 475.177142][ T51] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 475.195131][ T51] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 101, changing to 10 [ 475.249905][ T8208] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.263526][ T51] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 10100, setting to 1024 [ 475.286883][ T51] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 475.320443][ T51] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 475.333395][ T8208] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.363711][ T51] usb 3-1: Product: syz [ 475.373372][ T8208] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.377149][ T51] usb 3-1: Manufacturer: syz [ 476.185436][ T8208] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.210558][ T8438] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 476.229652][ T51] cdc_wdm 3-1:1.0: skipping garbage [ 476.244920][ T51] cdc_wdm 3-1:1.0: skipping garbage [ 476.266043][ T51] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 476.272980][ T51] cdc_wdm 3-1:1.0: Unknown control protocol [ 476.638450][ T3763] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 476.660299][ C1] wdm_int_callback: 682 callbacks suppressed [ 476.660323][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 476.672944][ C1] wdm_int_callback: 682 callbacks suppressed [ 476.672963][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 476.685381][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 476.691998][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 476.698276][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 476.704889][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 476.711174][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 476.717785][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 476.724071][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 476.730764][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 476.737050][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 476.743660][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 476.749976][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 476.756581][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 476.762860][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 476.769468][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 476.775768][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 476.782381][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 476.788646][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 476.795253][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 476.875697][ T5275] usb 3-1: USB disconnect, device number 11 [ 476.875797][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 477.614935][ T3763] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.795188][ T6449] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.941519][ T6449] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.286919][ T29] audit: type=1326 audit(1725407729.469:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8464 comm="syz.1.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa45757cef9 code=0x7ffc0000 [ 478.287389][ T29] audit: type=1326 audit(1725407729.469:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8464 comm="syz.1.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa45757cef9 code=0x7ffc0000 [ 478.377569][ T29] audit: type=1326 audit(1725407729.559:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8464 comm="syz.1.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7fa45757cef9 code=0x7ffc0000 [ 478.377768][ T29] audit: type=1326 audit(1725407729.559:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8464 comm="syz.1.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa45757cef9 code=0x7ffc0000 [ 478.377957][ T29] audit: type=1326 audit(1725407729.559:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8464 comm="syz.1.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa45757cef9 code=0x7ffc0000 [ 478.378389][ T29] audit: type=1326 audit(1725407729.559:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8464 comm="syz.1.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa45757cef9 code=0x7ffc0000 [ 478.378745][ T29] audit: type=1326 audit(1725407729.559:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8464 comm="syz.1.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa45757cef9 code=0x7ffc0000 [ 478.378932][ T29] audit: type=1326 audit(1725407729.559:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8464 comm="syz.1.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa45757cef9 code=0x7ffc0000 [ 478.379611][ T29] audit: type=1326 audit(1725407729.559:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8464 comm="syz.1.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa45757ee17 code=0x7ffc0000 [ 478.380033][ T29] audit: type=1326 audit(1725407729.559:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8464 comm="syz.1.562" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fa45757ed8c code=0x7ffc0000 [ 478.593170][ T8471] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 478.593170][ T8471] The task syz.1.562 (8471) triggered the difference, watch for misbehavior. [ 479.795699][ T8465] tty tty22: ldisc open failed (-12), clearing slot 21 [ 479.870399][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.563900][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.693092][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.717605][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 483.905708][ T8496] xt_connbytes: Forcing CT accounting to be enabled [ 483.912691][ T8496] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 