last executing test programs: 1m50.753309929s ago: executing program 3 (id=6286): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000001c0000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev(r1, 0x0, 0x0, 0x0, 0x0) 1m31.412681738s ago: executing program 3 (id=6286): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000001c0000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev(r1, 0x0, 0x0, 0x0, 0x0) 1m13.196836097s ago: executing program 3 (id=6286): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000001c0000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev(r1, 0x0, 0x0, 0x0, 0x0) 54.325800293s ago: executing program 3 (id=6286): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000001c0000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev(r1, 0x0, 0x0, 0x0, 0x0) 36.521810128s ago: executing program 3 (id=6286): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000001c0000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev(r1, 0x0, 0x0, 0x0, 0x0) 17.584741819s ago: executing program 3 (id=6286): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000001c0000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwritev(r1, 0x0, 0x0, 0x0, 0x0) 7.867018828s ago: executing program 4 (id=7099): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}, 'geneve0\x00'}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000100)=0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000280)={'geneve0\x00'}) 6.84040928s ago: executing program 4 (id=7105): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mount$tmpfs(0x0, 0x0, &(0x7f0000000400), 0x0, 0x0) mlock(&(0x7f0000002000/0x2000)=nil, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) read$FUSE(r0, &(0x7f0000000640)={0x2020}, 0x2020) 5.376918689s ago: executing program 4 (id=7115): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x1) r1 = open(&(0x7f00000001c0)='./file2\x00', 0x0, 0x0) dup3(r1, r0, 0x0) io_setup(0x6, &(0x7f0000000240)=0x0) io_submit(r2, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 5.117122036s ago: executing program 4 (id=7117): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x91905a, 0x0) mount$bind(0x0, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x81007a, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r0, &(0x7f0000003480)={0x2020}, 0x2020) 4.948184552s ago: executing program 4 (id=7119): r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) close(r0) syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000f2cff4)) 4.511966367s ago: executing program 4 (id=7122): bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000a40)="acae809792854c4ccec2226b7a4b093cd6953be7fb83c331da994a884f85a55c861e386e5d1336168028d84f64a5d46c70b91e90fce3771c7b947cadcc1ca294b7e7e6e104e2bb8a783dee216a6ffa39d6f05b8d80e1e3acb3126757f114d948bdd5735bce6b3261cbf9799ce07bee9461f3df9950c4f9f29f772b83801df7694ddf6d923c20bfd21e528ed178b5e036aa4eb30863889ee115c1c38abd1ab3a0fcdaae00c64ab028591b96b1023a9993582075f88ed1e85100d42ef49f9a5dc806cc0ac4a764696533521d4d268319ae4bcefbeb5708cc9eb7a74ff7fe2f6cb465a25ca0e8fbd00a7f48ace43b1067562d0c574144020399a4ec58f469a4b8936a8df67d9ed0368e390a15d568fb85a138c7a2495edbd6fc045c43c06784d1d263ccc78e3f59a5da89fe1d67375b24eb124ebd761fce86ed9802664ac59e773f64727456e6176db50d07513453846c2abce676518b0e261b91041e70de15eae23852e5eba21e5e668ea63c760deeb143ae3775d6fcfff8fd40dbbd4bb7319ef392972411790e283144e178a501a6b3c7cb807160c1913c4c501770905e2cb890a1466229df23d524274dbcd7a1982d0d48312c4ef1f12f7c8cca7a114db2060e627487a40116f1f1633491b260c939715761b0ea24a9906807ecbbb4e24062d16ed3e20bd24f8e498dee56fe616cf53a5fc3a0899efd80db4c55222b867f887bbdbf80d148d3eb9cb5b185817a5ed252b034b9efce7674ebcf0ced1ffa2ff0d08bec5cf6da0528750bae04bafdb4ec9221138839bf8d674b5dbaa9e44402130fbec3fdff95b2b4d6dab74ba911d2c3fe7fad5d379fdc6e91c56de9f74f96fd18d83d7d09d7d75af5deb47099bbe752c178743ae16e654f39ffd82e8bfbb24b3861e7a6d2ea33167826192a22f18b9e0eacb02720f4f12ba3c5c08f45c1a43a6bafb16176427d1bb58a3e38dbff59668f80fcd4e30bc3cf88368ea5adeb7ae0ebe2bc8dfbba2453fb7506665b8d3c476701420dd868fa0890688eb811d058328750c5f3ec0be47cafba95bd346ac2760d2022dc45947131a40b51781419140df2140ec366d44f25daf7e30624661f13e09c33b70fa23125ec71e3a6241bd827d81fbaf8605337dba83dec5914a214dd3c9f87d8b4fea6a4e01d5aa502e96a6952347db371359097e6930a9ee4f4ac59411b16054102994b59c232abb44ec9662d8c762afb08d66ba89cda4252f3d43736e07a86dce4aed45f512175d81d8db9b68e3f037a3b1340d9371c4066e71f9d5d861e5dc6a17021ae7b8c64f0c069cb028120070e3862a638ab17f5e3c92ecef7512603ec846998adb9a9af16f1ea3c9fe166e7760169295d2f7205b29c9dbe8f2358928afab32193d632521d8c2b2fd9ff265386e7912b4c72e134bab88420fd07c225b57e4830cdc62b251c6023521853824bbc69699558f2c72819ac46215523405db55704cbb2a472f553d76c2d755423d8b92593238921029607ed55497e3ad0a51d0ae49fe395f9a13b5405e54c108192ab048cef31ce7459076edfa4c816d406516eb66be43bb53525637c2816009ce74e15ee35010b47b32513201c16624565f8727dc13ab58afa3c81e4a5c3223d7060e20d23df0d55db738d0a1fdbc91779c207a25e9d93e1018568fb2f5c20831ef3785646fb65c73675c283674ab0df58a7eba7f36ba5940e447ac746a734cf2fdbc3df5f76622a426afe44abb4131c4756dc51a229365efe0064e7d51f76c92b7dbd102c48ac015443a92b3adc8a274748781235f10d0227f65ef2efcfaf6938683299fdbb0cff072576c6b2d3142766578038f2cce7977413948d320412b13c17d9aaff41b90acd83901fd42fb861fc41b32d248b18d914675f20dd9a442dbdb00187935a78522d0cfecb12056eecc7261c3531fa824788721c7bd1b9d6da3bdba1949063c842da9c44775dc44ab8ab8a7f3adaa6e5b16bcffd3af93cd05ba5b9304e25ff270f9e9d515f20444afaf26f0686ed4039b357c4ddf65c53587c88af529f88f2a832c5f631c13c4a7225c5208cc4b0092d107c843f28b1f3c1dada617d564f9046e8e70218b2fd2721bbac1389973eb098d8025ff7b8fa3af41696826a1c2ada4577c4e62002445c3ed48fcceddfbfa8d411f115ac742dbbfd92367faa1e4be00802e5f0242de940f5b356bdd2cb46b764bb16f910b266943afc9d67c0a996213fec4a11b1521c555ca53b36cbfb3ed5730b285aafbff8d4560be8e4d3df7a966d4c93cceb801ee55c6ae33bf8325459869e6f8e2f51e36688baa93090b28e23c1aa6135b93ed1f5fa338f93df6d4734d5be96b10872edb1e82271d01da2c3fba97cb8592547b9330c7578b09dcf31baf8c94bf2a236ab30c5dda6f6fcf6b7bcb593bac6a382bf72285fcef665be84c4a7dd5729735ad83de75a74da0ec2c6bb50e1368fa55c3f133926d34dde3f91051a402568e6be752064921b8e20ac774c06734b8f6a1793c3516ed99d24c9babebb47fc2de14f5e65e05cc7082334da246f0b86b49814bfdd9a553921269e8af175164760b86bd41e10248e1a9c3142a8e1a625143dbb6779b082527ab963d2cd803decaff88672931f8722f947f743ebd7c84ed285e99c83fb9d5461f608d088999442f2bfda50cd4e95d215d4f5ed60588dc4e555e125f78dee112969827e75ba36bef5c2eb42e4a6364b693ddeae003fa24126d0dda2a513e56424fe422edcd5bee4187902e1fd61c92679373129aa0d25d549beb53c1a1d8c04c22c2df13a043d05d742753b964c633a6f8bf6214c06817a9ca0d01e22f592e4f315e969ab6dbcb033ca9e98106edfe0039b033eb814b9dd76c70602c01b560122140eedb1ff5e382986c76aec3fd91d2b3dadbb62f0813e2eee1e99d18ba57d53ccd33d0735eb8fc6dd4a0880b875b7b778762ed1d95d186012b692f6d9bc3817b2dbe2da80e3061dcd37f65b8f4605bd96e33e184444240cb13de3b167af5410d806a018fcc9defb46b2a59915311cfe8042e9d88b7f856720a91b4680a452a5e11bac511b6f87d497bb755ff42b56d2d3ffa4be6105477048df419f89e16c17657cb4220b68fcf0e6c9b2f8b1fcc9370479d99c28698acf9898e73d6744051fab8b8ab0497db4049aa11bc5d5c6bd9475ba50b3e56572bf15146a35cadcf619ddd22bf70b9d33820f8d82074566630296d9e412282516d57a83d1a586e78f7dd3cdbe368260ab80ad7337c89dc14dfd19cccba244ba25dcab463a924c0dd083eac172624047aab188c75b802cff808b16928f8ee86b7b35221c5e41a78cc295f6097b4912fec5ff1e88d6f788f54a58c42927e84dcc73703461fa47ca68e42a8650a2fa604171055b10a3c30d2fb77744b22b0f23837d7710069040ef4e53429d0a335fefd2df3ed2f4c72b6a0fbfefd623c48ef84183c490ff3426e147a50f36a5cd24fc4eb440f6bb736026abdab40fa9678beb5a3b82da824c", &(0x7f0000001a40)=""/4096, 0x0, 0x0}, 0x38) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000800), &(0x7f00000004c0), 0x1fe, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3.733227636s ago: executing program 1 (id=7127): unshare(0x22020400) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x1080) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000140)='wg0\x00', 0x4) bind$xdp(r0, &(0x7f0000000000), 0x10) 3.399876403s ago: executing program 1 (id=7130): r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000380)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$hidraw(r1, &(0x7f0000000240)="c3", 0x1) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r1, 0x0) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 2.736078022s ago: executing program 1 (id=7131): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x16) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000240)='numa_maps\x00') read$FUSE(r1, &(0x7f0000004180)={0x2020}, 0x2020) 2.02792085s ago: executing program 1 (id=7135): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x20, 0x4) setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0)=r0, 0x4) listen(r1, 0x0) close(r1) 1.834166683s ago: executing program 1 (id=7137): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x3f, {[@window={0x9, 0x3}, @timestamp={0x5, 0x2, 0x88000}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 1.565915429s ago: executing program 0 (id=7140): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001440)={0xb4, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x51, 0xe, {{}, 0x9, @default, 0x0, @void, @void, @void, @val={0x4, 0x6, {0x10}}, @void, @void, @val={0x25, 0x3}, @void, @void, @val={0x2d, 0x1a, {0x0, 0x0, 0x0, 0x0, {}, 0x6}}, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @beacon=[@NL80211_ATTR_IE_ASSOC_RESP={0x4}, @NL80211_ATTR_PROBE_RESP={0x1f, 0x91, "c5dade660623a8d5bd5531159223c9907c30f115236ade55e41c21"}]]}, 0xb4}}, 0x0) 1.305598899s ago: executing program 2 (id=7141): pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) read$FUSE(r2, &(0x7f00000001c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f00000000c0)={0x10, 0xfffffffffffffff5, r3}, 0x10) splice(r0, 0x0, r2, 0x0, 0x10, 0x0) 1.120712959s ago: executing program 2 (id=7142): unshare(0xe020600) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) linkat(r0, &(0x7f00000003c0)='./file0\x00', 0xffffffffffffffff, 0x0, 0x1400) 924.336534ms ago: executing program 2 (id=7143): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000003) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 767.810375ms ago: executing program 0 (id=7144): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000010c0)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000002, 0x10012, r0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000000300)=[{&(0x7f0000002640)=""/102389, 0x18ff5}], 0x1, 0x1903d}}], 0x48}, 0x0) 694.219834ms ago: executing program 0 (id=7145): mkdir(&(0x7f0000002200)='./file0\x00', 0x0) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000000)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) chroot(&(0x7f0000000080)='./file0\x00') umount2(&(0x7f0000000040)='./file0\x00', 0xb) 477.415436ms ago: executing program 0 (id=7146): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0xa2465) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0xc0884123, &(0x7f0000000000)=0x6389) 423.434822ms ago: executing program 1 (id=7147): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) syz_io_uring_setup(0x6770, &(0x7f00000000c0)={0x0, 0x1bdd, 0x2000, 0x1, 0x201}, &(0x7f0000000180), 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000140)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, @local, @loopback}}}}, 0xfdef) 353.557003ms ago: executing program 2 (id=7148): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000011c0)={{r0}, &(0x7f0000001140), &(0x7f0000001180)='%pI4 \x00'}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 282.760728ms ago: executing program 2 (id=7149): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000700)=[0x0, 0x0], &(0x7f0000000740), 0x0, 0x2, 0x0, 0x0, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f00000008c0)={0x0, 0x1, &(0x7f0000000580)=[r2], &(0x7f00000005c0)=[0xf4a7], &(0x7f00000006c0)=[r4, r3], &(0x7f0000000880)}) 247.504475ms ago: executing program 0 (id=7150): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x0, "ea02cefa5c8008535d47000000504fffff00", 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000080)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000140)={"6739669f274d13b691ebe45b00e4f5b53e0ca34dd02acecd816800", r1}) 53.794691ms ago: executing program 2 (id=7151): r0 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x26020480) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) ppoll(&(0x7f00000001c0)=[{r1, 0x2102}, {r0, 0x104}], 0x2, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=7152): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f00000000c0)={{0x0, 0x989680}, {0x77359400}}, 0x0) clock_settime(0x0, &(0x7f0000003c80)={0x77359400}) clock_gettime(0x7, &(0x7f0000000140)={0x0, 0x0}) timerfd_settime(r0, 0x3, &(0x7f0000000080)={{0x77359400}, {r1, r2+60000000}}, 0x0) kernel console output (not intermixed with test programs): unexpected cc 0x0c23 length: 249 > 4 [ 637.983521][ T5233] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 637.991165][ T5233] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 638.085796][ T9] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 638.106383][ T61] team0: left allmulticast mode [ 638.135820][ T61] team_slave_0: left allmulticast mode [ 638.156756][ T61] team_slave_1: left allmulticast mode [ 638.180620][ T61] team0: left promiscuous mode [ 638.202997][ T61] team_slave_0: left promiscuous mode [ 638.226024][ T61] team_slave_1: left promiscuous mode [ 638.246568][ T61] bridge0: port 3(team0) entered disabled state [ 638.276200][ T61] bridge_slave_1: left allmulticast mode [ 638.288424][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 638.299564][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 638.309166][ T5268] cp210x 3-1:0.255: failed to get vendor val 0x000e size 3: -32 [ 638.314901][ T61] bridge_slave_1: left promiscuous mode [ 638.332806][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.342681][ T9] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 638.366107][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 638.394414][ T61] bridge_slave_0: left allmulticast mode [ 638.405168][ T61] bridge_slave_0: left promiscuous mode [ 638.405444][ T9] usb 1-1: SerialNumber: syz [ 638.410897][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.543933][ T5268] cp210x 3-1:0.255: GPIO initialisation failed: -19 [ 638.572973][ T5268] usb 3-1: cp210x converter now attached to ttyUSB0 [ 638.653269][ T9] usb 1-1: 0:2 : does not exist [ 638.731251][ T9] usb 1-1: USB disconnect, device number 57 [ 638.795174][ T5267] usb 3-1: USB disconnect, device number 57 [ 638.810992][ T5267] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 638.835812][ T5267] cp210x 3-1:0.255: device disconnected [ 640.035128][ T5233] Bluetooth: hci0: command tx timeout [ 640.043427][T17283] Bluetooth: hci6: command tx timeout [ 640.134743][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 640.187014][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 640.254545][ T61] bond0 (unregistering): Released all slaves [ 640.541638][ T61] tipc: Disabling bearer [ 640.586227][ T61] tipc: Left network mode [ 641.332403][ T61] hsr_slave_0: left promiscuous mode [ 641.356573][ T61] hsr_slave_1: left promiscuous mode [ 641.366663][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 641.384410][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 641.411645][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 641.431206][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 641.497117][ T61] veth1_macvtap: left promiscuous mode [ 641.525451][ T61] veth0_macvtap: left promiscuous mode [ 641.543642][ T61] veth1_vlan: left promiscuous mode [ 641.561416][ T61] veth0_vlan: left promiscuous mode [ 642.116204][T17283] Bluetooth: hci0: command tx timeout [ 642.640401][T19975] loop2: detected capacity change from 0 to 7 [ 642.685482][T19975] Dev loop2: unable to read RDB block 7 [ 642.705053][T19975] loop2: AHDI p1 p3 p4 [ 642.714898][T19975] loop2: partition table partially beyond EOD, truncated [ 642.736019][T19975] loop2: