last executing test programs: 1m56.467739277s ago: executing program 1 (id=1138): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x9}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x3, 0x8, 0x2}, 0x48) r5 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r5, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000001a40)={0x10, 0x3ed, 0x0, 0x0, 0x0, {0x10, 0x3ec}}, 0x420}}, 0x0) 1m55.046824885s ago: executing program 1 (id=1229): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000040)=@gcm_128={{0x303}, "0400", "0d07080d7f4fcf0000e8ffffff00", '\x00', "8657e2b7e43b34e4"}, 0x28) sendto$inet6(r3, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) 1m53.933614458s ago: executing program 1 (id=1231): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(0xffffffffffffffff, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r3, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x208e24b) 1m49.649824712s ago: executing program 1 (id=1238): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x92, 0x4, 0x0, @broadcast, @empty}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m47.270021148s ago: executing program 1 (id=1241): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000023c0), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mount(0x0, 0x0, &(0x7f0000000240)='dax\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) rmdir(&(0x7f0000000180)='./file1\x00') r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$bt_hci(r3, 0x11c, 0x4, &(0x7f0000002080)=""/4104, &(0x7f0000000040)=0x1008) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049370, &(0x7f0000000080)) 1m46.566702056s ago: executing program 1 (id=1243): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @remote, 0x100}, 0x16) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000340)="62760e5909914a8ac8d47681d911fedcd4a4d1fe46934d2e8918d79f8672d669e6c6fc1f30dafb10e440ec1218d427ef952a224cca84eeeeb79d7536cda2fdb812ce27f530043143c92574b7e84b052eba73b7d6e6bc4eee1e91e55e38f807649c14ffad66e27187a6852c48f889ff8700856a7ca9ed07221427403f1642f7908c7e127d17e9946ae80d9b91c5597d5ca4e166c999924fbd9a37d7d2de8f7e69b168964a861e2248f0d05fea74ff9a1acdf3e8d0e14db6e80bd73dcb645749f433ab19c857f404d71be280cce102", 0xce, 0x4044080, &(0x7f0000000080)={0xa, 0x4e21, 0x2, @mcast1, 0xfffffffd}, 0x1c) r2 = socket$igmp6(0xa, 0x3, 0x2) connect$inet6(r2, &(0x7f0000000600)={0xa, 0x4e21, 0x8000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) sendto$inet6(r1, &(0x7f0000000500)="371afb9dd614411ed2754523b88dc17a8f938cd96f8ddf948a3d6af806f73231d9e4e93ec7ea818305478f337891fc4e84aa13bde800f129ec3add916a5184c55eb09d355a77a9629e1ac879691c1524b2a36f7647bfffea0164737073ae71a0f71a422f4a00cf31a9728f9ff6fecc2ea245b77b1fffe736f1d5a26ab1e44542430dcae498762b9443a40e6e9611", 0x8e, 0x8010, &(0x7f00000000c0)={0xa, 0x4e23, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1f}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000300)={0x20, 0x4, 0x20, 0xff, 0x0, 0x2, 0xe, 0x3, 0xfb, 0x81, 0x80, 0x40, 0x94, 0xd5}, 0xe) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@dellink={0x34, 0x11, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'macsec0\x00'}]}, 0x34}}, 0x0) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0x0, 0xee00, &(0x7f00000002c0)={0x100, 0xfd}) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x6, 0x5, 0x9, 0xda, 0x0, 0x16, 0x20, 0x7f, 0x3f, 0x3, 0x7f, 0x7, 0xa0, 0x6}, 0x6a) openat$incfs(0xffffffffffffff9c, &(0x7f0000000440)='.pending_reads\x00', 0x20900, 0x0) shutdown(r0, 0x1) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040e0400022000"], 0x7) 1m25.050728299s ago: executing program 0 (id=1277): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r4, 0x545c, 0x0) 1m22.450760616s ago: executing program 0 (id=1281): bind$alg(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x120) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdir(0x0, 0x84) openat$dsp(0xffffffffffffff9c, 0x0, 0x40402, 0x0) chdir(0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x40) r5 = fanotify_init(0x0, 0x0) fanotify_mark(r5, 0x105, 0x4800003a, r4, 0x0) splice(r1, 0x0, r3, 0x0, 0x200000000001, 0x0) 1m19.783681351s ago: executing program 0 (id=1285): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x2b0, 0x150, 0x150, 0x0, 0xf8010000, 0x380, 0x238, 0x238, 0x380, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x248, 0x2b0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'batadv0\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x4}}}, @common=@inet=@sctp={{0x148}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000240)='memory.oom.group\x00', 0x2, 0x0) sendfile(r5, r5, 0x0, 0xdf) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) 1m18.458456897s ago: executing program 0 (id=1288): syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000300)='ipvlan1\x00', 0x10) ioctl$SIOCPNENABLEPIPE(r4, 0x89ed, 0x500) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time\x00', 0x275a, 0x0) 1m17.302746537s ago: executing program 0 (id=1289): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) readahead(r1, 0x7, 0x2f) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000010) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x44, r4, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}]}, 0x44}}, 0x0) 1m15.036117442s ago: executing program 0 (id=1294): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) mount(&(0x7f0000000100)=@nullb, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='hfs\x00', 0x0, &(0x7f0000000180)) write$UHID_INPUT(r0, &(0x7f00000029c0)={0xc, {"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", 0x1000}}, 0xf13) 1m10.870763302s ago: executing program 4 (id=1301): add_key$keyring(&(0x7f0000000140), 0x0, 0x0, 0x0, 0xfffffffffffffffc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x12) 1m6.394743226s ago: executing program 4 (id=1304): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000dd0000000000003b810000850000006d000000a50000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) read$dsp(r3, &(0x7f00000011c0)=""/4117, 0x200021d5) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045009, &(0x7f0000000240)) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000400)={0x3ff}, 0x0, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x2) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000001200)={&(0x7f0000001080)=ANY=[@ANYBLOB="380000000314010000000000000000000900020053797a310000000008004100736977001400330073797a6b616c6c657230"], 0x38}}, 0x0) 1m4.738185443s ago: executing program 4 (id=1308): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f00000006c0)={0x0, 0x101, 0x0, 0x0, 0x200, 0x2}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = dup(r2) syz_emit_ethernet(0xfdef, &(0x7f0000000440)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x0, 0x0, 0x3, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @multicast2}}}}}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r3, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1m0.336118826s ago: executing program 4 (id=1314): mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x12, 0xffffffffffffffff, 0x0) mkdir(0x0, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f00000002c0)={{0x3, 0x3f}, 'port1\x00', 0x20, 0x20000, 0x5, 0x7, 0x0, 0x80000001, 0x0, 0x0, 0x5}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002900)={0x1c, 0x3e, 0x107, 0x0, 0x0, {0x3}, [@typed={0x4}, @nested={0x4, 0x1}]}, 0x1c}}, 0x0) connect$pppl2tp(r0, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) pipe2$9p(0x0, 0x80) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r3, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000980)='./file0\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) chroot(0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) socket$inet6(0xa, 0x80000, 0x1) getdents64(0xffffffffffffffff, &(0x7f0000002f40)=""/4098, 0x1002) 59.902684119s ago: executing program 4 (id=1315): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000180000000000000000000009ff2409e699"], 0x1c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000000300)="77d8a14ced00794795ab1b93ed588c49ff5ed4654128711e4a570acc9e5bdd3fbe3a2b3604480550cc194b323d1fc366abf999baa1b30940a9987eefaba23c10c24498cc5359bc9de6d2662394804e64003903a62674b4e0a992c28a2de5a7c9a7fa0b635b8b2f89bbcf3bee5bb244b3fd1339560d27baf65c95e2b1c2e6f06a3a8b9b9a995cbedc752d33730630aef6bce850f8be39c23078e003e21350649f28032b540a6007ddabd993a1437d6fe052b672d1ced57b3d813dd4308d4201740db5cfebf5043846ac7354f699719b7891b47ca4191e9af9aef6cef73a5c7cb82a497874cebe4d019f94ef8e114e2ef263733254a1cc8c4b5fc3968ce9476b5df77a541aaf14e16abb1835d5543e31724a6711c2230c5327dc9289b1ecd5fadc1cbf87ff42349d731914ed9a40644a303aa6df3bee2f15b2bcec9f3734eb0c6571c9b71b5bba14c5c2be92edb5f70409c6040155d947bf572bf135add480e252f6574cfb6ce19aac47eff6e53084e8a3ee08908957296e3c1c33b4ae9ff07e60584419683fc34b12508cab5b30903564c608735393b82acfb1ce01251772e889ead69553e8fd2c542ce24ae5890f3aa9d00bd63f23c266e2ebfe44f473d67a59d82ed14a29a37edb1b33382ff15980dcb1623b393ea7462b66e1827d5982313ae4a3cb1ed11cb8187eb169148297c9c129ced121a07fecff34a462ada63f81b02c739752e7ddb2788c4ce20f4f9e02ef96611653d8a0833f3064eb2029f4a0a6623be2e66e5307d0398a49c202a3a76ac6cf1ade62fde3fa3b5f40215e15411f39d04d0d31036d88c5b059ed921dff99eb26496a6101be58ca2e766ad749d77ce26750ee55538f54024685220560cae2b0cbbd8d23dd00e40451bc95410dc3a7de1a3e94d15d7a3b566866f1cd63572a5af1feba1c4904f4aace7c56fe6ca0f7a85ed4c7ad4f5511a217f196a566d7e8c3ee7dbbc89cded5e6ee6d78cb30d9e2a4dc6e31cb524c21b227eca0a7b78a776c1185df71e49ada71fde4fa15e2c4bb684dfdd495fd83bc59995588ad0778ed23359c8a58944d31f882947d65e737f1c45422dc82a75d97d9c845a52a161fd3679e456527631b33b6617c6f5250130fa5664d0b5811e630b3855b8491c46d325adee0fb04094cb6c60782841f7f5bd1b33e43e99db0fe838e2aed51708c07a5936b25eed9be4fcd4c5c3d4235fe7bf6134040f97f426b79710004caa909bb21e3f32a74fba97b6be78cf871f8003de6a137caffc2c15019f9f1ecfcf98b3dfe4ebd552dc3e6103627f5a09adcdac8c8f3110d5a75300ec7b33dbb314e037667fcaab4ae0f6da78103d7c5c51688b8ce3f0fe9e99d624925c5ddd49dfcb4d4c8ea3465c65b3a8f695566d68c902518e2bb857ac4a3bdf6ea671d59158a4a468ac4dba1908dc0cd348a5bbe6dfb969063c4b888858885e9791343681d8c9f9107fd9b94469fe88a48951ebcb87ca46ff80239e96e09a53f3667ee906ec9d32dc572e09f8cb29f3d4d113502b407c3ff52d626fdb218bc22cb672f1b051be841859f8560e46889af3227f1d89490f13d33182abe0dcc8b36db192e6b8ce137ee11582993199902829cdd5c202dbf49af1e5dc6d999c70279b5f6314ffb159f6b03b6bc162dfca5bb8b783a134b113bab76ce9cca8731316fd6e781e333b8dc73b4ee3d7c6e5b3388d9f62aa8937b267f58ce4c980a029ec2aac888faca26e06a6999fc9d0cc79d464d77817216aac05bb2e229c93723d576e5d1bb58a4efe75072d4ba40960da7b2a1b8e37357812b42efe998a34ee0e3d16f4c7cf164d3d37e535142745122665ad06881bc334e668235e46ccd6098ec0a3c7082be6470071cdc0a87185b52a380b1334be9a6508d8e96136fb53589365b96e667beb0bb7fb0228772b0564765ee1a4dfcac80ec52da05dac262e38bc52089fb6c9702aab0c5a5d25e90e571e7bfed3d959ebdddf5469377a534ec2a8032352138e1b2f12d7c0afd3dc2dea314b840bc78b56e7a71701e41faa5b3ddfb284ab6668b84d818e03fe2f48aa44580febb3224c4183133d387f42f36fbb1c7adf9d9faf4519c3748634cf9c193b37d0aa936c0faf2cb63c70ca164fc5fce17b6403f647d6ca2e8beaa6f37568c1d340b9edb7156357fb7af4384e114b6c61c6f65de7415c25af8923e999e47b2bb8765d547114208ec8ba1be633a2c11b36b8c1fad3c1eb8e7222e6c6a4932289b28555fa3460e4f8a88e9d862844cbc18498de7ce8d6074f196185371b4ff43f5576ae5f2a5d4ba474be275db10f838db30df015eb51939207d5ad8a16e0802cb160eb6a7b72514a71aa9c7debbcc998bb11d26dccd0467900bbab8741732e78b67cd446b24ede875f17f5231faefdb9ac5df2070d87ed057bbf710a4a2de0e3d8d2e503b8ffb1c75154cf86aa00157307c5c17e99eb1a54f20442bb08849cffe33648a55fa27b49b4c55a52a269289962d3200da85bc109236667ec8b792f80489a32f7a53af8ea74e5f8d463abe88be8c0af31fbea40e11f36c9e80015070e94ff6658f860790e9da51618b32a849507d312d5d42dc68e957f43bbb0047f3affab903a11f53c97843d51096338056fe110d261afceafe36dafbbe93a21b5a64caea46cb42e4e2a0348602eb1403e027c7c7b761e30aa78dc59f34b74f611a9f360047821ae8679fa2b23e446ecfa1eed6537f39661c951bc4f6b34ff7161f3d0b625172c57454f51fa1cd282a4cbc1de6feb4ab29d4a868261307c5e151364188e02c1c1d596a2232c1d1d306856ad45d1629bdd391a5cd3bbb1e56fb85733ff0699aad885c8e9a95b3bcd1e5747450316985c336ac19e1175652e3ed04359d4f6eef798ff436810355a8786e6b6ff32dd35a9506d787a7878d4181d1df0409bd473c18e3d6d641e57a60ceb6fd01389648d06084d7a3c8313e9e5a4cc65cc75a2768ee5834a7ccb16396a0b75f160b653af9671e8bf5b137ed4547edc09e8a0aafe99871316ab6e61d7f9fa758e176d330c8bae1053fdb33721fa033c7be678c9c0fc9a3ecf7322e84026fe36114862b56ad84a1d3cf8acd0f1d8877976aca4335f6c548b5a61d059c58379bb32f69cbf331dfd33a65ea0e721382286d411388ccf05980e31bf44b9bee17bd1a2d67208a3ee236567ae77c0a6240dc095180e314bee1e2e739c0760399da239511245c174567b1f0ec9a554e27d303ccffdc1d76d4a9b01f220a6069874dd3c89ffa7d6fdec8f7604cf27913f94a567da8fd227e0fe991234d9df37ff8e183280f8066d531dbc98926f686102be91786fb359c219eca873872ef1dd768c4edd55c89fa5b02edaa68c6de322f2c4e32af649faf95b54c17ad334310c4348006757f2a94fdcfa73d7f435d22859e80ef1742306d39c04ec272ee192c94fe52497d173c99b9f951a50cd64e276a3f02b7d7100e3f2ff7cdd76a4c1260dda65009cd957bd76a50f2b046ec8019c32ffb52f517f95311bf73c3b6da9971115e2785089508da402ed4642771e1937f533e79d8b96367680d59ca9ef61d9abb4fd10f7ef727d3624d25fd7803fdb72a5290f143d21d86ae8a0bdb06e50c3b2376521fbfeae6dad122fe7e5987481e682f699f0a0928daaa8cfb2262827eb44ae700cfc05206144b3be37b36f0885812d6f367f76800ea0083b9375824bcaa43e1105d8cd62d9e21e5d577a11a8a4670ba55c82373abf7ead491e2e1eaca33dba79ab9a2a39273092bbc239e54bad15246055f0a7e3c72d115b37e13c128d78353557ef14fd9793d994526653a2057caef4b18a545726301a851854dd887b2be0af762cde2764938971659cc1c8300a5259311a757a02bc102c1241afcd39e9862d754346ceb2a1ccca07803910d0c90b292ee436f21a4e909d2c15b5a9f6696ee379f8d5ee4b915ecae2d9928c42db843c6697a483b5cca2895daa495089a0f61ed4420ac9e10b78d5d4541f1f47f4ea59ec061d372b2cb2ba2e29a4dd2e40c7fed83cc712ab2198cc3529c4aff89168bc3092140351ad22c1ecab5f7678bf1ecfa89791bc417306735aa24f2790ad116e5dd5c68f4a373cb95f499ab7bf4cebe8d1e681df11bd6b2ccf22ed463dd2c25fe18629fc51083f3bcdf703b473ac933c92e6f8be511a4acde3ca50a4738026c6bdc7926ecfa1808217e995558f7c08fdd20752f3fcd65ef53ba4c2c0bb6de0c3ca7c66d910bff85aec38d102c4834252c0990d2ec9dfb683f4067771f583d1952ef9765d924ea6b8e12671dbea20ae3fb0f068009db9e3bafde97a98209a599a60eaf9c9e13b1e3c41879ac88a2d3084c93fff520a5adbcd9dcc724aecbca0bb4e25b1affb0cf2b511420da6205de762aa6556aaeb2e1a08fca537ce152384af8c53c30d992c073576148bae5bbd8e89a420148149868f72a96cdb3ae91dd82dd3d5c96a273a13b433b8f302e9d812436a4c74343c5c57249ef7be1c9e323375d972790f89ca8d1d52f75ac88aec52df5be6a69b3114c666ef3d0f8935911bd9bc0966f75e5945de4376161b48b1a12c9f7b2a6c50de0ed7fc298239bc8b21658009421262aa2f7d134a4165fe65e79c6de4a58e09b36bba84c1847e17f8e3a853788cc44bdb2aee753018f4fa2ac9297433f70df17be3091f44c8874899255fba05478e30a83f0c0fdb71e5b40139dfb73f126e6d7aac73d9134fdac2ec8661af4eb9f21e1a86ee0f3d89ac3472ea260e94e47441c7d6fa454a62de7f3b770656e16760f98bbb361ea24f3e278416fea862421eaee7f6ea0f18a0de79dfe9e51158a3da5de", 0xd56}, {0x0}], 0x2}, 0x0) 58.823267864s ago: executing program 4 (id=1316): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) mount(&(0x7f0000000100)=@nullb, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='hfs\x00', 0x0, &(0x7f0000000180)) write$UHID_INPUT(r0, &(0x7f00000029c0)={0xc, {"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", 0x1000}}, 0xf13) 10.622048789s ago: executing program 2 (id=1380): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) chdir(0x0) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r4, &(0x7f0000000100)='./file1\x00') 9.298706962s ago: executing program 2 (id=1381): r0 = memfd_create(0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window, @sack_perm, @sack_perm, @timestamp, @timestamp, @timestamp, @timestamp], 0x20000149) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000180)=0x6, 0x4) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x261, 0x4800003e, r2, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r3, 0x61, 0x40001002, r4, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r5, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x0, 0x0, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}, @generic={0x66}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 7.314832322s ago: executing program 2 (id=1384): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x77359400}, {0x0, 0x989680}}, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd2(0x8, 0x80001) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000100)={0x0, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) write$eventfd(r1, &(0x7f00000000c0), 0x8) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 6.410561484s ago: executing program 2 (id=1386): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6}]}}}]}, 0x3c}}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) getsockopt$IP_VS_SO_GET_SERVICES(r2, 0x0, 0x482, &(0x7f00000000c0)=""/4096, &(0x7f0000000040)=0x1000) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$inet(r4, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)="96a67b36bd06304a08a67f14f6c3881ca6167592ce060670a396f8ab05ace2caca6b2a9ecf3471d2", 0x28}, {&(0x7f0000000500)="fc484e55021886bb", 0x7fffefd8}], 0x2}}], 0x1, 0x0) sendto$inet(r4, &(0x7f0000000000)='o', 0x1, 0x8041, 0x0, 0xf) accept4(r4, 0x0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000001c00)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x1c0, 0x12, 0x60d, 0x1c0, 0x202, 0x290, 0x2e8, 0x2e8, 0x290, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth1_to_bond\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "000000000000000617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x2, 0x2}}, @common=@inet=@socket2={{0x28}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r4) 5.381221879s ago: executing program 2 (id=1390): prlimit64(0x0, 0xe, &(0x7f0000000540)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001808ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) syz_open_dev$cec(&(0x7f0000000200), 0x0, 0x82) io_uring_setup(0x4fe1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x7, &(0x7f0000000200), 0x1) close_range(r4, 0xffffffffffffffff, 0x0) 4.249120752s ago: executing program 2 (id=1391): socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x4, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x90) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r0 = userfaultfd(0x80001) shmdt(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000340)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r3, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) 3.960409295s ago: executing program 3 (id=1392): mkdirat(0xffffffffffffff9c, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x5, &(0x7f0000000680)=ANY=[@ANYBLOB="18010000000000006d0000006700000005000000"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffffff, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x0, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x80044d03, &(0x7f0000000080)) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') mount(0x0, &(0x7f0000000540)='./file0/file0\x00', &(0x7f0000000580)='proc\x00', 0x20, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3c8, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x2f8, 0xffffffff, 0xffffffff, 0x2f8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0xf0, 0x60030000, {0x0, 0xff000000}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@private0, @private1, [], [], 'pimreg1\x00', 'wlan1\x00'}, 0x0, 0x1a0, 0x208, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x428) 3.579215689s ago: executing program 3 (id=1393): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000020000807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) r2 = epoll_create1(0x0) r3 = epoll_create1(0x0) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f00000008c0)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = epoll_create1(0x0) r7 = epoll_create1(0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r6, &(0x7f00000008c0)) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000000)) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r4, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000040)) 3.153586048s ago: executing program 3 (id=1394): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = eventfd2(0x0, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = dup3(r2, r1, 0x0) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000240)={0x1d, r5, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r4, &(0x7f000009de80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x4c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000009c0)={'vcan0\x00', 0x0}) r7 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r7, &(0x7f0000000080)={0x1d, r6, 0x2, {0x0, 0x1, 0x4}, 0xfe}, 0x18) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r10}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 1.838586243s ago: executing program 3 (id=1395): socket(0x15, 0x5, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$packet(0x11, 0x3, 0x300) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/ip6_flowlabel\x00') syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r2 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r2, 0x0, 0x23, &(0x7f0000000080)=ANY=[@ANYBLOB="e0000808ac1414aa", @ANYRES64=r1], 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 1.266610815s ago: executing program 3 (id=1396): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10152, 0x2, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f00000000c0)={0x48}) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x0) clock_getres(0x7733aff5a0ad05eb, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='xfs\x00', 0x85, 0x0) 0s ago: executing program 3 (id=1397): write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x1a3) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r3, &(0x7f0000000440)=ANY=[@ANYBLOB="1e0308003c5ca601288763"], 0xffdd) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000001c0)={'ipvlan1\x00', 0x400}) close(r1) kernel console output (not intermixed with test programs): process `syz.3.701'. [ 486.001943][ T6479] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.009812][ T6479] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.509030][ T6918] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.619543][ T6918] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.763368][ T8462] xt_CT: No such helper "snmp_trap" [ 489.475321][ T8470] tipc: Started in network mode [ 489.480349][ T8470] tipc: Node identity 8ab94b20cabf, cluster identity 4711 [ 489.512550][ T8470] tipc: Enabled bearer , priority 0 [ 490.103237][ T8478] netlink: 4 bytes leftover after parsing attributes in process `syz.1.709'. [ 490.561213][ T8470] syzkaller0: MTU too low for tipc bearer [ 490.632073][ T8470] tipc: Disabling bearer [ 490.635693][ T25] tipc: Node number set to 1074154272 [ 492.854563][ T8] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 493.002086][ T5283] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 493.661668][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 493.672909][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 493.692233][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 493.702980][ T8] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 493.731918][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.767969][ T8] usb 3-1: config 0 descriptor?? [ 493.827842][ T5283] usb 4-1: Using ep0 maxpacket: 16 [ 493.850999][ T5283] usb 4-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 493.880960][ T5283] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.921374][ T5283] usb 4-1: Product: syz [ 493.934085][ T5283] usb 4-1: Manufacturer: syz [ 494.711817][ T5283] usb 4-1: SerialNumber: syz [ 494.748324][ T5283] usb 4-1: config 0 descriptor?? [ 495.121359][ T8516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.246790][ T8516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.290237][ T8] hid (null): bogus close delimiter [ 495.344710][ T8537] fuse: Bad value for 'user_id' [ 495.373183][ T8] hid (null): invalid report_size 29539 [ 495.390717][ T8537] fuse: Bad value for 'user_id' [ 495.424636][ T8] hid-generic 0003:0158:0100.0006: unknown main item tag 0x0 [ 495.439747][ T8] hid-generic 0003:0158:0100.0006: unknown main item tag 0x0 [ 495.459740][ T8] hid-generic 0003:0158:0100.0006: bogus close delimiter [ 495.459828][ T8] hid-generic 0003:0158:0100.0006: item 0 0 2 10 parsing failed [ 495.468544][ T8] hid-generic 0003:0158:0100.0006: probe with driver hid-generic failed with error -22 [ 495.603659][ T25] usb 3-1: USB disconnect, device number 8 [ 495.773636][ T5283] speedtch 4-1:0.0: speedtch_bind: data interface not found! [ 495.773680][ T5283] speedtch 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 495.792843][ T5283] usb 4-1: USB disconnect, device number 11 [ 496.013300][ T4615] Bluetooth: hci8: Controller not accepting commands anymore: ncmd = 0 [ 496.024098][ T4615] Bluetooth: hci8: Injecting HCI hardware error event [ 496.036715][ T4615] Bluetooth: hci8: hardware error 0x00 [ 498.091859][ T4615] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 498.182104][ T25] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 498.535093][ T25] usb 1-1: New USB device found, idVendor=13d8, idProduct=0021, bcdDevice=79.90 [ 498.686462][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.855055][ T25] usb 1-1: config 0 descriptor?? [ 499.019526][ T25] usb 1-1: selecting invalid altsetting 3 [ 499.073635][ T25] comedi comedi0: could not set alternate setting 3 in high speed [ 499.105032][ T25] usbduxsigma 1-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 499.145691][ T25] usbduxsigma 1-1:0.0: probe with driver usbduxsigma failed with error -22 [ 499.194403][ T25] usb 1-1: USB disconnect, device number 9 [ 500.521738][ T5283] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 500.562378][ T8586] hfs: can't find a HFS filesystem on dev nullb0 [ 501.425076][ T8592] overlayfs: overlapping lowerdir path [ 502.162177][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.170717][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.173065][ T5283] usb 4-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 502.199700][ T5283] usb 4-1: config 36 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 502.289202][ T5283] usb 4-1: config 36 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 502.384786][ T5283] usb 4-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 502.419175][ T5283] usb 4-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 502.441875][ T5283] usb 4-1: Manufacturer: syz [ 502.447520][ T5283] usb 4-1: SerialNumber: syz [ 502.755117][ T5283] yealink 4-1:36.0: invalid payload size 0, expected 16 [ 502.788469][ T5283] input: Yealink usb-p1k as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:36.0/input/input14 [ 502.857499][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 502.864562][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 502.871431][ C0] hrtimer: interrupt took 13973911 ns [ 502.876925][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 502.883939][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 502.891094][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 502.898108][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 502.905160][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 502.912261][ C0] yealink 4-1:36.0: urb_ctl_callback - urb status -71 [ 502.919067][ C0] yealink 4-1:36.0: urb_ctl_callback - usb_submit_urb failed -90 [ 502.987638][ T5286] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 503.095098][ T5283] usb 4-1: USB disconnect, device number 12 [ 505.651835][ T5286] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 505.677803][ T5286] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 553, setting to 64 [ 505.747169][ T5286] usb 2-1: string descriptor 0 read error: -71 [ 505.771903][ T5286] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 505.850454][ T5286] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.921946][ T5286] usb 2-1: can't set config #1, error -71 [ 505.961788][ T5286] usb 2-1: USB disconnect, device number 13 [ 505.973784][ T8619] Zero length message leads to an empty skb [ 508.484762][ T8649] workqueue: name exceeds WQ_NAME_LEN. Truncating to: aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 508.728789][ T8656] hub 9-0:1.0: USB hub found [ 508.765791][ T8656] hub 9-0:1.0: 8 ports detected [ 510.768691][ T8671] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 517.481045][ T8714] ip6gretap0: entered promiscuous mode [ 517.525427][ T8714] ip6gretap0: left promiscuous mode [ 517.639746][ T8719] smc: removing ib device syz2 [ 521.796162][ T1851] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 522.932305][ T1851] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 522.962190][ T1851] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 523.021964][ T1851] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 523.061228][ T1851] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 523.176951][ T1851] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 523.207292][ T1851] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 523.238938][ T1851] usb 2-1: Product: syz [ 523.271860][ T1851] usb 2-1: Manufacturer: syz [ 523.366782][ T1851] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 524.839467][ T25] usb 2-1: USB disconnect, device number 14 [ 525.072980][ T8769] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 531.992897][ T8818] netlink: 'syz.2.808': attribute type 1 has an invalid length. [ 531.992971][ T8818] netlink: 8 bytes leftover after parsing attributes in process `syz.2.808'. [ 532.862358][ T8815] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 533.178120][ T8098] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 533.205525][ T8098] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 533.232244][ T8098] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 533.265886][ T8098] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 533.279113][ T8098] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 533.288487][ T8098] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 534.837509][ T8842] syz.2.803(8842): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 535.066034][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.373679][ T4615] Bluetooth: hci0: command tx timeout [ 535.464299][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.648091][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.825824][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.137050][ T8855] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 537.456099][ T4615] Bluetooth: hci0: command tx timeout [ 537.588717][ T8827] chnl_net:caif_netlink_parms(): no params data found [ 539.028146][ T11] bridge_slave_1: left allmulticast mode [ 539.074659][ T11] bridge_slave_1: left promiscuous mode [ 539.134205][ T8880] nbd: illegal input index 15335424 [ 539.139909][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.285207][ T11] bridge_slave_0: left allmulticast mode [ 539.352191][ T11] bridge_slave_0: left promiscuous mode [ 539.370405][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.531780][ T4615] Bluetooth: hci0: command tx timeout [ 541.614157][ T4615] Bluetooth: hci0: command tx timeout [ 542.200170][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 542.217946][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 542.274081][ T11] bond0 (unregistering): Released all slaves [ 542.544127][ T11] tipc: Left network mode [ 542.565246][ T8827] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.592913][ T8827] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.601224][ T8827] bridge_slave_0: entered allmulticast mode [ 542.629339][ T8827] bridge_slave_0: entered promiscuous mode [ 542.763888][ T8827] bridge0: port 2(bridge_slave_1) entered blocking state [ 542.790822][ T8827] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.810378][ T8827] bridge_slave_1: entered allmulticast mode [ 542.837339][ T8827] bridge_slave_1: entered promiscuous mode [ 542.962346][ T8827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 543.064228][ T8827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 543.190498][ T11] hsr_slave_0: left promiscuous mode [ 543.205068][ T11] hsr_slave_1: left promiscuous mode [ 543.222813][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 543.230279][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 543.264352][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 543.282855][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 543.360113][ T11] veth1_macvtap: left promiscuous mode [ 543.375598][ T11] veth0_macvtap: left promiscuous mode [ 543.393052][ T11] veth1_vlan: left promiscuous mode [ 543.398459][ T11] veth0_vlan: left promiscuous mode [ 544.721304][ T11] team0 (unregistering): Port device team_slave_1 removed [ 544.850886][ T11] team0 (unregistering): Port device team_slave_0 removed [ 546.216843][ T8827] team0: Port device team_slave_0 added [ 546.260235][ T8827] team0: Port device team_slave_1 added [ 546.381207][ T8827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 546.401690][ T8827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 546.443257][ T8827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 546.466013][ T8827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 546.501581][ T8827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 546.562453][ T8827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 546.686457][ T8827] hsr_slave_0: entered promiscuous mode [ 546.732245][ T8827] hsr_slave_1: entered promiscuous mode [ 546.741965][ T8827] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 546.749584][ T8827] Cannot create hsr debugfs directory [ 548.007731][ T8827] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 548.048177][ T8827] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 548.078001][ T8827] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 548.116061][ T8827] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 548.339827][ T8827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 548.390396][ T8827] 8021q: adding VLAN 0 to HW filter on device team0 [ 548.436663][ T2524] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.443885][ T2524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 548.466884][ T2524] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.474149][ T2524] bridge0: port 2(bridge_slave_1) entered forwarding state [ 548.910175][ T8827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 549.082571][ T8827] veth0_vlan: entered promiscuous mode [ 549.116551][ T8827] veth1_vlan: entered promiscuous mode [ 549.235044][ T8827] veth0_macvtap: entered promiscuous mode [ 549.255625][ T8827] veth1_macvtap: entered promiscuous mode [ 549.298675][ T8827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 549.331498][ T8827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.343865][ T8827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 549.360836][ T8827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.382727][ T8827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 549.411715][ T8827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.441668][ T8827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 549.458968][ T8827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.470486][ T8827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 549.482870][ T8827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.501751][ T8827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 549.532567][ T8827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.554892][ T8827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 549.586969][ T8827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 549.599705][ T8827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.614367][ T8827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 549.626558][ T8827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.638374][ T8827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 549.653155][ T8827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.680272][ T8827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 549.693435][ T8827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.705620][ T8827] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 549.731736][ T8827] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.756301][ T8827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 549.817791][ T8827] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.848500][ T8827] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.872217][ T8827] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.880978][ T8827] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.123292][ T6911] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 550.131164][ T6911] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 550.256085][ T6911] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 550.286574][ T6911] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 550.523314][ T8994] netlink: 136 bytes leftover after parsing attributes in process `syz.0.833'. [ 550.557254][ T8994] netlink: 136 bytes leftover after parsing attributes in process `syz.0.833'. [ 550.788354][ T9003] XFS (nullb0): Invalid superblock magic number [ 552.496685][ T9023] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 555.228074][ T9053] netlink: 4 bytes leftover after parsing attributes in process `syz.4.831'. [ 556.175686][ T9073] netlink: 4 bytes leftover after parsing attributes in process `syz.1.840'. [ 556.488168][ C1] vcan0: j1939_session_tx_dat: 0xffff8880339bfc00: queue data error: -100 [ 556.688039][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880339bfc00: rx timeout, send abort [ 557.137938][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806a866c00: rx timeout, send abort [ 557.199155][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880339bfc00: abort rx timeout. Force session deactivation [ 559.363202][ T9097] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 560.148017][ T9105] 9pnet_virtio: no channels available for device 127.0.0.1 [ 563.412622][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.419689][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.874875][ T9134] syzkaller0: entered allmulticast mode [ 565.215052][ T9146] netlink: 56 bytes leftover after parsing attributes in process `syz.1.859'. [ 566.063477][ T8098] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 566.092442][ T8098] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 566.114549][ T8098] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 566.136924][ T9156] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 566.161869][ T8098] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 566.199097][ T8098] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 566.213020][ T8098] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 566.660703][ T9165] sg_write: data in/out 721008/1 bytes for SCSI command 0xcb-- guessing data in; [ 566.660703][ T9165] program syz.1.862 not setting count and/or reply_len properly [ 568.206468][ T9171] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 568.251875][ T4615] Bluetooth: hci2: command tx timeout [ 569.861935][ T9175] nvme_fabrics: missing parameter 'transport=%s' [ 569.879570][ T9175] nvme_fabrics: missing parameter 'nqn=%s' [ 570.300735][ T9154] chnl_net:caif_netlink_parms(): no params data found [ 570.331825][ T9176] Bluetooth: hci2: command tx timeout [ 570.662240][ T9176] Bluetooth: hci4: command 0x0406 tx timeout [ 570.672871][ T9176] Bluetooth: hci1: command 0x0406 tx timeout [ 570.679772][ T8097] Bluetooth: hci5: command 0x0406 tx timeout [ 571.405364][ T9154] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.444981][ T9154] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.481253][ T9154] bridge_slave_0: entered allmulticast mode [ 571.513302][ T9154] bridge_slave_0: entered promiscuous mode [ 571.789936][ T9154] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.823304][ T9154] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.832149][ T9154] bridge_slave_1: entered allmulticast mode [ 571.840058][ T9154] bridge_slave_1: entered promiscuous mode [ 572.025646][ T9224] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 572.097119][ T9154] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 572.253827][ T9154] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 572.421700][ T8098] Bluetooth: hci2: command tx timeout [ 572.709935][ T1170] hid-generic 0000:1000000:0000.0007: unknown main item tag 0x0 [ 572.804952][ T1170] hid-generic 0000:1000000:0000.0007: unknown main item tag 0x0 [ 573.553498][ T1170] hid-generic 0000:1000000:0000.0007: unknown main item tag 0x0 [ 573.571856][ T5232] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 573.805766][ T1170] hid-generic 0000:1000000:0000.0007: unknown main item tag 0x0 [ 573.809003][ T9154] team0: Port device team_slave_0 added [ 573.855391][ T1170] hid-generic 0000:1000000:0000.0007: unknown main item tag 0x0 [ 573.896041][ T1170] hid-generic 0000:1000000:0000.0007: unknown main item tag 0x0 [ 573.934728][ T9154] team0: Port device team_slave_1 added [ 573.956974][ T1170] hid-generic 0000:1000000:0000.0007: unknown main item tag 0x0 [ 574.001019][ T5232] usb 2-1: config 0 has no interfaces? [ 574.023778][ T1170] hid-generic 0000:1000000:0000.0007: unknown main item tag 0x0 [ 574.032090][ T5232] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 574.070100][ T1170] hid-generic 0000:1000000:0000.0007: unknown main item tag 0x0 [ 574.079110][ T5232] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.108973][ T1170] hid-generic 0000:1000000:0000.0007: unknown main item tag 0x0 [ 574.123044][ T5232] usb 2-1: config 0 descriptor?? [ 574.136249][ T1170] hid-generic 0000:1000000:0000.0007: unknown main item tag 0x0 [ 574.168775][ T9154] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 574.178261][ T1170] hid-generic 0000:1000000:0000.0007: unknown main item tag 0x0 [ 574.204998][ T9154] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 574.232023][ T1170] hid-generic 0000:1000000:0000.0007: unknown main item tag 0x0 [ 574.239712][ T1170] hid-generic 0000:1000000:0000.0007: unknown main item tag 0x0 [ 574.251689][ T5367] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 574.315716][ T1170] hid-generic 0000:1000000:0000.0007: unknown main item tag 0x0 [ 574.331367][ T1170] hid-generic 0000:1000000:0000.0007: unknown main item tag 0x0 [ 574.340100][ T9154] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 574.351051][ T1170] hid-generic 0000:1000000:0000.0007: unknown main item tag 0x0 [ 574.375554][ T9154] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 574.384897][ T1170] hid-generic 0000:1000000:0000.0007: unknown main item tag 0x0 [ 574.405120][ T9154] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 574.432904][ T1170] hid-generic 0000:1000000:0000.0007: unknown main item tag 0x0 [ 574.461436][ T1170] hid-generic 0000:1000000:0000.0007: unknown main item tag 0x0 [ 574.477367][ T9253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 574.487190][ T1170] hid-generic 0000:1000000:0000.0007: unknown main item tag 0x0 [ 574.491871][ T8098] Bluetooth: hci2: command tx timeout [ 574.509646][ T5367] usb 4-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 574.521677][ T9154] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 574.534950][ T9253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 574.557579][ T5367] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.632790][ T1170] hid-generic 0000:1000000:0000.0007: hidraw0: HID v0.00 Device [syz0] on syz1 [ 574.656623][ T5367] usb 4-1: Product: syz [ 574.660847][ T5367] usb 4-1: Manufacturer: syz [ 574.703647][ T5367] usb 4-1: SerialNumber: syz [ 574.748114][ T5367] usb 4-1: config 0 descriptor?? [ 574.833472][ T5232] usb 2-1: USB disconnect, device number 15 [ 574.842651][ T5367] hub 4-1:0.0: bad descriptor, ignoring hub [ 574.848643][ T5367] hub 4-1:0.0: probe with driver hub failed with error -5 [ 574.858523][ T9154] hsr_slave_0: entered promiscuous mode [ 574.893908][ T5367] f81232 4-1:0.0: f81534a converter detected [ 574.909858][ T9154] hsr_slave_1: entered promiscuous mode [ 574.964760][ T9154] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 575.011708][ T9154] Cannot create hsr debugfs directory [ 575.012297][ T5367] usb 4-1: f81534a converter now attached to ttyUSB0 [ 575.040951][ T9256] netlink: 12 bytes leftover after parsing attributes in process `syz.4.884'. [ 576.579922][ T9275] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 576.593478][ T1851] usb 4-1: USB disconnect, device number 13 [ 576.643303][ T1851] f81534a ttyUSB0: f81534a converter now disconnected from ttyUSB0 [ 576.673215][ T1851] f81232 4-1:0.0: device disconnected [ 576.880657][ T9154] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.305503][ T9154] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.354644][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 577.550597][ T9154] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.625674][ T9154] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 578.882987][ T9300] binder: 9293:9300 ioctl c0306201 20000380 returned -14 [ 580.176983][ T9154] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 580.234670][ T9154] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 580.572120][ T9154] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 581.680095][ T9154] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 584.040191][ T9154] 8021q: adding VLAN 0 to HW filter on device bond0 [ 585.363946][ T9154] 8021q: adding VLAN 0 to HW filter on device team0 [ 585.444371][ T6922] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.451607][ T6922] bridge0: port 1(bridge_slave_0) entered forwarding state [ 585.584545][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.591859][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 585.610128][ T9346] debugfs: Directory 'netdev:nicvf0' with parent 'phy21' already present! [ 588.608503][ T9154] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 589.953035][ T9154] veth0_vlan: entered promiscuous mode [ 590.025339][ T9154] veth1_vlan: entered promiscuous mode [ 590.175273][ T9386] netlink: 20 bytes leftover after parsing attributes in process `syz.1.918'. [ 590.193285][ T9154] veth0_macvtap: entered promiscuous mode [ 590.233382][ T9378] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 590.246593][ T9154] veth1_macvtap: entered promiscuous mode [ 590.379509][ T9154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 590.428436][ T9154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 590.470067][ T9154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 590.521665][ T9154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 590.562831][ T9154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 590.615052][ T9154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 590.669398][ T9154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 590.715214][ T9154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 590.782582][ T9154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 590.836924][ T9154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 590.867459][ T9154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 590.898366][ T9154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 590.934060][ T9154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 590.977205][ T9154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 591.026730][ T9154] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 591.115187][ T9154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 591.172727][ T9397] KVM: debugfs: duplicate directory 9397-4 [ 591.191213][ T9154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 591.258914][ T9154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 591.306869][ T9154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 591.346540][ T9154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 591.386735][ T9154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 591.437610][ T9154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 591.482265][ T9154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 591.506460][ T9154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 591.545903][ T9154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 591.584452][ T9154] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 591.605770][ T9403] netlink: 4 bytes leftover after parsing attributes in process `syz.3.921'. [ 591.627267][ T9154] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 591.712792][ T9154] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 591.760769][ T9154] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.846213][ T9154] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.891811][ T9154] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.931627][ T9154] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.062647][ T9408] netlink: 44 bytes leftover after parsing attributes in process `syz.3.923'. [ 592.327379][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 592.356929][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 592.478195][ T6918] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 592.517768][ T6918] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 598.789921][ T9479] netlink: 'syz.1.939': attribute type 6 has an invalid length. [ 601.622063][ T9501] vlan0: entered promiscuous mode [ 601.671685][ T9501] vlan0: entered allmulticast mode [ 603.710091][ T9523] Bluetooth: MGMT ver 1.23 [ 606.581820][ T9559] EXT4-fs (sda1): resizing filesystem from 262144 to 262144 blocks [ 608.075791][ T9574] sch_tbf: burst 8 is lower than device lo mtu (65550) ! [ 609.099370][ T9590] trusted_key: syz.3.971 sent an empty control message without MSG_MORE. [ 609.571693][ T25] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 609.762649][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 609.784036][ T25] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 609.829521][ T25] usb 2-1: config 0 has no interface number 0 [ 609.840750][ T25] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 609.888518][ T25] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 609.927019][ T25] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 609.947078][ T25] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 609.962096][ T25] usb 2-1: Product: syz [ 609.968054][ T25] usb 2-1: SerialNumber: syz [ 609.988123][ T9597] syz.0.973: attempt to access beyond end of device [ 609.988123][ T9597] nbd0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 610.006940][ T25] usb 2-1: config 0 descriptor?? [ 610.047633][ T25] usbhid 2-1:0.8: couldn't find an input interrupt endpoint [ 610.072515][ T1851] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 610.272820][ T1851] usb 3-1: Using ep0 maxpacket: 16 [ 610.299734][ T1851] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 610.357019][ T1851] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.439352][ T1851] usb 3-1: config 0 descriptor?? [ 610.469297][ T1851] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 610.808148][ T46] usb 2-1: USB disconnect, device number 16 [ 611.175665][ T5283] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 611.382905][ T5283] usb 4-1: Using ep0 maxpacket: 8 [ 611.406549][ T5283] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 611.431915][ T5283] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 611.460728][ T5283] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 611.484852][ T5283] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 611.521554][ T5283] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 611.571629][ T5283] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 611.608402][ T5283] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.677782][ T5283] usb 4-1: usb_control_msg returned -32 [ 612.688651][ T5283] usbtmc 4-1:16.0: can't read capabilities [ 612.871899][ T9623] usbtmc 4-1:16.0: INITIATE_CLEAR returned 0 [ 613.075584][ T46] usb 4-1: USB disconnect, device number 14 [ 613.878639][ T9635] netlink: 'syz.1.985': attribute type 4 has an invalid length. [ 613.914822][ T1851] gspca_sonixj: reg_w1 err -71 [ 613.940604][ T1851] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 614.052397][ T1851] usb 3-1: USB disconnect, device number 9 [ 615.638449][ T9642] syz.4.988: attempt to access beyond end of device [ 615.638449][ T9642] nbd4: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 616.005759][ T6920] bridge_slave_1: left allmulticast mode [ 616.047824][ T6920] bridge_slave_1: left promiscuous mode [ 616.091870][ T6920] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.149687][ T6920] bridge_slave_0: left allmulticast mode [ 617.176678][ T6920] bridge_slave_0: left promiscuous mode [ 617.212991][ T6920] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.310168][ T9658] kvm: kvm [9657]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x5500000800 [ 617.376954][ T9658] kvm: kvm [9657]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x7100000800 [ 617.408431][ T9658] kvm: kvm [9657]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xa600000000 [ 617.453189][ T9658] kvm: kvm [9657]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xb200000000 [ 617.859481][ T9672] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 618.167292][ T9676] qnx6: unable to read the first superblock [ 618.578066][ T9677] fuse: Bad value for 'fd' [ 624.742855][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.749225][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.655974][ T9712] syz.3.1004: attempt to access beyond end of device [ 625.655974][ T9712] nbd3: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 626.824786][ T54] Bluetooth: hci7: command 0x0406 tx timeout [ 628.564857][ T6920] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 628.675493][ T6920] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 628.710388][ T6920] bond0 (unregistering): Released all slaves [ 629.242917][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 629.265629][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 629.275362][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 629.286320][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 629.294542][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 629.316139][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 631.287817][ T9766] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 631.452520][ T54] Bluetooth: hci3: command tx timeout [ 631.576319][ T6920] hsr_slave_0: left promiscuous mode [ 631.612824][ T6920] hsr_slave_1: left promiscuous mode [ 631.614581][ T6920] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 631.614656][ T6920] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 631.616149][ T6920] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 631.616184][ T6920] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 631.696976][ T6920] veth1_macvtap: left promiscuous mode [ 631.697111][ T6920] veth0_macvtap: left promiscuous mode [ 631.697311][ T6920] veth1_vlan: left promiscuous mode [ 631.697445][ T6920] veth0_vlan: left promiscuous mode [ 633.541760][ T54] Bluetooth: hci3: command tx timeout [ 633.564426][ T6920] team0 (unregistering): Port device team_slave_1 removed [ 633.684862][ T6920] team0 (unregistering): Port device team_slave_0 removed [ 635.611639][ T54] Bluetooth: hci3: command tx timeout [ 635.843125][ T9757] chnl_net:caif_netlink_parms(): no params data found [ 636.317863][ T9757] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.325605][ T9757] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.339105][ T9757] bridge_slave_0: entered allmulticast mode [ 636.370893][ T9757] bridge_slave_0: entered promiscuous mode [ 636.422385][ T9757] bridge0: port 2(bridge_slave_1) entered blocking state [ 636.429674][ T9757] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.457776][ T9757] bridge_slave_1: entered allmulticast mode [ 636.526527][ T9757] bridge_slave_1: entered promiscuous mode [ 636.737449][ T6920] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.764787][ T54] Bluetooth: hci3: command tx timeout [ 637.887141][ T9757] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 638.124180][ T6920] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.131841][ T5331] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 638.164234][ T9757] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 638.854225][ T5331] usb 1-1: Using ep0 maxpacket: 32 [ 638.885913][ T5331] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 638.992206][ T6920] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.066970][ T5331] usb 1-1: config 0 has no interfaces? [ 639.073101][ T5331] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 639.082592][ T5331] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 639.128476][ T5331] usb 1-1: config 0 descriptor?? [ 639.465420][ T9872] xt_NFQUEUE: number of queues (65532) out of range (got 75748) [ 639.514032][ T9851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 640.438726][ T9851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 640.525741][ T9757] team0: Port device team_slave_0 added [ 640.717354][ T6920] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.846053][ T9757] team0: Port device team_slave_1 added [ 641.120062][ T9757] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 641.153797][ T9757] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 641.335167][ T9757] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 641.462882][ T9851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 641.597324][ T9757] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 641.879299][ T9757] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 641.969450][ T9757] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 642.062067][ T9851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 643.112258][ T5274] usb 1-1: USB disconnect, device number 10 [ 643.283181][ T9757] hsr_slave_0: entered promiscuous mode [ 643.378683][ T9757] hsr_slave_1: entered promiscuous mode [ 643.456334][ T9757] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 643.475229][ T9757] Cannot create hsr debugfs directory [ 643.496981][ T6920] bridge_slave_1: left allmulticast mode [ 643.521754][ T6920] bridge_slave_1: left promiscuous mode [ 643.530067][ T6920] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.551220][ T6920] bridge_slave_0: left allmulticast mode [ 643.604300][ T6920] bridge_slave_0: left promiscuous mode [ 643.630443][ T6920] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.695115][ T6920] bridge_slave_1: left allmulticast mode [ 643.722983][ T6920] bridge_slave_1: left promiscuous mode [ 643.768801][ T6920] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.100979][ T6920] bridge_slave_0: left allmulticast mode [ 644.237492][ T6920] bridge_slave_0: left promiscuous mode [ 644.372202][ T6920] bridge0: port 1(bridge_slave_0) entered disabled state [ 645.602011][ T9928] orangefs_mount: mount request failed with -4 [ 649.342137][ T6920] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 649.385518][ T6920] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 649.412469][ T6920] bond0 (unregistering): Released all slaves [ 649.881039][ T6920] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 649.924995][ T6920] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 649.945278][ T6920] bond0 (unregistering): Released all slaves [ 651.177552][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 651.961899][ T5232] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 652.185109][ T9987] kvm: kvm [9982]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe702111 [ 652.570217][ T9989] Bluetooth: MGMT ver 1.23 [ 653.213598][ T5232] usb 1-1: New USB device found, idVendor=03f0, idProduct=0307, bcdDevice= 0.01 [ 653.255159][ T5232] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.307994][ T5232] usb 1-1: Product: syz [ 653.324025][ T5232] usb 1-1: Manufacturer: syz [ 653.324558][T10001] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 653.328644][ T5232] usb 1-1: SerialNumber: syz [ 653.375631][ T5232] usb 1-1: config 0 descriptor?? [ 653.413965][ T5232] ums-usbat 1-1:0.0: USB Mass Storage device detected [ 653.437217][T10001] kvm: pic: non byte read [ 653.514136][T10001] kvm: pic: level sensitive irq not supported [ 653.514321][T10001] kvm: pic: non byte read [ 653.570152][T10001] kvm: pic: level sensitive irq not supported [ 653.570685][T10001] kvm: pic: non byte read [ 653.582775][T10001] kvm: pic: level sensitive irq not supported [ 653.582923][T10001] kvm: pic: non byte read [ 653.900389][ T1851] usb 1-1: USB disconnect, device number 11 [ 655.953711][ T6920] hsr_slave_0: left promiscuous mode [ 656.024015][ T6920] hsr_slave_1: left promiscuous mode [ 656.077435][ T6920] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 656.092383][ T6920] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 656.121108][ T6920] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 656.128755][ T6920] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 656.291429][ T6920] hsr_slave_0: left promiscuous mode [ 657.992043][ T6920] hsr_slave_1: left promiscuous mode [ 658.104908][ T6920] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 658.141277][T10053] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1081'. [ 658.153135][ T6920] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 658.162539][ T6920] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 658.170002][ T6920] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 658.284772][ T6920] veth1_macvtap: left promiscuous mode [ 658.290338][ T6920] veth0_macvtap: left promiscuous mode [ 658.306633][ T6920] veth1_vlan: left promiscuous mode [ 658.309598][T10056] overlayfs: failed to get index nlink (file1/bus, err=-61) [ 658.321680][ T6920] veth0_vlan: left promiscuous mode [ 658.658094][ T6920] veth1_macvtap: left promiscuous mode [ 658.797072][ T6920] veth0_macvtap: left promiscuous mode [ 658.933572][ T6920] veth1_vlan: left promiscuous mode [ 659.031455][ T6920] veth0_vlan: left promiscuous mode [ 659.262805][T10064] xt_hashlimit: size too large, truncated to 1048576 [ 661.912184][ T6920] team0 (unregistering): Port device team_slave_1 removed [ 662.024786][ T6920] team0 (unregistering): Port device team_slave_0 removed [ 664.312525][ T6920] team0 (unregistering): Port device team_slave_1 removed [ 664.472493][ T6920] team0 (unregistering): Port device team_slave_0 removed [ 665.631788][ T8098] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 665.654759][ T8098] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 665.663816][ T8098] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 665.694897][ T8098] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 665.727533][ T8098] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 665.736205][ T8098] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 666.467898][T10079] netlink: 200 bytes leftover after parsing attributes in process `syz.0.1087'. [ 666.580049][ T9757] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 666.661204][T10089] vivid-000: ================= START STATUS ================= [ 666.670664][T10089] vivid-000: Generate PTS: true [ 666.676359][T10089] vivid-000: Generate SCR: true [ 666.681516][T10089] tpg source WxH: 320x180 (Y'CbCr) [ 666.686693][T10089] tpg field: 1 [ 666.690143][T10089] tpg crop: 320x180@0x0 [ 666.695401][T10089] tpg compose: 320x180@0x0 [ 666.700802][T10089] tpg colorspace: 8 [ 666.704751][T10089] tpg transfer function: 0/0 [ 666.709425][T10089] tpg Y'CbCr encoding: 0/0 [ 666.714077][T10089] tpg quantization: 0/0 [ 666.718398][T10089] tpg RGB range: 0/2 [ 666.722466][T10089] vivid-000: ================== END STATUS ================== [ 667.480852][ T9757] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 667.810856][ T9757] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 667.829580][ T54] Bluetooth: hci5: command tx timeout [ 668.400426][ T9757] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 669.862678][ T54] Bluetooth: hci5: command tx timeout [ 670.598000][ T5286] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 671.205341][ T5286] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 671.227779][ T5286] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.295200][ T5286] usb 1-1: config 0 descriptor?? [ 671.886733][ T9757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 671.942318][ T54] Bluetooth: hci5: command tx timeout [ 671.959039][T10081] chnl_net:caif_netlink_parms(): no params data found [ 672.217935][ T9757] 8021q: adding VLAN 0 to HW filter on device team0 [ 672.351027][ T5286] ath6kl: Failed to submit usb control message: -110 [ 672.381871][ T5286] ath6kl: unable to send the bmi data to the device: -110 [ 672.389165][ T5286] ath6kl: Unable to send get target info: -110 [ 672.416232][ T2562] bridge0: port 1(bridge_slave_0) entered blocking state [ 672.423466][ T2562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 672.433599][ T5286] ath6kl: Failed to init ath6kl core: -110 [ 672.443270][ T5286] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 672.707852][ T2562] bridge0: port 2(bridge_slave_1) entered blocking state [ 672.715090][ T2562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 673.755782][ T5286] usb 1-1: USB disconnect, device number 12 [ 673.845882][T10081] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.886406][T10081] bridge0: port 1(bridge_slave_0) entered disabled state [ 673.914156][T10081] bridge_slave_0: entered allmulticast mode [ 673.935929][T10081] bridge_slave_0: entered promiscuous mode [ 673.961824][T10081] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.984413][T10081] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.998138][T10081] bridge_slave_1: entered allmulticast mode [ 674.011782][ T8098] Bluetooth: hci5: command tx timeout [ 674.023203][T10081] bridge_slave_1: entered promiscuous mode [ 674.343823][T10081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 674.387967][T10081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 674.733839][T10081] team0: Port device team_slave_0 added [ 674.773722][T10081] team0: Port device team_slave_1 added [ 674.899570][T10081] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 674.935463][T10081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 674.994861][T10081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 675.065051][T10081] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 675.081385][T10081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 675.219499][T10081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 676.137020][T10081] hsr_slave_0: entered promiscuous mode [ 676.182291][T10081] hsr_slave_1: entered promiscuous mode [ 677.171636][ T5232] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 677.231848][T10204] Cannot find add_set index 0 as target [ 677.498432][ T5232] usb 1-1: Using ep0 maxpacket: 16 [ 678.637084][ T5232] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 678.670653][ T9757] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 678.692870][ T5232] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 678.761374][ T5232] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 678.786584][ T5232] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.806222][ T5232] usb 1-1: Product: syz [ 678.821588][ T5232] usb 1-1: Manufacturer: syz [ 678.826260][ T5232] usb 1-1: SerialNumber: syz [ 678.883564][ T5232] usb 1-1: config 0 descriptor?? [ 678.909608][T10217] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 678.914026][ T5232] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 678.941038][ T5232] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 678.973634][T10217] kvm: pic: level sensitive irq not supported [ 678.973744][T10217] kvm: pic: non byte read [ 679.007318][T10081] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.111589][ T1170] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 679.168336][ T9757] veth0_vlan: entered promiscuous mode [ 679.270317][T10081] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.309015][ T9757] veth1_vlan: entered promiscuous mode [ 679.337165][ T1170] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 679.361555][ T1170] usb 4-1: config 0 has no interface number 0 [ 679.387530][ T1170] usb 4-1: New USB device found, idVendor=15ba, idProduct=0003, bcdDevice=9b.0a [ 679.408751][ T1170] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 679.429501][ T1170] usb 4-1: Product: syz [ 679.442102][ T1170] usb 4-1: Manufacturer: syz [ 679.457020][ T1170] usb 4-1: SerialNumber: syz [ 679.480978][ T1170] usb 4-1: config 0 descriptor?? [ 679.494996][T10081] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.515185][ T1170] ftdi_sio 4-1:0.1: FTDI USB Serial Device converter detected [ 679.543476][ T1170] ftdi_sio ttyUSB0: unknown device type: 0x9b0a [ 679.571713][ T5232] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 679.590599][ T5232] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 679.607575][ T9757] veth0_macvtap: entered promiscuous mode [ 679.747642][T10081] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.805339][ T9757] veth1_macvtap: entered promiscuous mode [ 679.893861][ T9757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 679.936075][ T9757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 679.951706][ T9757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 679.975328][ T9757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 680.172003][ T9757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 680.221602][ T9757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 680.246365][ T9757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 680.246429][ T5232] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 680.257233][ T9757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 680.257261][ T9757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 680.257281][ T9757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 680.259289][ T9757] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 680.317789][ T9757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 680.329999][ T9757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 680.558573][ T9757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 680.772034][ T9757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 680.877258][ T9757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 680.922038][ T9757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 680.970452][ T9757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 681.014113][ T9757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 681.057709][ T9757] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 681.086905][ T5232] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 681.132140][ T9757] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.153063][ T5232] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 681.159509][ T9757] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.190129][ T9757] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.224197][ T9757] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 681.503923][ T5232] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 681.561115][ T5232] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 682.241717][ T1851] usb 4-1: USB disconnect, device number 15 [ 682.248947][ T1851] ftdi_sio 4-1:0.1: device disconnected [ 682.344502][ T5232] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 682.381856][ T2524] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 682.386764][ T5232] usb 1-1: USB disconnect, device number 13 [ 682.391557][ T2524] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 682.533955][T10081] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 682.559706][T10081] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 682.588564][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 682.605564][T10081] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 682.618734][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 682.655196][T10081] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 682.841607][T10256] kvm: kvm [10255]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x800 [ 682.914650][T10256] kvm: kvm [10255]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x800 [ 684.063439][T10270] vcan0 speed is unknown, defaulting to 1000 [ 684.085324][T10270] vcan0 speed is unknown, defaulting to 1000 [ 684.142655][T10270] vcan0 speed is unknown, defaulting to 1000 [ 684.257177][T10270] infiniband syz1: set active [ 684.261934][T10270] infiniband syz1: added vcan0 [ 684.267121][T10270] syz1: rxe_create_cq: returned err = -12 [ 684.272984][T10270] infiniband syz1: Couldn't create ib_mad CQ [ 684.279084][T10270] infiniband syz1: Couldn't open port 1 [ 