484.026192][ T5232] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 484.056951][ T5232] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 484.088237][ T5232] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 484.138393][ T5232] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 484.262814][ T5232] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 484.274160][ T5232] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 484.695160][ T4616] Bluetooth: hci9: Controller not accepting commands anymore: ncmd = 0 [ 484.703808][ T4616] Bluetooth: hci9: Injecting HCI hardware error event [ 484.712807][ T4616] Bluetooth: hci9: hardware error 0x00 [ 485.191982][ T8504] netlink: 4 bytes leftover after parsing attributes in process `syz.1.571'. [ 485.675582][ T8504] bond0: (slave bond_slave_1): Releasing backup interface [ 485.896387][ T11] bridge_slave_1: left allmulticast mode [ 485.902179][ T11] bridge_slave_1: left promiscuous mode [ 485.969878][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.080744][ T11] bridge_slave_0: left allmulticast mode [ 486.122783][ T11] bridge_slave_0: left promiscuous mode [ 486.180653][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.291934][ T8522] netlink: 104 bytes leftover after parsing attributes in process `syz.0.573'. [ 486.442527][ T5232] Bluetooth: hci0: command tx timeout [ 487.307111][ T4616] Bluetooth: hci9: Opcode 0x0c03 failed: -110 [ 488.527644][ T4616] Bluetooth: hci0: command tx timeout [ 490.413091][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 490.413109][ T29] audit: type=1326 audit(1725407741.589:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8534 comm="syz.0.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc10b77cef9 code=0x7fc00000 [ 490.532120][ T29] audit: type=1326 audit(1725407741.669:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8534 comm="syz.0.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fc10b77cef9 code=0x7fc00000 [ 490.601656][ T4616] Bluetooth: hci0: command tx timeout [ 490.818540][ T29] audit: type=1326 audit(1725407741.889:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8534 comm="syz.0.576" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc10b77cef9 code=0x7fc00000 [ 491.857454][ T29] audit: type=1326 audit(1725407743.039:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8566 comm="syz.1.582" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa45757cef9 code=0x0 [ 492.674969][ T4616] Bluetooth: hci0: command tx timeout [ 495.017616][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 495.047803][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 495.093942][ T11] bond0 (unregistering): Released all slaves [ 496.715097][ T8295] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 497.414923][ T8295] usb 3-1: Using ep0 maxpacket: 16 [ 497.428237][ T8565] netlink: 'syz.0.581': attribute type 10 has an invalid length. [ 497.495920][ T8295] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 497.534903][ T8295] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 497.554096][ T8565] team0: Device hsr_slave_0 failed to register rx_handler [ 497.574859][ T8295] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 497.628511][ T8295] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 497.638787][ T8569] bridge0: entered promiscuous mode [ 497.644370][ T8569] vlan2: entered promiscuous mode [ 497.673914][ T8569] bridge0: left promiscuous mode [ 497.684926][ T8295] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 497.744564][ T8295] usb 3-1: config 0 has no interface number 0 [ 497.785265][ T8295] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 497.903054][ T8295] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 498.022273][ T8295] usb 3-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 498.910556][ T8295] usb 3-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 499.044963][ T8295] usb 3-1: config 0 interface 125 has no altsetting 0 [ 499.051971][ T8295] usb 3-1: config 0 interface 125 has no altsetting 2 [ 499.108966][ T8295] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 499.165772][ T8295] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.103894][ T8295] usb 3-1: Product: syz [ 500.124969][ T8295] usb 3-1: Manufacturer: syz [ 500.133550][ T8295] usb 3-1: SerialNumber: syz [ 500.165743][ T8295] usb 3-1: config 0 descriptor?? [ 500.191053][ T8295] usb 3-1: can't set config #0, error -71 [ 500.275894][ T8295] usb 3-1: USB disconnect, device number 12 [ 500.439848][ T11] hsr_slave_0: left promiscuous mode [ 500.666122][ T11] hsr_slave_1: left promiscuous mode [ 500.686352][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 501.736477][ T29] audit: type=1326 audit(1725407752.319:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8623 comm="syz.1.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa45757cef9 code=0x7ffc0000 [ 501.801307][ T1270] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.807740][ T1270] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.815762][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 501.886873][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 501.925383][ T29] audit: type=1326 audit(1725407752.319:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8623 comm="syz.1.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fa45757cef9 code=0x7ffc0000 [ 501.975823][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 502.054557][ T29] audit: type=1326 audit(1725407752.319:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8623 comm="syz.1.