p1 start 2048 is beyond EOD, truncated [ 642.762753][T19975] loop2: p3 size 16779293 extends beyond EOD, truncated [ 642.876140][ T5267] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 643.091156][ T5267] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 643.128942][ T5267] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 643.159744][ T5267] usb 2-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 643.201094][ T5267] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 643.223150][ T5267] usb 2-1: config 0 descriptor?? [ 643.423728][T19987] sctp: [Deprecated]: syz.4.6339 (pid 19987) Use of int in maxseg socket option. [ 643.423728][T19987] Use struct sctp_assoc_value instead [ 643.751663][ T5267] cougar 0003:060B:700A.0038: hidraw0: USB HID v0.00 Device [HID 060b:700a] on usb-dummy_hcd.1-1/input0 [ 643.911703][ T61] team0 (unregistering): Port device team_slave_1 removed [ 644.030185][ T9] usb 2-1: USB disconnect, device number 40 [ 644.080823][ T61] team0 (unregistering): Port device team_slave_0 removed [ 644.195897][T17283] Bluetooth: hci0: command tx timeout [ 644.948771][T20002] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 645.326689][T19879] chnl_net:caif_netlink_parms(): no params data found [ 645.631456][T20016] netlink: 144 bytes leftover after parsing attributes in process `syz.4.6348'. [ 645.834395][T19879] bridge0: port 1(bridge_slave_0) entered blocking state [ 645.881966][T19879] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.925373][T19879] bridge_slave_0: entered allmulticast mode [ 645.948887][T19879] bridge_slave_0: entered promiscuous mode [ 646.000028][T19879] bridge0: port 2(bridge_slave_1) entered blocking state [ 646.025955][T19879] bridge0: port 2(bridge_slave_1) entered disabled state [ 646.057012][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 646.057032][ T29] audit: type=1400 audit(1724434797.406:518): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=20022 comm="syz.4.6351" dest=20000 [ 646.080897][T19879] bridge_slave_1: entered allmulticast mode [ 646.100457][T19879] bridge_slave_1: entered promiscuous mode [ 646.258105][T19879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 646.275068][T17283] Bluetooth: hci0: command tx timeout [ 646.304465][ T61] IPVS: stop unused estimator thread 0... [ 646.368639][T19879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 646.415719][T20031] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 646.525378][T20035] Process accounting resumed [ 646.590225][T20033] netlink: 'syz.1.6355': attribute type 8 has an invalid length. [ 646.619182][T20033] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6355'. [ 646.711537][T19879] team0: Port device team_slave_0 added [ 646.767279][T19879] team0: Port device team_slave_1 added [ 646.910840][T19879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 646.934882][T19879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 647.031246][T19879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 647.077418][T19879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 647.084400][T19879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 647.192927][T19879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 647.397438][T19879] hsr_slave_0: entered promiscuous mode [ 647.459467][T19879] hsr_slave_1: entered promiscuous mode [ 647.476043][T19879] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 647.496354][T19879] Cannot create hsr debugfs directory [ 648.245862][T20091] bond0: entered promiscuous mode [ 648.250946][T20091] bond_slave_0: entered promiscuous mode [ 648.285802][T20091] bond_slave_1: entered promiscuous mode [ 648.380129][ T5268] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 648.588168][ T5268] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 648.619748][ T5268] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 648.625115][ T25] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 648.649779][ T5268] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 648.679833][ T5268] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 648.708811][ T5268] usb 5-1: SerialNumber: syz [ 648.843809][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 648.884950][ T25] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 648.916895][ T25] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 648.959579][ T5268] usb 5-1: 0:2 : does not exist [ 648.964872][ T25] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 648.983631][T19879] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 649.005903][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.036598][ T5268] usb 5-1: USB disconnect, device number 55 [ 649.036959][ T25] usb 1-1: config 0 descriptor?? [ 649.051183][T19879] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 649.099202][T19879] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 649.137403][T19879] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 649.433556][T19879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 649.515767][T19879] 8021q: adding VLAN 0 to HW filter on device team0 [ 649.573650][ T25] plantronics 0003:047F:FFFF.0039: unknown main item tag 0x0 [ 649.583851][ T2575] bridge0: port 1(bridge_slave_0) entered blocking state [ 649.591027][ T2575] bridge0: port 1(bridge_slave_0) entered forwarding state [ 649.599495][ T25] plantronics 0003:047F:FFFF.0039: unknown main item tag 0x0 [ 649.616073][ T25] plantronics 0003:047F:FFFF.0039: No inputs registered, leaving [ 649.646815][ T25] plantronics 0003:047F:FFFF.0039: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 649.668150][ T2575] bridge0: port 2(bridge_slave_1) entered blocking state [ 649.675383][ T2575] bridge0: port 2(bridge_slave_1) entered forwarding state [ 649.966769][T20120] netlink: 104 bytes leftover after parsing attributes in process `syz.2.6394'. [ 650.027896][ T5270] usb 1-1: USB disconnect, device number 58 [ 650.396045][T19879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 650.550604][T19879] veth0_vlan: entered promiscuous mode [ 650.595707][T19879] veth1_vlan: entered promiscuous mode [ 650.721039][T19879] veth0_macvtap: entered promiscuous mode [ 650.788984][T19879] veth1_macvtap: entered promiscuous mode [ 650.883199][T19879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 650.945059][T19879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 650.976904][T19879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 650.995206][T19879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.013681][T19879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 651.045002][T19879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.075112][ T5270] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 651.090253][T19879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 651.117042][T19879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.144920][T19879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 651.175087][T19879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.197162][T19879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 651.235089][T19879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.255162][T19879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 651.275699][ T5270] usb 3-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01 [ 651.285461][ T5270] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.318467][ T5270] usb 3-1: config 0 descriptor?? [ 651.323665][T19879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.347289][ T5270] radioshark 3-1:0.0: Invalid radioSHARK device [ 651.353773][ T5270] radioshark 3-1:0.0: probe with driver radioshark failed with error -22 [ 651.375451][T19879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 651.393986][T19879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.405108][ T5270] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 651.424888][T19879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 651.454888][T19879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.479927][T19879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 651.558463][T19879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 651.590203][ T5270] usb 3-1: USB disconnect, device number 58 [ 651.615456][T19879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.645104][T19879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 651.677042][T19879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.705138][T19879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 651.724604][T20159] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 651.740466][T19879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.763104][T20159] overlayfs: conflicting lowerdir path [ 651.769559][T19879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 651.793295][T19879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.811110][T19879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 651.832636][T19879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.849709][T19879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 651.869205][T19879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.890100][T19879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 651.907569][T19879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.925930][T19879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 651.947363][T19879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 651.969302][T19879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 651.996627][T19879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 652.043873][T19879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 652.107355][T19879] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.144685][T19879] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.190005][T19879] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.220196][T19879] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 652.482804][ T2556] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 652.524247][ T2556] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 652.605637][ T941] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 652.631847][ T2943] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 652.655172][ T2943] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 652.827394][ T941] usb 1-1: config 0 has an invalid interface number: 18 but max is 0 [ 652.857157][ T941] usb 1-1: config 0 has no interface number 0 [ 652.877426][ T941] usb 1-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 652.915755][ T941] usb 1-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 652.966661][ T941] usb 1-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 652.998945][ T941] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 653.025252][ T941] usb 1-1: Manufacturer: syz [ 653.055919][ T941] usb 1-1: config 0 descriptor?? [ 653.550460][ T941] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.18/0003:054C:03D5.003A/input/input59 [ 653.709097][ T941] sony 0003:054C:03D5.003A: input,hidraw0: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.0-1/input18 [ 653.765387][ T941] usb 1-1: USB disconnect, device number 59 [ 654.527428][ T61] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 654.981612][ T61] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.217185][ T61] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.472963][ T5233] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 655.486674][ T5233] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 655.496140][ T5233] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 655.508670][ T5233] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 655.516566][ T5233] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 655.524055][ T5233] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 655.578649][ T61] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.255021][ T5267] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 656.285311][ T29] audit: type=1400 audit(1724434807.626:519): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=20248 comm="syz.4.6444" dest=20000 [ 656.341374][ T61] bridge_slave_1: left allmulticast mode [ 656.358032][ T61] bridge_slave_1: left promiscuous mode [ 656.365879][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 656.400250][ T61] bridge_slave_0: left allmulticast mode [ 656.415236][ T61] bridge_slave_0: left promiscuous mode [ 656.432864][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.461886][ T5267] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 656.489840][ T5267] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 656.532745][ T5267] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 656.576015][ T5267] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 656.606665][ T5267] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.637325][T20245] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 657.397427][T20274] input: syz0 as /devices/virtual/input/input61 [ 657.522484][ T5267] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 657.536983][ T5267] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input60 [ 657.556302][ T5233] Bluetooth: hci0: command tx timeout [ 657.596326][ T5267] usb 3-1: USB disconnect, device number 59 [ 657.596375][ C1] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 657.642136][T20279] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6455'. [ 658.261683][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 658.289234][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 658.356417][ T61] bond0 (unregistering): Released all slaves [ 658.525786][T20293] sctp: [Deprecated]: syz.4.6461 (pid 20293) Use of struct sctp_assoc_value in delayed_ack socket option. [ 658.525786][T20293] Use struct sctp_sack_info instead [ 659.450156][T20231] chnl_net:caif_netlink_parms(): no params data found [ 659.637283][ T5233] Bluetooth: hci0: command tx timeout [ 660.044910][ T61] hsr_slave_0: left promiscuous mode [ 660.075203][ T61] hsr_slave_1: left promiscuous mode [ 660.124620][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 660.155187][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 660.176444][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 660.211769][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 660.326296][ T61] veth1_macvtap: left promiscuous mode [ 660.351780][ T61] veth0_macvtap: left promiscuous mode [ 660.376652][ T61] veth1_vlan: left promiscuous mode [ 660.394999][ T61] veth0_vlan: left promiscuous mode [ 661.215352][ T9] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 661.456598][ T9] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 661.467066][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.525451][ T9] usb 1-1: Product: syz [ 661.529935][ T9] usb 1-1: Manufacturer: syz [ 661.534548][ T9] usb 1-1: SerialNumber: syz [ 661.580589][ T9] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 661.614853][ T944] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 661.715686][T17283] Bluetooth: hci0: command tx timeout [ 662.416980][ T61] team0 (unregistering): Port device team_slave_1 removed [ 662.466987][T20355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 662.495750][T20355] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 662.576840][ T61] team0 (unregistering): Port device team_slave_0 removed [ 662.675506][ T944] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 662.682674][ T944] ath9k_htc: Failed to initialize the device [ 662.752717][ T944] usb 1-1: ath9k_htc: USB layer deinitialized [ 662.807035][ T5266] usb 1-1: USB disconnect, device number 60 [ 663.805329][T17283] Bluetooth: hci0: command tx timeout [ 664.729617][T20231] bridge0: port 1(bridge_slave_0) entered blocking state [ 664.738003][T20231] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.756391][T20231] bridge_slave_0: entered allmulticast mode [ 664.777527][T20231] bridge_slave_0: entered promiscuous mode [ 664.800812][T20231] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.818267][T20231] bridge0: port 2(bridge_slave_1) entered disabled