684.298576][T10270] RDS/IB: syz1: added [ 684.302700][T10270] smc: adding ib device syz1 with port count 1 [ 684.309524][T10270] smc: ib device syz1 port 1 has pnetid SYZ0 (user defined) [ 684.368019][T10270] vcan0 speed is unknown, defaulting to 1000 [ 684.503692][T10270] vcan0 speed is unknown, defaulting to 1000 [ 684.635132][T10081] 8021q: adding VLAN 0 to HW filter on device bond0 [ 684.642395][ T1851] vcan0 speed is unknown, defaulting to 1000 [ 684.666929][ T5286] vcan0 speed is unknown, defaulting to 1000 [ 684.678569][T10270] vcan0 speed is unknown, defaulting to 1000 [ 684.800177][T10270] vcan0 speed is unknown, defaulting to 1000 [ 684.920435][T10270] vcan0 speed is unknown, defaulting to 1000 [ 685.041441][T10270] vcan0 speed is unknown, defaulting to 1000 [ 685.164441][T10270] vcan0 speed is unknown, defaulting to 1000 [ 685.450691][T10081] 8021q: adding VLAN 0 to HW filter on device team0 [ 686.372737][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.379101][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.696631][ T2524] bridge0: port 1(bridge_slave_0) entered blocking state [ 686.703924][ T2524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 686.811416][ T6920] bridge0: port 2(bridge_slave_1) entered blocking state [ 686.818664][ T6920] bridge0: port 2(bridge_slave_1) entered forwarding state [ 687.541535][T10081] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 687.552593][T10081] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 689.093288][T10081] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 689.491562][T10254] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 689.731818][T10254] usb 1-1: Using ep0 maxpacket: 8 [ 689.772567][T10254] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 689.811863][T10254] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.850523][T10254] usb 1-1: Product: syz [ 689.899874][T10254] usb 1-1: Manufacturer: syz [ 689.911736][T10254] usb 1-1: SerialNumber: syz [ 689.925561][T10254] usb 1-1: config 0 descriptor?? [ 690.105076][T10081] veth0_vlan: entered promiscuous mode [ 690.154567][T10081] veth1_vlan: entered promiscuous mode [ 690.244284][T10254] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 690.250691][T10081] veth0_macvtap: entered promiscuous mode [ 690.254470][ T5283] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 690.334959][T10081] veth1_macvtap: entered promiscuous mode [ 690.454690][T10081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 690.502760][ T5283] usb 3-1: Using ep0 maxpacket: 32 [ 690.511675][T10081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 690.533004][ T5283] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 690.581590][ T5283] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.589934][T10081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 690.622720][ T5283] usb 3-1: config 0 descriptor?? [ 690.628080][T10081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 690.665249][ T5283] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 690.691543][T10081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 690.730746][T10081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 690.761904][T10081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 690.773023][T10081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 690.791883][T10081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 690.816324][T10081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 690.827248][T10081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 690.838161][T10081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 690.857868][T10081] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 690.952164][T10081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 691.001689][T10081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.034284][T10081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 691.045599][T10081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.086982][T10081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 691.111725][T10081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.128310][T10081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 691.156943][T10081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.187354][T10081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 691.228476][T10081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 691.273911][T10081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 691.354398][T10081] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.363867][T10081] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.389473][T10081] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.400688][T10081] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.653254][ T2524] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 691.684920][ T2524] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 691.733577][T10254] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 691.779736][T10254] usb 1-1: USB disconnect, device number 14 [ 691.789066][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 691.859429][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 693.439112][ T4615] Bluetooth: hci2: command 0x0406 tx timeout [ 694.991404][ T5274] usb 3-1: USB disconnect, device number 10 [ 696.197173][T10337] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 696.239746][T10337] overlayfs: failed to set xattr on upper [ 696.252672][T10337] overlayfs: ...falling back to redirect_dir=nofollow. [ 696.269537][T10337] overlayfs: ...falling back to index=off. [ 696.284958][T10337] overlayfs: ...falling back to uuid=null. [ 696.310132][T10337] overlayfs: ...falling back to xino=off. [ 696.672342][ T5232] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 697.448797][ T5232] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 697.503102][ T5232] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.532782][ T5232] usb 3-1: config 0 descriptor?? [ 697.667566][T10356] loop4: detected capacity change from 0 to 7 [ 697.705213][T10356] Buffer I/O error on dev loop4, logical block 0, async page read [ 697.713957][T10356] Buffer I/O error on dev loop4, logical block 0, async page read [ 697.748003][T10356] Buffer I/O error on dev loop4, logical block 0, async page read [ 697.811874][T10356] Buffer I/O error on dev loop4, logical block 0, async page read [ 697.820016][T10356] Buffer I/O error on dev loop4, logical block 0, async page read [ 697.830108][T10356] Buffer I/O error on dev loop4, logical block 0, async page read [ 697.859698][T10356] Buffer I/O error on dev loop4, logical block 0, async page read [ 697.868522][T10356] ldm_validate_partition_table(): Disk read failed. [ 697.875980][T10356] Buffer I/O error on dev loop4, logical block 0, async page read [ 697.885629][T10356] Buffer I/O error on dev loop4, logical block 0, async page read [ 697.893803][T10356] Buffer I/O error on dev loop4, logical block 0, async page read [ 697.902072][T10356] Dev loop4: unable to read RDB block 0 [ 697.917838][T10356] loop4: unable to read partition table [ 697.923960][T10356] loop4: partition table beyond EOD, truncated [ 697.936941][T10356] loop_reread_partitions: partition scan of loop4 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 697.936941][T10356] ) failed (rc=-5) [ 698.115343][T10360] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1144'. [ 698.924100][ T4615] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 698.935830][ T4615] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 698.943928][ T4615] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 698.954100][ T4615] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 698.991709][ T4615] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 699.036230][ T4615] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 700.602957][ T5232] pegasus 3-1:0.0: probe with driver pegasus failed with error -110 [ 701.058418][ T5331] usb 3-1: USB disconnect, device number 11 [ 701.149743][T10371] Cannot find add_set index 0 as target [ 701.180590][ T4615] Bluetooth: hci1: command tx timeout [ 701.913355][T10361] vcan0 speed is unknown, defaulting to 1000 [ 703.315772][ T4615] Bluetooth: hci1: command tx timeout [ 703.553857][T10393] vlan2: entered promiscuous mode [ 703.595434][T10393] bond0: entered promiscuous mode [ 703.631047][T10393] bond_slave_0: entered promiscuous mode [ 703.702153][T10393] bond_slave_1: entered promiscuous mode [ 703.838973][T10393] team0: Port device vlan2 added [ 703.891686][ T29] audit: type=1326 audit(1725680886.185:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10398 comm="syz.2.1153" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f59b497cef9 code=0x0 [ 705.381826][ T4615] Bluetooth: hci1: command tx timeout [ 707.404762][T10361] chnl_net:caif_netlink_parms(): no params data found [ 707.451607][ T4615] Bluetooth: hci1: command tx timeout [ 709.119121][T10361] bridge0: port 1(bridge_slave_0) entered blocking state [ 709.156299][T10361] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.197518][T10361] bridge_slave_0: entered allmulticast mode [ 709.452187][T10361] bridge_slave_0: entered promiscuous mode [ 709.854973][T10361] bridge0: port 2(bridge_slave_1) entered blocking state [ 709.882028][T10361] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.948212][T10361] bridge_slave_1: entered allmulticast mode [ 709.999268][T10361] bridge_slave_1: entered promiscuous mode [ 710.372201][ T5274] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 710.733254][ T5274] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 710.753856][ T5274] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 710.765165][ T5274] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 710.774540][ T5274] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 710.782742][ T5274] usb 4-1: SerialNumber: syz [ 710.815782][T10361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 710.903414][T10361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 711.020158][ T5274] usb 4-1: 0:2 : does not exist [ 711.057135][ T5274] usb 4-1: unit 255 not found! [ 712.428697][ T5274] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 712.534715][ T5274] usb 4-1: USB disconnect, device number 16 [ 712.829925][T10260] udevd[10260]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 713.838504][T10361] team0: Port device team_slave_0 added [ 713.929853][T10361] team0: Port device team_slave_1 added [ 713.964255][T10481] 9pnet_fd: Insufficient options for proto=fd [ 717.146479][T10361] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 717.972247][T10361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 717.998308][ C0] vkms_vblank_simulate: vblank timer overrun [ 718.151575][T10361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 718.311811][T10502] bridge0: entered promiscuous mode [ 718.328165][T10502] macsec1: entered promiscuous mode [ 718.352338][T10502] macsec1: entered allmulticast mode [ 718.363609][T10513] capability: warning: `syz.3.1180' uses 32-bit capabilities (legacy support in use) [ 718.383515][T10502] bridge0: entered allmulticast mode [ 718.413074][T10361] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 718.481682][T10361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 718.632571][T10361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 718.852573][T10525] netlink: 'syz.0.1182': attribute type 16 has an invalid length. [ 718.922785][T10525] netlink: 'syz.0.1182': attribute type 3 has an invalid length. [ 718.941083][T10521] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1183'. [ 718.983002][T10525] netlink: 64066 bytes leftover after parsing attributes in process `syz.0.1182'. [ 719.026666][T10524] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1183'. [ 719.043160][T10530] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 719.286387][T10524] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 719.378147][T10524] team0: Port device batadv1 added [ 719.944651][T10526] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 720.057408][T10361] hsr_slave_0: entered promiscuous mode [ 720.099714][T10361] hsr_slave_1: entered promiscuous mode [ 720.168436][T10361] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 720.200175][T10361] Cannot create hsr debugfs directory [ 720.212473][T10521] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1183'. [ 720.571671][T10541] veth1_macvtap: left promiscuous mode [ 721.129156][T10361] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 721.225982][T10546] netlink: 'syz.2.1188': attribute type 10 has an invalid length. [ 721.338413][T10546] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 721.731803][T10361] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 722.713209][T10562] fuse: Unknown parameter 'ÿÿÿÿ0000000000000000000005600000000000000000000' [ 722.866853][T10361] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.197163][T10361] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.395939][T10569] netlink: 'syz.0.1197': attribute type 3 has an invalid length. [ 723.568517][T10569] netlink: 'syz.0.1197': attribute type 3 has an invalid length. [ 723.667589][T10361] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 723.719661][T10361] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 723.776135][T10361] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 723.821597][T10361] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 724.359110][T10361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 724.609349][T10361] 8021q: adding VLAN 0 to HW filter on device team0 [ 724.713614][T10506] bridge0: port 1(bridge_slave_0) entered blocking state [ 724.720735][T10506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 724.743880][T10588] netlink: zone id is out of range [ 724.777538][T10588] netlink: zone id is out of range [ 724.913971][T10506] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.921161][T10506] bridge0: port 2(bridge_slave_1) entered forwarding state [ 724.945485][T10588] netlink: set zone limit has 4 unknown bytes [ 726.981187][T10614] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1209'. [ 726.990801][T10614] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1209'. [ 727.899863][T10361] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 728.198889][T10622] vlan0: entered promiscuous mode [ 728.222012][T10622] dummy0: entered promiscuous mode [ 728.288579][T10622] team0: Port device vlan0 added [ 728.437403][T10361] veth0_vlan: entered promiscuous mode [ 728.564342][T10361] veth1_vlan: entered promiscuous mode [ 728.686984][T10361] veth0_macvtap: entered promiscuous mode [ 728.718236][T10361] veth1_macvtap: entered promiscuous mode [ 728.934368][T10361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 728.945046][T10361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.019224][T10633] netlink: 'syz.3.1213': attribute type 7 has an invalid length. [ 729.027340][T10633] netlink: 'syz.3.1213': attribute type 8 has an invalid length. [ 729.035341][T10633] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1213'. [ 729.698129][T10361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 729.751543][T10361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.811626][T10361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 729.856546][T10361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.881744][T10635] 9pnet: p9_errstr2errno: server reported unknown error [ 729.889552][T10361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 729.920024][T10361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 729.952810][T10361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 729.990632][T10361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.021621][T10361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 730.074679][T10361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.133339][T10361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 730.179528][T10361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.229118][T10361] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 730.325598][T10361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 730.401667][T10361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.441032][T10361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 730.548569][T10361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.589929][T10361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 730.639328][T10361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.673162][T10361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 730.701945][T10361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.758381][T10361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 730.831683][T10361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.871661][T10361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 730.913590][T10361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.954743][T10361] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 731.006082][T10361] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.047460][T10361] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.076518][T10361] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.121566][T10361] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 731.784736][ T2562] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 731.852870][ T2562] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 731.953072][ T2524] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 731.982096][ T2524] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 732.174478][T10662] netlink: 'syz.0.1223': attribute type 11 has an invalid length. [ 732.400292][T10662] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 732.437257][T10662] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 739.393855][T10254] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 739.793370][T10254] usb 3-1: Using ep0 maxpacket: 8 [ 740.011737][T10254] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 740.025948][T10254] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 740.036099][T10254] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 740.046330][T10254] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 740.070066][T10254] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 