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa45757cef9 code=0x7ffc0000 [ 503.154907][ T11] veth1_macvtap: left promiscuous mode [ 503.168020][ T11] veth0_macvtap: left promiscuous mode [ 503.184984][ T11] veth1_vlan: left promiscuous mode [ 503.191618][ T11] veth0_vlan: left promiscuous mode [ 503.289915][ T29] audit: type=1326 audit(1725407752.319:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8623 comm="syz.1.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fa45757cef9 code=0x7ffc0000 [ 503.391579][ T29] audit: type=1326 audit(1725407752.329:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8623 comm="syz.1.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa45757cef9 code=0x7ffc0000 [ 503.550763][ T29] audit: type=1326 audit(1725407752.339:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8623 comm="syz.1.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa45757cef9 code=0x7ffc0000 [ 503.665266][ T29] audit: type=1326 audit(1725407752.339:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8623 comm="syz.1.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa45757cef9 code=0x7ffc0000 [ 503.799267][ T29] audit: type=1326 audit(1725407752.339:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8623 comm="syz.1.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa45757cef9 code=0x7ffc0000 [ 503.930735][ T29] audit: type=1326 audit(1725407752.339:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8623 comm="syz.1.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa45757cef9 code=0x7ffc0000 [ 504.132105][ T29] audit: type=1326 audit(1725407752.349:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8623 comm="syz.1.595" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa45757cef9 code=0x7ffc0000 [ 504.751234][ T5272] psmouse serio2: Failed to reset mouse on : -5 [ 509.504827][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 509.504847][ T29] audit: type=1326 audit(1725407760.669:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8698 comm="syz.2.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc88077cef9 code=0x7ffc0000 [ 509.595964][ T5272] misc userio: Buffer overflowed, userio client isn't keeping up [ 509.623314][ T29] audit: type=1326 audit(1725407760.669:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8698 comm="syz.2.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc88077cef9 code=0x7ffc0000 [ 509.740007][ T29] audit: type=1326 audit(1725407760.699:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8698 comm="syz.2.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=173 compat=0 ip=0x7fc88077cef9 code=0x7ffc0000 [ 509.854921][ T8] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 509.889393][ T29] audit: type=1326 audit(1725407760.699:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8698 comm="syz.2.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc88077cef9 code=0x7ffc0000 [ 509.977630][ T29] audit: type=1326 audit(1725407760.699:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8698 comm="syz.2.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7fc88077cef9 code=0x7ffc0000 [ 510.006627][ T29] audit: type=1326 audit(1725407760.699:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8698 comm="syz.2.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc88077cef9 code=0x7ffc0000 [ 510.076645][ T8] usb 3-1: New USB device found, idVendor=04bb, idProduct=0901, bcdDevice=55.ba [ 510.107979][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.125725][ T8295] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 510.133744][ T29] audit: type=1326 audit(1725407760.699:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8698 comm="syz.2.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc88077cef9 code=0x7ffc0000 [ 510.148887][ T8] usb 3-1: Product: syz [ 510.207103][ T8] usb 3-1: Manufacturer: syz [ 510.223423][ T29] audit: type=1326 audit(1725407760.709:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8698 comm="syz.2.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc88077cef9 code=0x7ffc0000 [ 510.252958][ T8] usb 3-1: SerialNumber: syz [ 510.290611][ T8] usb 3-1: config 0 descriptor?? [ 510.361421][ T29] audit: type=1326 audit(1725407760.709:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8698 comm="syz.2.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc88077cef9 code=0x7ffc0000 [ 510.415787][ T8295] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 510.452386][ T8295] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 510.472578][ T29] audit: type=1326 audit(1725407760.709:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8698 comm="syz.2.609" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc88077cef9 code=0x7ffc0000 [ 510.514991][ T8295] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 510.576243][ T8295] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 510.606403][ T8295] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.628675][ T8295] usb 4-1: Product: syz [ 510.644189][ T8295] usb 4-1: Manufacturer: syz [ 510.651783][ T8295] usb 4-1: SerialNumber: syz [ 510.673348][ T8295] hub 4-1:1.0: bad descriptor, ignoring hub [ 510.677230][ T5272] input: PS/2 Generic Mouse as /devices/serio2/input/input11 [ 510.688480][ T8295] hub 4-1:1.0: probe with driver hub failed with error -5 [ 510.795801][ T11] team0 (unregistering): Port device team_slave_1 removed [ 510.927701][ T8295] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 511.015012][ T5272] psmouse serio2: Failed to enable mouse on [ 512.127700][ T8] kaweth 3-1:0.0: Firmware present in device. [ 512.141802][ T8] kaweth 3-1:0.0: Error reading configuration (-71), no net device created [ 512.169546][ T8] kaweth 3-1:0.0: probe with driver kaweth