state [ 664.861319][T20231] bridge_slave_1: entered allmulticast mode [ 664.913016][T20231] bridge_slave_1: entered promiscuous mode [ 665.002286][T20379] netlink: 'syz.0.6492': attribute type 3 has an invalid length. [ 665.034005][T20379] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6492'. [ 665.206004][T20231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 665.283932][T20231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 665.440798][T20231] team0: Port device team_slave_0 added [ 665.522816][T20231] team0: Port device team_slave_1 added [ 665.557259][T20385] netlink: 'syz.0.6495': attribute type 11 has an invalid length. [ 665.777466][T20231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 665.784458][T20231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 665.870144][T20231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 665.908952][T20231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 665.932088][T20231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 666.016258][T20231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 666.244589][T20231] hsr_slave_0: entered promiscuous mode [ 666.275685][ T29] audit: type=1326 audit(1724434817.616:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20397 comm="syz.1.6500" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0d8c979e79 code=0x0 [ 666.298647][T20231] hsr_slave_1: entered promiscuous mode [ 666.346955][T20231] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 666.369325][T20231] Cannot create hsr debugfs directory [ 667.725545][ T5269] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 667.982528][ T5269] usb 2-1: New USB device found, idVendor=0856, idProduct=ac31, bcdDevice=93.1e [ 667.995283][ T5269] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.024825][ T5269] usb 2-1: Product: syz [ 668.029070][ T5269] usb 2-1: Manufacturer: syz [ 668.036387][ T5269] usb 2-1: SerialNumber: syz [ 668.063562][ T5269] usb 2-1: config 0 descriptor?? [ 668.129603][T20231] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 668.166702][ T25] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 668.170253][T20231] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 668.218904][T20231] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 668.259185][T20231] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 668.375288][ T25] usb 5-1: Using ep0 maxpacket: 32 [ 668.386116][ T9] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 668.390971][ T25] usb 5-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 668.428535][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.475535][ T25] usb 5-1: config 0 descriptor?? [ 668.504036][ T25] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 668.615445][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 668.630751][T20231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 668.647085][ T9] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 668.675761][ T9] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 668.708221][ T9] usb 3-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 668.733980][T20231] 8021q: adding VLAN 0 to HW filter on device team0 [ 668.747061][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.786819][ T2943] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.794059][ T2943] bridge0: port 1(bridge_slave_0) entered forwarding state [ 668.837428][ T2943] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.844662][ T2943] bridge0: port 2(bridge_slave_1) entered forwarding state [ 668.870323][ T5269] mos7840 2-1:0.0: required endpoints missing [ 668.906539][ T5269] usb 2-1: USB disconnect, device number 41 [ 669.222567][ T9] uclogic 0003:28BD:0075.003B: interface is invalid, ignoring [ 669.349277][ T25] gspca_sunplus: reg_w_riv err -71 [ 669.356703][ T25] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 669.387797][ T25] usb 5-1: USB disconnect, device number 56 [ 669.477545][ T5269] usb 3-1: USB disconnect, device number 60 [ 669.517948][T20231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 669.685646][T20231] veth0_vlan: entered promiscuous mode [ 669.721823][T20231] veth1_vlan: entered promiscuous mode [ 669.808037][T20231] veth0_macvtap: entered promiscuous mode [ 669.839840][T20231] veth1_macvtap: entered promiscuous mode [ 669.899738][T20231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 669.944822][T20231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 669.964880][T20231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 669.984873][T20231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.015968][T20231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 670.045841][T20231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.085791][T20231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 670.134923][T20231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.164878][T20231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 670.201145][T20231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.234829][T20231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 670.255961][T20231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.287528][T20231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 670.314864][T20231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.354940][T20231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 670.376166][T20231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.404848][T20231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 670.424095][T20231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.456611][T20231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 670.506457][T20231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 670.534923][T20231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.574872][T20231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 670.595519][ T25] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 670.611334][T20231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.635872][T20231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 670.671437][T20231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.696114][T20231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 670.719884][T20231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.753949][T20231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 670.795608][T20231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.827229][T20231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 670.838049][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 670.867633][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 670.879103][T20231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.904865][ T25] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 670.918231][T20231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 670.935839][ T25] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 670.945665][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.964830][T20231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 670.965768][ T25] usb 3-1: config 0 descriptor?? [ 670.981342][T20470] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 671.006282][T20231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 671.045441][T20231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 671.080242][T20231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 671.138124][T20231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 671.198570][T20231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 671.253933][T20231] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.273276][T20231] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.293733][T20231] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.303371][T20231] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.426582][ T25] plantronics 0003:047F:FFFF.003C: unknown main item tag 0xd [ 671.457524][ T25] plantronics 0003:047F:FFFF.003C: No inputs registered, leaving [ 671.507399][ T25] plantronics 0003:047F:FFFF.003C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 671.595166][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 671.603108][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 671.705463][T12290] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 671.724104][T12290] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 671.848446][ T25] usb 3-1: USB disconnect, device number 61 [ 673.071316][T20542] batadv0: entered promiscuous mode [ 673.091728][T20542] batadv_slave_0: entered promiscuous mode [ 673.110616][T20542] batadv_slave_0: left promiscuous mode [ 673.137592][T20542] batadv0: left promiscuous mode [ 673.907924][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.030534][T20562] gretap1: entered promiscuous mode [ 674.459718][T20576] input: syz0 as /devices/virtual/input/input63 [ 674.493955][T20576] input: failed to attach handler leds to device input63, error: -6 [ 674.583798][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.614930][ T5270] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 674.759312][ T5233] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 674.774882][ T5233] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 674.777324][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.798715][ T5233] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 674.809116][ T5233] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 674.819285][ T5233] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 674.826924][ T5233] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 674.838635][ T5270] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 674.850655][ T5270] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 674.863822][ T5270] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 674.874177][ T5270] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.894206][ T5270] usb 1-1: config 0 descriptor?? [ 675.057924][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.366388][ T5270] plantronics 0003:047F:FFFF.003D: unknown main item tag 0x0 [ 675.482199][ T5270] plantronics 0003:047F:FFFF.003D: No inputs registered, leaving [ 675.590928][ T5270] plantronics 0003:047F:FFFF.003D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 675.701630][ T5270] usb 1-1: USB disconnect, device number 61 [ 675.724232][T20580] chnl_net:caif_netlink_parms(): no params data found [ 675.839136][ T12] bridge_slave_1: left allmulticast mode [ 675.852989][ T12] bridge_slave_1: left promiscuous mode [ 675.878036][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 675.964309][ T12] bridge_slave_0: left allmulticast mode [ 675.983196][ T12] bridge_slave_0: left promiscuous mode [ 676.000117][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.648817][ T29] audit: type=1400 audit(1724434827.996:521): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=20608 comm="syz.4.6584" daddr=224.0.0.1 [ 676.915349][ T5233] Bluetooth: hci0: command tx timeout [ 677.405404][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 677.438417][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 677.458750][ T12] bond0 (unregistering): Released all slaves [ 678.122611][T20580] bridge0: port 1(bridge_slave_0) entered blocking state [ 678.130443][T20580] bridge0: port 1(bridge_slave_0) entered disabled state [ 678.150303][T20580] bridge_slave_0: entered allmulticast mode [ 678.159248][T20580] bridge_slave_0: entered promiscuous mode [ 678.329512][T20580] bridge0: port 2(bridge_slave_1) entered blocking state [ 678.362273][T20580] bridge0: port 2(bridge_slave_1) entered disabled state [ 678.366704][T20643] netlink: 'syz.1.6594': attribute type 3 has an invalid length. [ 678.386428][T20580] bridge_slave_1: entered allmulticast mode [ 678.406829][T20643] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.6594'. [ 678.406881][T20580] bridge_slave_1: entered promiscuous mode [ 678.608472][T20580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 678.693662][ T12] hsr_slave_0: left promiscuous mode [ 678.738294][ T12] hsr_slave_1: left promiscuous mode [ 678.776712][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 678.784219][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 678.826835][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 678.842063][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 678.868655][T20652] input: syz0 as /devices/virtual/input/input64 [ 678.971792][ T12] veth1_macvtap: left promiscuous mode [ 678.991778][ T12] veth0_macvtap: left promiscuous mode [ 678.996628][ T5233] Bluetooth: hci0: command tx timeout [ 679.023562][ T12] veth1_vlan: left promiscuous mode [ 679.062806][ T12] veth0_vlan: left promiscuous mode [ 679.486339][T20667] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6607'. [ 679.584875][ T5266] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 679.788914][ T5266] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 679.835178][ T5266] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.854915][ T5266] usb 3-1: Product: syz [ 679.859134][ T5266] usb 3-1: Manufacturer: syz [ 679.894841][ T5266] usb 3-1: SerialNumber: syz [ 679.905319][ T5266] usb 3-1: config 0 descriptor?? [ 680.132651][ T5266] hso 3-1:0.0: Failed to find BULK IN ep [ 680.156274][ T5266] usb-storage 3-1:0.0: USB Mass Storage device detected [ 680.412212][ T5266] usb 3-1: USB disconnect, device number 62 [ 680.519152][T20691] input: syz1 as /devices/virtual/input/input65 [ 680.949440][T20701] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6619'. [ 681.075398][ T5233] Bluetooth: hci0: command tx timeout [ 681.609942][ T12] team0 (unregistering): Port device team_slave_1 removed [ 681.821528][ T12] team0 (unregistering): Port device team_slave_0 removed [ 682.900521][T20726] Bluetooth: MGMT ver 1.23 [ 683.155507][ T5233] Bluetooth: hci0: command tx timeout [ 683.580533][T20580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 683.832479][T20580] team0: Port device team_slave_0 added [ 683.881321][T20580] team0: Port device team_slave_1 added [ 684.127999][T20580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 684.150832][T20580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 684.235478][T20580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 684.304403][T20580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 684.335473][T20580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 684.425464][T20580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 684.445710][T20751] input: syz0 as /devices/virtual/input/input67 [ 684.462346][T20751] input: failed to attach handler leds to device input67, error: -6 [ 684.780006][T20580] hsr_slave_0: entered promiscuous mode [ 684.814538][T20580] hsr_slave_1: entered promiscuous mode [ 684.837693][T20580] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 684.855863][T20580] Cannot create hsr debugfs directory [ 685.109215][T20772] input: syz1 as /devices/virtual/input/input68 [ 686.363363][T20580] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 686.388575][T20580] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 686.409186][T20580] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 686.430030][T20580] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 686.543492][T20785] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 686.579743][T20785] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 686.600297][T20804] netlink: 'syz.0.6663': attribute type 3 has an invalid length. [ 686.625605][ T5267] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 686.740818][T20580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 686.798105][T20580] 8021q: adding VLAN 0 to HW filter on device team0 [ 686.851148][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 686.858377][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 686.867561][ T5267] usb 2-1: Using ep0 maxpacket: 16 [ 686.894221][ T5267] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 686.925298][ T5267] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 686.947412][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 