740.111598][T10254] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.374864][T10254] usb 3-1: GET_CAPABILITIES returned 0 [ 740.380524][T10254] usbtmc 3-1:16.0: can't read capabilities [ 742.239481][ T5232] usb 3-1: USB disconnect, device number 12 [ 745.242261][ T1851] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 746.073760][ T1851] usb 4-1: device descriptor read/all, error -71 [ 748.087001][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.094018][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.790209][T10776] xt_CT: No such helper "pptp" [ 754.569520][ T54] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 754.583323][ T54] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 754.595415][ T54] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 754.608184][ T54] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 754.619820][ T54] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 754.634824][ T54] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 754.892675][ T4615] Bluetooth: hci3: command 0x0406 tx timeout [ 755.122373][T10819] vcan0 speed is unknown, defaulting to 1000 [ 755.711460][T10828] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 756.731869][ T8098] Bluetooth: hci7: command tx timeout [ 758.811683][ T8098] Bluetooth: hci7: command tx timeout [ 760.891607][ T8098] Bluetooth: hci7: command tx timeout [ 762.610205][T10845] overlayfs: overlapping lowerdir path [ 763.271527][ T8098] Bluetooth: hci7: command tx timeout [ 763.366604][ T2562] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 763.729601][ T2562] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.506683][ T2562] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.899980][ T2562] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.007164][T10819] chnl_net:caif_netlink_parms(): no params data found [ 770.095243][T10891] xt_CT: No such helper "pptp" [ 770.177555][ T29] audit: type=1326 audit(1725680952.475:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10889 comm="syz.4.1286" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f61b6f7cef9 code=0x0 [ 770.256172][T10894] input: syz1 as /devices/virtual/input/input18 [ 770.447851][T10819] bridge0: port 1(bridge_slave_0) entered blocking state [ 771.362032][T10819] bridge0: port 1(bridge_slave_0) entered disabled state [ 771.369391][T10819] bridge_slave_0: entered allmulticast mode [ 771.438465][T10904] dccp_close: ABORT with 104 bytes unread [ 771.447602][T10819] bridge_slave_0: entered promiscuous mode [ 771.504689][T10819] bridge0: port 2(bridge_slave_1) entered blocking state [ 771.562185][T10819] bridge0: port 2(bridge_slave_1) entered disabled state [ 771.569531][T10819] bridge_slave_1: entered allmulticast mode [ 771.607087][T10819] bridge_slave_1: entered promiscuous mode [ 771.854623][T10819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 772.505243][T10819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 775.534290][T10819] team0: Port device team_slave_0 added [ 775.834934][T10819] team0: Port device team_slave_1 added [ 776.355265][T10937] netlink: 'syz.4.1296': attribute type 1 has an invalid length. [ 776.799528][ T2562] bridge_slave_1: left allmulticast mode [ 776.808231][ T2562] bridge_slave_1: left promiscuous mode [ 776.831742][ T2562] bridge0: port 2(bridge_slave_1) entered disabled state [ 776.883059][ T2562] bridge_slave_0: left allmulticast mode [ 776.888775][ T2562] bridge_slave_0: left promiscuous mode [ 776.937898][ T2562] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.662739][T10970] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1306'. [ 783.456091][ T2562] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 783.475454][ T2562] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 783.504442][ T2562] bond0 (unregistering): Released all slaves [ 783.715587][T10974] tipc: Started in network mode [ 783.720513][T10974] tipc: Node identity aaaaaaaaaa34, cluster identity 4711 [ 783.738818][T10974] tipc: Enabled bearer , priority 0 [ 783.782160][T10819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 783.808852][T10819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 783.937326][T10819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 785.125179][ T5317] tipc: Node number set to 10398378 [ 788.543910][T10819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 788.585637][T10819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 788.751562][T10819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 789.373038][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 789.387484][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 789.402236][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 789.441731][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 789.453736][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 789.461225][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 789.797219][T10819] hsr_slave_0: entered promiscuous mode [ 789.864215][T10819] hsr_slave_1: entered promiscuous mode [ 789.891507][T10819] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 789.909403][T10819] Cannot create hsr debugfs directory [ 790.818687][ T4615] Bluetooth: hci5: command 0x0406 tx timeout [ 791.531817][ T8098] Bluetooth: hci1: command tx timeout [ 792.584302][ T2562] hsr_slave_0: left promiscuous mode [ 792.641718][ T2562] hsr_slave_1: left promiscuous mode [ 792.692433][ T2562] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 792.729371][ T2562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 792.803328][ T2562] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 792.824073][ T2562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 793.611913][ T8098] Bluetooth: hci1: command tx timeout [ 793.906500][ T2562] veth1_macvtap: left promiscuous mode [ 793.931635][ T2562] veth0_macvtap: left promiscuous mode [ 793.937502][ T2562] veth1_vlan: left promiscuous mode [ 793.966866][ T2562] veth0_vlan: left promiscuous mode [ 795.706564][ T8098] Bluetooth: hci1: command tx timeout [ 797.778360][ T8098] Bluetooth: hci1: command tx timeout [ 798.046620][ T2562] team0 (unregistering): Port device team_slave_1 removed [ 798.244743][ T2562] team0 (unregistering): Port device team_slave_0 removed [ 801.002623][ T4615] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 801.013635][ T4615] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 801.024211][ T4615] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 801.033214][ T4615] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 801.040968][ T4615] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 801.050330][ T4615] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 801.431576][T11018] vcan0 speed is unknown, defaulting to 1000 [ 801.468558][T11064] geneve2: entered promiscuous mode [ 801.481491][T11064] geneve2: entered allmulticast mode [ 802.626323][T11066] vcan0 speed is unknown, defaulting to 1000 [ 803.181946][ T8098] Bluetooth: hci8: command tx timeout [ 804.152213][ T5286] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 804.403904][ T5286] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 804.445791][ T5286] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 804.501594][ T5286] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 804.557268][ T5286] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.609184][ T5286] usb 3-1: config 0 descriptor?? [ 805.306382][ T8098] Bluetooth: hci8: command tx timeout [ 805.346960][ T5286] isku 0003:1E7D:319C.0008: unknown main item tag 0x1 [ 805.405476][ T5286] isku 0003:1E7D:319C.0008: unbalanced collection at end of report description [ 805.429512][ T5286] isku 0003:1E7D:319C.0008: parse failed [ 805.439396][ T5286] isku 0003:1E7D:319C.0008: probe with driver isku failed with error -22 [ 805.969579][T11018] chnl_net:caif_netlink_parms(): no params data found [ 806.032745][ T8] usb 3-1: USB disconnect, device number 13 [ 806.967371][T11129] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1335'. [ 806.976804][T11129] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1335'. [ 807.371629][ T8098] Bluetooth: hci8: command tx timeout [ 807.712406][T10819] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 807.784984][T11018] bridge0: port 1(bridge_slave_0) entered blocking state [ 807.831628][T11018] bridge0: port 1(bridge_slave_0) entered disabled state [ 807.911778][T11018] bridge_slave_0: entered allmulticast mode [ 807.943407][T11018] bridge_slave_0: entered promiscuous mode [ 807.960021][T11066] chnl_net:caif_netlink_parms(): no params data found [ 808.022005][T10819] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 808.945421][T10819] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 809.003277][T11018] bridge0: port 2(bridge_slave_1) entered blocking state [ 809.010427][T11018] bridge0: port 2(bridge_slave_1) entered disabled state [ 809.054960][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.067057][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.151993][T11018] bridge_slave_1: entered allmulticast mode [ 809.168306][T11018] bridge_slave_1: entered promiscuous mode [ 809.437180][T10819] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 809.451555][ T8098] Bluetooth: hci8: command tx timeout [ 810.521051][T11018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 810.877911][T11018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 810.969733][T11153] Cannot find del_set index 0 as target [ 811.968430][T11156] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1341'. [ 813.804989][T11018] team0: Port device team_slave_0 added [ 813.904032][T11066] bridge0: port 1(bridge_slave_0) entered blocking state [ 813.911226][T11066] bridge0: port 1(bridge_slave_0) entered disabled state [ 813.983089][T11066] bridge_slave_0: entered allmulticast mode [ 813.990770][T11066] bridge_slave_0: entered promiscuous mode [ 814.082245][T11066] bridge0: port 2(bridge_slave_1) entered blocking state [ 814.089482][T11066] bridge0: port 2(bridge_slave_1) entered disabled state [ 814.151930][T11066] bridge_slave_1: entered allmulticast mode [ 814.182482][T11066] bridge_slave_1: entered promiscuous mode [ 814.234823][T11018] team0: Port device team_slave_1 added [ 814.675124][T11066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 815.454149][ T4615] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 815.484476][ T4615] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 815.493809][ T4615] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 815.504469][ T4615] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 815.516042][ T4615] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 815.535951][T11066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 815.546938][ T4615] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 815.665232][T11018] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 815.710155][T11018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 815.736268][T11018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 815.832173][T11018] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 815.870326][T11018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 815.946410][T11018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 817.081817][T11066] team0: Port device team_slave_0 added [ 817.125191][T11066] team0: Port device team_slave_1 added [ 817.142005][T11188] vcan0 speed is unknown, defaulting to 1000 [ 817.159560][T11201] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1349'. [ 817.310743][T11201] vlan2: entered promiscuous mode [ 817.340694][T11201] bridge0: entered promiscuous mode [ 817.402775][T11201] bridge0: left promiscuous mode [ 817.691850][ T8098] Bluetooth: hci9: command tx timeout [ 817.898223][T11207] mac80211_hwsim hwsim32 wlan1: entered allmulticast mode [ 818.024282][ T6922] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 818.077991][ T6922] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 818.098164][T11018] hsr_slave_0: entered promiscuous mode [ 818.145821][T11018] hsr_slave_1: entered promiscuous mode [ 818.190982][T11018] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 818.230760][T11018] Cannot create hsr debugfs directory [ 818.590377][T11066] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 818.641512][T11066] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 818.767661][T11066] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 819.151811][T11224] netlink: 'syz.3.1352': attribute type 1 has an invalid length. [ 819.156690][T11066] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 819.221463][T11066] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 819.300906][T11066] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 819.772286][ T8098] Bluetooth: hci9: command tx timeout [ 821.853525][ T8098] Bluetooth: hci9: command tx timeout [ 821.938973][T11066] hsr_slave_0: entered promiscuous mode [ 822.092984][T11066] hsr_slave_1: entered promiscuous mode [ 822.297253][T11066] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 822.322053][T11066] Cannot create hsr debugfs directory [ 823.200682][T11250] netdevsim netdevsim2: Direct firmware load for  failed with error -2 [ 823.209586][T11250] netdevsim netdevsim2: Falling back to sysfs fallback for:  [ 824.299906][ T4615] Bluetooth: hci9: command tx timeout [ 824.833156][ T2562] bridge0: port 2(bridge_slave_1) entered disabled state [ 825.201594][ T5367] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 825.311221][T11018] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 825.394197][ T5367] usb 4-1: Using ep0 maxpacket: 32 [ 825.418550][ T5367] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 825.442237][ T5367] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 825.475515][ T5367] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 825.498269][ T5367] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.528382][ T5367] hub 4-1:4.0: USB hub found [ 825.679883][ T11] bridge_slave_1: left allmulticast mode [ 825.697483][ T11] bridge_slave_1: left promiscuous mode [ 825.741681][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 825.752625][ T5367] hub 4-1:4.0: config failed, hub has too many ports! (err -19) [ 825.815181][ T11] bridge_slave_0: left allmulticast mode [ 825.820855][ T11] bridge_slave_0: left promiscuous mode [ 825.831887][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 826.081994][ T25] usb 4-1: USB disconnect, device number 19 [ 827.417492][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 827.445839][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 827.589309][ T11] bond0 (unregistering): Released all slaves [ 827.959781][T11018] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 828.585994][T11018] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 828.712820][T11188] chnl_net:caif_netlink_parms(): no params data found [ 830.102098][ T11] hsr_slave_0: left promiscuous mode [ 830.181742][ T11] hsr_slave_1: left promiscuous mode [ 830.229820][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 830.268498][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 831.453779][ T11] team0 (unregistering): Port device team_slave_1 removed [ 831.598462][ T11] team0 (unregistering): Port device team_slave_0 removed [ 832.528935][T11018] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 832.594780][T11294] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1365'. [ 832.622383][T11294] (unnamed net_device) (uninitialized): option lacp_active: invalid value (139) [ 833.053136][T11321] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1369'. [ 834.398190][T11066] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 834.485419][T11330] hub 9-0:1.0: USB hub found [ 834.495789][T11330] hub 9-0:1.0: 8 ports detected [ 835.023509][T11188] bridge0: port 1(bridge_slave_0) entered blocking state [ 835.076195][T11188] bridge0: port 1(bridge_slave_0) entered disabled state [ 835.261685][T11188] bridge_slave_0: entered allmulticast mode [ 835.384782][T11188] bridge_slave_0: entered promiscuous mode [ 835.827712][T11066] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.943048][T11188] bridge0: port 2(bridge_slave_1) entered blocking state [ 835.985512][T11188] bridge0: port 2(bridge_slave_1) entered disabled state [ 836.040654][T11188] bridge_slave_1: entered allmulticast mode [ 836.078115][T11188] bridge_slave_1: entered promiscuous mode [ 836.224016][T11066] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.834205][T11066] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.036775][T11188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 837.125495][T11188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 837.642540][T11188] team0: Port device team_slave_0 added [ 837.722533][T11188] team0: Port device team_slave_1 added [ 837.933916][T11188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 837.940888][T11188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 838.101577][T11188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 838.153905][T11188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 838.160892][T11188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 838.274226][T11188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 839.697788][T11188] hsr_slave_0: entered promiscuous mode [ 839.743825][T11188] hsr_slave_1: entered promiscuous mode [ 840.516631][T11188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 840.601548][T11188] Cannot create hsr debugfs directory [ 840.987601][T11400] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 842.203103][T11405] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1385'. [ 842.345976][T11018] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 842.520120][T11018] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 842.672260][T11415] xt_CT: You must specify a L4 protocol and not use inversions on it [ 842.845044][T11413] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 842.922025][T11018] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 842.987932][T11413] xt_NFQUEUE: number of total queues is 0 [ 843.190512][T11018] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 843.356974][T11066] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 