failed with error -5 [ 512.297550][ T8] usb 3-1: USB disconnect, device number 13 [ 512.693594][ T4616] Bluetooth: hci7: Controller not accepting commands anymore: ncmd = 0 [ 512.703060][ T4616] Bluetooth: hci7: Injecting HCI hardware error event [ 512.718646][ T5232] Bluetooth: hci7: hardware error 0x00 [ 513.132089][ T11] team0 (unregistering): Port device team_slave_0 removed [ 513.246530][ T5272] usb 4-1: USB disconnect, device number 10 [ 515.086588][ T5272] usblp0: removed [ 515.304835][ T8] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 516.090802][ T5232] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 516.392137][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 516.946400][ T8] usb 3-1: device descriptor read/all, error -71 [ 521.929124][ T8746] netlink: 36 bytes leftover after parsing attributes in process `syz.0.621'. [ 521.942034][ T8746] Bluetooth: MGMT ver 1.23 [ 522.834654][ T8497] chnl_net:caif_netlink_parms(): no params data found [ 523.839062][ T8778] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 523.868260][ T8497] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.882826][ T8497] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.903097][ T8497] bridge_slave_0: entered allmulticast mode [ 523.914291][ T8497] bridge_slave_0: entered promiscuous mode [ 523.947126][ T8497] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.964975][ T8497] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.972559][ T8497] bridge_slave_1: entered allmulticast mode [ 523.992847][ T8497] bridge_slave_1: entered promiscuous mode [ 524.159531][ T8497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 524.229359][ T8497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 524.401550][ T8497] team0: Port device team_slave_0 added [ 524.481465][ T8497] team0: Port device team_slave_1 added [ 524.915099][ C1] IPVS: rr: TCP 172.20.20.170:0 - no destination available [ 526.231287][ T8497] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 526.231456][ T8798] netlink: 'syz.3.631': attribute type 2 has an invalid length. [ 526.246264][ T8798] netlink: 28 bytes leftover after parsing attributes in process `syz.3.631'. [ 526.308169][ T8497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 526.453270][ T8497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 526.546506][ T8497] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 526.574066][ T8497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 526.602158][ T8806] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 526.645190][ T8806] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 526.665301][ T8806] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 526.677584][ T8497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 527.567913][ T8356] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 527.741719][ T8497] hsr_slave_0: entered promiscuous mode [ 527.922151][ T8356] usb 3-1: Using ep0 maxpacket: 16 [ 527.939878][ T8356] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 527.977108][ T8356] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 527.995187][ T8356] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.008680][ T8356] usb 3-1: Product: syz [ 528.021427][ T8356] usb 3-1: Manufacturer: syz [ 528.026563][ T8356] usb 3-1: SerialNumber: syz [ 528.067624][ T8356] usb 3-1: config 0 descriptor?? [ 528.188102][ T8497] hsr_slave_1: entered promiscuous mode [ 528.229329][ T8497] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 528.340942][ T8829] netlink: 36 bytes leftover after parsing attributes in process `syz.1.634'. [ 528.869295][ T8497] Cannot create hsr debugfs directory [ 529.274079][ T8817] can0: slcan on ttyS3. [ 529.477084][ T4616] Bluetooth: hci8: command 0x0406 tx timeout [ 529.730823][ T1746] usb 3-1: USB disconnect, device number 16 [ 530.955914][ T8830] can0 (unregistered): slcan off ttyS3. [ 531.551111][ T29] kauditd_printk_skb: 74 callbacks suppressed [ 531.551130][ T29] audit: type=1400 audit(1725407782.729:192): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="_" object="unconfined_u" requested=w pid=8839 comm="syz.1.638" saddr=172.20.20.170 src=20000 daddr=172.20.20.170 dest=20000 netif=lo [ 531.623446][ T1746] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 531.817257][ T1746] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 531.849324][ T1746] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 531.859342][ T1746] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 531.879612][ T1746] usb 3-1: SerialNumber: syz [ 531.915732][ T1746] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22 [ 532.595918][ T29] audit: type=1400 audit(1725407783.779:193): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="_" object="unconfined_u" requested=w pid=0 comm="swapper/0" saddr=172.20.20.170 src=20000 daddr=172.20.20.170 dest=20000 netif=lo [ 533.185356][ T8452] usb 3-1: USB disconnect, device number 17 [ 534.390307][ T8867] virtio-fs: tag <(null)> not found [ 534.694447][ T29] audit: type=1400 audit(1725407785.859:194): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="_" object="unconfined_u" requested=w pid=8857 comm="syz.0.641" saddr=172.20.20.170 src=20000 daddr=172.20.20.170 dest=20000 netif=lo [ 537.630150][ T8896] Driver unsupported XDP return value 0 on prog (id 157) dev N/A, expect packet loss! [ 537.671436][ T29] audit: type=1326 audit(1725407788.849:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8899 comm="syz.0.647" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc10b77cef9 code=0x0 [ 538.759788][ T29] audit: type=1400 audit(1725407789.939:196): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="_" object="unconfined_u" requested=w