686.954625][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 686.975951][ T5267] usb 2-1: config 0 descriptor?? [ 686.997342][ T5267] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 687.690376][T20580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 687.913847][T20580] veth0_vlan: entered promiscuous mode [ 687.976521][T20580] veth1_vlan: entered promiscuous mode [ 688.089530][ T25] usb 2-1: USB disconnect, device number 42 [ 688.133725][T20838] netlink: 'syz.4.6677': attribute type 10 has an invalid length. [ 688.206116][T20838] geneve0: entered promiscuous mode [ 688.248187][T20838] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 688.310354][T20580] veth0_macvtap: entered promiscuous mode [ 688.333625][T20580] veth1_macvtap: entered promiscuous mode [ 688.416295][T20580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 688.466722][T20580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.508530][T20580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 688.558794][T20580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.585772][T20580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 688.625203][T20580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.659842][T20580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 688.672261][T20850] ebt_among: src integrity fail: 300 [ 688.707589][T20580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.772698][T20580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 688.799920][T20580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.836749][T20580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 688.878033][T20580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.905182][T20580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 688.925292][T20580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 688.964876][T20580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 688.988388][T20580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.015188][T20580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 689.035535][T20580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.057060][T20580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 689.130711][T20580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 689.165471][T20580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.195893][T20580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 689.231445][T20580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.266295][T20580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 689.297766][T20580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.325256][T20580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 689.355272][T20580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.389019][T20580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 689.425802][T20580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.441918][T20580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 689.471155][T20580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.506803][T20580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 689.543201][T20580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.576899][T20580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 689.614638][T20580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.655463][T20580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 689.674835][T20580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 689.709991][T20580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 689.771600][T20580] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.791401][T20580] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.822450][T20580] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.853391][T20580] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 689.955651][ T5268] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 690.122768][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 690.153124][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 690.172023][ T5268] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 690.235601][ T5268] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 690.277737][ T2556] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 690.278263][ T5268] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 690.305063][ T2556] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 690.335681][ T5268] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 690.379071][ T5268] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 690.404103][ T5268] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.453052][ T5268] usb 1-1: config 0 descriptor?? [ 690.576959][T20900] loop2: detected capacity change from 0 to 7 [ 690.620180][T20900] Dev loop2: unable to read RDB block 7 [ 690.657342][T20900] loop2: AHDI p1 p3 p4 [ 690.675136][T20900] loop2: partition table partially beyond EOD, truncated [ 690.695773][T20900] loop2: p1 start 2048 is beyond EOD, truncated [ 690.702304][T20900] loop2: p3 size 16779293 extends beyond EOD, truncated [ 690.887532][ T5268] plantronics 0003:047F:FFFF.003E: unknown main item tag 0x0 [ 690.922881][ T5268] plantronics 0003:047F:FFFF.003E: unknown main item tag 0x0 [ 690.947914][ T5268] plantronics 0003:047F:FFFF.003E: unknown main item tag 0x0 [ 690.966580][ T5268] plantronics 0003:047F:FFFF.003E: unknown main item tag 0x0 [ 690.974467][ T5268] plantronics 0003:047F:FFFF.003E: unknown main item tag 0x0 [ 691.025283][ T5268] plantronics 0003:047F:FFFF.003E: unknown main item tag 0x0 [ 691.035891][ T5268] plantronics 0003:047F:FFFF.003E: unknown main item tag 0x0 [ 691.053663][ T5268] plantronics 0003:047F:FFFF.003E: unknown main item tag 0x0 [ 691.078755][ T5268] plantronics 0003:047F:FFFF.003E: unknown main item tag 0x0 [ 691.108169][ T5268] plantronics 0003:047F:FFFF.003E: unknown main item tag 0x0 [ 691.139435][ T5268] plantronics 0003:047F:FFFF.003E: No inputs registered, leaving [ 691.205746][ T5268] plantronics 0003:047F:FFFF.003E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 691.263134][ T5268] usb 1-1: USB disconnect, device number 62 [ 691.294081][T20920] input: syz0 as /devices/virtual/input/input69 [ 691.534696][ T941] kernel write not supported for file /snd/seq (pid: 941 comm: kworker/1:2) [ 691.993254][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.329578][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.568375][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.762620][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.904508][T20939] pim6reg1: entered promiscuous mode [ 692.932882][T20939] pim6reg1: entered allmulticast mode [ 693.058796][ T5266] psmouse serio4: Failed to reset mouse on : -5 [ 693.067666][T20944] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000) [ 693.285652][ T35] bridge_slave_1: left allmulticast mode [ 693.305499][ T35] bridge_slave_1: left promiscuous mode [ 693.311229][ T29] audit: type=1400 audit(1724434844.656:522): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=20945 comm="syz.1.6722" dest=20000 [ 693.345364][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 693.410187][ T35] bridge_slave_0: left allmulticast mode [ 693.428050][ T35] bridge_slave_0: left promiscuous mode [ 693.450344][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 693.630330][T17283] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 693.643855][T17283] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 693.654538][T17283] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 693.664303][T17283] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 693.673430][T17283] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 693.697935][T17283] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 693.873886][ T29] audit: type=1326 audit(1724434845.216:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=20959 comm="syz.0.6727" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2f03f79e79 code=0x0 [ 694.644830][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 695.155550][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 695.164289][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 695.334896][ T941] kernel write not supported for file /input/event2 (pid: 941 comm: kworker/1:2) [ 695.751103][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 695.795254][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 695.797126][ T5233] Bluetooth: hci0: command tx timeout [ 695.855139][ T35] bond0 (unregistering): Released all slaves [ 695.908666][T20980] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6735'. [ 696.015327][T20958] netlink: 'syz.1.6726': attribute type 4 has an invalid length. [ 696.065351][T20958] netlink: 17 bytes leftover after parsing attributes in process `syz.1.6726'. [ 696.656827][ T5266] misc userio: Buffer overflowed, userio client isn't keeping up [ 696.816173][ T35] hsr_slave_0: left promiscuous mode [ 696.834271][ T35] hsr_slave_1: left promiscuous mode [ 696.859095][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 696.895122][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 696.917999][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 696.928345][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 697.029696][ T35] veth1_macvtap: left promiscuous mode [ 697.045845][ T35] veth0_macvtap: left promiscuous mode [ 697.051553][ T35] veth1_vlan: left promiscuous mode [ 697.068144][ T35] veth0_vlan: left promiscuous mode [ 697.874903][ T5233] Bluetooth: hci0: command tx timeout [ 697.950290][ T5266] input: PS/2 Generic Mouse as /devices/serio4/input/input70 [ 698.175096][ T5266] psmouse serio4: Failed to enable mouse on [ 698.855810][ T29] audit: type=1326 audit(1724434850.186:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21014 comm="syz.2.6750" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f54beb79e79 code=0x0 [ 698.886259][ T35] team0 (unregistering): Port device team_slave_1 removed [ 699.043733][ T35] team0 (unregistering): Port device team_slave_0 removed [ 699.956823][ T5233] Bluetooth: hci0: command tx timeout [ 701.223328][T20955] chnl_net:caif_netlink_parms(): no params data found [ 701.330198][T21032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6757'. [ 701.827326][T20955] bridge0: port 1(bridge_slave_0) entered blocking state [ 701.834514][T20955] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.871791][T20955] bridge_slave_0: entered allmulticast mode [ 701.906938][T20955] bridge_slave_0: entered promiscuous mode [ 701.945477][T20955] bridge0: port 2(bridge_slave_1) entered blocking state [ 701.952738][T20955] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.985985][T20955] bridge_slave_1: entered allmulticast mode [ 702.015647][T20955] bridge_slave_1: entered promiscuous mode [ 702.036433][ T5233] Bluetooth: hci0: command tx timeout [ 702.075496][ T9] kernel read not supported for file /newroot/981/file0 (pid: 9 comm: kworker/0:1) [ 702.187090][T20955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 702.231794][T20955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 702.430841][T20955] team0: Port device team_slave_0 added [ 702.468379][T20955] team0: Port device team_slave_1 added [ 702.609917][T21067] netlink: 'syz.0.6769': attribute type 1 has an invalid length. [ 702.645424][T21067] netlink: 'syz.0.6769': attribute type 2 has an invalid length. [ 702.678180][T20955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 702.714885][T20955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 702.824892][T20955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 702.867211][T20955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 702.874645][T20955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 702.994929][T20955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 703.145014][ T9] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 703.176455][T20955] hsr_slave_0: entered promiscuous mode [ 703.212612][T20955] hsr_slave_1: entered promiscuous mode [ 703.245156][T20955] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 703.253545][T20955] Cannot create hsr debugfs directory [ 703.351378][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 703.374792][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 703.417813][ T9] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 703.448063][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 703.482112][ T9] usb 1-1: SerialNumber: syz [ 703.718717][ T9] usb 1-1: 0:2 : does not exist [ 703.740850][ T29] audit: type=1400 audit(1724434855.086:525): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=21080 comm="syz.1.6775" dest=20000 [ 703.746295][ T9] usb 1-1: 5:0: cannot get min/max values for control 4 (id 5) [ 703.850670][ T9] usb 1-1: USB disconnect, device number 63 [ 704.011410][T21071] netlink: 'syz.4.6772': attribute type 4 has an invalid length. [ 704.030166][T21071] netlink: 17 bytes leftover after parsing attributes in process `syz.4.6772'. [ 704.699319][ T29] audit: type=1326 audit(1724434856.046:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21098 comm="syz.0.6781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f03f79e79 code=0x7ffc0000 [ 704.771388][ T29] audit: type=1326 audit(1724434856.046:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21098 comm="syz.0.6781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f03f79e79 code=0x7ffc0000 [ 704.850179][ T29] audit: type=1326 audit(1724434856.076:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21098 comm="syz.0.6781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f2f03f79e79 code=0x7ffc0000 [ 704.939647][ T29] audit: type=1326 audit(1724434856.076:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21098 comm="syz.0.6781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f03f79e79 code=0x7ffc0000 [ 704.947757][T20955] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 705.008346][ T29] audit: type=1326 audit(1724434856.076:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21098 comm="syz.0.6781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f03f79e79 code=0x7ffc0000 [ 705.035999][T20955] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 705.078483][ T29] audit: type=1326 audit(1724434856.086:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21098 comm="syz.0.6781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f2f03f79e79 code=0x7ffc0000 [ 705.100073][ C1] vkms_vblank_simulate: vblank timer overrun [ 705.101197][T20955] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 705.140128][T20955] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 705.186491][ T29] audit: type=1326 audit(1724434856.086:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21098 comm="syz.0.6781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f03f79e79 code=0x7ffc0000 [ 705.262455][ T29] audit: type=1326 audit(1724434856.086:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21098 comm="syz.0.6781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f03f79e79 code=0x7ffc0000 [ 705.284083][ C1] vkms_vblank_simulate: vblank timer overrun [ 705.383035][ T29] audit: type=1326 audit(1724434856.086:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21098 comm="syz.0.6781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f2f03f79e79 code=0x7ffc0000 [ 705.460568][ T29] audit: type=1326 audit(1724434856.086:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21098 comm="syz.0.6781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2f03f79e79 code=0x7ffc0000 [ 705.463107][T20955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 705.482524][ C1] vkms_vblank_simulate: vblank timer overrun [ 705.645347][T20955] 8021q: adding VLAN 0 to HW filter on device team0 [ 705.690168][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 705.697422][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 705.764596][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 705.771973][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 706.065028][ T5266] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 