843.422163][T11066] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 843.447719][T11066] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 844.385756][T11425] sit0: entered promiscuous mode [ 844.391212][T11425] vlan2: entered promiscuous mode [ 844.430023][T11425] sit0: left promiscuous mode [ 844.643363][T11066] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 845.819771][ T8098] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 845.891065][ T8098] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 845.927530][ T8098] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 845.946720][ T8098] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 845.954528][ T8098] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 845.961974][ T8098] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 846.041190][T11442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1394'. [ 847.376480][T11443] vcan0 speed is unknown, defaulting to 1000 [ 848.126491][ T4615] Bluetooth: hci7: command tx timeout [ 848.558430][T11463] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nbd3": -EINTR [ 849.278499][T11066] 8021q: adding VLAN 0 to HW filter on device bond0 [ 850.173364][ T4615] Bluetooth: hci7: command tx timeout [ 852.252370][ T4615] Bluetooth: hci7: command tx timeout [ 854.344372][ T4615] Bluetooth: hci7: command tx timeout [ 856.093310][ T8098] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 856.105644][ T8098] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 856.114006][ T8098] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 856.122949][ T8098] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 856.174988][ T8098] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 856.182431][ T8098] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 858.261870][ T8098] Bluetooth: hci1: command tx timeout [ 860.331626][ T8098] Bluetooth: hci1: command tx timeout [ 861.963298][ T4615] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 862.003009][ T4615] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 862.011987][ T4615] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 862.020351][ T4615] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 862.028750][ T4615] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 862.042579][ T4615] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 862.421778][ T8098] Bluetooth: hci1: command tx timeout [ 864.191747][ T8098] Bluetooth: hci10: command tx timeout [ 864.501625][ T8098] Bluetooth: hci1: command tx timeout [ 866.251901][ T8098] Bluetooth: hci10: command tx timeout [ 868.331828][ T8098] Bluetooth: hci10: command tx timeout [ 868.845918][T11066] 8021q: adding VLAN 0 to HW filter on device team0 [ 869.293593][T11188] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 869.495291][T11188] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 869.666726][T11188] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 869.885067][T11472] vcan0 speed is unknown, defaulting to 1000 [ 869.892067][ T6922] bridge_slave_1: left allmulticast mode [ 869.897738][ T6922] bridge_slave_1: left promiscuous mode [ 869.959845][ T6922] bridge0: port 2(bridge_slave_1) entered disabled state [ 870.132805][ T6922] bridge_slave_0: left allmulticast mode [ 870.181504][ T6922] bridge_slave_0: left promiscuous mode [ 870.187424][ T6922] bridge0: port 1(bridge_slave_0) entered disabled state [ 870.421479][ T8098] Bluetooth: hci10: command tx timeout [ 870.493938][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.500284][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.232368][ T6922] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 871.362947][ T6922] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 871.454829][ T6922] bond0 (unregistering): Released all slaves [ 871.555634][T11188] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 871.649649][T11479] vcan0 speed is unknown, defaulting to 1000 [ 873.601536][ T6922] hsr_slave_0: left promiscuous mode [ 873.671657][ T6922] hsr_slave_1: left promiscuous mode [ 873.781874][ T6922] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 873.872338][ T6922] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 874.242797][ T4615] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 874.254803][ T4615] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 874.278652][ T4615] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 874.313770][ T4615] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 874.329409][ T4615] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 874.342180][ T4615] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 875.412985][ T6922] team0 (unregistering): Port device team_slave_1 removed [ 875.624633][ T6922] team0 (unregistering): Port device team_slave_0 removed [ 876.417321][ T8098] Bluetooth: hci0: command tx timeout [ 876.878390][T11443] chnl_net:caif_netlink_parms(): no params data found [ 876.904320][T11498] vcan0 speed is unknown, defaulting to 1000 [ 877.441962][T11472] chnl_net:caif_netlink_parms(): no params data found [ 878.242315][T11443] bridge0: port 1(bridge_slave_0) entered blocking state [ 878.249431][T11443] bridge0: port 1(bridge_slave_0) entered disabled state [ 878.340746][T11443] bridge_slave_0: entered allmulticast mode [ 878.373404][T11443] bridge_slave_0: entered promiscuous mode [ 878.453286][T11443] bridge0: port 2(bridge_slave_1) entered blocking state [ 878.491581][ T8098] Bluetooth: hci0: command tx timeout [ 878.511733][T11443] bridge0: port 2(bridge_slave_1) entered disabled state [ 878.519021][T11443] bridge_slave_1: entered allmulticast mode [ 878.613303][T11443] bridge_slave_1: entered promiscuous mode [ 879.285826][T11479] chnl_net:caif_netlink_parms(): no params data found [ 879.350139][T11443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 879.405383][T11443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 879.512012][T11472] bridge0: port 1(bridge_slave_0) entered blocking state [ 879.519167][T11472] bridge0: port 1(bridge_slave_0) entered disabled state [ 879.571930][T11472] bridge_slave_0: entered allmulticast mode [ 879.593560][T11472] bridge_slave_0: entered promiscuous mode [ 879.668383][T11472] bridge0: port 2(bridge_slave_1) entered blocking state [ 879.691825][T11472] bridge0: port 2(bridge_slave_1) entered disabled state [ 879.699076][T11472] bridge_slave_1: entered allmulticast mode [ 879.776412][T11472] bridge_slave_1: entered promiscuous mode [ 880.573051][ T8098] Bluetooth: hci0: command tx timeout [ 880.859216][T11443] team0: Port device team_slave_0 added [ 880.924974][T11443] team0: Port device team_slave_1 added [ 881.115857][T11472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 881.172681][T11472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 882.093248][T11443] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 882.100210][T11443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 882.241708][T11443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 882.294833][T11443] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 882.321720][T11443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 882.455334][T11443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 882.538328][T11472] team0: Port device team_slave_0 added [ 882.651613][ T8098] Bluetooth: hci0: command tx timeout [ 883.077035][T11472] team0: Port device team_slave_1 added [ 883.393845][T11479] bridge0: port 1(bridge_slave_0) entered blocking state [ 883.401202][T11479] bridge0: port 1(bridge_slave_0) entered disabled state [ 883.431701][T11479] bridge_slave_0: entered allmulticast mode [ 883.442729][T11479] bridge_slave_0: entered promiscuous mode [ 883.833139][T11472] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 883.840162][T11472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 883.981432][T11472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 884.044128][T11472] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 884.051192][T11472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 884.193631][T11472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 884.241626][T11479] bridge0: port 2(bridge_slave_1) entered blocking state [ 884.248741][T11479] bridge0: port 2(bridge_slave_1) entered disabled state [ 884.262630][T11479] bridge_slave_1: entered allmulticast mode [ 884.281940][T11479] bridge_slave_1: entered promiscuous mode [ 884.808145][T11479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 885.120717][T11443] hsr_slave_0: entered promiscuous mode [ 885.163153][T11443] hsr_slave_1: entered promiscuous mode [ 885.231638][T11443] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 885.239237][T11443] Cannot create hsr debugfs directory [ 885.259321][T11479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 885.677676][T11479] team0: Port device team_slave_0 added [ 885.986807][T11472] hsr_slave_0: entered promiscuous mode [ 886.072061][T11472] hsr_slave_1: entered promiscuous mode [ 886.101656][T11472] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 886.109270][T11472] Cannot create hsr debugfs directory [ 886.306299][T11479] team0: Port device team_slave_1 added [ 886.516904][T11498] chnl_net:caif_netlink_parms(): no params data found [ 886.843622][T11479] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 886.850592][T11479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 886.941482][T11479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 887.311002][ T6922] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 887.602311][T11479] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 887.637205][T11479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 887.751453][T11479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 887.993419][ T6922] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.483873][ T6922] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.182733][ T6922] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 889.422638][T11498] bridge0: port 1(bridge_slave_0) entered blocking state [ 889.429792][T11498] bridge0: port 1(bridge_slave_0) entered disabled state [ 889.472105][T11498] bridge_slave_0: entered allmulticast mode [ 889.513204][T11498] bridge_slave_0: entered promiscuous mode [ 889.777256][T11479] hsr_slave_0: entered promiscuous mode [ 889.833283][T11479] hsr_slave_1: entered promiscuous mode [ 889.911664][T11479] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 889.919267][T11479] Cannot create hsr debugfs directory [ 889.961842][T11498] bridge0: port 2(bridge_slave_1) entered blocking state [ 889.969049][T11498] bridge0: port 2(bridge_slave_1) entered disabled state [ 890.021815][T11498] bridge_slave_1: entered allmulticast mode [ 890.052846][T11498] bridge_slave_1: entered promiscuous mode [ 890.577226][T11498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 890.994611][T11498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 891.418729][T11498] team0: Port device team_slave_0 added [ 892.144397][T11498] team0: Port device team_slave_1 added [ 893.049118][T11498] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 893.082786][T11498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 893.172151][T11498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 893.422449][T11498] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 893.429440][T11498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 893.521596][T11498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 894.333084][T11498] hsr_slave_0: entered promiscuous mode [ 894.382034][T11498] hsr_slave_1: entered promiscuous mode [ 894.412332][T11498] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 894.419936][T11498] Cannot create hsr debugfs directory [ 894.735006][T11443] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 895.186064][T11472] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.282564][T11443] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 895.382622][T11443] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 895.935022][T11472] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.062923][T11443] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 896.675383][T11472] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.364340][T11472] bond0: (slave netdevsim0): Releasing backup interface [ 897.582474][T11472] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.669402][ T6922] bridge_slave_1: left allmulticast mode [ 897.681851][ T6922] bridge_slave_1: left promiscuous mode [ 897.751751][ T6922] bridge0: port 2(bridge_slave_1) entered disabled state [ 897.852702][ T6922] bridge_slave_0: left allmulticast mode [ 897.858391][ T6922] bridge_slave_0: left promiscuous mode [ 897.901708][ T6922] bridge0: port 1(bridge_slave_0) entered disabled state [ 897.984189][ T6922] bridge_slave_1: left allmulticast mode [ 897.989893][ T6922] bridge_slave_1: left promiscuous mode [ 898.041806][ T6922] bridge0: port 2(bridge_slave_1) entered disabled state [ 898.072126][ T6922] bridge_slave_0: left allmulticast mode [ 898.077817][ T6922] bridge_slave_0: left promiscuous mode [ 898.152760][ T6922] bridge0: port 1(bridge_slave_0) entered disabled state [ 898.193134][ T6922] bridge_slave_1: left allmulticast mode [ 898.198830][ T6922] bridge_slave_1: left promiscuous mode [ 898.223108][ T6922] bridge0: port 2(bridge_slave_1) entered disabled state [ 898.263862][ T6922] bridge_slave_0: left allmulticast mode [ 898.269555][ T6922] bridge_slave_0: left promiscuous mode [ 898.332021][ T6922] bridge0: port 1(bridge_slave_0) entered disabled state [ 901.762168][ T6922] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 901.832154][ T6922] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 901.933152][ T6922] bond0 (unregistering): Released all slaves [ 903.022142][ T6922] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 903.140313][ T6922] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 903.185088][ T6922] bond0 (unregistering): Released all slaves [ 904.282169][ T6922] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 904.413179][ T6922] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 904.470816][ T6922] bond0 (unregistering): Released all slaves [ 906.112113][ T4615] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 906.141661][ T4615] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 906.169728][ T4615] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 906.248430][ T4615] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 906.281684][ T4615] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 906.312302][ T4615] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 907.482377][T11653] vcan0 speed is unknown, defaulting to 1000 [ 908.104437][T11479] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 908.412649][ T4615] Bluetooth: hci8: command tx timeout [ 908.449296][T11479] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 908.554998][T11479] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 909.006589][T11479] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 910.451492][ T6922] hsr_slave_0: left promiscuous mode [ 910.511487][ T4615] Bluetooth: hci8: command tx timeout [ 910.581531][ T6922] hsr_slave_1: left promiscuous mode [ 910.621634][ T6922] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 910.652631][ T6922] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 910.802368][ T6922] hsr_slave_0: left promiscuous mode [ 910.829096][ T6922] hsr_slave_1: left promiscuous mode [ 910.835281][ T6922] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 910.861587][ T6922] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 910.912476][ T6922] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 910.941557][ T6922] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 910.986943][ T6922] hsr_slave_0: left promiscuous mode [ 911.033587][ T6922] hsr_slave_1: left promiscuous mode [ 911.052356][ T6922] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 911.082311][ T6922] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 911.235597][ T6922] dummy0: left promiscuous mode [ 911.262671][ T6922] veth1_macvtap: left promiscuous mode [ 911.268262][ T6922] veth0_macvtap: left promiscuous mode [ 911.311652][ T6922] veth1_vlan: left promiscuous mode [ 911.316975][ T6922] veth0_vlan: left promiscuous mode [ 912.571655][ T4615] Bluetooth: hci8: command tx timeout [ 913.151081][ T6922] team0 (unregistering): Port device team_slave_1 removed [ 913.359962][ T6922] team0 (unregistering): Port device team_slave_0 removed [ 914.599694][ T6922] team0 (unregistering): Port device vlan0 removed [ 914.662658][ T4615] Bluetooth: hci8: command tx timeout [ 916.443227][ T8098] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 916.455843][ T8098] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 916.464059][ T8098] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 916.476604][ T8098] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 916.502329][ T8098] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 916.509802][ T8098] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 917.702114][ T6922] team0 (unregistering): Port device team_slave_1 removed [ 918.072432][ T6922] team0 (unregistering): Port device team_slave_0 removed [ 918.573274][ T8098] Bluetooth: hci7: command tx timeout [ 920.651658][ T8098] Bluetooth: hci7: command tx timeout [ 922.088926][ T4615] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 922.107690][ T4615] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 922.131719][ T4615] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 922.153268][ T4615] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 922.161054][ T4615] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 922.168498][ T4615] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 922.239655][ T6922] team0 (unregistering): Port device team_slave_1 removed [ 922.506429][ T6922] team0 (unregistering): Port device team_slave_0 removed [ 922.731586][ T4615] Bluetooth: hci7: command tx timeout [ 924.252852][ T4615] Bluetooth: hci9: command tx timeout [ 924.811539][ T4615] Bluetooth: hci7: command tx timeout [ 925.231570][T11680] vcan0 speed is unknown, defaulting to 1000 [ 925.238400][T11653] chnl_net:caif_netlink_parms(): no params data found [ 926.334133][ T4615] Bluetooth: hci9: command tx timeout [ 926.953107][T11685] vcan0 speed is unknown, defaulting to 1000 [ 927.101720][T11653] bridge0: port 1(bridge_slave_0) entered blocking state [ 927.111514][T11653] bridge0: port 1(bridge_slave_0) entered disabled state [ 927.118807][T11653] bridge_slave_0: entered allmulticast mode [ 927.143336][T11653] bridge_slave_0: entered promiscuous mode [ 927.190538][T11653] bridge0: port 2(bridge_slave_1) entered blocking state [ 927.226392][T11653] bridge0: port 2(bridge_slave_1) entered disabled state [ 927.262031][T11653] bridge_slave_1: entered allmulticast mode [ 927.291559][T11653] bridge_slave_1: entered promiscuous mode [ 928.185264][T11653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 928.273443][T11653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 928.403737][T11498] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 928.411561][ T4615] Bluetooth: hci9: command tx timeout [ 928.465519][T11498] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 928.872102][T11498] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 928.932756][T11498] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 929.088329][T11653] team0: Port device team_slave_0 added [ 929.158912][T11653] team0: Port device team_slave_1 added [ 929.893983][T11653] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 929.900967][T11653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 930.061534][T11653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 930.124081][T11653] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 930.131071][T11653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 930.281468][T11653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 930.502431][ T4615] Bluetooth: hci9: command tx timeout [ 930.865229][T11680] chnl_net:caif_netlink_parms(): no params data found [ 930.982930][T11653] hsr_slave_0: entered promiscuous mode [ 931.062031][T11653] hsr_slave_1: entered promiscuous mode [ 931.122435][T11653] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 931.130014][T11653] Cannot create hsr debugfs directory [ 931.951887][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.958189][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.133626][T11685] chnl_net:caif_netlink_parms(): no params data found [ 933.101925][T11680] bridge0: port 1(bridge_slave_0) entered blocking state [ 933.118752][T11680] bridge0: port 1(bridge_slave_0) entered disabled state [ 933.226700][ T30] INFO: task syz.0.1294:10930 blocked for more than 144 seconds. [ 933.236347][T11680] bridge_slave_0: entered allmulticast mode [ 933.261498][ T30] Not tainted 6.11.0-rc6-syzkaller-00268-g788220eee30d #0 [ 933.269205][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 933.317238][T11680] bridge_slave_0: entered promiscuous mode [ 933.356217][ T30] task:syz.0.1294 state:D stack:24536 pid:10930 tgid:10924 ppid:9154 flags:0x00004004 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 933.431432][ T30] Call Trace: [ 933.434778][ T30] [ 933.437739][ T30] __schedule+0x17ae/0x4a10 [ 933.561439][ T30] ? __pfx___schedule+0x10/0x10 [ 933.624846][ T30] ? __pfx_lock_release+0x10/0x10 [ 933.629954][ T30] ? preempt_schedule_common+0x84/0xd0 [ 933.711426][ T30] ? __pfx_preempt_schedule+0x10/0x10 [ 933.716894][ T30] ? schedule+0x90/0x320 [ 933.721195][ T30] schedule+0x14b/0x320 [ 933.843761][ T30] io_schedule+0x8d/0x110 [ 933.857211][ T30] folio_wait_bit_common+0x882/0x12b0 [ 933.891531][ T30] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 933.897426][ T30] ? __pfx_wake_page_function+0x10/0x10 [ 933.951628][ T30] ? folio_lock+0x97/0x1a0 [ 933.971511][ T30] ? __folio_lock+0xd/0x20 [ 933.976002][ T30] truncate_inode_pages_range+0xaaf/0xfc0 [ 934.022012][ T30] ? finish_task_switch+0x1e5/0x870 [ 934.027268][ T30] ? __schedule+0x17b6/0x4a10 [ 934.062735][ T30] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 934.069169][ T30] ? __pfx_has_bh_in_lru+0x10/0x10 [ 934.131477][ T30] ? __pfx_has_bh_in_lru+0x10/0x10 [ 934.163883][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 934.169332][ T30] ? on_each_cpu_cond_mask+0x59/0x80 [ 934.231467][ T30] set_blocksize+0x2f4/0x360 [ 934.236129][ T30] sb_min_blocksize+0xa9/0x180 [ 934.301697][ T30] hfs_mdb_get+0xac/0x21b0 [ 934.306195][ T30] ? __asan_memset+0x23/0x50 [ 934.341528][ T30] ? __asan_memset+0x23/0x50 [ 934.346190][ T30] ? __pfx_hfs_mdb_get+0x10/0x10 [ 934.351162][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 934.416506][ T30] ? __raw_spin_lock_init+0x45/0x100 [ 934.461759][ T30] hfs_fill_super+0x107e/0x1790 [ 934.466673][ T30] ? __pfx_hfs_fill_super+0x10/0x10 [ 934.494275][ T30] ? __pfx_vsnprintf+0x10/0x10 [ 934.499089][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 934.551479][ T30] ? sb_set_blocksize+0x98/0xf0 [ 934.556401][ T30] ? setup_bdev_super+0x4e6/0x5d0 [ 934.602595][ T30] mount_bdev+0x20a/0x2d0 [ 934.622147][ T30] ? __pfx_hfs_fill_super+0x10/0x10 [ 934.627417][ T30] ? __pfx_mount_bdev+0x10/0x10 [ 934.661424][ T30] ? vfs_parse_fs_string+0x190/0x230 [ 934.666784][ T30] ? __pfx_vfs_parse_fs_string+0x10/0x10 [ 934.701496][ T30] ? cap_capable+0x1b4/0x250 [ 934.716144][ T30] legacy_get_tree+0xee/0x190 [ 934.720858][ T30] ? __pfx_hfs_mount+0x10/0x10 [ 934.761646][ T30] vfs_get_tree+0x90/0x2b0 [ 934.766141][ T30] do_new_mount+0x2be/0xb40 [ 934.770679][ T30] ? __pfx_do_new_mount+0x10/0x10 [ 934.832421][ T30] __se_sys_mount+0x2d6/0x3c0 [ 934.852501][ T30] ? __pfx___se_sys_mount+0x10/0x10 [ 934.857750][ T30] ? do_syscall_64+0x100/0x230 [ 934.892268][ T30] ? __x64_sys_mount+0x20/0xc0 [ 934.897113][ T30] do_syscall_64+0xf3/0x230 [ 934.931732][ T30] ? clear_bhb_loop+0x35/0x90 [ 934.936873][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 935.001523][ T30] RIP: 0033:0x7f529137cef9 [ 935.006026][ T30] RSP: 002b:00007f5290dff038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 935.041728][ T30] RAX: ffffffffffffffda RBX: 00007f5291536130 RCX: 00007f529137cef9 [ 935.060634][ T30] RDX: 0000000020000300 RSI: 00000000200002c0 RDI: 0000000020000100 [ 935.121446][ T30] RBP: 00007f52913ef046 R08: 0000000020000180 R09: 0000000000000000 [ 935.171410][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 935.191424][ T30] R13: 0000000000000000 R14: 00007f5291536130 R15: 00007ffef8de9788 [ 935.199483][ T30] [ 935.231447][ T30] [ 935.231447][ T30] Showing all locks held in the system: [ 935.311406][ T30] 1 lock held by khungtaskd/30: [ 935.316353][ T30] #0: ffffffff8e738320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 935.361681][T11680] bridge0: port 2(bridge_slave_1) entered blocking state [ 935.368872][T11680] bridge0: port 2(bridge_slave_1) entered disabled state [ 935.421921][T11680] bridge_slave_1: entered allmulticast mode [ 935.431436][ T30] 2 locks held by dhcpcd/4891: [ 935.436239][ T30] #0: ffff88807dd16678 (nlk_cb_mutex-ROUTE){+.+.}-{3:3}, at: __netlink_dump_start+0x119/0x790 [ 935.448776][T11680] bridge_slave_1: entered promiscuous mode [ 935.491408][ T30] #1: ffffffff8fa79e88 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_dumpit+0x99/0x200 [ 935.532185][ T30] 2 locks held by getty/4986: [ 935.536917][ T30] #0: ffff88807d8d00a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 935.591455][ T30] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 935.641402][ T30] 3 locks held by kworker/0:3/5232: [ 935.646654][ T30] #0: ffff88801a880948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 935.721423][ T30] #1: ffffc90003c07d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 935.771395][ T30] #2: ffffffff8fa79e88 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 935.812308][ T30] 3 locks held by kworker/1:7/5317: [ 935.817575][ T30] #0: ffff88801a880948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 935.881476][ T30] #1: ffffc9000427fd00 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 935.922024][ T30] #2: ffffffff8e73d5c0 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x4c/0x530 [ 935.961401][ T30] 3 locks held by kworker/u8:13/6479: [ 935.982575][ T30] #0: ffff88801a889148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 936.031477][ T30] #1: ffffc9000303fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 936.061437][ T30] #2: ffffffff8fa79e88 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 936.070455][ T30] 3 locks held by kworker/u8:15/6909: [ 936.109965][ T30] 3 locks held by kworker/u8:20/6920: [ 936.117028][ T30] #0: ffff888030250148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 936.191505][ T30] #1: ffffc9000dddfd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 936.251626][ T30] #2: ffffffff8fa79e88 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 936.291583][ T30] 4 locks held by kworker/u8:21/6922: [ 936.296983][ T30] #0: ffff88801b6e3148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 936.371619][ T30] #1: ffffc9000ddefd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 936.429355][ T30] #2: ffffffff8fa6d2d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 936.461433][ T30] #3: ffffffff8fa79e88 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x1f/0x1e0 [ 936.490951][ T30] 1 lock held by syz.0.681/8031: [ 936.541691][ T30] #0: ffff8880b883e998 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb0/0x140 [ 936.601528][ T30] 1 lock held by syz.0.1294/10930: [ 936.606683][ T30] #0: ffff8880608c80e0 (&type->s_umount_key#83/1){+.+.}-{3:3}, at: alloc_super+0x221/0x9d0 [ 936.651481][ T30] 2 locks held by syz.2.1391/11433: [ 936.681504][ T30] 3 locks held by syz-executor/11498: [ 936.686933][ T30] #0: ffff888033554d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 936.723712][ T30] #1: ffff888033554078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 936.771471][ T30] #2: ffffffff8fbe59a8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 936.791921][ T30] 8 locks held by syz-executor/11653: [ 936.823102][ T30] #0: ffff888034bae420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 936.861548][ T30] #1: ffff8880339bf888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1eb/0x500 [ 936.891547][ T30] #2: ffff888028212d28 (kn->active#50){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20f/0x500 [ 936.931476][ T30] #3: ffffffff8f3140c8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 936.972613][ T30] #4: ffff88804bedf0e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 937.011529][ T30] #5: ffff888024eea250 (&devlink->lock_key#24){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160 [ 937.033454][ T30] #6: ffffffff8fa79e88 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0 [ 937.058786][ T30] #7: ffffffff8e73d6f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 937.091481][ T30] 1 lock held by syz-executor/11685: [ 937.096856][ T30] #0: ffffffff8e73d6f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 937.142795][ T30] [ 937.145177][ T30] ============================================= [ 937.145177][ T30] [ 937.161742][ T30] NMI backtrace for cpu 0 [ 937.166126][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc6-syzkaller-00268-g788220eee30d #0 [ 937.176653][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 937.186809][ T30] Call Trace: [ 937.190082][ T30] [ 937.193020][ T30] dump_stack_lvl+0x241/0x360 [ 937.197718][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 937.202917][ T30] ? __pfx__printk+0x10/0x10 [ 937.207494][ T30] ? vprintk_emit+0x667/0x7c0 [ 937.212173][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 937.217199][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 937.222144][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 937.227612][ T30] ? _printk+0xd5/0x120 [ 937.231760][ T30] ? __pfx__printk+0x10/0x10 [ 937.236348][ T30] ? __wake_up_klogd+0xcc/0x110 [ 937.241198][ T30] ? __pfx__printk+0x10/0x10 [ 937.245798][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 937.250818][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 937.256822][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 937.262808][ T30] watchdog+0xff4/0x1040 [ 937.267053][ T30] ? watchdog+0x1ea/0x1040 [ 937.271474][ T30] ? __pfx_watchdog+0x10/0x10 [ 937.276145][ T30] kthread+0x2f0/0x390 [ 937.280215][ T30] ? __pfx_watchdog+0x10/0x10 [ 937.284887][ T30] ? __pfx_kthread+0x10/0x10 [ 937.289538][ T30] ret_from_fork+0x4b/0x80 [ 937.294059][ T30] ? __pfx_kthread+0x10/0x10 [ 937.298669][ T30] ret_from_fork_asm+0x1a/0x30 [ 937.303547][ T30] [ 937.307712][ T30] Sending NMI from CPU 0 to CPUs 1: [ 937.313935][ C1] NMI backtrace for cpu 1 [ 937.313948][ C1] CPU: 1 UID: 0 PID: 4666 Comm: klogd Not tainted 6.11.0-rc6-syzkaller-00268-g788220eee30d #0 [ 937.313965][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 937.313980][ C1] RIP: 0010:lockdep_hardirqs_off+0x8d/0x110 [ 937.314002][ C1] Code: 1c 25 c0 d6 03 00 48 c7 c7 60 d5 ea 8b e8 7b 1c 00 00 65 c7 05 e8 7a 51 74 00 00 00 00 4c 89 b3 88 0a 00 00 8b 83 78 0a 00 00 c0 89 83 78 0a 00 00 89 83 94 0a 00 00 eb 17 48 c7 c7 80 d5 ea [ 937.314015][ C1] RSP: 0018:ffffc9000364f988 EFLAGS: 00000086 [ 937.314029][ C1] RAX: 000000000003b785 RBX: ffff88807e5dbc00 RCX: ffff88807e5dbc00 [ 937.314040][ C1] RDX: 0000000000000000 RSI: ffffffff8bead560 RDI: ffffffff8c3fb9c0 [ 937.314051][ C1] RBP: ffffc9000364fa48 R08: ffffffff8a4d3906 R09: 1ffff110045c3301 [ 937.314062][ C1] R10: dffffc0000000000 R11: ffffed10045c3302 R12: 0000000000000246 [ 937.314073][ C1] R13: 1ffff920006c9f38 R14: ffffffff8bbb20a0 R15: dffffc0000000000 [ 937.314085][ C1] FS: 00007fe858a41380(0000) GS:ffff8880b8900000(0000) knlGS:0000000000000000 [ 937.314098][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 937.314125][ C1] CR2: 00000000200ff000 CR3: 000000007e6ba000 CR4: 00000000003506f0 [ 937.314139][ C1] Call Trace: [ 937.314145][ C1] [ 937.314151][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 937.314172][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 937.314196][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 937.314216][ C1] ? nmi_handle+0x2a/0x5a0 [ 937.314240][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 937.314260][ C1] ? nmi_handle+0x14f/0x5a0 [ 937.314275][ C1] ? nmi_handle+0x2a/0x5a0 [ 937.314291][ C1] ? lockdep_hardirqs_off+0x8d/0x110 [ 937.314306][ C1] ? default_do_nmi+0x63/0x160 [ 937.314327][ C1] ? exc_nmi+0x123/0x1f0 [ 937.314347][ C1] ? end_repeat_nmi+0xf/0x53 [ 937.314368][ C1] ? _raw_spin_lock_irqsave+0xb0/0x120 [ 937.314392][ C1] ? maybe_add_creds+0x1c6/0x410 [ 937.314410][ C1] ? lockdep_hardirqs_off+0x8d/0x110 [ 937.314426][ C1] ? lockdep_hardirqs_off+0x8d/0x110 [ 937.314443][ C1] ? lockdep_hardirqs_off+0x8d/0x110 [ 937.314459][ C1] [ 937.314464][ C1] [ 937.314470][ C1] ? _raw_spin_lock_irqsave+0xb0/0x120 [ 937.314492][ C1] trace_hardirqs_off+0x12/0x40 [ 937.314512][ C1] _raw_spin_lock_irqsave+0xb0/0x120 [ 937.314536][ C1] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 937.314561][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 937.314581][ C1] skb_queue_tail+0x36/0x120 [ 937.314596][ C1] ? maybe_add_creds+0x1d0/0x410 [ 937.314613][ C1] unix_dgram_sendmsg+0x1455/0x1f80 [ 937.314643][ C1] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 937.314665][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 937.314686][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 937.314705][ C1] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 937.314720][ C1] __sock_sendmsg+0x221/0x270 [ 937.314747][ C1] __sys_sendto+0x3a4/0x4f0 [ 937.314769][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 937.314802][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 937.314825][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 937.314850][ C1] __x64_sys_sendto+0xde/0x100 [ 937.314871][ C1] do_syscall_64+0xf3/0x230 [ 937.314888][ C1] ? clear_bhb_loop+0x35/0x90 [ 937.314910][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 937.314929][ C1] RIP: 0033:0x7fe858ba39b5 [ 937.314941][ C1] Code: 8b 44 24 08 48 83 c4 28 48 98 c3 48 98 c3 41 89 ca 64 8b 04 25 18 00 00 00 85 c0 75 26 45 31 c9 45 31 c0 b8 2c 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 7a 48 8b 15 44 c4 0c 00 f7 d8 64 89 02 48 83 [ 937.314954][ C1] RSP: 002b:00007ffe37bad7f8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 937.314970][ C1] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fe858ba39b5 [ 937.314996][ C1] RDX: 000000000000004c RSI: 000055ace5a65fb0 RDI: 0000000000000003 [ 937.315006][ C1] RBP: 000055ace5a5f910 R08: 0000000000000000 R09: 0000000000000000 [ 937.315017][ C1] R10: 0000000000004000 R11: 0000000000000246 R12: 0000000000000013 [ 937.315027][ C1] R13: 00007fe858d31212 R14: 00007ffe37bad8f8 R15: 0000000000000000 [ 937.315046][ C1] [ 938.172368][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 938.179311][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc6-syzkaller-00268-g788220eee30d #0 [ 938.189836][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 938.199900][ T30] Call Trace: [ 938.203227][ T30] [ 938.206155][ T30] dump_stack_lvl+0x241/0x360 [ 938.210840][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 938.216043][ T30] ? __pfx__printk+0x10/0x10 [ 938.220630][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 938.226620][ T30] ? vscnprintf+0x5d/0x90 [ 938.230968][ T30] panic+0x349/0x860 [ 938.234863][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 938.241110][ T30] ? __pfx_panic+0x10/0x10 [ 938.245523][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 938.250901][ T30] ? __irq_work_queue_local+0x137/0x410 [ 938.256454][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 938.261837][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 938.268010][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 938.274188][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 938.280366][ T30] watchdog+0x1033/0x1040 [ 938.284710][ T30] ? watchdog+0x1ea/0x1040 [ 938.289144][ T30] ? __pfx_watchdog+0x10/0x10 [ 938.293833][ T30] kthread+0x2f0/0x390 [ 938.297914][ T30] ? __pfx_watchdog+0x10/0x10 [ 938.302611][ T30] ? __pfx_kthread+0x10/0x10 [ 938.307257][ T30] ret_from_fork+0x4b/0x80 [ 938.311702][ T30] ? __pfx_kthread+0x10/0x10 [ 938.316316][ T30] ret_from_fork_asm+0x1a/0x30 [ 938.321108][ T30] [ 938.324422][ T30] Kernel Offset: disabled [ 938.328754][ T30] Rebooting in 86400 seconds..