pid=16 comm="ksoftirqd/0" saddr=172.20.20.170 src=20000 daddr=172.20.20.170 dest=20000 netif=lo [ 539.224246][ T8497] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 539.303436][ T8497] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 539.368373][ T8497] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 539.445411][ T8497] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 541.334959][ T8] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 541.624884][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 541.696416][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 541.755117][ T8] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 541.935173][ T8] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 541.944269][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.003818][ T8] usb 1-1: Product: syz [ 542.030487][ T8] usb 1-1: Manufacturer: syz [ 542.070169][ T8] usb 1-1: SerialNumber: syz [ 542.109405][ T8] usb 1-1: config 0 descriptor?? [ 542.182469][ T8] hub 1-1:0.0: bad descriptor, ignoring hub [ 542.236571][ T8] hub 1-1:0.0: probe with driver hub failed with error -5 [ 542.273579][ T4616] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 542.286822][ T4616] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 542.295727][ T8] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input12 [ 542.317264][ T4616] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 542.365370][ T4616] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 542.395703][ T4616] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 542.403265][ T4616] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 542.447611][ T8] usbtouchscreen 1-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -90 [ 542.597510][ T8] usbtouchscreen 1-1:0.0: probe with driver usbtouchscreen failed with error -90 [ 543.416530][ T6455] bridge_slave_1: left allmulticast mode [ 543.422235][ T6455] bridge_slave_1: left promiscuous mode [ 543.437745][ T6455] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.509924][ T6455] bridge_slave_0: left allmulticast mode [ 543.536688][ T6455] bridge_slave_0: left promiscuous mode [ 543.563065][ T6455] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.437899][ T5231] Bluetooth: hci0: command tx timeout [ 544.446401][ T6455] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 544.510491][ T6455] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 544.631767][ T6455] bond0 (unregistering): Released all slaves [ 544.834905][ T5231] Bluetooth: hci2: command 0x0406 tx timeout [ 545.215008][ T6455] hsr_slave_0: left promiscuous mode [ 545.244954][ T6455] hsr_slave_1: left promiscuous mode [ 545.331660][ T6455] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 545.444412][ T6455] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 545.556021][ T8356] usb 1-1: USB disconnect, device number 7 [ 547.619168][ T29] audit: type=1400 audit(1725407798.429:197): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="_" object="unconfined_u" requested=w pid=8977 comm="syz.0.653" saddr=172.20.20.170 src=20000 daddr=172.20.20.170 dest=20000 netif=lo [ 547.657938][ T5232] Bluetooth: hci0: command tx timeout [ 548.316090][ T29] audit: type=1326 audit(1725407799.499:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8991 comm="syz.1.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa45757cef9 code=0x7fc00000 [ 548.516058][ T30] INFO: task syz.2.532:8033 blocked for more than 143 seconds. [ 548.525324][ T30] Not tainted 6.11.0-rc6-syzkaller-00026-g88fac17500f4 #0 [ 548.543600][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 548.547638][ T29] audit: type=1326 audit(1725407799.499:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8991 comm="syz.1.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa45757cef9 code=0x7fc00000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 549.124803][ T30] task:syz.2.532 state:D stack:24528 pid:8033 tgid:8031 ppid:6585 flags:0x00004006 [ 549.204778][ T30] Call Trace: [ 549.208115][ T30] [ 549.211036][ T30] __schedule+0x17ae/0x4a10 [ 549.234880][ T29] audit: type=1326 audit(1725407800.209:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8991 comm="syz.1.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa45757cef9 code=0x7fc00000 [ 549.326105][ T30] ? __pfx___schedule+0x10/0x10 [ 549.331033][ T30] ? __pfx_lock_release+0x10/0x10 [ 549.384932][ T29] audit: type=1326 audit(1725407800.209:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8991 comm="syz.1.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa45757cef9 code=0x7fc00000 [ 549.448597][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 549.484788][ T30] ? schedule+0x90/0x320 [ 549.489111][ T30] schedule+0x14b/0x320 [ 549.493292][ T30] io_schedule+0x8d/0x110 [ 549.494819][ T29] audit: type=1326 audit(1725407800.209:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8991 comm="syz.1.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa45757cef9 code=0x7fc00000 [ 549.565028][ T30] folio_wait_bit_common+0x882/0x12b0 [ 549.570457][ T30] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 549.612895][ T30] ? __pfx_wake_page_function+0x10/0x10 [ 549.643259][ T29] audit: type=1326 audit(1725407800.209:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8991 comm="syz.1.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa45757cef9 code=0x7fc00000 [ 549.643489][ T30] ? __filemap_get_folio+0x984/0xc10 [ 549.714837][ T5232] Bluetooth: hci0: command tx timeout [ 549.753121][ T30] truncate_inode_pages_range+0xaaf/0xfc0 [ 549.784782][ T29] audit: type=1326 audit(1725407800.209:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8991 comm="syz.1.