706.276822][ T5266] usb 3-1: Using ep0 maxpacket: 16 [ 706.283919][ T5266] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 706.324840][ T5266] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 706.364887][ T5266] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 706.407746][ T5266] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 706.449078][ T5266] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.487291][ T5266] usb 3-1: config 0 descriptor?? [ 706.580667][T20955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 706.762723][T20955] veth0_vlan: entered promiscuous mode [ 706.813996][T20955] veth1_vlan: entered promiscuous mode [ 706.924443][ T5266] microsoft 0003:045E:07DA.003F: unknown main item tag 0x0 [ 706.924484][T20955] veth0_macvtap: entered promiscuous mode [ 706.945314][ T5266] microsoft 0003:045E:07DA.003F: ignoring exceeding usage max [ 706.980374][ T5266] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.003F/input/input71 [ 707.013362][T20955] veth1_macvtap: entered promiscuous mode [ 707.057938][T20955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 707.099989][T20955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 707.123354][ T5266] microsoft 0003:045E:07DA.003F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 707.164879][T20955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 707.196649][T20955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 707.198777][ T5266] usb 3-1: USB disconnect, device number 63 [ 707.245491][T20955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 707.283769][T20955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 707.309372][T21150] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.6803'. [ 707.316807][T20955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 707.355261][T20955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 707.386310][T20955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 707.425846][T20955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 707.465409][T20955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 707.495132][T20955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 707.510126][T20955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 707.532098][T20955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 707.553900][T20955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 707.569188][T20955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 707.579519][T20955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 707.590666][T20955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 707.663786][T20955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 707.684919][T21152] netlink: 'syz.4.6804': attribute type 10 has an invalid length. [ 707.693350][T21152] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6804'. [ 707.716781][T21152] geneve0: left promiscuous mode [ 707.733043][T21152] bond0: (slave geneve0): Releasing backup interface [ 707.818158][T21152] team0: Port device geneve0 added [ 707.831410][T20955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 707.868907][T20955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 707.904164][T20955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 707.938994][T20955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 707.983522][T20955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 708.012857][T20955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 708.037721][T20955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 708.059206][T20955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 708.078306][T20955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 708.099398][T20955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 708.136021][T20955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 708.169972][T20955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 708.203816][T20955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 708.237925][T20955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 708.264955][T20955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 708.288041][T20955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 708.309507][T20955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 708.339525][T20955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 708.381241][T20955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 708.482704][T20955] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.534805][T20955] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.575218][T20955] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.583977][T20955] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 708.845190][ T5266] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 709.060795][ T5266] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 709.060830][ T5266] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.110016][ T5266] usb 1-1: config 0 descriptor?? [ 709.132300][ T5266] cp210x 1-1:0.0: cp210x converter detected [ 709.204998][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 709.212891][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 709.322482][ T2575] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 709.342352][ T2575] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 709.540769][ T5266] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 709.578752][ T5266] usb 1-1: cp210x converter now attached to ttyUSB0 [ 709.782573][ T5266] usb 1-1: USB disconnect, device number 64 [ 709.806023][ T5266] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 709.830024][ T5266] cp210x 1-1:0.0: device disconnected [ 710.345541][ T5269] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 710.559683][ T5269] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 710.569645][ T5269] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.578353][ T5269] usb 3-1: Product: syz [ 710.582688][ T5269] usb 3-1: Manufacturer: syz [ 710.604495][ T5269] usb 3-1: SerialNumber: syz [ 710.634526][ T5269] usb 3-1: config 0 descriptor?? [ 710.657770][ T5269] ch341 3-1:0.0: ch341-uart converter detected [ 710.785478][ T944] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 710.859429][ T2943] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 710.995070][ T944] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 711.056059][ T944] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 711.074983][ T944] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.106783][ T944] usb 1-1: config 0 descriptor?? [ 711.117988][ T944] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 711.381065][ T2943] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.528499][ T2943] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 711.581857][T21215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 711.675598][ T5269] usb 3-1: failed to send control message: -71 [ 711.681841][ T5269] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 711.685187][T21215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 711.715910][ T5269] usb 3-1: USB disconnect, device number 64 [ 711.736389][ T5269] ch341 3-1:0.0: device disconnected [ 711.806687][ T5328] usb 1-1: USB disconnect, device number 65 [ 711.817215][ T2943] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 712.268492][ T2943] bridge_slave_1: left allmulticast mode [ 712.274270][ T2943] bridge_slave_1: left promiscuous mode [ 712.287885][ T5229] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 712.304431][ T5229] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 712.314542][ T2943] bridge0: port 2(bridge_slave_1) entered disabled state [ 712.335050][ T5229] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 712.348405][ T5229] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 712.376795][ T5229] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 712.385778][ T5229] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 712.396725][ T2943] bridge_slave_0: left allmulticast mode [ 712.463315][ T2943] bridge_slave_0: left promiscuous mode [ 712.498762][ T2943] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.855612][ T5328] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 713.057478][ T5328] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 713.110403][ T5328] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 713.151495][ T5328] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 713.172585][ T5328] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 713.205702][ T5328] usb 1-1: SerialNumber: syz [ 713.447625][ T5328] usb 1-1: 0:2 : does not exist [ 713.465972][ T5328] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 713.491736][ T5328] usb 1-1: 5:0: cannot get min/max values for control 5 (id 5) [ 713.549032][ T5328] usb 1-1: USB disconnect, device number 66 [ 713.592299][T21256] CUSE: info not properly terminated [ 713.720385][ T5229] Bluetooth: hci5: command 0x041b tx timeout [ 713.948154][ T2943] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 713.976917][ T2943] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 714.002190][ T2943] bond0 (unregistering): Released all slaves [ 714.033921][T21242] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6840'. [ 714.435378][ T5233] Bluetooth: hci0: command tx timeout [ 714.696061][T21272] Bluetooth: MGMT ver 1.23 [ 714.984193][ T2943] hsr_slave_0: left promiscuous mode [ 715.003459][ T2943] hsr_slave_1: left promiscuous mode [ 715.027887][ T2943] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 715.053590][ T2943] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 715.061143][ T5266] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 715.097459][ T2943] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 715.106563][ T2943] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 715.180583][ T2943] veth1_macvtap: left promiscuous mode [ 715.205014][ T2943] veth0_macvtap: left promiscuous mode [ 715.215181][ T2943] veth1_vlan: left promiscuous mode [ 715.234689][ T2943] veth0_vlan: left promiscuous mode [ 715.266894][ T5266] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 715.299351][ T5266] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 715.337196][ T5266] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 715.371515][ T5266] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 715.417790][ T5266] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 715.446297][ T5266] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.473156][T21291] smk_cipso_doi:695 remove rc = -2 [ 715.483785][ T5266] usb 3-1: config 0 descriptor?? [ 715.914006][ T5266] plantronics 0003:047F:FFFF.0040: unknown main item tag 0x0 [ 715.963737][ T5266] plantronics 0003:047F:FFFF.0040: No inputs registered, leaving [ 715.997519][ T5266] plantronics 0003:047F:FFFF.0040: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 716.262360][ T5266] usb 3-1: USB disconnect, device number 65 [ 716.515527][ T5233] Bluetooth: hci0: command tx timeout [ 717.332657][ T2943] team0 (unregistering): Port device team_slave_1 removed [ 717.480640][ T2943] team0 (unregistering): Port device team_slave_0 removed [ 718.595208][ T5233] Bluetooth: hci0: command tx timeout [ 719.330052][T21304] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6865'. [ 719.339383][T21304] netlink: 'syz.0.6865': attribute type 7 has an invalid length. [ 719.355686][T21304] netlink: 'syz.0.6865': attribute type 8 has an invalid length. [ 719.363767][T21304] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6865'. [ 719.403501][T21304] gretap0: entered promiscuous mode [ 719.431894][T21304] batadv_slave_1: entered promiscuous mode [ 719.460221][T21304] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 719.477711][T21304] Cannot create hsr debugfs directory [ 719.723890][T21347] Dead loop on virtual device ip6_vti0, fix it urgently! [ 719.734999][T21347] Dead loop on virtual device ip6_vti0, fix it urgently! [ 719.743670][T21347] Dead loop on virtual device ip6_vti0, fix it urgently! [ 719.752031][T21347] Dead loop on virtual device ip6_vti0, fix it urgently! [ 719.760633][T21347] Dead loop on virtual device ip6_vti0, fix it urgently! [ 719.769322][T21347] Dead loop on virtual device ip6_vti0, fix it urgently! [ 719.946112][T21229] chnl_net:caif_netlink_parms(): no params data found [ 719.965431][ T5328] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 720.171926][ T5328] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 720.218746][ T5328] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 720.247316][T21363] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 720.288600][ T5328] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 720.313805][T21229] bridge0: port 1(bridge_slave_0) entered blocking state [ 720.332193][ T5328] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 720.347203][T21363] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 720.365629][T21229] bridge0: port 1(bridge_slave_0) entered disabled state [ 720.388972][T21229] bridge_slave_0: entered allmulticast mode [ 720.406014][ T5328] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 720.418202][T21229] bridge_slave_0: entered promiscuous mode [ 720.425313][ T5328] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 720.448032][ T5328] usb 3-1: Manufacturer: syz [ 720.466362][ T5328] usb 3-1: config 0 descriptor?? [ 720.559184][T21229] bridge0: port 2(bridge_slave_1) entered blocking state [ 720.594524][T21229] bridge0: port 2(bridge_slave_1) entered disabled state [ 720.623218][T21229] bridge_slave_1: entered allmulticast mode [ 720.645692][T21229] bridge_slave_1: entered promiscuous mode [ 720.675201][ T5233] Bluetooth: hci0: command tx timeout [ 720.754911][ T5267] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 720.756686][T21370] input: syz0 as /devices/virtual/input/input73 [ 720.792196][T21229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 720.840529][T21229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 720.901310][ T5328] appleir 0003:05AC:8243.0041: unknown main item tag 0x0 [ 720.922212][ T5328] appleir 0003:05AC:8243.0041: No inputs registered, leaving [ 720.951849][ T5328] appleir 0003:05AC:8243.0041: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 720.989878][ T5267] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 721.022250][ T5267] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 721.034328][T21229] team0: Port device team_slave_0 added [ 721.053432][ T5267] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 721.061865][T21229] team0: Port device team_slave_1 added [ 721.077510][ T5267] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 721.109191][ T5267] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 721.134862][ T5267] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 721.192629][ T5267] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 721.216747][ T5267] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.236538][ T5267] usb 1-1: Product: syz [ 721.242865][ T5267] usb 1-1: Manufacturer: syz [ 721.255528][ T5267] usb 1-1: SerialNumber: syz [ 721.266290][ T941] usb 3-1: USB disconnect, device number 66 [ 721.542686][T21229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 721.554379][T21229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 721.593898][T21229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 721.737608][T21229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 721.757024][T21229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 721.853023][T21229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 722.099841][T21229] hsr_slave_0: entered promiscuous mode [ 722.136433][T21229] hsr_slave_1: entered promiscuous mode [ 722.153431][T21229] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 722.175565][T21229] Cannot create hsr debugfs directory [ 722.343994][ T5267] cdc_ncm 1-1:1.0: SET_NTB_FORMAT failed [ 722.389519][ T5267] cdc_ncm 1-1:1.0: bind() failure [ 722.414229][ T5267] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 722.447068][ T5267] cdc_ncm 1-1:1.1: bind() failure [ 722.475794][ T5267] usb 1-1: USB disconnect, device number 67 [ 723.347163][ T5328] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 723.561206][T21229] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 723.582600][T21229] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 723.599775][ T5328] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 723.618565][ T5328] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 723.631877][T21229] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 723.663790][T21229] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 723.664781][ T5328] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 723.715349][ T5269] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 723.726243][ T5328] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 723.765513][ T5328] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 723.808866][ T5328] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 723.839519][ T5328] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.876355][ T5328] usb 2-1: config 0 descriptor?? [ 723.912234][T21411] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 723.926522][ T5269] usb 3-1: Using ep0 maxpacket: 32 [ 723.947513][ T5269] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 723.969693][ T5269] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 723.999487][ T5269] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 724.021437][T21229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 724.029893][ T5269] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 724.069730][ T5269] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 724.092434][T21229] 8021q: adding VLAN 0 to HW filter on device team0 [ 724.108056][ T5269] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 724.142705][ T2943] bridge0: port 1(bridge_slave_0) entered blocking state [ 724.149949][ T2943] bridge0: port 1(bridge_slave_0) entered forwarding state [ 724.175475][ T5269] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 724.207994][ T5269] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 724.218132][T21431] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 724.256605][ T5269] usb 3-1: config 0 descriptor?? [ 724.267067][ T2943] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.274392][ T2943] bridge0: port 2(bridge_slave_1) entered forwarding state [ 724.350645][T21431] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 724.431186][ T5328] plantronics 0003:047F:FFFF.0042: unknown main item tag 0xd [ 724.468089][ T5328] plantronics 0003:047F:FFFF.0042: No inputs registered, leaving [ 724.519481][ T5269] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 67 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 724.553840][T21229] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 724.565680][ T5328] plantronics 0003:047F:FFFF.0042: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 724.769239][ T944] usb 3-1: USB disconnect, device number 67 [ 724.784588][ T944] usblp0: removed [ 724.841464][ T5328] usb 2-1: USB disconnect, device number 43 [ 725.005338][T21229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 725.133959][T21229] veth0_vlan: entered promiscuous mode [ 725.176165][T21229] veth1_vlan: entered promiscuous mode [ 725.268884][T21229] veth0_macvtap: entered promiscuous mode [ 725.297330][T21229] veth1_macvtap: entered promiscuous mode [ 725.349362][T21229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 725.375348][T21229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 725.397743][T21229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 725.445775][T21229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 725.466169][T21229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 725.493634][T21229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 725.532920][T21229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 725.572004][T21229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 725.604247][T21229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 725.637870][T21229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 725.669634][T21229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 725.705572][T21229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 725.739875][T21229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 725.775159][T21229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 725.809229][T21229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 725.844254][T21229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 725.875636][T21229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 725.912935][T21229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 725.947007][T21229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 726.002963][T21229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 726.045826][T21229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 726.072349][T21229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 726.096300][T21229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 726.134049][T21229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 726.169288][T21229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 726.194116][T21229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 726.273806][T21229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 726.303198][T21229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 726.333262][T21229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 726.353895][T21229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 726.393008][T21229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 726.429301][T21229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 726.467508][T21229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 726.501447][T21229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 726.530909][T21229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 726.551930][T21229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 726.563849][T21229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 726.607764][T21229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 726.650102][T21453] netlink: 100 bytes leftover after parsing attributes in process `syz.2.6927'. [ 726.671288][T21229] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.716708][T21229] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.736228][T21229] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 726.765121][T21229] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.142954][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 727.163151][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 727.309099][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 727.364666][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 728.714294][ T61] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.277430][ T61] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.447748][ T61] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 729.618357][ T61] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.006130][ T61] bridge_slave_1: left allmulticast mode [ 730.024857][ T61] bridge_slave_1: left promiscuous mode [ 730.030780][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 730.151148][ T61] bridge_slave_0: left allmulticast mode [ 730.158229][ T61] bridge_slave_0: left promiscuous mode [ 730.181342][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 730.495417][ T5229] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 730.511599][ T5229] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 730.522075][ T5229] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 730.540697][ T5229] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 730.562443][ T5229] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 730.571434][ T5229] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 731.846120][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 731.891591][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 731.935944][ T61] bond0 (unregistering): Released all slaves [ 732.675466][ T5233] Bluetooth: hci0: command tx timeout [ 732.717772][ T61] hsr_slave_0: left promiscuous mode [ 732.820009][ T61] hsr_slave_1: left promiscuous mode [ 732.827689][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 732.865266][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 732.895905][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 732.916298][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 733.001118][ T61] veth1_macvtap: left promiscuous mode [ 733.015578][ T61] veth0_macvtap: left promiscuous mode [ 733.025353][ T61] veth1_vlan: left promiscuous mode [ 733.036213][ T61] veth0_vlan: left promiscuous mode [ 733.155643][ T944] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 733.368598][ T944] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 733.415587][ T944] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 733.455555][ T944] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 733.464673][ T944] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.525975][ T944] usb 2-1: config 0 descriptor?? [ 733.736559][T21572] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 733.787982][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807bfe4800: rx timeout, send abort [ 733.999115][ T944] plantronics 0003:047F:FFFF.0043: No inputs registered, leaving [ 734.046629][ T944] plantronics 0003:047F:FFFF.0043: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 734.075328][ T5328] usb 3-1: new full-speed USB device number 68 using dummy_hcd [ 734.298735][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807bfe4800: abort rx timeout. Force session deactivation [ 734.341061][ T5328] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 734.367774][ T5328] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 734.438700][ T5328] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 734.456032][ C1] sd 0:0:1:0: [sda] tag#4749 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 734.459311][ T944] usb 2-1: USB disconnect, device number 44 [ 734.466638][ C1] sd 0:0:1:0: [sda] tag#4749 CDB: Read(6) 08 00 00 00 85 f0 [ 734.486093][ T5328] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 734.494214][ T5328] usb 3-1: Product: syz [ 734.543181][ T5328] usb 3-1: Manufacturer: syz [ 734.555173][ T5328] usb 3-1: SerialNumber: syz [ 734.582254][T21570] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 734.766030][ T5233] Bluetooth: hci0: command tx timeout [ 735.036726][ T5328] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 735.078191][ T5328] usb 3-1: USB disconnect, device number 68 [ 735.156974][ T61] team0 (unregistering): Port device team_slave_1 removed [ 735.400136][ T61] team0 (unregistering): Port device team_slave_0 removed [ 736.845383][ T5233] Bluetooth: hci0: command tx timeout [ 737.741454][T21627] sp0: Synchronizing with TNC [ 737.782818][T21635] sp0: Found TNC [ 738.017739][T21520] chnl_net:caif_netlink_parms(): no params data found [ 738.604353][T21520] bridge0: port 1(bridge_slave_0) entered blocking state [ 738.616584][T21520] bridge0: port 1(bridge_slave_0) entered disabled state [ 738.634092][T21520] bridge_slave_0: entered allmulticast mode [ 738.649127][T21520] bridge_slave_0: entered promiscuous mode [ 738.672710][T21520] bridge0: port 2(bridge_slave_1) entered blocking state [ 738.691664][T21520] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.699245][T21520] bridge_slave_1: entered allmulticast mode [ 738.707681][T21520] bridge_slave_1: entered promiscuous mode [ 738.829111][T21520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 738.877330][T21520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 738.915707][ T5233] Bluetooth: hci0: command tx timeout [ 738.956462][T21520] team0: Port device team_slave_0 added [ 738.967696][T21520] team0: Port device team_slave_1 added [ 739.019778][T21520] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 739.027436][T21520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 739.085214][T21520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 739.117732][T21520] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 739.135401][T21520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 739.215180][T21520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 739.235578][ T5270] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 739.353657][T21520] hsr_slave_0: entered promiscuous mode [ 739.378880][T21520] hsr_slave_1: entered promiscuous mode [ 739.435755][T21520] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 739.447515][ T5270] usb 2-1: Using ep0 maxpacket: 8 [ 739.460648][T21520] Cannot create hsr debugfs directory [ 739.480244][ T5270] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 739.522176][ T5270] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 739.566964][ T5270] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 739.602444][ T5270] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 739.643152][ T5270] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 739.684841][ T5270] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.986344][ T5270] usb 2-1: GET_CAPABILITIES returned 0 [ 739.998773][ T5270] usbtmc 2-1:16.0: can't read capabilities [ 740.238717][ T944] usb 2-1: USB disconnect, device number 45 [ 740.654900][ T5270] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 740.847021][ T5270] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 740.869343][T21520] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 740.876652][ T5270] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 740.921582][T21520] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 740.921662][ T5270] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 740.959026][T21520] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 740.979503][ T5270] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 741.003093][T21520] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 741.014869][ T5270] usb 3-1: SerialNumber: syz [ 741.252690][ T5270] usb 3-1: 0:2 : does not exist [ 741.269586][ T5270] usb 3-1: unit 118 not found! [ 741.313478][T21520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 741.330563][ T5270] usb 3-1: USB disconnect, device number 69 [ 741.418114][T21520] 8021q: adding VLAN 0 to HW filter on device team0 [ 741.454774][ T2575] bridge0: port 1(bridge_slave_0) entered blocking state [ 741.461941][ T2575] bridge0: port 1(bridge_slave_0) entered forwarding state [ 741.481662][T12290] bridge0: port 2(bridge_slave_1) entered blocking state [ 741.488930][T12290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 742.027369][T21520] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 742.250956][T21520] veth0_vlan: entered promiscuous mode [ 742.293899][T21520] veth1_vlan: entered promiscuous mode [ 742.418328][T21520] veth0_macvtap: entered promiscuous mode [ 742.454187][T21520] veth1_macvtap: entered promiscuous mode [ 742.538947][T21520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 742.578114][T21520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 742.614550][T21520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 742.640546][T21520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 742.668895][T21520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 742.697980][T21520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 742.720352][T21520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 742.747532][T21520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 742.768921][T21520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 742.795276][T21520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 742.819070][T21520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 742.855309][T21520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 742.876808][T21520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 742.902748][T21520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 742.946500][T21520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 