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa45757cef9 code=0x7fc00000 [ 549.807455][ T30] ? finish_task_switch+0x1e5/0x870 [ 549.812669][ T30] ? __schedule+0x17b6/0x4a10 [ 549.864783][ T30] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 549.871130][ T30] ? __pfx_has_bh_in_lru+0x10/0x10 [ 549.894785][ T29] audit: type=1326 audit(1725407800.209:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8991 comm="syz.1.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa45757cef9 code=0x7fc00000 [ 549.918452][ T30] ? __pfx_has_bh_in_lru+0x10/0x10 [ 549.944823][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 549.952063][ T30] ? on_each_cpu_cond_mask+0x59/0x80 [ 549.965149][ T30] set_blocksize+0x2f4/0x360 [ 549.969808][ T30] sb_set_blocksize+0x47/0xf0 [ 549.974515][ T30] ntfs_fill_super+0xc25/0x4730 [ 549.979522][ T29] audit: type=1326 audit(1725407800.209:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8991 comm="syz.1.657" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa45757cef9 code=0x7fc00000 [ 550.015473][ T30] ? __pfx_ntfs_fill_super+0x10/0x10 [ 550.020842][ T30] ? sb_set_blocksize+0x98/0xf0 [ 550.054769][ T30] ? setup_bdev_super+0x4e6/0x5d0 [ 550.059882][ T30] get_tree_bdev+0x3f7/0x570 [ 550.084766][ T30] ? __pfx_ntfs_fill_super+0x10/0x10 [ 550.090123][ T30] ? __pfx_get_tree_bdev+0x10/0x10 [ 550.105123][ T30] ? cap_capable+0x1b4/0x250 [ 550.138227][ T30] ? bpf_lsm_capable+0x9/0x10 [ 550.142973][ T30] vfs_get_tree+0x90/0x2b0 [ 550.164803][ T30] do_new_mount+0x2be/0xb40 [ 550.179939][ T30] ? __pfx_do_new_mount+0x10/0x10 [ 550.205128][ T30] __se_sys_mount+0x2d6/0x3c0 [ 550.209851][ T30] ? __pfx___se_sys_mount+0x10/0x10 [ 550.255675][ T30] ? do_syscall_64+0x100/0x230 [ 550.267815][ T30] ? __x64_sys_mount+0x20/0xc0 [ 550.272655][ T30] do_syscall_64+0xf3/0x230 [ 550.294809][ T30] ? clear_bhb_loop+0x35/0x90 [ 550.299568][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.325369][ T30] RIP: 0033:0x7f934937cef9 [ 550.329845][ T30] RSP: 002b:00007f934a1a0038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 550.364751][ T30] RAX: ffffffffffffffda RBX: 00007f9349535f80 RCX: 00007f934937cef9 [ 550.372958][ T30] RDX: 0000000020000000 RSI: 00000000200002c0 RDI: 0000000020000100 [ 550.414848][ T30] RBP: 00007f93493ef01e R08: 0000000020000340 R09: 0000000000000000 [ 550.422894][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 550.475230][ T30] R13: 0000000000000000 R14: 00007f9349535f80 R15: 00007ffee5434978 [ 550.483299][ T30] [ 550.514786][ T30] INFO: task syz.3.535:8058 blocked for more than 145 seconds. [ 550.522555][ T30] Not tainted 6.11.0-rc6-syzkaller-00026-g88fac17500f4 #0 [ 550.571379][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 550.614757][ T30] task:syz.3.535 state:D stack:27392 pid:8058 tgid:8056 ppid:5237 flags:0x00004004 [ 550.644888][ T30] Call Trace: [ 550.648227][ T30] [ 550.651184][ T30] __schedule+0x17ae/0x4a10 [ 550.673125][ T30] ? __pfx___schedule+0x10/0x10 [ 550.680193][ T30] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 550.734819][ T30] ? __pfx_lock_release+0x10/0x10 [ 550.739913][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 550.783816][ T30] ? schedule+0x90/0x320 [ 550.794753][ T30] schedule+0x14b/0x320 [ 550.798945][ T30] super_lock+0x335/0x400 [ 550.803268][ T30] ? __pfx_super_lock+0x10/0x10 [ 550.844845][ T30] ? __pfx_var_wake_function+0x10/0x10 [ 550.850338][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 550.884772][ T30] iterate_supers+0x8c/0x190 [ 550.889453][ T30] ? __pfx_sync_inodes_one_sb+0x10/0x10 [ 550.905180][ T30] ksys_sync+0xbd/0x1c0 [ 550.909389][ T30] ? __pfx_ksys_sync+0x10/0x10 [ 550.914178][ T30] ? do_syscall_64+0x100/0x230 [ 550.946567][ T30] ? do_syscall_64+0xb6/0x230 [ 550.951338][ T30] __do_sys_sync+0xe/0x20 [ 550.974247][ T30] do_syscall_64+0xf3/0x230 [ 550.984959][ T30] ? clear_bhb_loop+0x35/0x90 [ 551.014580][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.024754][ T30] RIP: 0033:0x7f9a8ff7cef9 [ 551.029233][ T30] RSP: 002b:00007f9a8f9de038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2 [ 551.076079][ T30] RAX: ffffffffffffffda RBX: 00007f9a90136058 RCX: 00007f9a8ff7cef9 [ 551.084253][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 551.140200][ T30] RBP: 00007f9a8ffef01e R08: 0000000000000000 R09: 0000000000000000 [ 551.155264][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 551.163294][ T30] R13: 0000000000000000 R14: 00007f9a90136058 R15: 00007ffd3b384248 [ 551.224869][ T30] [ 551.228061][ T30] [ 551.228061][ T30] Showing all locks held in the system: [ 551.315536][ T30] 3 locks held by kworker/u8:0/11: [ 551.320716][ T30] 1 lock held by khungtaskd/30: [ 551.360358][ T30] #0: ffffffff8e738320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 551.397555][ T30] 2 locks held by getty/4976: [ 551.402289][ T30] #0: ffff88803073d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 551.445711][ T30] #1: ffffc9000312b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 551.464793][ T30] 1 lock held by syz.4.5/5330: [ 551.469595][ T30] 3 locks held by kworker/u8:16/6453: [ 551.485854][ T30] 5 locks held by kworker/u8:18/6455: [ 551.491275][ T30] #0: ffff88801b6e3148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 551.546150][ T30] #1: ffffc90009a5fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 551.604890][ T30] #2: ffffffff8fa6cc90 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 551.614396][ T30] #3: ffffffff8fa79848 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe9/0xa90 [ 551.635180][ T30] #4: ffffffff8e73d6f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 551.724829][ T30] 7 locks held by kworker/u8:30/6467: [ 551.730273][ T30] 1 lock held by syz.0.398/7287: [ 551.765844][ T30] #0: ffff8880b883e998 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 [ 551.795131][ T5232] Bluetooth: hci0: command tx timeout [ 551.844803][ T30] 1 lock held by syz.2.532/8033: [ 551.849801][ T30] #0: ffff88807a3420e0 (&type->s_umount_key#81/1){+.+.}-{3:3}, at: alloc_super+0x221/0x9d0 [ 551.926620][ T30] 1 lock held by syz-executor/8119: [ 551.931890][ T30] #0: ffffffff8fa79848 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 551.981011][ T30] 1 lock held by syz.3.649/8898: [ 552.035053][ T30] #0: ffffffff8fa79848 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3e/0x1b0 [ 552.053900][ T30] 1 lock held by syz-executor/8945: [ 552.124865][ T30] #0: ffffffff8fa79848 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 552.134329][ T30] 1 lock held by syz.0.656/8988: [ 552.173990][ T30] #0: ffffffff8e73d6f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 552.185518][ T30] 2 locks held by sed/9028: [ 552.190073][ T30] [ 552.239466][ T30] ============================================= [ 552.239466][ T30] [ 552.259574][ T30] NMI backtrace for cpu 1 [ 552.263982][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc6-syzkaller-00026-g88fac17500f4 #0 [ 552.274484][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 552.284542][ T30] Call Trace: [ 552.287803][ T30] [ 552.290715][ T30] dump_stack_lvl+0x241/0x360 [ 552.295381][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 552.300560][ T30] ? __pfx__printk+0x10/0x10 [ 552.305149][ T30] ? vprintk_emit+0x667/0x7c0 [ 552.309810][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 552.314853][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 552.319844][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 552.325304][ T30] ? _printk+0xd5/0x120 [ 552.329468][ T30] ? __pfx__printk+0x10/0x10 [ 552.334142][ T30] ? __wake_up_klogd+0xcc/0x110 [ 552.338996][ T30] ? __pfx__printk+0x10/0x10 [ 552.343602][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 552.348619][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 552.354767][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 552.360738][ T30] watchdog+0xff4/0x1040 [ 552.365024][ T30] ? watchdog+0x1ea/0x1040 [ 552.369468][ T30] ? __pfx_watchdog+0x10/0x10 [ 552.374131][ T30] kthread+0x2f0/0x390 [ 552.378204][ T30] ? __pfx_watchdog+0x10/0x10 [ 552.382893][ T30] ? __pfx_kthread+0x10/0x10 [ 552.387484][ T30] ret_from_fork+0x4b/0x80 [ 552.391883][ T30] ? __pfx_kthread+0x10/0x10 [ 552.396460][ T30] ret_from_fork_asm+0x1a/0x30 [ 552.401244][ T30] [ 552.405856][ T30] Sending NMI from CPU 1 to CPUs 0: [ 552.411293][ C0] NMI backtrace for cpu 0 [ 552.411308][ C0] CPU: 0 UID: 0 PID: 6450 Comm: kworker/u8:13 Not tainted 6.11.0-rc6-syzkaller-00026-g88fac17500f4 #0 [ 552.411328][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 552.411339][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 552.411365][ C0] RIP: 0010:unwind_next_frame+0x52c/0x2a00 [ 552.411393][ C0] Code: 48 01 dd 48 89 ef 4c 89 f6 e8 60 62 52 00 48 8d 43 04 4c 39 f5 4c 0f 46 e8 48 8d 43 fc 4c 0f 47 e0 4c 0f 46 fb 4d 39 e5 77 1d df 5f 52 00 eb 96 89 d9 80 e1 07 80 c1 03 38 c1 7c c0 48 89 df [ 552.411413][ C0] RSP: 0018:ffffc90009a2e6a8 EFLAGS: 00000287 [ 552.411426][ C0] RAX: ffffffff900faac0 RBX: ffffffff900faac4 RCX: ffff88802f0bbc00 [ 552.411438][ C0] RDX: ffff88802f0bbc00 RSI: ffffffff81f773ee RDI: ffffffff81f7736e [ 552.411451][ C0] RBP: ffffffff81f7736e R08: ffffffff81412c60 R09: ffffc90009a2e870 [ 552.411462][ C0] R10: 0000000000000003 R11: ffffffff817f2f30 R12: ffffffff900faad8 [ 552.411479][ C0] R13: ffffffff900faac8 R14: ffffffff81f773ee R15: ffffffff900faac4 [ 552.411491][ C0] FS: 0000000000000000(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000 [ 552.411505][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 552.411516][ C0] CR2: 00007f6fe7ad05a0 CR3: 000000000e534000 CR4: 00000000003506f0 [ 552.411530][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 552.411539][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 552.411549][ C0] Call Trace: [ 552.411555][ C0] [ 552.411562][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 552.411583][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 552.411606][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 552.411625][ C0] ? nmi_handle+0x2a/0x5a0 [ 552.411649][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 552.411668][ C0] ? nmi_handle+0x14f/0x5a0 [ 552.411682][ C0] ? nmi_handle+0x2a/0x5a0 [ 552.411698][ C0] ? unwind_next_frame+0x52c/0x2a00 [ 552.411720][ C0] ? default_do_nmi+0x63/0x160 [ 552.411741][ C0] ? exc_nmi+0x123/0x1f0 [ 552.411760][ C0] ? end_repeat_nmi+0xf/0x53 [ 552.411779][ C0] ? kasan_save_track+0x3e/0x80 [ 552.411796][ C0] ? kasan_save_stack+0x5e/0x60 [ 552.411811][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 552.411831][ C0] ? unwind_next_frame+0x510/0x2a00 [ 552.411853][ C0] ? kasan_save_track+0x3e/0x80 [ 552.411868][ C0] ? kasan_save_stack+0x5e/0x60 [ 552.411883][ C0] ? unwind_next_frame+0x52c/0x2a00 [ 552.411906][ C0] ? unwind_next_frame+0x52c/0x2a00 [ 552.411929][ C0] ? unwind_next_frame+0x52c/0x2a00 [ 552.411951][ C0] [ 552.411957][ C0] [ 552.411965][ C0] ? kasan_save_track+0x3e/0x80 [ 552.411982][ C0] ? kasan_save_track+0x3f/0x80 [ 552.411997][ C0] ? kasan_save_track+0x3f/0x80 [ 552.412012][ C0] ? __kernel_text_address+0xd/0x40 [ 552.412028][ C0] ? kasan_save_track+0x3f/0x80 [ 552.412043][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 552.412062][ C0] arch_stack_walk+0x151/0x1b0 [ 552.412081][ C0] ? kasan_save_track+0x3f/0x80 [ 552.412100][ C0] stack_trace_save+0x118/0x1d0 [ 552.412117][ C0] ? __lock_acquire+0x137a/0x2040 [ 552.412138][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 552.412164][ C0] kasan_save_track+0x3f/0x80 [ 552.412179][ C0] ? kasan_save_track+0x3f/0x80 [ 552.412222][ C0] __kasan_kmalloc+0x98/0xb0 [ 552.412239][ C0] ? ieee802_11_parse_elems_full+0xdb/0x2880 [ 552.412263][ C0] ? ieee802_11_parse_elems_full+0xdb/0x2880 [ 552.412287][ C0] __kmalloc_noprof+0x1fc/0x400 [ 552.412311][ C0] ieee802_11_parse_elems_full+0xdb/0x2880 [ 552.412337][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 552.412360][ C0] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 552.412383][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 552.412399][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 552.412421][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 552.412449][ C0] ? __pfx_ieee802_11_parse_elems_full+0x10/0x10 [ 552.412476][ C0] ? kvfree_call_rcu+0x48c/0x790 [ 552.412506][ C0] ? __pfx_kvfree_call_rcu+0x10/0x10 [ 552.412533][ C0] ? cfg80211_update_known_bss+0xb95/0x1500 [ 552.412556][ C0] ieee80211_inform_bss+0x15f/0x1080 [ 552.412581][ C0] ? __cfg80211_bss_update+0x1202/0x2170 [ 552.412600][ C0] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 552.412626][ C0] ? cfg80211_inform_single_bss_data+0xaff/0x2030 [ 552.412649][ C0] ? cfg80211_inform_single_bss_data+0xaff/0x2030 [ 552.412669][ C0] ? cfg80211_inform_single_bss_data+0xd3d/0x2030 [ 552.412688][ C0] ? __pfx_ieee80211_inform_bss+0x10/0x10 [ 552.412711][ C0] cfg80211_inform_single_bss_data+0xe93/0x2030 [ 552.412729][ C0] ? __read_once_word_nocheck+0x9/0x20 [ 552.412756][ C0] ? __read_once_word_nocheck+0x9/0x20 [ 552.412778][ C0] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 552.412807][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 552.412829][ C0] ? __kernel_text_address+0xd/0x40 [ 552.412844][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 552.412865][ C0] ? cfg80211_inform_bss_data+0x3c5/0x5a70 [ 552.412885][ C0] cfg80211_inform_bss_data+0x3dd/0x5a70 [ 552.412917][ C0] ? __pfx_validate_chain+0x10/0x10 [ 552.412947][ C0] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 552.412970][ C0] ? mark_lock+0x9a/0x350 [ 552.412994][ C0] ? __lock_acquire+0x137a/0x2040 [ 552.413030][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 552.413050][ C0] ? ieee80211_bss_info_update+0x3d9/0xbc0 [ 552.413075][ C0] cfg80211_inform_bss_frame_data+0x3b8/0x720 [ 552.413099][ C0] ? ieee80211_bss_info_update+0x3d9/0xbc0 [ 552.413122][ C0] ieee80211_bss_info_update+0x8a7/0xbc0 [ 552.413147][ C0] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 552.413171][ C0] ? __pfx_lock_release+0x10/0x10 [ 552.413200][ C0] ieee80211_ibss_rx_queued_mgmt+0x1962/0x2d70 [ 552.413233][ C0] ? ieee80211_ibss_rx_queued_mgmt+0xf7e/0x2d70 [ 552.413255][ C0] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 552.413283][ C0] ? mark_lock+0x9a/0x350 [ 552.413306][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 552.413329][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 552.413350][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 552.413376][ C0] ieee80211_iface_work+0x8a5/0xf20 [ 552.413405][ C0] cfg80211_wiphy_work+0x2db/0x490 [ 552.413428][ C0] ? process_scheduled_works+0x945/0x1830 [ 552.413448][ C0] process_scheduled_works+0xa2c/0x1830 [ 552.413487][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 552.413511][ C0] ? assign_work+0x364/0x3d0 [ 552.413533][ C0] worker_thread+0x86d/0xd10 [ 552.413561][ C0] ? __kthread_parkme+0x169/0x1d0 [ 552.413584][ C0] ? __pfx_worker_thread+0x10/0x10 [ 552.413604][ C0] kthread+0x2f0/0x390 [ 552.413625][ C0] ? __pfx_worker_thread+0x10/0x10 [ 552.413645][ C0] ? __pfx_kthread+0x10/0x10 [ 552.413667][ C0] ret_from_fork+0x4b/0x80 [ 552.413687][ C0] ? __pfx_kthread+0x10/0x10 [ 552.413709][ C0] ret_from_fork_asm+0x1a/0x30 [ 552.413738][ C0] [ 553.155296][ T6455] team0 (unregistering): Port device team_slave_1 removed [ 553.774768][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 553.781743][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc6-syzkaller-00026-g88fac17500f4 #0 [ 553.792239][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 553.802363][ T30] Call Trace: [ 553.805630][ T30] [ 553.808550][ T30] dump_stack_lvl+0x241/0x360 [ 553.813226][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 553.818420][ T30] ? __pfx__printk+0x10/0x10 [ 553.822996][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 553.828962][ T30] ? vscnprintf+0x5d/0x90 [ 553.833272][ T30] panic+0x349/0x860 [ 553.837150][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 553.843297][ T30] ? __pfx_panic+0x10/0x10 [ 553.847722][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 553.853076][ T30] ? __irq_work_queue_local+0x137/0x410 [ 553.858604][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 553.863954][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 553.870089][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 553.876225][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 553.882371][ T30] watchdog+0x1033/0x1040 [ 553.886692][ T30] ? watchdog+0x1ea/0x1040 [ 553.891125][ T30] ? __pfx_watchdog+0x10/0x10 [ 553.895801][ T30] kthread+0x2f0/0x390 [ 553.899869][ T30] ? __pfx_watchdog+0x10/0x10 [ 553.904534][ T30] ? __pfx_kthread+0x10/0x10 [ 553.909140][ T30] ret_from_fork+0x4b/0x80 [ 553.913542][ T30] ? __pfx_kthread+0x10/0x10 [ 553.918116][ T30] ret_from_fork_asm+0x1a/0x30 [ 553.922869][ T30] [ 553.926110][ T30] Kernel Offset: disabled [ 553.930422][ T30] Rebooting in 86400 seconds..