742.957715][ T5328] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 742.975513][T21520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 742.999028][T21520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 743.015277][ T5269] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 743.035695][T21520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 743.060556][T21520] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 743.099817][T21520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 743.126378][T21520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 743.145314][ T5328] usb 1-1: Using ep0 maxpacket: 8 [ 743.152269][ T5328] usb 1-1: config 150 has an invalid interface number: 204 but max is 0 [ 743.170866][ T5328] usb 1-1: config 150 has no interface number 0 [ 743.177964][T21520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 743.195789][ T5328] usb 1-1: config 150 interface 204 has no altsetting 0 [ 743.213121][T21520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 743.231506][T21520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 743.243375][ T5328] usb 1-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 743.253331][ T5269] usb 5-1: Using ep0 maxpacket: 32 [ 743.259223][ T5328] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.268337][ T5328] usb 1-1: Product: syz [ 743.272796][T21520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 743.283836][ T5328] usb 1-1: Manufacturer: syz [ 743.289681][ T5328] usb 1-1: SerialNumber: syz [ 743.296267][ T5269] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 743.308438][ T5269] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 743.319239][T21520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 743.332707][T21520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 743.349450][T21520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 743.361815][T21520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 743.373174][ T5269] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 743.384676][ T5269] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 743.405028][ T5269] usb 5-1: Product: syz [ 743.409274][ T5269] usb 5-1: Manufacturer: syz [ 743.425293][T21520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 743.439128][T21520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 743.454149][ T5269] hub 5-1:4.0: USB hub found [ 743.472469][T21520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 743.494281][T21520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 743.515479][T21520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 743.534739][T21520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 743.580535][ T5328] usb 1-1: USB disconnect, device number 68 [ 743.589291][T21520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 743.614006][T21520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 743.628585][T21520] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 744.036248][ T5233] Bluetooth: hci0: command tx timeout [ 745.707412][T21520] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.744801][T21520] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.784740][T21520] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 745.793597][T21520] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 746.098029][ T2943] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 746.113285][T21746] input: syz1 as /devices/virtual/input/input79 [ 746.118797][ T2943] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 746.226230][T12290] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 746.243566][T12290] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 747.007963][ T5267] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 747.229374][ T5267] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 747.238131][ T5269] hub 5-1:4.0: config failed, can't read hub descriptor (err -22) [ 747.274870][ T5267] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.322264][ T5267] usb 2-1: config 0 descriptor?? [ 747.342835][ T5269] usb 5-1: USB disconnect, device number 57 [ 747.367016][ T5267] cp210x 2-1:0.0: cp210x converter detected [ 747.459523][T21760] nullb0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 [ 747.487955][T21748] syz.2.7043 (21748): drop_caches: 2 [ 747.516762][T21760] nullb0: p1 start 2550137942 is beyond EOD, truncated [ 747.565685][T21760] nullb0: p2 start 1455289564 is beyond EOD, truncated [ 747.572605][T21760] nullb0: p3 start 3739684571 is beyond EOD, truncated [ 747.669466][T12290] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 747.676147][T21760] nullb0: p4 start 2591941284 is beyond EOD, truncated [ 747.745793][T21760] nullb0: p5 start 3542642309 is beyond EOD, truncated [ 747.752712][T21760] nullb0: p6 start 669466886 is beyond EOD, truncated [ 747.813863][ T5267] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 747.825443][T21760] nullb0: p7 start 940699973 is beyond EOD, truncated [ 747.832265][T21760] nullb0: p8 start 2784586525 is beyond EOD, truncated [ 747.849685][ T5267] usb 2-1: cp210x converter now attached to ttyUSB0 [ 747.904995][T21760] nullb0: p9 start 718527295 is beyond EOD, truncated [ 747.944893][T21760] nullb0: p10 start 923651512 is beyond EOD, truncated [ 747.964995][T21760] nullb0: p11 start 1282986893 is beyond EOD, truncated [ 747.978044][T12290] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.144162][ T5269] usb 2-1: USB disconnect, device number 46 [ 748.153753][ T5269] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 748.167262][T12290] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.187434][ T5269] cp210x 2-1:0.0: device disconnected [ 748.288735][T12290] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.488049][T12290] bridge_slave_1: left allmulticast mode [ 748.493764][T12290] bridge_slave_1: left promiscuous mode [ 748.513333][T12290] bridge0: port 2(bridge_slave_1) entered disabled state [ 748.535574][T12290] bridge_slave_0: left allmulticast mode [ 748.541270][T12290] bridge_slave_0: left promiscuous mode [ 748.565679][T12290] bridge0: port 1(bridge_slave_0) entered disabled state [ 749.130387][T21775] netlink: 80 bytes leftover after parsing attributes in process `syz.4.7054'. [ 749.685657][ T5229] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 749.699034][ T5229] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 749.733170][ T5229] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 749.751114][ T5229] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 749.766633][ T5229] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 749.795428][ T5229] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 750.562010][T12290] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 750.618723][T12290] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 750.657592][T12290] bond0 (unregistering): Released all slaves [ 751.227911][ T1121] nci: nci_rsp_packet: unsupported rsp opcode 0xf06 [ 751.565331][ T5269] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 751.735781][T21838] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 751.746812][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 751.746828][ T29] audit: type=1400 audit(1724434903.096:538): lsm=SMACK fn=smack_inet_conn_request action=denied subject="?" object="_" requested=w pid=21836 comm="syz.1.7077" saddr=10.1.1.1 daddr=172.20.20.170 dest=20002 [ 751.806582][ T5269] usb 3-1: Using ep0 maxpacket: 8 [ 751.828929][ T5269] usb 3-1: device descriptor read/all, error -71 [ 751.849563][T12290] hsr_slave_0: left promiscuous mode [ 751.859431][T12290] hsr_slave_1: left promiscuous mode [ 751.867148][T12290] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 751.876567][ T5233] Bluetooth: hci0: command tx timeout [ 751.933964][T12290] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 752.010315][T12290] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 752.031226][T12290] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 752.100400][T12290] veth1_macvtap: left promiscuous mode [ 752.111422][T12290] veth0_macvtap: left promiscuous mode [ 752.131952][T12290] veth1_vlan: left promiscuous mode [ 752.150555][T12290] veth0_vlan: left promiscuous mode [ 752.738475][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 753.108295][ T29] audit: type=1400 audit(1724434904.456:539): lsm=SMACK fn=smack_inode_permission action=denied subject="I" object="_" requested=rw pid=21851 comm="syz.4.7083" name="ptyqd" dev="devtmpfs" ino=134 [ 753.127513][ C1] vkms_vblank_simulate: vblank timer overrun [ 753.217447][ T29] audit: type=1400 audit(1724434904.496:540): lsm=SMACK fn=smack_inode_permission action=denied subject="I" object="_" requested=wx pid=21851 comm="syz.4.7083" name="/" dev="mqueue" ino=65604 [ 753.336638][T21856] 9pnet: p9_errstr2errno: server reported unknown error @hQIte [ 753.727870][T21862] input: syz1 as /devices/virtual/input/input80 [ 753.955241][ T5233] Bluetooth: hci0: command tx timeout [ 754.583673][T21859] syz.4.7087: vmalloc error: size 2768896, failed to allocated page array size 5408, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 754.664028][T21859] CPU: 0 UID: 0 PID: 21859 Comm: syz.4.7087 Not tainted 6.11.0-rc4-syzkaller-00143-g3d5f968a177d #0 [ 754.674860][T21859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 754.684963][T21859] Call Trace: [ 754.688262][T21859] [ 754.691209][T21859] dump_stack_lvl+0x241/0x360 [ 754.695915][T21859] ? __pfx_dump_stack_lvl+0x10/0x10 [ 754.701131][T21859] ? __pfx__printk+0x10/0x10 [ 754.705757][T21859] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 754.712207][T21859] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 754.718750][T21859] warn_alloc+0x278/0x410 [ 754.723116][T21859] ? __pfx_warn_alloc+0x10/0x10 [ 754.727995][T21859] ? vb2_vmalloc_alloc+0xf2/0x340 [ 754.733048][T21859] ? __get_vm_area_node+0x23d/0x270 [ 754.738280][T21859] __vmalloc_node_range_noprof+0x6a2/0x1400 [ 754.744401][T21859] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 754.750754][T21859] ? __kasan_kmalloc+0x98/0xb0 [ 754.755552][T21859] ? vb2_vmalloc_alloc+0xb5/0x340 [ 754.760607][T21859] vmalloc_user_noprof+0x74/0x80 [ 754.765561][T21859] ? vb2_vmalloc_alloc+0xf2/0x340 [ 754.770593][T21859] vb2_vmalloc_alloc+0xf2/0x340 [ 754.775506][T21859] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 754.780968][T21859] __vb2_queue_alloc+0xa0f/0x16f0 [ 754.786016][T21859] vb2_core_reqbufs+0xd2e/0x17c0 [ 754.790970][T21859] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 754.796356][T21859] v4l2_m2m_ioctl_reqbufs+0x14e/0x230 [ 754.801735][T21859] __video_do_ioctl+0xc26/0xde0 [ 754.806597][T21859] ? __pfx___video_do_ioctl+0x10/0x10 [ 754.811968][T21859] ? smack_log+0x123/0x540 [ 754.816384][T21859] ? __might_fault+0xc6/0x120 [ 754.821089][T21859] video_usercopy+0x89b/0x1180 [ 754.825875][T21859] ? __pfx___video_do_ioctl+0x10/0x10 [ 754.831255][T21859] ? __pfx_video_usercopy+0x10/0x10 [ 754.836454][T21859] ? smack_file_ioctl+0x2fa/0x3a0 [ 754.841495][T21859] ? __fget_files+0x3f6/0x470 [ 754.846170][T21859] ? __fget_files+0x29/0x470 [ 754.850761][T21859] v4l2_ioctl+0x18c/0x1e0 [ 754.855090][T21859] ? __pfx_v4l2_ioctl+0x10/0x10 [ 754.859949][T21859] __se_sys_ioctl+0xfc/0x170 [ 754.864565][T21859] do_syscall_64+0xf3/0x230 [ 754.869063][T21859] ? clear_bhb_loop+0x35/0x90 [ 754.873735][T21859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.879628][T21859] RIP: 0033:0x7fb677179e79 [ 754.884042][T21859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 754.904077][T21859] RSP: 002b:00007fb677f11038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 754.912487][T21859] RAX: ffffffffffffffda RBX: 00007fb677315f80 RCX: 00007fb677179e79 [ 754.920541][T21859] RDX: 00000000200000c0 RSI: 00000000c0145608 RDI: 0000000000000003 [ 754.928511][T21859] RBP: 00007fb6771e793e R08: 0000000000000000 R09: 0000000000000000 [ 754.936473][T21859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 754.944444][T21859] R13: 0000000000000000 R14: 00007fb677315f80 R15: 00007fff92662aa8 [ 754.952433][T21859] [ 755.116294][T21859] Mem-Info: [ 755.119464][T21859] active_anon:283 inactive_anon:7068 isolated_anon:0 [ 755.119464][T21859] active_file:16323 inactive_file:38438 isolated_file:0 [ 755.119464][T21859] unevictable:768 dirty:172 writeback:0 [ 755.119464][T21859] slab_reclaimable:9920 slab_unreclaimable:111481 [ 755.119464][T21859] mapped:40332 shmem:1293 pagetables:955 [ 755.119464][T21859] sec_pagetables:0 bounce:0 [ 755.119464][T21859] kernel_misc_reclaimable:0 [ 755.119464][T21859] free:1291729 free_pcp:2452 free_cma:0 [ 755.164862][ C1] vkms_vblank_simulate: vblank timer overrun [ 755.220759][T21859] Node 0 active_anon:1132kB inactive_anon:28032kB active_file:65156kB inactive_file:153752kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:161180kB dirty:744kB writeback:0kB shmem:3636kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10828kB pagetables:3664kB sec_pagetables:0kB all_unreclaimable? no [ 755.253348][ C1] vkms_vblank_simulate: vblank timer overrun [ 755.286628][T21870] 9pnet: p9_errstr2errno: server reported unknown error słܷM6' [ 755.293349][T21859] Node 1 active_anon:0kB inactive_anon:0kB active_file:136kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:60kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 755.325789][ C1] vkms_vblank_simulate: vblank timer overrun [ 755.364382][T21859] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 755.391729][ C1] vkms_vblank_simulate: vblank timer overrun [ 755.430595][T21859] lowmem_reserve[]: 0 2563 2565 0 0 [ 755.495180][T21859] Node 0 DMA32 free:1205864kB boost:0kB min:35036kB low:43792kB high:52548kB reserved_highatomic:0KB active_anon:1128kB inactive_anon:28188kB active_file:63640kB inactive_file:153692kB unevictable:1536kB writepending:740kB present:3129332kB managed:2653284kB mlocked:0kB bounce:0kB free_pcp:1384kB local_pcp:952kB free_cma:0kB [ 755.525964][ C1] vkms_vblank_simulate: vblank timer overrun [ 755.571421][T21859] lowmem_reserve[]: 0 0 1 0 0 [ 755.604510][T21859] Node 0 Normal free:8kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB active_anon:4kB inactive_anon:44kB active_file:1516kB inactive_file:60kB unevictable:0kB writepending:4kB present:1048576kB managed:1640kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 755.631810][ C1] vkms_vblank_simulate: vblank timer overrun [ 755.648103][T12290] team0 (unregistering): Port device team_slave_1 removed [ 755.697825][T21859] lowmem_reserve[]: 0 0 0 0 0 [ 755.702616][T21859] Node 1 Normal free:3945300kB boost:0kB min:54844kB low:68552kB high:82260kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:136kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:8316kB local_pcp:0kB free_cma:0kB [ 755.731898][ C1] vkms_vblank_simulate: vblank timer overrun [ 755.751061][T21859] lowmem_reserve[]: 0 0 0 0 0 [ 755.779390][T21859] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 755.831276][T21859] Node 0 DMA32: 74*4kB (M) 456*8kB (UME) 510*16kB (UME) 438*32kB (UME) 289*64kB (UME) 30*128kB (UME) 88*256kB (UME) 50*512kB (UM) 17*1024kB (UM) 3*2048kB (ME) 265*4096kB (UM) = 1205576kB [ 755.878374][T21859] Node 0 [ 755.881275][T12290] team0 (unregistering): Port device team_slave_0 removed [ 755.903201][T21859] Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 755.952730][T21859] Node 1 Normal: 7*4kB (UM) 7*8kB (UM) 12*16kB (U) 8*32kB (UM) 9*64kB (UM) 4*128kB (U) 3*256kB (U) 5*512kB (UM) 2*1024kB (U) 5*2048kB (UM) 959*4096kB (M) = 3945300kB [ 756.002017][T21859] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 756.022233][T21859] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 756.036365][ T5233] Bluetooth: hci0: command tx timeout [ 756.060180][T21859] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 756.123145][T21859] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 756.171293][T21859] 56054 total pagecache pages [ 756.184887][T21859] 0 pages in swap cache [ 756.197437][T21859] Free swap = 124676kB [ 756.222322][T21859] Total swap = 124996kB [ 756.231301][T21859] 2097051 pages RAM [ 756.239723][T21859] 0 pages HighMem/MovableOnly [ 756.253460][T21859] 402200 pages reserved [ 756.284937][T21859] 0 pages cma reserved [ 757.410698][T21892] atomic_op ffff8880231d3998 conn xmit_atomic 0000000000000000 [ 758.028095][T21788] chnl_net:caif_netlink_parms(): no params data found [ 758.116653][ T5233] Bluetooth: hci0: command tx timeout [ 758.654390][T21788] bridge0: port 1(bridge_slave_0) entered blocking state [ 758.698111][T21788] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.720140][T21788] bridge_slave_0: entered allmulticast mode [ 758.766467][T21788] bridge_slave_0: entered promiscuous mode [ 758.793723][T21788] bridge0: port 2(bridge_slave_1) entered blocking state [ 758.814919][T21788] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.827042][T21788] bridge_slave_1: entered allmulticast mode [ 758.845170][T21788] bridge_slave_1: entered promiscuous mode [ 759.019572][T21788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 759.105332][T21788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 759.291124][T21788] team0: Port device team_slave_0 added [ 759.328588][T21788] team0: Port device team_slave_1 added [ 759.466159][T21788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 759.486348][T21788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 759.576058][T21788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 759.606944][T21788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 759.614009][T21788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 759.706590][T21788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 759.801480][ T29] audit: type=1400 audit(1724434911.146:541): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="?" object="_" requested=w pid=21930 comm="syz.1.7116" dest=20000 [ 759.844510][T21788] hsr_slave_0: entered promiscuous mode [ 759.860586][T21788] hsr_slave_1: entered promiscuous mode [ 759.877606][T21788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 759.889717][T21788] Cannot create hsr debugfs directory [ 760.546714][ T61] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 760.635151][ T5267] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 760.755249][ T5229] Bluetooth: hci8: command 0x1003 tx timeout [ 760.755434][ T5233] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 760.865177][ T5267] usb 1-1: Using ep0 maxpacket: 8 [ 760.907777][ T5267] usb 1-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 760.926739][ T5267] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.944840][ T5267] usb 1-1: Product: syz [ 760.949049][ T5267] usb 1-1: Manufacturer: syz [ 760.953678][ T5267] usb 1-1: SerialNumber: syz [ 760.970281][ T61] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.010818][ T5267] usb 1-1: config 0 descriptor?? [ 761.051484][ T5267] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 761.215436][ T61] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.599008][ T5229] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 761.611926][ T5229] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 761.621451][ T61] netdevsim netdevsim4 netdevsim0 (unregistering): left promiscuous mode [ 761.632690][ T61] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 761.636752][T21955] Smack: duplicate mount options [ 761.650911][ T5229] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 761.685711][ T5229] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 761.697200][ T5229] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 761.706169][ T5229] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 762.029236][ T61] bridge_slave_1: left allmulticast mode [ 762.044195][ T61] bridge_slave_1: left promiscuous mode [ 762.060380][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 762.082582][ T61] bridge_slave_0: left allmulticast mode [ 762.099746][ T61] bridge_slave_0: left promiscuous mode [ 762.110142][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 762.282933][ T5267] gspca_vc032x: reg_w err -71 [ 762.294869][ T5267] vc032x 1-1:0.0: probe with driver vc032x failed with error -71 [ 762.313227][ T5267] usb 1-1: USB disconnect, device number 69 [ 763.006747][ T61] team0: Port device geneve0 removed [ 763.795018][ T5229] Bluetooth: hci5: command tx timeout [ 763.872251][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 763.915864][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 763.973514][ T61] bond0 (unregistering): Released all slaves [ 764.399882][T21788] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 764.464227][T21788] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 764.644943][T21788] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 764.690256][T21788] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 764.872062][T21954] chnl_net:caif_netlink_parms(): no params data found [ 764.924763][ T5229] Bluetooth: hci6: command 0x0406 tx timeout [ 765.046109][T22009] syzkaller1: entered promiscuous mode [ 870.054671][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 870.061658][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P22018/1:b..l [ 870.070407][ C1] rcu: (detected by 1, t=10502 jiffies, g=116237, q=115 ncpus=2) [ 870.078226][ C1] task:syz.2.7151 state:R running task stack:24672 pid:22018 tgid:22018 ppid:11066 flags:0x00004000 [ 870.091692][ C1] Call Trace: [ 870.094993][ C1] [ 870.097942][ C1] __schedule+0x17ae/0x4a10 [ 870.102466][ C1] ? mark_lock+0x9a/0x350 [ 870.106822][ C1] ? __lock_acquire+0x137a/0x2040 [ 870.111961][ C1] ? irqentry_exit+0x63/0x90 [ 870.116556][ C1] ? __pfx___schedule+0x10/0x10 [ 870.121443][ C1] ? preempt_schedule+0xe1/0xf0 [ 870.126308][ C1] preempt_schedule_common+0x84/0xd0 [ 870.131606][ C1] preempt_schedule+0xe1/0xf0 [ 870.136292][ C1] ? __pfx_preempt_schedule+0x10/0x10 [ 870.141691][ C1] preempt_schedule_thunk+0x1a/0x30 [ 870.146904][ C1] _raw_spin_unlock+0x3e/0x50 [ 870.151610][ C1] unmap_page_range+0x3818/0x42c0 [ 870.156684][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 870.162086][ C1] ? mas_next_slot+0xeab/0xf90 [ 870.166868][ C1] ? uprobe_munmap+0x183/0x460 [ 870.171647][ C1] ? unmap_single_vma+0x1bd/0x2b0 [ 870.176690][ C1] unmap_vmas+0x3cc/0x5f0 [ 870.181039][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 870.185919][ C1] ? tlb_gather_mmu_fullmm+0x160/0x210 [ 870.191394][ C1] exit_mmap+0x264/0xc80 [ 870.195657][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 870.200449][ C1] ? __asan_memset+0x23/0x50 [ 870.205102][ C1] ? uprobe_clear_state+0x277/0x290 [ 870.210318][ C1] ? mm_update_next_owner+0xa2/0x8a0 [ 870.215610][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 870.220820][ C1] __mmput+0x115/0x380 [ 870.224935][ C1] exit_mm+0x220/0x310 [ 870.229031][ C1] ? __pfx_exit_mm+0x10/0x10 [ 870.233634][ C1] ? taskstats_exit+0x326/0xa60 [ 870.238507][ C1] do_exit+0x9b2/0x27f0 [ 870.242673][ C1] ? preempt_schedule_common+0x84/0xd0 [ 870.248148][ C1] ? __pfx_do_exit+0x10/0x10 [ 870.252744][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 870.258746][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 870.265090][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 870.270480][ C1] do_group_exit+0x207/0x2c0 [ 870.275083][ C1] __x64_sys_exit_group+0x3f/0x40 [ 870.280123][ C1] x64_sys_call+0x2634/0x2640 [ 870.284809][ C1] do_syscall_64+0xf3/0x230 [ 870.289322][ C1] ? clear_bhb_loop+0x35/0x90 [ 870.294009][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 870.299911][ C1] RIP: 0033:0x7f54beb79e79 [ 870.304337][ C1] RSP: 002b:00007ffddb7126a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 870.312854][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f54beb79e79 [ 870.320834][ C1] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 870.328842][ C1] RBP: 00007ffddb7126fc R08: 00007ffddb71278f R09: 00000000000bab4e [ 870.336829][ C1] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000032 [ 870.344835][ C1] R13: 00000000000bab4e R14: 00000000000bab07 R15: 00007ffddb712750 [ 870.352847][ C1] [ 870.355873][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g116237 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 870.368992][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=55424 [ 870.376968][ C1] rcu: rcu_preempt kthread starved for 10502 jiffies! g116237 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 870.388565][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 870.398534][ C1] rcu: RCU grace-period kthread stack dump: [ 870.404425][ C1] task:rcu_preempt state:I stack:25816 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 870.414615][ C1] Call Trace: [ 870.417903][ C1] [ 870.420847][ C1] __schedule+0x17ae/0x4a10 [ 870.425479][ C1] ? __pfx___schedule+0x10/0x10 [ 870.430348][ C1] ? __pfx_lock_release+0x10/0x10 [ 870.435389][ C1] ? __asan_memset+0x23/0x50 [ 870.439996][ C1] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 870.445815][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 870.452156][ C1] ? schedule+0x90/0x320 [ 870.456416][ C1] schedule+0x14b/0x320 [ 870.460588][ C1] schedule_timeout+0x1be/0x310 [ 870.465446][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 870.470923][ C1] ? __pfx_process_timeout+0x10/0x10 [ 870.476232][ C1] ? prepare_to_swait_event+0x32e/0x350 [ 870.481891][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 870.486757][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 870.491971][ C1] ? rcu_gp_init+0x1256/0x1630 [ 870.496757][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 870.501708][ C1] ? __pfx_dyntick_save_progress_counter+0x10/0x10 [ 870.508218][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 870.513509][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 870.519440][ C1] ? finish_swait+0xd4/0x1e0 [ 870.524163][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 870.528781][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 870.533994][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 870.539908][ C1] ? __kthread_parkme+0x169/0x1d0 [ 870.545056][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 870.550265][ C1] kthread+0x2f0/0x390 [ 870.554356][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 870.559566][ C1] ? __pfx_kthread+0x10/0x10 [ 870.564263][ C1] ret_from_fork+0x4b/0x80 [ 870.568691][ C1] ? __pfx_kthread+0x10/0x10 [ 870.573295][ C1] ret_from_fork_asm+0x1a/0x30 [ 870.578091][ C1] [ 870.581113][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 870.587460][ C1] Sending NMI from CPU 1 to CPUs 0: [ 870.592701][ C0] NMI backtrace for cpu 0 [ 870.592715][ C0] CPU: 0 UID: 0 PID: 10339 Comm: syz.3.2186 Not tainted 6.11.0-rc4-syzkaller-00143-g3d5f968a177d #0 [ 870.592735][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 870.592745][ C0] RIP: 0010:lock_is_held_type+0x11f/0x190 [ 870.592773][ C0] Code: 48 c7 c7 e0 e6 ea 8b e8 cf 1a 00 00 b8 ff ff ff ff 65 0f c1 05 e2 5b 54 74 83 f8 01 75 44 48 c7 04 24 00 00 00 00 9c 8f 04 24 04 24 00 02 00 00 75 4c 41 f7 c4 00 02 00 00 74 01 fb 65 48 8b [ 870.592786][ C0] RSP: 0018:ffffc90000007c48 EFLAGS: 00000046 [ 870.592801][ C0] RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffff8880291fbc00 [ 870.592812][ C0] RDX: ffff8880291fbc00 RSI: ffffffff8beae6e0 RDI: ffffffff8c3f9980 [ 870.592825][ C0] RBP: 0000000000000001 R08: ffffffff89b4f86b R09: fffff52000000f80 [ 870.592836][ C0] R10: dffffc0000000000 R11: fffff52000000f80 R12: 0000000000000046 [ 870.592848][ C0] R13: ffff8880291fbc00 R14: 00000000ffffffff R15: ffff88807bef6300 [ 870.592860][ C0] FS: 00007fb4747f86c0(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 870.592875][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 870.592887][ C0] CR2: 00007f2f04c8ef98 CR3: 000000002dfee000 CR4: 00000000003506f0 [ 870.592902][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 870.592912][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 870.592923][ C0] Call Trace: [ 870.592932][ C0] [ 870.592941][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 870.592979][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 870.593001][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 870.593020][ C0] ? nmi_handle+0x2a/0x5a0 [ 870.593044][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 870.593063][ C0] ? nmi_handle+0x14f/0x5a0 [ 870.593078][ C0] ? nmi_handle+0x2a/0x5a0 [ 870.593098][ C0] ? lock_is_held_type+0x11f/0x190 [ 870.593119][ C0] ? default_do_nmi+0x63/0x160 [ 870.593138][ C0] ? exc_nmi+0x123/0x1f0 [ 870.593156][ C0] ? end_repeat_nmi+0xf/0x53 [ 870.593177][ C0] ? advance_sched+0x1ab/0xca0 [ 870.593196][ C0] ? lock_is_held_type+0x11f/0x190 [ 870.593217][ C0] ? lock_is_held_type+0x11f/0x190 [ 870.593239][ C0] ? lock_is_held_type+0x11f/0x190 [ 870.593260][ C0] [ 870.593266][ C0] [ 870.593273][ C0] ? __pfx_advance_sched+0x10/0x10 [ 870.593291][ C0] advance_sched+0x1c2/0xca0 [ 870.593309][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 870.593330][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 870.593355][ C0] ? __pfx_advance_sched+0x10/0x10 [ 870.593372][ C0] __hrtimer_run_queues+0x59b/0xd50 [ 870.593389][ C0] ? ktime_get_update_offsets_now+0x3c/0x250 [ 870.593419][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 870.593436][ C0] ? ktime_get_update_offsets_now+0x22d/0x250 [ 870.593460][ C0] hrtimer_interrupt+0x396/0x990 [ 870.593490][ C0] __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 870.593514][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 870.593536][ C0] [ 870.593542][ C0] [ 870.593548][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 870.593566][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xd8/0x140 [ 870.593586][ C0] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 3e 65 3f f6 f6 44 24 21 02 75 52 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 e3 c0 aa f5 65 8b 05 54 95 4b 74 85 c0 74 43 48 c7 04 24 0e 36 [ 870.593598][ C0] RSP: 0018:ffffc90002d5fa60 EFLAGS: 00000206 [ 870.593612][ C0] RAX: c8df0d7659b0f800 RBX: 1ffff920005abf50 RCX: ffffffff8170410a [ 870.593624][ C0] RDX: dffffc0000000000 RSI: ffffffff8bead560 RDI: 0000000000000001 [ 870.593636][ C0] RBP: ffffc90002d5faf0 R08: ffffffff934f494f R09: 1ffffffff269e929 [ 870.593648][ C0] R10: dffffc0000000000 R11: fffffbfff269e92a R12: dffffc0000000000 [ 870.593659][ C0] R13: 1ffff920005abf4c R14: ffffc90002d5fa80 R15: 0000000000000246 [ 870.593675][ C0] ? mark_lock+0x9a/0x350 [ 870.593699][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 870.593722][ C0] ? autoremove_wake_function+0x16/0x110 [ 870.593743][ C0] __wake_up_common_lock+0x18c/0x1e0 [ 870.593767][ C0] __io_cqring_overflow_flush+0x504/0x690 [ 870.593789][ C0] ? __se_sys_io_uring_enter+0x1c2a/0x2670 [ 870.593813][ C0] ? __pfx___io_cqring_overflow_flush+0x10/0x10 [ 870.593834][ C0] ? prepare_to_wait_exclusive+0x81/0x220 [ 870.593857][ C0] __se_sys_io_uring_enter+0x1c36/0x2670 [ 870.593891][ C0] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 870.593910][ C0] ? __pfx_io_wake_function+0x10/0x10 [ 870.593939][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 870.593959][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 870.593980][ C0] ? do_syscall_64+0x100/0x230 [ 870.593997][ C0] ? __x64_sys_io_uring_enter+0x21/0xf0 [ 870.594018][ C0] do_syscall_64+0xf3/0x230 [ 870.594035][ C0] ? clear_bhb_loop+0x35/0x90 [ 870.594053][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 870.594070][ C0] RIP: 0033:0x7fb474979e79 [ 870.594086][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 870.594103][ C0] RSP: 002b:00007fb4747f8038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 870.594119][ C0] RAX: ffffffffffffffda RBX: 00007fb474b15f80 RCX: 00007fb474979e79 [ 870.594131][ C0] RDX: 0000000000400000 RSI: 0000000000000000 RDI: 0000000000000003 [ 870.594141][ C0] RBP: 00007fb4749e793e R08: 0000000000000000 R09: 0000000000000000 [ 870.594152][ C0] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 870.594163][ C0] R13: 0000000000000000 R14: 00007fb474b15f80 R15: 00007ffdf72b1fc8 [ 870.594183][ C0]